$ rpki-client -vvf rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/323830343a383433303a633030303a3a2f33342d3334203d3e20323732323435.roa File: 323830343a383433303a633030303a3a2f33342d3334203d3e20323732323435.roa (raw, json) Hash identifier: UCPwSbHoE5MB0hubg7c/rUiLjxzjnLvOewgUFA6bHDU= Subject key identifier: 85:6E:E9:43:1C:A0:DC:90:A1:D7:9C:8F:3B:E0:66:2D:E2:DD:EC:B5 Certificate issuer: /CN=AA704690C0BE55D2FE25A9C58E4C5266F585493B Certificate serial: 402802C876C0E5ED15ED32B119D39EB73C02811D Authority key identifier: AA:70:46:90:C0:BE:55:D2:FE:25:A9:C5:8E:4C:52:66:F5:85:49:3B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA704690C0BE55D2FE25A9C58E4C5266F585493B.cer Subject info access: rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/323830343a383433303a633030303a3a2f33342d3334203d3e20323732323435.roa Signing time: Sat 23 Aug 2025 16:25:12 +0000 ROA not before: Sat 23 Aug 2025 16:20:12 +0000 ROA not after: Sat 22 Aug 2026 16:25:12 +0000 asID: 272245 IP address blocks: 2804:8430:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/AA704690C0BE55D2FE25A9C58E4C5266F585493B.crl rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/AA704690C0BE55D2FE25A9C58E4C5266F585493B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA704690C0BE55D2FE25A9C58E4C5266F585493B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 10:07:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:28:02:c8:76:c0:e5:ed:15:ed:32:b1:19:d3:9e:b7:3c:02:81:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA704690C0BE55D2FE25A9C58E4C5266F585493B Validity Not Before: Aug 23 16:20:12 2025 GMT Not After : Aug 22 16:25:12 2026 GMT Subject: CN=856EE9431CA0DC90A1D79C8F3BE0662DE2DDECB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7c:78:a4:80:e8:4f:70:fb:51:2e:21:70:4f: 5e:19:f1:af:d2:bc:f7:09:eb:29:0e:90:23:27:03: 7e:68:ea:35:1a:b8:10:68:ec:39:1e:dc:e6:b0:e1: c2:89:f2:3e:2b:51:bc:bd:42:f9:00:02:3a:df:00: c3:91:05:de:6a:88:be:33:b1:80:70:a3:14:94:67: 2a:e8:9d:df:bb:69:df:28:11:c3:65:f9:de:ef:9f: ac:40:ca:e7:34:79:19:f7:7d:f5:8a:ea:80:df:93: 71:0e:2f:52:23:4a:eb:65:45:cc:01:ea:ca:2b:4a: 10:22:e1:ce:83:34:dc:f3:1c:93:ec:42:6f:1c:35: 5d:7a:d5:7d:7b:80:99:27:ab:4a:34:3e:bd:bb:5f: 10:72:23:d1:13:6a:5c:c2:67:bf:64:4f:21:10:d2: 87:98:c4:3f:d1:63:fd:1f:61:e2:02:7d:e1:ac:24: ba:61:c0:95:52:3e:2e:bf:e5:f3:08:db:27:57:b4: d3:0a:07:bf:e5:45:8e:0a:5c:09:e0:f6:d1:4a:25: 83:c0:e2:72:d1:09:e1:95:15:ff:70:b4:5b:39:8b: 9e:f3:d3:67:24:7c:80:63:c9:45:a8:69:2b:3b:43: 22:8b:2f:5a:2d:d4:ff:26:23:ce:0f:b1:2d:5f:12: d0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:6E:E9:43:1C:A0:DC:90:A1:D7:9C:8F:3B:E0:66:2D:E2:DD:EC:B5 X509v3 Authority Key Identifier: