$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/323830343a313462633a3430303a333030303a3a2f35332d3533203d3e20323633333437.roa File: 323830343a313462633a3430303a333030303a3a2f35332d3533203d3e20323633333437.roa (raw, json) Hash identifier: xIIqMGaZITKLqBxA8hBZw7Zva4+01iLJDmCDV8yQbfo= Subject key identifier: 2F:67:78:D4:4F:D5:57:84:9D:73:94:FF:C1:D4:A7:21:C7:0B:35:DC Certificate issuer: /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2 Certificate serial: 5BF061DB5C39D1BAD04A87F4E4593149E01C0238 Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer Subject info access: rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/323830343a313462633a3430303a333030303a3a2f35332d3533203d3e20323633333437.roa Signing time: Sat 11 Oct 2025 14:03:02 +0000 ROA not before: Sat 11 Oct 2025 13:58:02 +0000 ROA not after: Sat 10 Oct 2026 14:03:02 +0000 asID: 263347 IP address blocks: 2804:14bc:400:3000::/53 maxlen: 53 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 16:32:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:f0:61:db:5c:39:d1:ba:d0:4a:87:f4:e4:59:31:49:e0:1c:02:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2 Validity Not Before: Oct 11 13:58:02 2025 GMT Not After : Oct 10 14:03:02 2026 GMT Subject: CN=2F6778D44FD557849D7394FFC1D4A721C70B35DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:8d:53:04:29:09:db:a2:01:9e:76:1a:48:51: e7:2f:33:c3:56:c7:87:82:02:d7:5c:86:d5:bb:31: 2f:43:ab:70:a9:12:54:05:ea:ff:d8:d0:77:4c:2b: 8e:a8:a9:23:45:43:8e:ce:23:61:4b:e0:cc:34:82: 1d:5a:2b:4a:b7:87:00:25:6e:a4:e6:01:77:26:54: 21:9d:f9:13:47:77:2a:19:5a:25:18:52:d6:70:a7: 52:03:d4:7e:35:91:36:9a:9b:b0:10:6c:f8:5f:c7: c4:34:e9:b0:5e:99:ed:58:6d:8f:56:f9:87:eb:ba: eb:bb:49:b8:63:73:9a:63:f5:df:5e:19:1f:e4:2c: fc:c9:50:c4:2d:9c:54:1b:27:94:f0:c0:16:30:10: 82:9d:b0:86:e1:99:eb:ab:2a:61:f8:27:5a:9b:5a: 18:11:7d:03:14:8f:9a:69:32:e1:19:f4:1d:0c:2f: 35:dc:78:89:7b:fe:d2:cf:ad:f4:75:ff:f3:59:39: a4:43:1d:c0:77:91:04:4a:fe:78:aa:b7:03:42:5e: 38:41:f2:49:dc:a3:85:a1:c5:31:d8:d4:44:ee:82: 95:68:1e:75:e4:89:55:4f:89:98:ed:70:b7:8e:ad: 09:70:c8:5f:b8:a3:51:d0:ca:3c:a1:b7:14:1c:68: 92:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:67:78:D4:4F:D5:57:84:9D:73:94:FF:C1:D4:A7:21:C7:0B:35:DC X509v3 Authority Key Identifier: keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/323830343a313462633a3430303a333030303a3a2f35332d3533203d3e20323633333437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:14bc:400:3000::/53 Signature Algorithm: sha256WithRSAEncryption 86:3d:4f:75:24:59:49:98:9a:2f:5c:15:4d:71:d3:21:67:86: