$ rpki-client -vvf rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a383030303a3a2f33342d3334203d3e20323732353831.roa File: 323830343a383537383a383030303a3a2f33342d3334203d3e20323732353831.roa (raw, json) Hash identifier: KiNWT2XYyvn6P4rzOt1uSFrWoSIT6q2OgDhlN/HBy9A= Subject key identifier: FE:54:C1:79:CD:BF:50:F9:0E:17:D2:E8:F1:11:9B:CB:5A:58:FC:05 Certificate issuer: /CN=C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1 Certificate serial: 24087A05B3992A6338CD4E829D4EC4841D96D051 Authority key identifier: C9:FB:3B:F7:40:A7:2E:4F:8F:F3:0F:75:F7:5D:58:9D:5F:FE:74:A1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1.cer Subject info access: rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a383030303a3a2f33342d3334203d3e20323732353831.roa Signing time: Tue 07 Oct 2025 16:15:43 +0000 ROA not before: Tue 07 Oct 2025 16:10:43 +0000 ROA not after: Tue 06 Oct 2026 16:15:43 +0000 asID: 272581 IP address blocks: 2804:8578:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1.crl rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Oct 2025 22:33:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:08:7a:05:b3:99:2a:63:38:cd:4e:82:9d:4e:c4:84:1d:96:d0:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1 Validity Not Before: Oct 7 16:10:43 2025 GMT Not After : Oct 6 16:15:43 2026 GMT Subject: CN=FE54C179CDBF50F90E17D2E8F1119BCB5A58FC05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d0:fe:8e:ed:c5:40:ba:91:fe:24:5e:9b:3a: 5b:9a:65:65:ad:65:0e:c0:eb:a2:62:e3:45:39:fb: 37:05:31:b3:21:5c:c5:da:d9:e4:24:c7:1c:52:86: 25:b2:77:1a:ec:44:fc:c8:1f:53:67:31:cc:c8:40: 38:62:5a:5a:2b:c6:e9:4b:68:33:11:56:35:77:87: c2:06:a1:f8:1c:a7:72:f7:e6:1a:5b:9a:a0:e3:6a: 32:df:0c:94:08:c7:87:9f:0f:b4:4b:db:86:24:18: 1b:f9:d2:e5:7d:82:7d:5e:9c:2b:2b:58:25:6f:9d: 5c:7b:9a:42:e9:95:12:24:b0:f4:51:09:d7:6c:ff: f8:f2:0b:70:23:38:40:e5:74:de:0f:6b:e3:f3:5b: 4a:e8:9c:bf:c4:71:07:f5:bf:88:00:d3:7a:a6:52: 0c:78:82:c6:d9:5c:7c:cc:53:b3:49:5c:96:69:47: 69:fa:09:51:2f:d3:f7:93:e6:fc:20:de:0f:13:5f: f7:f3:63:21:bc:78:b2:0c:8d:50:33:f5:c8:a2:50: 3f:58:31:57:11:03:c9:fb:ac:8f:23:48:54:07:73: bd:82:da:c8:c6:60:16:fb:80:6e:f7:9d:c4:14:fb: 33:df:06:b0:95:d8:7f:ec:e1:53:08:12:18:25:b3: ce:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:54:C1:79:CD:BF:50:F9:0E:17:D2:E8:F1:11:9B:CB:5A:58:FC:05 X509v3 Authority Key Identifier: keyid:C9:FB:3B:F7:40:A7:2E:4F:8F:F3:0F:75:F7:5D:58:9D:5F:FE:74:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a383030303a3a2f33342d3334203d3e20323732353831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8578:8000::/34 Signature Algorithm: sha256WithRSAEncryption 