$ rpki-client -vvf rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/323830343a353633303a343030303a3a2f33342d3334203d3e20323637393832.roa File: 323830343a353633303a343030303a3a2f33342d3334203d3e20323637393832.roa (raw, json) Hash identifier: f9oD6suBN2i0icLEQlb7kKJnqSku0tyk+HCPKJWJ+js= Subject key identifier: 85:E9:28:CF:B8:27:70:5C:7D:B6:62:70:73:AA:54:BD:02:DE:B4:08 Certificate issuer: /CN=296992941BF10D571CBDC8A16F88FF51FAD9B52C Certificate serial: 12B2CB782F2AB71EB5130C4E1A96D344EDD654B8 Authority key identifier: 29:69:92:94:1B:F1:0D:57:1C:BD:C8:A1:6F:88:FF:51:FA:D9:B5:2C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296992941BF10D571CBDC8A16F88FF51FAD9B52C.cer Subject info access: rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/323830343a353633303a343030303a3a2f33342d3334203d3e20323637393832.roa Signing time: Tue 30 Sep 2025 19:05:39 +0000 ROA not before: Tue 30 Sep 2025 19:00:39 +0000 ROA not after: Tue 29 Sep 2026 19:05:39 +0000 asID: 267982 IP address blocks: 2804:5630:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/296992941BF10D571CBDC8A16F88FF51FAD9B52C.crl rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/296992941BF10D571CBDC8A16F88FF51FAD9B52C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296992941BF10D571CBDC8A16F88FF51FAD9B52C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 15:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:b2:cb:78:2f:2a:b7:1e:b5:13:0c:4e:1a:96:d3:44:ed:d6:54:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=296992941BF10D571CBDC8A16F88FF51FAD9B52C Validity Not Before: Sep 30 19:00:39 2025 GMT Not After : Sep 29 19:05:39 2026 GMT Subject: CN=85E928CFB827705C7DB6627073AA54BD02DEB408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:14:09:63:14:6a:2d:a7:40:c3:49:bb:f6:30: 7f:51:cb:82:b6:78:03:8b:42:a1:fa:e0:5c:54:99: db:3c:a5:de:ee:33:35:60:81:b6:54:ff:7d:49:a1: 4c:a9:18:b1:4a:dd:aa:00:f7:61:b0:7d:13:bf:4b: f7:67:39:c3:59:78:0e:a0:00:d4:f7:08:2b:d8:87: aa:df:1d:a9:2b:fb:2e:31:b3:57:d2:10:7c:b4:13: 84:79:3c:4a:fc:a9:1c:9e:fc:e2:8d:cf:18:46:f1: 0e:fd:75:a7:2a:bd:b1:97:32:7f:e3:1a:11:20:fa: 92:1b:a1:7a:39:a4:eb:b9:73:d8:df:32:7c:92:70: 33:52:94:61:74:ac:bc:82:f2:a8:3e:09:58:f3:c8: 2d:18:78:fa:cd:ca:55:58:55:64:7e:23:39:23:42: 3c:8c:65:24:1c:6f:4b:bb:f2:78:50:ad:fb:79:bf: 25:f8:da:d7:94:ce:c8:34:6d:24:63:8a:13:86:c6: 19:33:40:3f:b7:f1:de:30:8d:bf:f4:05:1a:cf:0c: 2c:a2:a0:63:1a:f0:16:30:a4:6d:bf:fc:8a:b0:8c: 22:54:da:1c:4d:6f:bf:a2:ad:bf:dd:e3:71:6b:79: 64:fd:e1:a1:3f:9f:3e:96:85:d1:a1:f7:79:db:65: 0f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E9:28:CF:B8:27:70:5C:7D:B6:62:70:73:AA:54:BD:02:DE:B4:08 X509v3 Authority Key Identifier: