$ rpki-client -vvf rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/323830343a333531383a356630303a3a2f34302d3430203d3e20323635353030.roa File: 323830343a333531383a356630303a3a2f34302d3430203d3e20323635353030.roa (raw, json) Hash identifier: +S6BOQw/Url72AiHHEw8a8DUnqX7sRixepOus+ZgkAI= Subject key identifier: 3D:2E:25:78:FD:FD:B4:0D:8D:3D:7A:76:A6:3F:7D:B3:FF:4D:37:A0 Certificate issuer: /CN=D40B256042895F431460325AC5DB0F0088D3437F Certificate serial: 688C772AF3A8C512FD572AB9D86F42440636A176 Authority key identifier: D4:0B:25:60:42:89:5F:43:14:60:32:5A:C5:DB:0F:00:88:D3:43:7F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D40B256042895F431460325AC5DB0F0088D3437F.cer Subject info access: rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/323830343a333531383a356630303a3a2f34302d3430203d3e20323635353030.roa Signing time: Tue 26 Aug 2025 01:04:18 +0000 ROA not before: Tue 26 Aug 2025 00:59:18 +0000 ROA not after: Tue 25 Aug 2026 01:04:18 +0000 asID: 265500 IP address blocks: 2804:3518:5f00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/D40B256042895F431460325AC5DB0F0088D3437F.crl rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/D40B256042895F431460325AC5DB0F0088D3437F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D40B256042895F431460325AC5DB0F0088D3437F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 09:47:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:8c:77:2a:f3:a8:c5:12:fd:57:2a:b9:d8:6f:42:44:06:36:a1:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D40B256042895F431460325AC5DB0F0088D3437F Validity Not Before: Aug 26 00:59:18 2025 GMT Not After : Aug 25 01:04:18 2026 GMT Subject: CN=3D2E2578FDFDB40D8D3D7A76A63F7DB3FF4D37A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ff:d0:c7:0a:5b:f8:90:95:4d:15:2d:e5:64: 45:fb:5e:0d:12:1b:a2:30:ec:b7:9e:af:ed:57:41: 05:b1:8b:a9:52:6e:43:b5:fd:a8:9d:e6:d8:08:bb: be:ba:2b:5d:9c:32:1d:4c:53:e6:87:d6:db:7e:ca: 1e:bd:23:bb:60:ac:40:7b:51:7d:12:ef:f1:52:36: 4a:3f:6b:8e:a6:5d:48:48:de:14:27:4b:58:79:ca: 5b:9e:04:b5:14:c9:27:cc:f7:de:04:cc:51:f7:60: 7f:38:b0:f0:7c:73:44:79:f1:12:c1:b8:82:6f:81: 2e:67:be:62:9b:c7:90:4a:55:10:3b:e4:07:b1:1c: 2a:26:74:93:3d:d7:60:60:c5:83:f6:eb:9b:0d:d2: 45:37:5c:c9:66:94:16:2d:cc:2c:b6:d6:bf:70:0c: 2f:10:0f:5f:6b:ef:7e:12:49:bf:e2:3f:aa:bc:12: 0d:05:0e:f6:23:15:a3:b6:be:63:db:fb:75:f0:85: 4a:d4:24:03:16:3b:72:15:6f:53:6d:d1:b4:02:92: eb:69:ba:55:f2:31:2d:41:ba:ae:11:65:c6:12:d0: cb:5a:1b:0b:29:5e:9b:1a:1d:88:f0:df:5c:6d:f3: d6:be:2f:8b:69:45:e6:5e:a8:98:5c:fb:6b:8d:b1: 50:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:2E:25:78:FD:FD:B4:0D:8D:3D:7A:76:A6:3F:7D:B3:FF:4D:37:A0 X509v3 Authority Key Identifier: keyid:D4:0B:25:60:42:89:5F:43:14:60:32:5A:C5:DB:0F:00:88:D3:43:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/D40B256042895F431460325AC5DB0F0088D3437F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D40B256042895F431460325AC5DB0F0088D3437F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/323830343a333531383a356630303a3a2f34302d3430203d3e20323635353030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:3518:5f00::/40 Signature Algorithm: sha256WithRSAEncryption 0f:de:a3:f2:f2:84:37:32:0e:68:14:d5:9b:1b:48:52:e0:16: 33:f1:a7:c3:7c:8b:d4:f2:a1:af:11:e0:a0:86:b5:d4:13:b7: 75:70:e3:a8:72:b7:5d:10:cd:28:e5:6e:43:04:e0:34:52:95: c3:c7:0b:33:01:48:1f:46:75:52:05:80:8e:74:7d:fb:a4:33: eb:eb:3c:12:d3:71:0d:a5:fb:c5:ad:70:47:e5:7d:8f:54:7d: a5:e7:91:19:24:0b:a5:90:fa:ff:c4:0e:0d:65:b2:3b:66:14: ce:95:cb:13:c9:f3:61:5f:0b:50:f2:4c:32:44:b1:70:e4:a8: 99:2f:e5:44:c3:3b:16:4a:c5:e6:5b:87:8d:78:93:40:6a:37: c8:6d:c9:0c:3e:12:bf:33:36:62:a9:20:ac:d2:a2:53:3a:8d: 63:af:85:37:d2:5b:37:e1:60:38:ae:a8:f4:85:6e:9a:6d:fa: 4f:c5:b1:91:a9:75:b8:59:c7:68:60:c5:fd:bc:cf:d3:a3:4d: 38:40:d8:a6:7c:92:32:7d:fd:50:de:e4:81:ec:79:3b:d0:ac: 4c:ce:42:a0:af:98:ab:60:e6:12:54:91:59:48:ad:18:a8:39: 2a:85:36:6b:48:23:44:f4:ac:2c:4d:41:48:26:d7:06:d8:18: c4:1f:49:69 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUaIx3KvOoxRL9Vyq52G9CRAY2oXYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQwQjI1NjA0Mjg5NUY0MzE0NjAzMjVBQzVEQjBGMDA4 OEQzNDM3RjAeFw0yNTA4MjYwMDU5MThaFw0yNjA4MjUwMTA0MThaMDMxMTAvBgNV BAMTKDNEMkUyNTc4RkRGREI0MEQ4RDNEN0E3NkE2M0Y3REIzRkY0RDM3QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9/9DHClv4kJVNFS3lZEX7Xg0S G6Iw7Leer+1XQQWxi6lSbkO1/aid5tgIu766K12cMh1MU+aH1tt+yh69I7tgrEB7 UX0S7/FSNko/a46mXUhI3hQnS1h5ylueBLUUySfM994EzFH3YH84sPB8c0R58RLB uIJvgS5nvmKbx5BKVRA75AexHComdJM912BgxYP265sN0kU3XMlmlBYtzCy21r9w DC8QD19r734SSb/iP6q8Eg0FDvYjFaO2vmPb+3XwhUrUJAMWO3IVb1Nt0bQCkutp ulXyMS1Buq4RZcYS0MtaGwspXpsaHYjw31xt89a+L4tpReZeqJhc+2uNsVDXAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUPS4leP39tA2NPXp2pj99s/9NN6AwHwYDVR0j BBgwFoAU1AslYEKJX0MUYDJaxdsPAIjTQ38wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1FBZGs3ZnplMWM3amgzZ29CNlZvcENTOHRqUVZOMUpmTlhCWmFoWFZj eGovMC9ENDBCMjU2MDQyODk1RjQzMTQ2MDMyNUFDNURCMEYwMDg4RDM0MzdGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0MEIyNTYwNDI4OTVGNDMx NDYwMzI1QUM1REIwRjAwODhEMzQzN0YuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NRQWRrN2Z6ZTFjN2poM2dvQjZWb3BDUzh0alFWTjFKZk5YQlphaFhWY3hqLzAv MzIzODMwMzQzYTMzMzUzMTM4M2EzNTY2MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk M2UyMDMyMzYzNTM1MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgENRhfMA0GCSqGSIb3DQEBCwUA A4IBAQAP3qPy8oQ3Mg5oFNWbG0hS4BYz8afDfIvU8qGvEeCghrXUE7d1cOOocrdd EM0o5W5DBOA0UpXDxwszAUgfRnVSBYCOdH37pDPr6zwS03ENpfvFrXBH5X2PVH2l 55EZJAulkPr/xA4NZbI7ZhTOlcsTyfNhXwtQ8kwyRLFw5KiZL+VEwzsWSsXmW4eN eJNAajfIbckMPhK/MzZiqSCs0qJTOo1jr4U30ls34WA4rqj0hW6abfpPxbGRqXW4 WcdoYMX9vM/To004QNimfJIyff1Q3uSB7Hk70KxMzkKgr5irYOYSVJFZSK0YqDkq hTZrSCNE9KwsTUFIJtcG2BjEH0lp -----END CERTIFICATE-----Generated at Mon Oct 20 11:37:23 2025 by rpki-client