$ rpki-client -vvf rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/323830343a373138303a633030303a3a2f33342d3334203d3e20323730373933.roa File: 323830343a373138303a633030303a3a2f33342d3334203d3e20323730373933.roa (raw, json) Hash identifier: lFrjvrMxzblDYDfWmfc9dFhSCZaIlMkFSc8IfPLXuBU= Subject key identifier: 23:34:B0:76:E1:D1:F2:97:2C:65:44:CB:B6:BE:4A:BB:49:E4:CD:06 Certificate issuer: /CN=4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A Certificate serial: 2DD815FC02B11F634298543F58A6326DD4AC42D4 Authority key identifier: 4D:9A:BE:49:0C:47:DC:C6:63:99:2B:BA:24:BD:5A:0F:B7:C1:00:9A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.cer Subject info access: rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/323830343a373138303a633030303a3a2f33342d3334203d3e20323730373933.roa Signing time: Thu 25 Sep 2025 13:04:15 +0000 ROA not before: Thu 25 Sep 2025 12:59:15 +0000 ROA not after: Thu 24 Sep 2026 13:04:15 +0000 asID: 270793 IP address blocks: 2804:7180:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.crl rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 12:23:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:d8:15:fc:02:b1:1f:63:42:98:54:3f:58:a6:32:6d:d4:ac:42:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A Validity Not Before: Sep 25 12:59:15 2025 GMT Not After : Sep 24 13:04:15 2026 GMT Subject: CN=2334B076E1D1F2972C6544CBB6BE4ABB49E4CD06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:eb:d6:99:ef:b0:72:1c:3d:80:be:09:98:2f: 33:98:1b:50:82:c7:eb:58:85:a3:4d:3c:2b:d6:da: 2e:af:4c:df:0a:7c:4e:79:76:66:ec:43:c0:77:5a: a6:38:74:51:97:d6:5c:5d:6e:05:6d:68:ba:a8:7c: 1d:08:4c:42:0f:e8:21:95:e2:96:7d:b2:90:05:10: 2d:d6:15:d0:24:7e:0d:ce:f6:ac:04:c0:66:45:ac: 96:b7:6b:7b:ac:a6:71:21:8a:33:80:6a:f7:98:b9: ac:f8:ef:ce:4c:7e:63:85:02:e7:ff:51:df:42:d8: ca:b8:a3:31:40:d2:c2:04:db:f0:dd:90:12:2c:47: 0a:5a:90:62:3f:9b:b0:7d:00:a5:6c:bd:06:a6:5c: 84:5a:f1:be:1e:0b:6c:08:16:a5:bc:3e:8a:d7:d8: cf:aa:bc:45:18:0b:3a:d4:a9:5e:15:44:f4:54:d4: 27:98:49:71:ed:a7:c8:a2:f8:76:7e:cf:9a:31:af: 0c:be:ce:a7:93:75:6d:39:cb:ae:82:f3:9d:9e:46: f7:86:5c:5c:f8:54:85:86:f8:55:8e:fb:c7:47:ea: fe:b6:89:44:f2:66:90:7c:70:e8:9e:bb:e4:be:b9: 00:25:d7:38:6b:b9:c4:c9:b3:cd:d8:57:bb:be:b9: 6f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:34:B0:76:E1:D1:F2:97:2C:65:44:CB:B6:BE:4A:BB:49:E4:CD:06 X509v3 Authority Key Identifier: keyid:4D:9A:BE:49:0C:47:DC:C6:63:99:2B:BA:24:BD:5A:0F:B7:C1:00:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/323830343a373138303a633030303a3a2f33342d3334203d3e20323730373933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:7180:c000::/34 Signature