b4:c3:64:6e:64:09:fe:6c:f4:9b:7b:3e:ec:25:3c:69:ce:4d: cb:3c:71:28:d6:27:1b:9a:4e:c9:6f:e8:68:8b:9c:4b:b7:f9: a9:01:bc:b1:0b:08:78:6d:96:00:9c:de:49:fb:6d:e4:0e:87: 80:90:d0:61:21:5d:0e:b2:9f:d1:e7:fc:4c:10:80:3e:6e:54: 85:1a:c2:9d:bc:fe:a9:16:70:9b:8c:59:f8:b9:4c:79:75:bd: 3b:38:2b:ca:42:d3:ab:03:77:c9:8f:50:ff:0c:53:30:38:f0: cf:64:25:1a:f2:30:9a:a8:eb:de:16:76:bb:a2:b1:4e:92:c1: 98:93:dc:26:95:6e:f5:f0:da:6a:f3:98:d8:60:c1:28:19:92: 2f:84:a5:3a:ed:62:62:49:07:9c:bb:fb:15:f5:4b:a3:cf:11: 85:e2:3d:09:ea:94:83:d4:0d:d4:bc:85:94:2d:6b:e1:96:bf: 44:31:3a:74:eb:d6:c2:3a:63:b2:a8:28:d5:00:72:f1:a8:6b: 0e:ab:e6:f1:a1:f2:05:c5:00:db:af:13:9c:8e:5b:a0:8a:1a: b4:13:c3:c9:38:5c:48:eb:e8:96:e4:32:be:d5:76:45:17:64: fc:2c:07:6f -----BEGIN CERTIFICATE----- MIIFWzCCBEOgAwIBAgIUW/Bh21w50brQSof05FkxSeAcAjgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDMwOTE2Njk3Q0M3N0ExQTg3NkU0ODY1QkUwMkY1NUE4 RUZGOUJGMjAeFw0yNTEwMTExMzU4MDJaFw0yNjEwMTAxNDAzMDJaMDMxMTAvBgNV BAMTKDJGNjc3OEQ0NEZENTU3ODQ5RDczOTRGRkMxRDRBNzIxQzcwQjM1REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDujVMEKQnbogGedhpIUecvM8NW x4eCAtdchtW7MS9Dq3CpElQF6v/Y0HdMK46oqSNFQ47OI2FL4Mw0gh1aK0q3hwAl bqTmAXcmVCGd+RNHdyoZWiUYUtZwp1ID1H41kTaam7AQbPhfx8Q06bBeme1YbY9W +Yfruuu7Sbhjc5pj9d9eGR/kLPzJUMQtnFQbJ5TwwBYwEIKdsIbhmeurKmH4J1qb WhgRfQMUj5ppMuEZ9B0MLzXceIl7/tLPrfR1//NZOaRDHcB3kQRK/niqtwNCXjhB 8knco4WhxTHY1ETugpVoHnXkiVVPiZjtcLeOrQlwyF+4o1HQyjyhtxQcaJLLAgMB AAGjggJlMIICYTAdBgNVHQ4EFgQUL2d41E/VV4Sdc5T/wdSnIccLNdwwHwYDVR0j BBgwFoAUAwkWaXzHehqHbkhlvgL1Wo7/m/IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOGtVeWFzTm5lVW1TcXhESnVwZG15c3dteUtSdENHZEt0dmtQODUxSHh5 ZEMvMS8wMzA5MTY2OTdDQzc3QTFBODc2RTQ4NjVCRTAyRjU1QThFRkY5QkYyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzMDkxNjY5N0NDNzdBMUE4 NzZFNDg2NUJFMDJGNTVBOEVGRjlCRjIuY2VyMIG+BggrBgEFBQcBCwSBsTCBrjCB qwYIKwYBBQUHMAuGgZ5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzhrVXlhc05uZVVtU3F4REp1cGRteXN3bXlLUnRDR2RLdHZrUDg1MUh4eWRDLzEv MzIzODMwMzQzYTMxMzQ2MjYzM2EzNDMwMzAzYTMzMzAzMDMwM2EzYTJmMzUzMzJk MzUzMzIwM2QzZTIwMzIzNjMzMzMzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAAjAKAwgDKAQUvAQAMDANBgkq hkiG9w0BAQsFAAOCAQEAhj1PdSRZSZiaL1wVTXHTIWeGtMNkbmQJ/mz0m3s+7CU8 ac5NyzxxKNYnG5pOyW/oaIucS7f5qQG8sQsIeG2WAJzeSftt5A6HgJDQYSFdDrKf 0ef8TBCAPm5UhRrCnbz+qRZwm4xZ+LlMeXW9OzgrykLTqwN3yY9Q/wxTMDjwz2Ql GvIwmqjr3hZ2u6KxTpLBmJPcJpVu9fDaavOY2GDBKBmSL4SlOu1iYkkHnLv7FfVL o88RheI9CeqUg9QN1LyFlC1r4Za/RDE6dOvWwjpjsqgo1QBy8ahrDqvm8aHyBcUA 268TnI5boIoatBPDyThcSOvoluQyvtV2RRdk/CwHbw== -----END CERTIFICATE-----Generated at Mon Oct 20 21:35:42 2025 by rpki-client