28:58:93:66:4a:8d:60:4e:72:48:cf:a4:63:a4:31:30:47:f3: 12:08:00:eb:84:41:73:79:35:8f:0a:b6:db:52:6c:87:35:74: b4:98:77:14:f7:d3:5b:5d:fb:49:55:ed:da:0d:45:c1:7f:5c: d8:ee:f0:15:18:4f:9c:b1:f3:bb:f4:d5:6e:b4:f2:b7:ac:32: b2:39:d2:a2:a2:60:6b:35:29:1e:4c:04:19:44:00:b7:71:77: 54:d3:5b:8d:10:0d:b5:2a:4d:b5:b1:fd:9f:a2:69:1f:4d:04: 30:1f:2e:dc:03:40:a0:40:6c:cd:63:f4:f2:bb:5c:89:b9:70: 50:d6:d2:36:52:6d:04:ad:49:b2:55:dd:68:b3:a7:0e:4e:cb: 02:76:0f:8c:76:8f:82:e7:77:5f:a4:c0:01:d3:b8:c8:27:8c: 46:c1:b4:ed:ea:99:ba:ac:63:1f:df:cd:b1:04:fc:ce:ed:5e: 43:3f:89:f9:0b:9a:47:44:93:a2:90:ae:72:21:ee:23:90:a5: cb:9d:2f:4f:9f:db:5b:ff:59:89:56:1e:48:32:44:e1:20:2d: d4:46:e8:f7:fa:68:65:01:84:fd:dc:16:69:a0:fa:b6:6f:a9: 5a:38:6a:c5:f7:4e:fb:d8:01:cd:ef:ff:62:02:53:ac:b3:0f: 7b:91:08:b5 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUJAh6BbOZKmM4zU6CnU7EhB2W0FEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlGQjNCRjc0MEE3MkU0RjhGRjMwRjc1Rjc1RDU4OUQ1 RkZFNzRBMTAeFw0yNTEwMDcxNjEwNDNaFw0yNjEwMDYxNjE1NDNaMDMxMTAvBgNV BAMTKEZFNTRDMTc5Q0RCRjUwRjkwRTE3RDJFOEYxMTE5QkNCNUE1OEZDMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa0P6O7cVAupH+JF6bOluaZWWt ZQ7A66Ji40U5+zcFMbMhXMXa2eQkxxxShiWydxrsRPzIH1NnMczIQDhiWlorxulL aDMRVjV3h8IGofgcp3L35hpbmqDjajLfDJQIx4efD7RL24YkGBv50uV9gn1enCsr WCVvnVx7mkLplRIksPRRCdds//jyC3AjOEDldN4Pa+PzW0ronL/EcQf1v4gA03qm Ugx4gsbZXHzMU7NJXJZpR2n6CVEv0/eT5vwg3g8TX/fzYyG8eLIMjVAz9ciiUD9Y MVcRA8n7rI8jSFQHc72C2sjGYBb7gG73ncQU+zPfBrCV2H/s4VMIEhgls87LAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQU/lTBec2/UPkOF9Lo8RGby1pY/AUwHwYDVR0j BBgwFoAUyfs790CnLk+P8w91911YnV/+dKEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQUtjWHRWUTRmdEx6WnZjQk02N2I3TW1TYlM3aTRuVnBKQ0Q1VEY5d2ZB OXovMC9DOUZCM0JGNzQwQTcyRTRGOEZGMzBGNzVGNzVENTg5RDVGRkU3NEExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5RkIzQkY3NDBBNzJFNEY4 RkYzMEY3NUY3NUQ1ODlENUZGRTc0QTEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0FLY1h0VlE0ZnRMelp2Y0JNNjdiN01tU2JTN2k0blZwSkNENVRGOXdmQTl6LzAv MzIzODMwMzQzYTM4MzUzNzM4M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzczMjM1MzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEhXiAMA0GCSqGSIb3DQEBCwUA A4IBAQAoWJNmSo1gTnJIz6RjpDEwR/MSCADrhEFzeTWPCrbbUmyHNXS0mHcU99Nb XftJVe3aDUXBf1zY7vAVGE+csfO79NVutPK3rDKyOdKiomBrNSkeTAQZRAC3cXdU 01uNEA21Kk21sf2fomkfTQQwHy7cA0CgQGzNY/Tyu1yJuXBQ1tI2Um0ErUmyVd1o s6cOTssCdg+Mdo+C53dfpMAB07jIJ4xGwbTt6pm6rGMf382xBPzO7V5DP4n5C5pH RJOikK5yIe4jkKXLnS9Pn9tb/1mJVh5IMkThIC3URuj3+mhlAYT93BZpoPq2b6la OGrF90772AHN7/9iAlOssw97kQi1 -----END CERTIFICATE-----Generated at Mon Oct 20 16:16:48 2025 by rpki-client