$ rpki-client -vvf rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a383030303a3a2f33332d3333203d3e20323732353831.roa File: 323830343a383537383a383030303a3a2f33332d3333203d3e20323732353831.roa (raw, json) Hash identifier: hlEnoJpysDTQhMh9vjpVDrfSuQQe4ncs2AxKBknxFt8= Subject key identifier: DF:EB:4A:8C:DB:F3:89:4D:7B:47:2D:A8:A2:0D:D9:1A:7F:3D:6C:B6 Certificate issuer: /CN=C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1 Certificate serial: 34179B02A17A0924FA302238501EA87BE8AD9BAF Authority key identifier: C9:FB:3B:F7:40:A7:2E:4F:8F:F3:0F:75:F7:5D:58:9D:5F:FE:74:A1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1.cer Subject info access: rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a383030303a3a2f33332d3333203d3e20323732353831.roa Signing time: Tue 07 Oct 2025 16:15:40 +0000 ROA not before: Tue 07 Oct 2025 16:10:40 +0000 ROA not after: Tue 06 Oct 2026 16:15:40 +0000 asID: 272581 IP address blocks: 2804:8578:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1.crl rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 17:51:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:17:9b:02:a1:7a:09:24:fa:30:22:38:50:1e:a8:7b:e8:ad:9b:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1 Validity Not Before: Oct 7 16:10:40 2025 GMT Not After : Oct 6 16:15:40 2026 GMT Subject: CN=DFEB4A8CDBF3894D7B472DA8A20DD91A7F3D6CB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3c:8d:01:c4:71:e8:9c:c0:e1:62:7f:c6:a8: 7e:a2:26:8f:d4:93:87:10:d9:82:a7:0e:7c:1c:4e: d8:7e:53:ad:4f:45:f8:6c:e7:55:04:68:14:3c:54: 26:ca:14:78:7f:ef:05:3b:fd:67:a0:85:79:d8:09: f1:32:bd:cb:e7:be:e5:59:52:e4:bc:28:e0:f7:aa: c5:23:6e:85:77:c1:72:a6:de:2a:bf:b9:a9:1a:d4: ba:8e:3b:83:e0:4e:0d:bf:c7:9d:db:f2:05:83:c8: 0e:b4:49:8a:24:96:24:81:34:4d:b3:52:8b:1a:95: 68:10:a7:b0:cc:b4:3a:97:be:dc:88:55:64:20:e7: 65:73:73:0c:28:cd:76:9d:f6:4f:48:58:ff:19:c6: a5:a4:2d:c0:24:61:4b:3e:4d:18:6b:b5:eb:d2:a3: a3:2e:fd:f7:8c:9d:3f:f1:20:4f:15:a3:08:03:63: b4:fa:07:e4:49:28:a1:29:29:d1:4b:5e:3c:04:7d: d8:24:2d:1c:ba:ff:8e:1b:a6:e9:e0:bf:51:46:2c: b2:7a:f1:6c:95:19:6f:58:74:b9:3b:13:30:c6:a9: b0:fc:fc:dd:87:d0:ca:63:bb:f3:98:02:b4:fc:bf: 46:b4:57:33:5b:16:f4:10:c0:e1:96:53:46:84:06: 37:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:EB:4A:8C:DB:F3:89:4D:7B:47:2D:A8:A2:0D:D9:1A:7F:3D:6C:B6 X509v3 Authority Key Identifier: keyid:C9:FB:3B:F7:40:A7:2E:4F:8F:F3:0F:75:F7:5D:58:9D:5F:FE:74:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a383030303a3a2f33332d3333203d3e20323732353831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8578:8000::/33 Signature Algorithm: sha256WithRSAEncryption 