keyid:29:69:92:94:1B:F1:0D:57:1C:BD:C8:A1:6F:88:FF:51:FA:D9:B5:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/296992941BF10D571CBDC8A16F88FF51FAD9B52C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296992941BF10D571CBDC8A16F88FF51FAD9B52C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/323830343a353633303a343030303a3a2f33342d3334203d3e20323637393832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:5630:4000::/34 Signature Algorithm: sha256WithRSAEncryption 84:f8:e2:74:99:a4:a6:b0:61:cb:4e:5f:c3:a8:d9:46:f2:fc: b6:20:7f:d9:01:3c:f3:4a:d0:e0:05:c4:ab:04:f8:90:2b:28: a8:ba:b0:41:27:4b:b9:cb:50:c9:7f:fa:80:7f:3c:66:83:d2: 47:32:fb:c8:ca:2a:57:4f:45:f3:d4:b0:c0:27:d2:2a:32:3f: a6:9c:4e:bb:7c:76:4b:00:bd:b1:a7:b6:72:42:09:0c:1e:ef: d9:bd:d0:b5:99:41:9d:b2:e0:0a:6c:0d:54:0c:25:d5:8e:38: 01:77:ef:10:e5:01:53:26:cc:8e:bf:07:dd:69:6e:72:93:89: 96:a7:20:58:14:0e:b6:fe:85:12:1b:e4:4d:84:f7:60:ab:ad: 2c:0f:ee:5d:fe:6e:c5:a3:a3:04:b7:9d:8f:9c:e5:f6:27:f5: e2:b5:1b:b7:dd:dd:2d:83:32:16:cd:de:24:c8:9c:90:bb:27: de:ba:60:f1:71:3a:06:f4:a3:39:39:9a:46:a8:7a:0b:eb:26: 8a:c7:ab:88:27:05:28:f3:40:e0:a4:ae:9f:98:ed:da:d6:5d: cf:f8:1e:06:c7:ba:62:d0:d3:fd:e9:f1:57:d0:1e:b3:57:08: 1c:55:49:3e:c1:42:41:cc:83:49:35:4f:c6:3a:6a:ee:e6:c2: 80:af:f1:14 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUErLLeC8qtx61EwxOGpbTRO3WVLgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk2OTkyOTQxQkYxMEQ1NzFDQkRDOEExNkY4OEZGNTFG QUQ5QjUyQzAeFw0yNTA5MzAxOTAwMzlaFw0yNjA5MjkxOTA1MzlaMDMxMTAvBgNV BAMTKDg1RTkyOENGQjgyNzcwNUM3REI2NjI3MDczQUE1NEJEMDJERUI0MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8FAljFGotp0DDSbv2MH9Ry4K2 eAOLQqH64FxUmds8pd7uMzVggbZU/31JoUypGLFK3aoA92GwfRO/S/dnOcNZeA6g ANT3CCvYh6rfHakr+y4xs1fSEHy0E4R5PEr8qRye/OKNzxhG8Q79dacqvbGXMn/j GhEg+pIboXo5pOu5c9jfMnyScDNSlGF0rLyC8qg+CVjzyC0YePrNylVYVWR+Izkj QjyMZSQcb0u78nhQrft5vyX42teUzsg0bSRjihOGxhkzQD+38d4wjb/0BRrPDCyi oGMa8BYwpG2//IqwjCJU2hxNb7+irb/d43FreWT94aE/nz6WhdGh93nbZQ+/AgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUhekoz7gncFx9tmJwc6pUvQLetAgwHwYDVR0j BBgwFoAUKWmSlBvxDVccvcihb4j/UfrZtSwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ2RwRm9lYThrUVlaakpoUnJ2V2syODU3WDhMOFRjWnJmWm9iSGVZYWZa SzMvMC8yOTY5OTI5NDFCRjEwRDU3MUNCREM4QTE2Rjg4RkY1MUZBRDlCNTJDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5Njk5Mjk0MUJGMTBENTcx Q0JEQzhBMTZGODhGRjUxRkFEOUI1MkMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NkcEZvZWE4a1FZWmpKaFJydldrMjg1N1g4TDhUY1pyZlpvYkhlWWFmWkszLzAv MzIzODMwMzQzYTM1MzYzMzMwM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzYzNzM5MzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEVjBAMA0GCSqGSIb3DQEBCwUA A4IBAQCE+OJ0maSmsGHLTl/DqNlG8vy2IH/ZATzzStDgBcSrBPiQKyiourBBJ0u5 y1DJf/qAfzxmg9JHMvvIyipXT0Xz1LDAJ9IqMj+mnE67fHZLAL2xp7ZyQgkMHu/Z vdC1mUGdsuAKbA1UDCXVjjgBd+8Q5QFTJsyOvwfdaW5yk4mWpyBYFA62/oUSG+RN hPdgq60sD+5d/m7Fo6MEt52PnOX2J/XitRu33d0tgzIWzd4kyJyQuyfeumDxcToG 9KM5OZpGqHoL6yaKx6uIJwUo80DgpK6fmO3a1l3P+B4Gx7pi0NP96fFX0B6zVwgc VUk+wUJBzINJNU/GOmru5sKAr/EU -----END CERTIFICATE-----Generated at Tue Oct 21 01:12:51 2025 by rpki-client