$ rpki-client -vvf rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/323830343a336437343a3130303a3a2f34382d313238203d3e20323636353332.roa File: 323830343a336437343a3130303a3a2f34382d313238203d3e20323636353332.roa (raw, json) Hash identifier: OurFGdWzBTMjaeL+fT/NQy5HChPORqd9dIs6UVijoRg= Subject key identifier: AA:DB:8F:A5:3C:EA:BB:E9:B6:D2:7E:E1:1A:F1:19:79:2D:A3:43:68 Certificate issuer: /CN=2DC0F242ADDA7136D95141422051D1361143E486 Certificate serial: 3096E1D50EC2BEA9B61F083AF8C5E4FCB502B4BC Authority key identifier: 2D:C0:F2:42:AD:DA:71:36:D9:51:41:42:20:51:D1:36:11:43:E4:86 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DC0F242ADDA7136D95141422051D1361143E486.cer Subject info access: rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/323830343a336437343a3130303a3a2f34382d313238203d3e20323636353332.roa Signing time: Wed 24 Sep 2025 20:28:32 +0000 ROA not before: Wed 24 Sep 2025 20:23:32 +0000 ROA not after: Wed 23 Sep 2026 20:28:32 +0000 asID: 266532 IP address blocks: 2804:3d74:100::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/2DC0F242ADDA7136D95141422051D1361143E486.crl rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/2DC0F242ADDA7136D95141422051D1361143E486.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DC0F242ADDA7136D95141422051D1361143E486.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 09:50:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:96:e1:d5:0e:c2:be:a9:b6:1f:08:3a:f8:c5:e4:fc:b5:02:b4:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DC0F242ADDA7136D95141422051D1361143E486 Validity Not Before: Sep 24 20:23:32 2025 GMT Not After : Sep 23 20:28:32 2026 GMT Subject: CN=AADB8FA53CEABBE9B6D27EE11AF119792DA34368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3c:d5:26:66:f2:b9:bf:4d:fa:67:c1:54:2d: d5:0c:24:fe:2b:29:56:dd:92:be:d0:3e:39:73:ee: 0b:11:52:8d:d9:7d:12:15:3c:9f:89:3f:17:58:d6: 48:f5:2b:e0:51:04:32:6f:b9:a2:e4:e5:f4:80:70: 31:ce:e6:3a:30:07:ec:3d:4e:bb:56:cb:5c:89:f7: 98:3f:81:98:c4:31:90:c3:93:0b:8a:ee:c3:f4:c7: 17:79:33:01:0b:04:8f:cb:00:ce:a0:db:25:d0:22: f3:06:1b:6b:3d:76:65:b1:c2:73:f5:72:3b:60:4e: d5:1c:dc:69:07:73:84:8e:78:0b:08:43:4e:30:13: e1:18:6d:4f:76:e7:d7:38:83:08:7b:cb:a9:9e:bf: af:62:db:0a:2a:e9:9d:7a:88:cd:79:8b:9a:96:01: 6f:92:ab:0c:6c:7a:6d:68:4d:de:ef:5b:16:0f:9a: 40:4c:fa:b8:39:6b:00:e6:3b:1f:cd:65:3a:c8:f6: 20:0a:96:73:ba:1a:18:2b:37:65:56:24:f3:e4:88: e6:86:ef:cf:88:79:3f:23:56:b6:b0:95:59:86:f7: 12:55:a0:ea:2b:f1:18:1b:93:4c:5e:bc:6b:4c:73: be:62:d0:b6:63:13:40:a6:6f:50:47:1a:c6:37:f4: e0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:DB:8F:A5:3C:EA:BB:E9:B6:D2:7E:E1:1A:F1:19:79:2D:A3:43:68 X509v3 Authority Key Identifier: keyid:2D:C0:F2:42:AD:DA:71:36:D9:51:41:42:20:51:D1:36:11:43:E4:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/2DC0F242ADDA7136D95141422051D1361143E486.