Algorithm: sha256WithRSAEncryption 1d:c5:e4:29:08:56:f7:a0:25:13:30:4b:aa:a6:d0:89:21:9c: 45:87:79:96:1f:db:70:3f:2e:81:29:ee:87:f8:4b:22:3d:79: 6a:ef:7c:19:ff:16:42:81:d8:4d:6a:82:ba:f7:c6:22:68:de: 63:25:69:ae:2f:36:57:74:82:d1:5a:83:90:94:a4:4d:f1:f2: 27:1c:3f:55:5b:a2:77:9d:55:b5:9f:08:32:70:a3:39:89:54: c6:86:90:8e:3c:b2:32:a4:ad:c5:d4:31:e8:42:c8:47:6b:4e: f9:73:24:9b:26:cd:e3:56:05:19:c6:f6:c9:a7:78:f2:f7:9c: 14:ce:a1:85:65:c8:f2:1c:76:99:05:4b:fa:fd:90:7e:ff:6d: 11:f1:40:85:0b:fc:d8:bb:1f:cf:50:56:02:f7:0c:37:31:6f: b1:c9:04:0c:ab:27:c5:14:62:5f:b9:03:16:ef:e9:cd:96:a0: c2:91:9a:e7:6f:5b:4b:3d:07:de:6b:58:67:b0:5a:45:58:b8: c5:ee:d7:d6:41:ee:1a:ca:97:77:fb:ff:6f:8f:5d:11:ce:e8: 3f:09:f1:24:cd:80:b6:62:25:aa:8d:b3:e4:31:cc:ce:17:c8: f1:17:72:e6:f0:1e:53:ee:89:91:b0:70:c7:17:d0:29:66:01: 43:a6:8b:41 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIULdgV/AKxH2NCmFQ/WKYybdSsQtQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ5QUJFNDkwQzQ3RENDNjYzOTkyQkJBMjRCRDVBMEZC N0MxMDA5QTAeFw0yNTA5MjUxMjU5MTVaFw0yNjA5MjQxMzA0MTVaMDMxMTAvBgNV BAMTKDIzMzRCMDc2RTFEMUYyOTcyQzY1NDRDQkI2QkU0QUJCNDlFNENEMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM69aZ77ByHD2AvgmYLzOYG1CC x+tYhaNNPCvW2i6vTN8KfE55dmbsQ8B3WqY4dFGX1lxdbgVtaLqofB0ITEIP6CGV 4pZ9spAFEC3WFdAkfg3O9qwEwGZFrJa3a3uspnEhijOAaveYuaz4785MfmOFAuf/ Ud9C2Mq4ozFA0sIE2/DdkBIsRwpakGI/m7B9AKVsvQamXIRa8b4eC2wIFqW8PorX 2M+qvEUYCzrUqV4VRPRU1CeYSXHtp8ii+HZ+z5oxrwy+zqeTdW05y66C852eRveG XFz4VIWG+FWO+8dH6v62iUTyZpB8cOieu+S+uQAl1zhrucTJs83YV7u+uW9LAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUIzSwduHR8pcsZUTLtr5Ku0nkzQYwHwYDVR0j BBgwFoAUTZq+SQxH3MZjmSu6JL1aD7fBAJowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQUF0M29hYmVpUHZUQW42U2dUd3NRS1REcmtMMWJNaDM3dlJQb2pYOEV1 bzMvMC80RDlBQkU0OTBDNDdEQ0M2NjM5OTJCQkEyNEJENUEwRkI3QzEwMDlBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzREOUFCRTQ5MEM0N0RDQzY2 Mzk5MkJCQTI0QkQ1QTBGQjdDMTAwOUEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0FBdDNvYWJlaVB2VEFuNlNnVHdzUUtURHJrTDFiTWgzN3ZSUG9qWDhFdW8zLzAv MzIzODMwMzQzYTM3MzEzODMwM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzczMDM3MzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEcYDAMA0GCSqGSIb3DQEBCwUA A4IBAQAdxeQpCFb3oCUTMEuqptCJIZxFh3mWH9twPy6BKe6H+EsiPXlq73wZ/xZC gdhNaoK698YiaN5jJWmuLzZXdILRWoOQlKRN8fInHD9VW6J3nVW1nwgycKM5iVTG hpCOPLIypK3F1DHoQshHa075cySbJs3jVgUZxvbJp3jy95wUzqGFZcjyHHaZBUv6 /ZB+/20R8UCFC/zYux/PUFYC9ww3MW+xyQQMqyfFFGJfuQMW7+nNlqDCkZrnb1tL PQfea1hnsFpFWLjF7tfWQe4aypd3+/9vj10Rzug/CfEkzYC2YiWqjbPkMczOF8jx F3Lm8B5T7omRsHDHF9ApZgFDpotB -----END CERTIFICATE-----Generated at Mon Oct 20 17:55:03 2025 by rpki-client