4e:7e:da:9e:c0:5c:d1:bb:e2:5b:9d:8b:84:6a:22:72:1f:4b: a9:57:a0:e1:90:13:b7:27:d9:82:0a:0c:40:f3:b8:34:95:f5: 59:4e:12:3c:71:5e:80:66:14:04:97:aa:02:05:36:72:e1:6e: 96:5a:a8:8b:34:bd:78:be:14:99:ee:06:ad:ca:44:aa:04:d1: 97:0c:a4:12:60:96:60:dc:b1:6a:19:d8:a2:cc:a1:ef:f2:f7: b5:ce:e6:e9:8e:22:e9:6f:eb:39:1a:ec:ad:b7:13:a2:85:70: 43:15:fa:73:eb:91:c1:ec:5d:1f:2e:cc:02:54:22:59:5c:80: 70:fc:17:58:79:58:a1:31:98:53:36:2a:df:4e:9b:fd:c4:d6: 98:63:42:ff:e1:1f:fc:92:f5:21:2e:7a:21:49:2a:15:aa:5b: 7c:ed:06:06:f6:43:8e:56:d7:15:6e:39:37:36:5e:72:34:5e: c0:06:47:e8:a6:38:25:f4:e4:44:bf:df:ce:8f:dc:69:f0:1d: e4:76:74:ca:6f:30:d5:f3:17:eb:3e:41:75:24:39:53:e3:a7: d5:5e:94:80:ec:a0:93:96:97:36:c6:a8:50:26:b1:01:b0:f2: 2a:f7:26:48:7f:0b:55:2a:af:e1:11:1d:e8:27:7d:be:6f:17: e5:77:f3:c8 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUNBebAqF6CST6MCI4UB6oe+itm68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlGQjNCRjc0MEE3MkU0RjhGRjMwRjc1Rjc1RDU4OUQ1 RkZFNzRBMTAeFw0yNTEwMDcxNjEwNDBaFw0yNjEwMDYxNjE1NDBaMDMxMTAvBgNV BAMTKERGRUI0QThDREJGMzg5NEQ3QjQ3MkRBOEEyMEREOTFBN0YzRDZDQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDePI0BxHHonMDhYn/GqH6iJo/U k4cQ2YKnDnwcTth+U61PRfhs51UEaBQ8VCbKFHh/7wU7/WeghXnYCfEyvcvnvuVZ UuS8KOD3qsUjboV3wXKm3iq/uaka1LqOO4PgTg2/x53b8gWDyA60SYokliSBNE2z UosalWgQp7DMtDqXvtyIVWQg52VzcwwozXad9k9IWP8ZxqWkLcAkYUs+TRhrtevS o6Mu/feMnT/xIE8VowgDY7T6B+RJKKEpKdFLXjwEfdgkLRy6/44bpungv1FGLLJ6 8WyVGW9YdLk7EzDGqbD8/N2H0Mpju/OYArT8v0a0VzNbFvQQwOGWU0aEBjdXAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQU3+tKjNvziU17Ry2oog3ZGn89bLYwHwYDVR0j BBgwFoAUyfs790CnLk+P8w91911YnV/+dKEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQUtjWHRWUTRmdEx6WnZjQk02N2I3TW1TYlM3aTRuVnBKQ0Q1VEY5d2ZB OXovMC9DOUZCM0JGNzQwQTcyRTRGOEZGMzBGNzVGNzVENTg5RDVGRkU3NEExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5RkIzQkY3NDBBNzJFNEY4 RkYzMEY3NUY3NUQ1ODlENUZGRTc0QTEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0FLY1h0VlE0ZnRMelp2Y0JNNjdiN01tU2JTN2k0blZwSkNENVRGOXdmQTl6LzAv MzIzODMwMzQzYTM4MzUzNzM4M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk M2UyMDMyMzczMjM1MzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEhXiAMA0GCSqGSIb3DQEBCwUA A4IBAQBOftqewFzRu+JbnYuEaiJyH0upV6DhkBO3J9mCCgxA87g0lfVZThI8cV6A ZhQEl6oCBTZy4W6WWqiLNL14vhSZ7gatykSqBNGXDKQSYJZg3LFqGdiizKHv8ve1 zubpjiLpb+s5GuyttxOihXBDFfpz65HB7F0fLswCVCJZXIBw/BdYeVihMZhTNirf Tpv9xNaYY0L/4R/8kvUhLnohSSoVqlt87QYG9kOOVtcVbjk3Nl5yNF7ABkfopjgl 9OREv9/Oj9xp8B3kdnTKbzDV8xfrPkF1JDlT46fVXpSA7KCTlpc2xqhQJrEBsPIq 9yZIfwtVKq/hER3oJ32+bxfld/PI -----END CERTIFICATE-----Generated at Mon Oct 20 21:38:08 2025 by rpki-client