keyid:AA:70:46:90:C0:BE:55:D2:FE:25:A9:C5:8E:4C:52:66:F5:85:49:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/AA704690C0BE55D2FE25A9C58E4C5266F585493B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA704690C0BE55D2FE25A9C58E4C5266F585493B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/323830343a383433303a633030303a3a2f33342d3334203d3e20323732323435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8430:c000::/34 Signature Algorithm: sha256WithRSAEncryption 5e:9f:be:ac:9f:0c:ca:5d:cb:24:3f:63:33:af:d4:83:15:0d: 34:f0:42:e2:ab:fc:6f:75:cb:83:40:19:ff:7e:3d:fd:31:de: 7b:43:8d:ca:db:89:9a:c4:37:4d:4d:66:c1:ca:e8:2d:f8:2b: d2:31:c9:a5:79:d6:15:1f:59:b1:bc:85:d6:0a:19:2f:e4:52: 5d:fe:9a:78:d2:82:c2:00:68:94:f6:04:94:b5:1d:8f:32:46: f4:c8:e4:00:39:df:0c:ea:89:5f:be:a5:e2:f8:59:e1:79:a4: b7:af:17:85:1f:67:fa:75:78:77:80:4b:5e:68:29:51:76:24: f6:cf:fd:a2:e8:8c:20:ec:23:95:93:21:75:08:3f:0b:b2:d3: e1:42:79:75:99:c7:8d:f2:79:b1:bc:2e:d9:b0:9f:4c:54:79: 00:a4:07:4e:69:41:ae:73:2f:3d:89:be:dc:01:6d:c9:3e:5e: 50:ba:0d:57:4c:20:d9:3e:96:79:e5:d0:76:76:1b:ef:dc:37: a6:f7:f9:07:e7:92:d3:fe:4f:5e:ec:19:39:a9:db:32:b2:60: eb:94:85:4a:f1:93:cd:13:36:28:f2:a3:d8:1c:32:5d:a9:ed: 23:27:63:54:b7:a8:a2:c7:be:ed:3e:dd:56:b0:ad:76:8f:21: 20:9f:a0:3e -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUQCgCyHbA5e0V7TKxGdOetzwCgR0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE3MDQ2OTBDMEJFNTVEMkZFMjVBOUM1OEU0QzUyNjZG NTg1NDkzQjAeFw0yNTA4MjMxNjIwMTJaFw0yNjA4MjIxNjI1MTJaMDMxMTAvBgNV BAMTKDg1NkVFOTQzMUNBMERDOTBBMUQ3OUM4RjNCRTA2NjJERTJEREVDQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDfHikgOhPcPtRLiFwT14Z8a/S vPcJ6ykOkCMnA35o6jUauBBo7Dke3Oaw4cKJ8j4rUby9QvkAAjrfAMORBd5qiL4z sYBwoxSUZyrond+7ad8oEcNl+d7vn6xAyuc0eRn3ffWK6oDfk3EOL1IjSutlRcwB 6sorShAi4c6DNNzzHJPsQm8cNV161X17gJknq0o0Pr27XxByI9ETalzCZ79kTyEQ 0oeYxD/RY/0fYeICfeGsJLphwJVSPi6/5fMI2ydXtNMKB7/lRY4KXAng9tFKJYPA 4nLRCeGVFf9wtFs5i57z02ckfIBjyUWoaSs7QyKLL1ot1P8mI84PsS1fEtDJAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUhW7pQxyg3JCh15yPO+BmLeLd7LUwHwYDVR0j BBgwFoAUqnBGkMC+VdL+JanFjkxSZvWFSTswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmQ4Z3dBYW4zTGZLVWhMQk5wYUF4RGtHRkdlV3J4VWRMY3RuSndlVkhQ ZnAvMC9BQTcwNDY5MEMwQkU1NUQyRkUyNUE5QzU4RTRDNTI2NkY1ODU0OTNCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBNzA0NjkwQzBCRTU1RDJG RTI1QTlDNThFNEM1MjY2RjU4NTQ5M0IuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0JkOGd3QWFuM0xmS1VoTEJOcGFBeERrR0ZHZVdyeFVkTGN0bkp3ZVZIUGZwLzAv MzIzODMwMzQzYTM4MzQzMzMwM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzczMjMyMzQzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEhDDAMA0GCSqGSIb3DQEBCwUA A4IBAQBen76snwzKXcskP2Mzr9SDFQ008ELiq/xvdcuDQBn/fj39Md57Q43K24ma xDdNTWbByugt+CvSMcmledYVH1mxvIXWChkv5FJd/pp40oLCAGiU9gSUtR2PMkb0 yOQAOd8M6olfvqXi+FnheaS3rxeFH2f6dXh3gEteaClRdiT2z/2i6Iwg7COVkyF1 CD8LstPhQnl1mceN8nmxvC7ZsJ9MVHkApAdOaUGucy89ib7cAW3JPl5Qug1XTCDZ PpZ55dB2dhvv3Dem9/kH55LT/k9e7Bk5qdsysmDrlIVK8ZPNEzYo8qPYHDJdqe0j J2NUt6iix77tPt1WsK12jyEgn6A+ -----END CERTIFICATE-----Generated at Tue Oct 21 01:38:41 2025 by rpki-client