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DC0F242ADDA7136D95141422051D1361143E486.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/323830343a336437343a3130303a3a2f34382d313238203d3e20323636353332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:3d74:100::/48 Signature Algorithm: sha256WithRSAEncryption dc:27:7a:c2:37:98:4a:7a:cc:e7:25:f5:1a:80:aa:fe:6a:88: 9b:13:ba:9e:55:c1:d9:fe:f2:e9:8a:7a:16:70:f7:f3:d0:b3: 73:3e:f0:c8:d6:20:f7:59:ed:56:5e:ca:66:a6:27:83:23:8f: c8:78:29:68:23:af:82:cd:b2:68:92:ae:88:96:64:ed:c4:75: f5:9c:56:a2:d1:21:91:2e:41:1b:06:97:e2:25:b0:a1:f2:a9: 6f:be:96:4e:2d:33:b4:ba:26:b3:e6:8e:58:b7:d3:fc:1f:29: 62:31:74:e7:de:e0:54:a9:90:21:8e:4a:ca:67:e3:11:b8:a4: 60:78:8b:62:04:63:93:0f:81:50:17:4f:b3:c5:be:8d:49:c0: 01:45:57:54:f4:51:89:76:44:d3:d4:7d:c1:35:88:17:2f:01: 4f:70:e1:6b:86:62:e7:bd:31:ef:70:2a:fc:a3:64:6d:2f:ba: fc:80:c3:b6:7c:e7:2b:0d:47:19:76:27:da:09:cc:12:d2:06: 94:5d:72:f1:d9:00:f3:3a:9c:5a:80:6f:7b:d6:e0:3e:33:0f: 69:d4:28:c6:0c:3d:b2:6e:75:e7:c5:5c:13:c7:4e:24:a6:e5: 51:51:52:e2:94:7b:2e:cf:76:f9:0a:7a:7c:f4:ca:3b:de:9e: f9:e1:60:a0 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIUMJbh1Q7Cvqm2Hwg6+MXk/LUCtLwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRDMEYyNDJBRERBNzEzNkQ5NTE0MTQyMjA1MUQxMzYx MTQzRTQ4NjAeFw0yNTA5MjQyMDIzMzJaFw0yNjA5MjMyMDI4MzJaMDMxMTAvBgNV BAMTKEFBREI4RkE1M0NFQUJCRTlCNkQyN0VFMTFBRjExOTc5MkRBMzQzNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPPNUmZvK5v036Z8FULdUMJP4r KVbdkr7QPjlz7gsRUo3ZfRIVPJ+JPxdY1kj1K+BRBDJvuaLk5fSAcDHO5jowB+w9 TrtWy1yJ95g/gZjEMZDDkwuK7sP0xxd5MwELBI/LAM6g2yXQIvMGG2s9dmWxwnP1 cjtgTtUc3GkHc4SOeAsIQ04wE+EYbU9259c4gwh7y6mev69i2woq6Z16iM15i5qW AW+Sqwxsem1oTd7vWxYPmkBM+rg5awDmOx/NZTrI9iAKlnO6GhgrN2VWJPPkiOaG 78+IeT8jVrawlVmG9xJVoOor8Rgbk0xevGtMc75i0LZjE0Cmb1BHGsY39OCfAgMB AAGjggJcMIICWDAdBgNVHQ4EFgQUqtuPpTzqu+m20n7hGvEZeS2jQ2gwHwYDVR0j BBgwFoAULcDyQq3acTbZUUFCIFHRNhFD5IYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOWJodzNGSzNXUlJZTUF6cW56S2ZZUnNQY2pBWXI1dTNtalA0TnpuNkp2 dEwvMC8yREMwRjI0MkFEREE3MTM2RDk1MTQxNDIyMDUxRDEzNjExNDNFNDg2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJEQzBGMjQyQUREQTcxMzZE OTUxNDE0MjIwNTFEMTM2MTE0M0U0ODYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzliaHczRkszV1JSWU1BenFuektmWVJzUGNqQVlyNXUzbWpQNE56bjZKdnRMLzAv MzIzODMwMzQzYTMzNjQzNzM0M2EzMTMwMzAzYTNhMmYzNDM4MmQzMTMyMzgyMDNk M2UyMDMyMzYzNjM1MzMzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEPXQBADANBgkqhkiG9w0BAQsF AAOCAQEA3Cd6wjeYSnrM5yX1GoCq/mqImxO6nlXB2f7y6Yp6FnD389Czcz7wyNYg 91ntVl7KZqYngyOPyHgpaCOvgs2yaJKuiJZk7cR19ZxWotEhkS5BGwaX4iWwofKp b76WTi0ztLoms+aOWLfT/B8pYjF0597gVKmQIY5KymfjEbikYHiLYgRjkw+BUBdP s8W+jUnAAUVXVPRRiXZE09R9wTWIFy8BT3Dha4Zi570x73Aq/KNkbS+6/IDDtnzn Kw1HGXYn2gnMEtIGlF1y8dkA8zqcWoBve9bgPjMPadQoxgw9sm5158VcE8dOJKbl UVFS4pR7Ls92+Qp6fPTKO96e+eFgoA== -----END CERTIFICATE-----Generated at Mon Oct 20 10:29:20 2025 by rpki-client