$ rpki-client -vvf rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/323830343a363732383a383830303a3a2f34302d3430203d3e20323639363038.roa File: 323830343a363732383a383830303a3a2f34302d3430203d3e20323639363038.roa (raw, json) Hash identifier: mS7Br3iPwwpZDReQtfAUYeUMQlpptZNQfEkO8CeBkzE= Subject key identifier: 06:C3:92:5A:3E:B3:18:4F:B3:4A:1F:29:57:53:F1:FA:B5:46:8C:17 Certificate issuer: /CN=141D0D9BF25D7F0F2EE720E63711904974FDDC7F Certificate serial: 1FF84027E11CB260991F01721ECCAF317B58E0CC Authority key identifier: 14:1D:0D:9B:F2:5D:7F:0F:2E:E7:20:E6:37:11:90:49:74:FD:DC:7F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/141D0D9BF25D7F0F2EE720E63711904974FDDC7F.cer Subject info access: rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/323830343a363732383a383830303a3a2f34302d3430203d3e20323639363038.roa Signing time: Tue 30 Sep 2025 13:13:04 +0000 ROA not before: Tue 30 Sep 2025 13:08:04 +0000 ROA not after: Tue 29 Sep 2026 13:13:04 +0000 asID: 269608 IP address blocks: 2804:6728:8800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/141D0D9BF25D7F0F2EE720E63711904974FDDC7F.crl rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/141D0D9BF25D7F0F2EE720E63711904974FDDC7F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/141D0D9BF25D7F0F2EE720E63711904974FDDC7F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 23:13:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:f8:40:27:e1:1c:b2:60:99:1f:01:72:1e:cc:af:31:7b:58:e0:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=141D0D9BF25D7F0F2EE720E63711904974FDDC7F Validity Not Before: Sep 30 13:08:04 2025 GMT Not After : Sep 29 13:13:04 2026 GMT Subject: CN=06C3925A3EB3184FB34A1F295753F1FAB5468C17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:98:8d:3c:c3:ec:16:26:1a:20:77:7c:22:87: ae:75:20:ba:a5:e1:ac:56:4a:80:8c:22:34:07:76: c7:ac:04:5d:8e:89:7b:43:da:44:03:46:73:d3:3c: 4d:cc:83:1e:b6:4d:58:70:23:f0:5b:2e:ab:3c:b8: d3:3e:c6:f5:4a:61:36:50:31:35:d0:7c:30:94:a2: 83:39:e6:65:f1:4e:27:4d:da:68:bf:c4:d8:67:c3: 2c:fa:7b:04:f7:59:b0:66:2c:1b:b2:bc:af:26:55: 65:53:a5:eb:81:9c:62:0a:a6:28:74:01:d1:7e:72: bf:4c:be:c8:91:71:08:65:3c:96:d8:d6:d5:c2:f7: 08:54:5d:8a:0b:c4:e8:ae:cb:84:24:dd:41:b1:1e: b5:3c:c1:b9:9c:4e:0f:78:89:ea:35:50:95:4e:d8: ab:21:37:ac:3a:24:04:a5:7c:a9:53:b2:ee:d6:6b: 65:0c:f8:0f:24:96:be:56:3c:11:d3:d6:99:3b:4a: 57:5d:19:0d:11:c1:fa:ce:ea:49:e8:aa:1e:22:cb: 0a:92:64:36:d4:65:d2:6b:83:fa:68:94:3b:ec:d5: e1:b2:00:6d:48:d3:1e:13:16:99:74:61:39:01:df: 56:70:cf:f6:aa:a1:e0:67:0e:8f:fb:9a:e1:a5:5c: 16:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:C3:92:5A:3E:B3:18:4F:B3:4A:1F:29:57:53:F1:FA:B5:46:8C:17 X509v3 Authority Key Identifier: