$ rpki-client -vvf rpki-repo.registro.br/repo/71xrP7gnBks27G3PgBJUHmoBrMjmmgtpQjAsCDobK3U3/0/323830343a386461303a3a2f33322d3336203d3e20323733333639.roa File: 323830343a386461303a3a2f33322d3336203d3e20323733333639.roa (raw, json) Hash identifier: WIz1lEiWOVRmnRh+/a1Qic/qEdB/+44xE/G7kHnckp4= Subject key identifier: 4C:43:04:D0:D8:9A:0E:45:34:50:15:06:6B:E2:68:00:1A:A8:BF:16 Certificate issuer: /CN=4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032 Certificate serial: 33D502057AB2316933D39E165F1DE4C6999EF19F Authority key identifier: 4B:D7:CC:FB:86:83:AC:19:AE:AB:3A:61:49:3D:19:01:FA:2F:10:32 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032.cer Subject info access: rsync://rpki-repo.registro.br/repo/71xrP7gnBks27G3PgBJUHmoBrMjmmgtpQjAsCDobK3U3/0/323830343a386461303a3a2f33322d3336203d3e20323733333639.roa Signing time: Wed 01 Oct 2025 01:59:23 +0000 ROA not before: Wed 01 Oct 2025 01:54:23 +0000 ROA not after: Wed 30 Sep 2026 01:59:23 +0000 asID: 273369 IP address blocks: 2804:8da0::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/71xrP7gnBks27G3PgBJUHmoBrMjmmgtpQjAsCDobK3U3/0/4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032.crl rsync://rpki-repo.registro.br/repo/71xrP7gnBks27G3PgBJUHmoBrMjmmgtpQjAsCDobK3U3/0/4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 07:42:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:d5:02:05:7a:b2:31:69:33:d3:9e:16:5f:1d:e4:c6:99:9e:f1:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032 Validity Not Before: Oct 1 01:54:23 2025 GMT Not After : Sep 30 01:59:23 2026 GMT Subject: CN=4C4304D0D89A0E45345015066BE268001AA8BF16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e7:a3:fc:2e:ce:80:29:f1:36:36:f8:11:68: 5c:46:32:d7:cc:20:0f:dc:92:c3:d0:bb:f6:35:23: b2:a9:c9:4e:d1:dc:22:b6:62:1b:b5:b1:c7:58:e7: 14:de:71:1e:13:bb:89:3f:2b:ea:70:78:4c:04:1d: 11:5a:4d:2f:94:70:f7:05:dc:35:db:b4:17:9c:08: 33:54:f7:d1:fa:a9:2b:cb:bd:4c:4b:10:da:1b:e5: 8a:0c:40:de:8a:fc:66:dc:e9:dc:da:27:76:f6:7b: 21:a9:9e:8b:8e:cd:9b:c5:f5:8d:5f:c0:96:2e:88: ac:3a:f8:5e:46:70:f0:83:a9:f8:5a:66:4e:a9:40: e4:ae:30:61:94:66:02:3c:2c:74:d2:a5:f3:ea:b6: e2:6c:fd:27:b8:1a:2b:e9:bf:9f:46:07:0d:cd:4e: d8:9d:71:cf:dc:71:59:b1:b6:9c:4c:1c:ea:3a:65: 21:3b:d8:94:11:70:ab:14:6f:a0:10:6d:5f:46:e5: 42:66:01:2d:70:73:cd:a5:2b:5b:8f:3f:52:c9:95: 95:b1:4b:09:d2:75:c3:ac:4b:c7:90:25:31:b0:a7: 6b:f8:e8:1f:0e:f2:e1:96:31:ef:f6:ed:4a:34:34: eb:28:6c:f2:ab:fd:e1:fc:a2:d9:67:d6:b7:a9:08: 99:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:43:04:D0:D8:9A:0E:45:34:50:15:06:6B:E2:68:00:1A:A8:BF:16 X509v3 Authority Key Identifier: keyid:4B:D7:CC:FB:86:83:AC:19:AE:AB:3A:61:49:3D:19:01:FA:2F:10:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/71xrP7gnBks27G3PgBJUHmoBrMjmmgtpQjAsCDobK3U3/0/4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/71xrP7gnBks27G3PgBJUHmoBrMjmmgtpQjAsCDobK3U3/0/323830343a386461303a3a2f33322d3336203d3e20323733333639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8da0::/32 