$ rpki-client -vvf rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/323830343a346661383a383034303a3a2f34322d3432203d3e20323638333431.roa File: 323830343a346661383a383034303a3a2f34322d3432203d3e20323638333431.roa (raw, json) Hash identifier: xVt1xmQVlz7NupKHGRYttAUpGaDCazjp0qd2jpKq6z0= Subject key identifier: 1F:6C:2B:E3:EA:44:B3:10:07:15:D6:08:37:9A:69:80:9A:2D:8C:AC Certificate issuer: /CN=EF9FE7422108F8FDF6AD86D74818535B1738C9BA Certificate serial: 1DAF3EB363AF328C8995AD3AECF5E9D8D62EE9D0 Authority key identifier: EF:9F:E7:42:21:08:F8:FD:F6:AD:86:D7:48:18:53:5B:17:38:C9:BA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF9FE7422108F8FDF6AD86D74818535B1738C9BA.cer Subject info access: rsync://rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/323830343a346661383a383034303a3a2f34322d3432203d3e20323638333431.roa Signing time: Mon 22 Sep 2025 18:40:56 +0000 ROA not before: Mon 22 Sep 2025 18:35:56 +0000 ROA not after: Mon 21 Sep 2026 18:40:56 +0000 asID: 268341 IP address blocks: 2804:4fa8:8040::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/EF9FE7422108F8FDF6AD86D74818535B1738C9BA.crl rsync://rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/EF9FE7422108F8FDF6AD86D74818535B1738C9BA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF9FE7422108F8FDF6AD86D74818535B1738C9BA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 16:08:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:af:3e:b3:63:af:32:8c:89:95:ad:3a:ec:f5:e9:d8:d6:2e:e9:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF9FE7422108F8FDF6AD86D74818535B1738C9BA Validity Not Before: Sep 22 18:35:56 2025 GMT Not After : Sep 21 18:40:56 2026 GMT Subject: CN=1F6C2BE3EA44B3100715D608379A69809A2D8CAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:98:16:d5:67:96:b1:12:33:8a:18:2b:1f:20: 49:a7:5b:33:63:2f:2a:bf:b6:df:97:25:d9:3b:a5: f5:79:d4:e6:38:74:ba:78:55:c5:e6:63:ca:1c:55: 26:22:4e:2c:49:c7:e9:59:a7:b6:66:ab:02:a8:d9: b8:f2:1f:61:49:42:a4:f1:b5:84:99:8f:d8:e8:ca: fc:7b:67:31:29:83:55:e8:c9:ea:0e:60:26:0e:f6: 13:13:30:0c:8e:ea:26:25:e6:8d:74:08:d3:6d:3b: ab:7b:f2:69:94:a0:fb:89:ef:be:98:1a:48:8e:15: 63:53:38:43:30:a5:9f:52:6b:5f:4e:01:e0:8f:4b: 38:70:bb:52:c8:82:70:36:3e:86:29:f9:4e:1d:95: 6f:e0:32:58:6d:a4:ed:a2:db:83:eb:1d:50:ef:a7: d3:ec:fe:5c:9c:a2:5d:bd:56:a1:eb:96:0b:c9:92: de:6e:51:db:04:82:af:7f:15:59:b3:3a:13:db:7e: 2e:bc:cc:2f:95:2e:1f:aa:5a:fc:79:63:a2:5b:1c: 7c:9c:2a:f7:7d:b0:de:39:05:01:b3:e4:80:28:89: ec:21:83:89:b0:72:6a:3c:17:ae:db:52:00:f0:cd: e8:75:34:33:00:8f:65:a9:03:1f:81:ea:7d:76:1d: fd:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:6C:2B:E3:EA:44:B3:10:07:15:D6:08:37:9A:69:80:9A:2D:8C:AC X509v3 Authority Key Identifier: keyid:EF:9F:E7:42:21:08:F8:FD:F6:AD:86:D7:48:18:53:5B:17:38:C9:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/EF9FE7422108F8FDF6AD86D74818535B1738C9BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF9FE7422108F8FDF6AD86D74818535B1738C9BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/323830343a346661383a383034303a3a2f34322d3432203d3e20323638333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:4fa8:8040::/42 Signature Algorithm: sha256WithRSAEncryption 90:18:bb:98:31:f1:df:db:15:26:93:50:61:29:55:6f:59:64: 0c:61:f4:22:a2:55:5f:b2:cc:6c:01:ed:6f:3f:59:a2:b8:29: 54:89:73:bb:97:3e:ee:3e:e8:f5:d7:b9:7e:af:28:c6:c3:b5: cf:3a:b1:c9:a0:b7:af:19:50:5f:0d:68:19:c5:25:7b:a3:62: 66:1e:c2:d5:76:85:f2:d9:95:49:18:97:e8:d9:15:5c:ef:d5: 3b:79:fb:47:5a:2e:b8:ed:51:71:5f:54:88:e2:ff:d2:c4:84: 7a:ec:49:e4:59:a2:d6:57:54:a8:08:ef:70:a1:62:df:45:a8: 92:c3:fe:36:91:3e:67:66:3d:f8:c9:a6:f8:64:ef:89:46:66: 80:36:1f:85:7c:7d:ab:1c:52:5a:2d:a1:fe:76:df:f9:d8:49: 2c:c7:c8:53:cf:94:e6:be:af:9b:43:88:5a:71:32:dd:28:89: b9:04:f5:3b:df:ef:a4:7d:33:e6:36:57:20:d2:ff:48:53:ec: 10:1b:42:fe:ea:1e:68:88:60:d9:fc:6b:da:90:1b:81:94:fb: 84:fc:e1:60:bd:0b:2c:08:e5:4c:36:06:a7:e3:81:12:5a:92: 0e:85:35:f0:b3:83:2b:40:8d:b4:79:16:35:8f:58:ed:5c:ec: 3f:73:ee:fa -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIUHa8+s2OvMoyJla067PXp2NYu6dAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY5RkU3NDIyMTA4RjhGREY2QUQ4NkQ3NDgxODUzNUIx NzM4QzlCQTAeFw0yNTA5MjIxODM1NTZaFw0yNjA5MjExODQwNTZaMDMxMTAvBgNV BAMTKDFGNkMyQkUzRUE0NEIzMTAwNzE1RDYwODM3OUE2OTgwOUEyRDhDQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChmBbVZ5axEjOKGCsfIEmnWzNj Lyq/tt+XJdk7pfV51OY4dLp4VcXmY8ocVSYiTixJx+lZp7ZmqwKo2bjyH2FJQqTx tYSZj9joyvx7ZzEpg1XoyeoOYCYO9hMTMAyO6iYl5o10CNNtO6t78mmUoPuJ776Y GkiOFWNTOEMwpZ9Sa19OAeCPSzhwu1LIgnA2PoYp+U4dlW/gMlhtpO2i24PrHVDv p9Ps/lycol29VqHrlgvJkt5uUdsEgq9/FVmzOhPbfi68zC+VLh+qWvx5Y6JbHHyc Kvd9sN45BQGz5IAoiewhg4mwcmo8F67bUgDwzeh1NDMAj2WpAx+B6n12Hf0xAgMB AAGjggJcMIICWDAdBgNVHQ4EFgQUH2wr4+pEsxAHFdYIN5ppgJotjKwwHwYDVR0j BBgwFoAU75/nQiEI+P32rYbXSBhTWxc4ybowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWp4ZWNtbU1RTXBlTUd3WjNhRmJLUGdoYUZLZTRyNllTUXlBcUFGS05p UFUvMC9FRjlGRTc0MjIxMDhGOEZERjZBRDg2RDc0ODE4NTM1QjE3MzhDOUJBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VGOUZFNzQyMjEwOEY4RkRG NkFEODZENzQ4MTg1MzVCMTczOEM5QkEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzVqeGVjbW1NUU1wZU1Hd1ozYUZiS1BnaGFGS2U0cjZZU1F5QXFBRktOaVBVLzAv MzIzODMwMzQzYTM0NjY2MTM4M2EzODMwMzQzMDNhM2EyZjM0MzIyZDM0MzIyMDNk M2UyMDMyMzYzODMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBigET6iAQDANBgkqhkiG9w0BAQsF AAOCAQEAkBi7mDHx39sVJpNQYSlVb1lkDGH0IqJVX7LMbAHtbz9ZorgpVIlzu5c+ 7j7o9de5fq8oxsO1zzqxyaC3rxlQXw1oGcUle6NiZh7C1XaF8tmVSRiX6NkVXO/V O3n7R1ouuO1RcV9UiOL/0sSEeuxJ5Fmi1ldUqAjvcKFi30WoksP+NpE+Z2Y9+Mmm +GTviUZmgDYfhXx9qxxSWi2h/nbf+dhJLMfIU8+U5r6vm0OIWnEy3SiJuQT1O9/v pH0z5jZXINL/SFPsEBtC/uoeaIhg2fxr2pAbgZT7hPzhYL0LLAjlTDYGp+OBElqS DoU18LODK0CNtHkWNY9Y7VzsP3Pu+g== -----END CERTIFICATE-----Generated at Mon Oct 20 20:38:00 2025 by rpki-client