keyid:14:1D:0D:9B:F2:5D:7F:0F:2E:E7:20:E6:37:11:90:49:74:FD:DC:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/141D0D9BF25D7F0F2EE720E63711904974FDDC7F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/141D0D9BF25D7F0F2EE720E63711904974FDDC7F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/323830343a363732383a383830303a3a2f34302d3430203d3e20323639363038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:6728:8800::/40 Signature Algorithm: sha256WithRSAEncryption 21:86:24:d6:ec:31:f2:74:ca:f5:7f:2c:09:84:53:e7:40:07: 5c:b6:fb:43:d5:ec:2f:eb:3d:a6:45:3e:ce:2b:0a:c8:bd:42: 4d:a5:dd:09:4a:b9:0a:89:7a:36:bf:75:95:36:d2:1b:46:b2: b1:3c:c1:7d:ae:bc:3a:2b:b9:e0:ab:51:cc:55:39:a5:3e:9b: 14:be:8b:66:e4:a2:7e:b3:e3:2a:47:74:d0:f0:26:1d:c3:aa: aa:90:88:89:f2:5a:af:48:b5:8a:56:c5:8c:0c:b8:57:ce:05: cd:5a:6e:9f:cd:0c:3e:58:f4:ef:80:85:48:ed:0d:07:14:36: e5:15:02:b8:cc:29:d5:00:bb:bf:41:4d:1e:b0:4b:32:a7:c2: a4:ab:bc:f9:bc:e1:44:51:7e:2c:97:1b:ef:83:9a:17:ed:7a: d1:94:2a:e9:d0:86:bd:7c:12:70:d3:af:6d:f1:39:fd:73:77: c8:c4:48:19:bc:61:ec:93:89:10:93:b5:94:e1:a1:5e:60:78: 51:b1:da:e6:af:b9:49:01:27:46:2c:01:c6:e9:74:7a:5d:9b: 21:61:9c:1b:8a:8e:f5:08:da:c8:da:ae:6a:cb:fa:81:f5:d4: 44:49:f1:6a:1f:53:df:6c:f3:58:bf:f8:d5:cd:cb:5c:ca:07: ae:b9:2a:6e -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUH/hAJ+EcsmCZHwFyHsyvMXtY4MwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQxRDBEOUJGMjVEN0YwRjJFRTcyMEU2MzcxMTkwNDk3 NEZEREM3RjAeFw0yNTA5MzAxMzA4MDRaFw0yNjA5MjkxMzEzMDRaMDMxMTAvBgNV BAMTKDA2QzM5MjVBM0VCMzE4NEZCMzRBMUYyOTU3NTNGMUZBQjU0NjhDMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9mI08w+wWJhogd3wih651ILql 4axWSoCMIjQHdsesBF2OiXtD2kQDRnPTPE3Mgx62TVhwI/BbLqs8uNM+xvVKYTZQ MTXQfDCUooM55mXxTidN2mi/xNhnwyz6ewT3WbBmLBuyvK8mVWVTpeuBnGIKpih0 AdF+cr9MvsiRcQhlPJbY1tXC9whUXYoLxOiuy4Qk3UGxHrU8wbmcTg94ieo1UJVO 2KshN6w6JASlfKlTsu7Wa2UM+A8klr5WPBHT1pk7SlddGQ0RwfrO6knoqh4iywqS ZDbUZdJrg/polDvs1eGyAG1I0x4TFpl0YTkB31Zwz/aqoeBnDo/7muGlXBb/AgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUBsOSWj6zGE+zSh8pV1Px+rVGjBcwHwYDVR0j BBgwFoAUFB0Nm/Jdfw8u5yDmNxGQSXT93H8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNzlNOWdRRHZpczl5SnZrYkF2WUo2WURucVlKZDU4bTE1V0FXS3Q0b2Va QVcvMC8xNDFEMEQ5QkYyNUQ3RjBGMkVFNzIwRTYzNzExOTA0OTc0RkREQzdGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE0MUQwRDlCRjI1RDdGMEYy RUU3MjBFNjM3MTE5MDQ5NzRGRERDN0YuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzc5TTlnUUR2aXM5eUp2a2JBdllKNllEbnFZSmQ1OG0xNVdBV0t0NG9lWkFXLzAv MzIzODMwMzQzYTM2MzczMjM4M2EzODM4MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk M2UyMDMyMzYzOTM2MzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEZyiIMA0GCSqGSIb3DQEBCwUA A4IBAQAhhiTW7DHydMr1fywJhFPnQAdctvtD1ewv6z2mRT7OKwrIvUJNpd0JSrkK iXo2v3WVNtIbRrKxPMF9rrw6K7ngq1HMVTmlPpsUvotm5KJ+s+MqR3TQ8CYdw6qq kIiJ8lqvSLWKVsWMDLhXzgXNWm6fzQw+WPTvgIVI7Q0HFDblFQK4zCnVALu/QU0e sEsyp8Kkq7z5vOFEUX4slxvvg5oX7XrRlCrp0Ia9fBJw069t8Tn9c3fIxEgZvGHs k4kQk7WU4aFeYHhRsdrmr7lJASdGLAHG6XR6XZshYZwbio71CNrI2q5qy/qB9dRE SfFqH1PfbPNYv/jVzctcygeuuSpu -----END CERTIFICATE-----Generated at Tue Oct 21 01:57:12 2025 by rpki-client