Signature Algorithm: sha256WithRSAEncryption bd:e0:8d:fb:30:10:54:b5:44:92:6f:a5:6c:b2:5d:10:0d:51: 55:43:a1:f2:f7:59:79:0d:94:d0:41:8f:09:38:1f:4c:ab:19: 9e:86:37:b0:d6:a5:0a:b5:00:86:67:e8:b6:a2:a7:af:cb:88: 17:71:78:b8:60:1d:f0:8b:f5:bb:55:c9:dc:65:52:30:c9:c3: 9f:78:e6:24:99:4f:1f:20:78:8a:ec:68:23:2a:1e:20:8f:8d: 48:a5:1c:c3:4b:21:39:76:d2:bf:34:f7:81:3c:0f:2b:ec:61: 49:5c:f4:aa:47:74:1a:2e:ed:fb:1f:d4:f6:ed:74:fc:79:6c: f6:99:f0:94:9d:43:ec:f6:cf:b9:8d:3f:9c:92:15:ee:e2:d3: 68:9d:f3:63:ec:bd:3b:c4:70:74:f2:7d:d2:6e:93:1a:4e:9e: 76:af:01:32:a0:40:29:75:39:91:f6:c6:e2:2f:61:51:d4:47: 8c:f2:c8:cf:46:c1:60:b3:52:d6:60:2f:40:da:f6:70:fa:d0: fa:94:e6:ba:bd:86:34:dc:6e:03:09:6c:6e:fc:95:fa:26:94: ac:5c:c6:c8:d3:62:65:4b:0b:28:2a:09:42:b6:32:24:77:f3: fe:d6:e8:e7:12:db:59:15:0f:d9:46:df:97:65:ae:21:cd:42: 08:61:59:06 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUM9UCBXqyMWkz054WXx3kxpme8Z8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJEN0NDRkI4NjgzQUMxOUFFQUIzQTYxNDkzRDE5MDFG QTJGMTAzMjAeFw0yNTEwMDEwMTU0MjNaFw0yNjA5MzAwMTU5MjNaMDMxMTAvBgNV BAMTKDRDNDMwNEQwRDg5QTBFNDUzNDUwMTUwNjZCRTI2ODAwMUFBOEJGMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC956P8Ls6AKfE2NvgRaFxGMtfM IA/cksPQu/Y1I7KpyU7R3CK2Yhu1scdY5xTecR4Tu4k/K+pweEwEHRFaTS+UcPcF 3DXbtBecCDNU99H6qSvLvUxLENob5YoMQN6K/Gbc6dzaJ3b2eyGpnouOzZvF9Y1f wJYuiKw6+F5GcPCDqfhaZk6pQOSuMGGUZgI8LHTSpfPqtuJs/Se4Givpv59GBw3N Ttidcc/ccVmxtpxMHOo6ZSE72JQRcKsUb6AQbV9G5UJmAS1wc82lK1uPP1LJlZWx SwnSdcOsS8eQJTGwp2v46B8O8uGWMe/27Uo0NOsobPKr/eH8otln1repCJnlAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUTEME0NiaDkU0UBUGa+JoABqovxYwHwYDVR0j BBgwFoAUS9fM+4aDrBmuqzphST0ZAfovEDIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNzF4clA3Z25Ca3MyN0czUGdCSlVIbW9Cck1qbW1ndHBRakFzQ0RvYksz VTMvMC80QkQ3Q0NGQjg2ODNBQzE5QUVBQjNBNjE0OTNEMTkwMUZBMkYxMDMyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCRDdDQ0ZCODY4M0FDMTlB RUFCM0E2MTQ5M0QxOTAxRkEyRjEwMzIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzcxeHJQN2duQmtzMjdHM1BnQkpVSG1vQnJNam1tZ3RwUWpBc0NEb2JLM1UzLzAv MzIzODMwMzQzYTM4NjQ2MTMwM2EzYTJmMzMzMjJkMzMzNjIwM2QzZTIwMzIzNzMz MzMzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASNoDANBgkqhkiG9w0BAQsFAAOCAQEAveCN+zAQ VLVEkm+lbLJdEA1RVUOh8vdZeQ2U0EGPCTgfTKsZnoY3sNalCrUAhmfotqKnr8uI F3F4uGAd8Iv1u1XJ3GVSMMnDn3jmJJlPHyB4iuxoIyoeII+NSKUcw0shOXbSvzT3 gTwPK+xhSVz0qkd0Gi7t+x/U9u10/Hls9pnwlJ1D7PbPuY0/nJIV7uLTaJ3zY+y9 O8RwdPJ90m6TGk6edq8BMqBAKXU5kfbG4i9hUdRHjPLIz0bBYLNS1mAvQNr2cPrQ +pTmur2GNNxuAwlsbvyV+iaUrFzGyNNiZUsLKCoJQrYyJHfz/tbo5xLbWRUP2Ubf l2WuIc1CCGFZBg== -----END CERTIFICATE-----Generated at Mon Oct 20 11:59:14 2025 by rpki-client