$ rpki-client -vvf rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/323830343a6638633a383030303a3a2f33342d3334203d3e20323633353931.roa File: 323830343a6638633a383030303a3a2f33342d3334203d3e20323633353931.roa (raw, json) Hash identifier: 4JrPlUSc+MUacp1QS0IwaJa+BzG5h+1jiectutCMp0s= Subject key identifier: 2F:E3:12:4F:E5:2B:2E:70:00:23:8D:A8:BF:F3:3D:73:A1:E5:A9:4B Certificate issuer: /CN=7A941BA4F64F422035AA84E46FD14CBABD825B49 Certificate serial: 1E5C748439875F9B2E55DB1A920B5F19A58EA0FD Authority key identifier: 7A:94:1B:A4:F6:4F:42:20:35:AA:84:E4:6F:D1:4C:BA:BD:82:5B:49 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A941BA4F64F422035AA84E46FD14CBABD825B49.cer Subject info access: rsync://rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/323830343a6638633a383030303a3a2f33342d3334203d3e20323633353931.roa Signing time: Mon 22 Sep 2025 13:26:23 +0000 ROA not before: Mon 22 Sep 2025 13:21:23 +0000 ROA not after: Mon 21 Sep 2026 13:26:23 +0000 asID: 263591 IP address blocks: 2804:f8c:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/7A941BA4F64F422035AA84E46FD14CBABD825B49.crl rsync://rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/7A941BA4F64F422035AA84E46FD14CBABD825B49.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A941BA4F64F422035AA84E46FD14CBABD825B49.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 17:38:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:5c:74:84:39:87:5f:9b:2e:55:db:1a:92:0b:5f:19:a5:8e:a0:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A941BA4F64F422035AA84E46FD14CBABD825B49 Validity Not Before: Sep 22 13:21:23 2025 GMT Not After : Sep 21 13:26:23 2026 GMT Subject: CN=2FE3124FE52B2E7000238DA8BFF33D73A1E5A94B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a6:ba:82:b8:f8:e7:da:5f:85:75:ca:98:98: 3c:15:db:3f:35:f9:9e:85:bf:ea:0a:70:d4:3f:3d: b7:3d:e8:72:0d:9b:a4:23:b8:c7:2d:13:c1:80:25: 21:11:4e:fa:0d:d5:25:87:6d:20:2a:2a:7f:05:9e: 6e:ce:5f:28:18:7b:8c:4e:c7:b5:40:d3:ec:ab:6f: 4e:f4:e6:ed:42:7f:de:db:4b:15:d0:f7:cb:c0:b0: 3d:de:e2:4d:53:be:45:b9:78:90:47:e1:9e:76:f1: 5d:ab:c6:35:c6:23:a3:79:58:27:5f:9f:d3:63:67: a3:a9:97:70:0c:f4:e1:94:85:5d:c8:0d:2f:31:83: 1a:19:4b:23:a0:19:cf:e0:21:21:ad:07:58:51:e6: 83:f1:20:5a:7b:f2:31:01:8f:d6:8d:a1:d8:dd:70: b8:2a:e1:98:0d:5c:fa:1f:40:9d:6e:21:7e:05:e9: de:23:93:3a:8f:c4:c6:de:10:7d:0f:5d:63:8c:97: 60:47:85:99:06:3d:69:21:a1:3d:ca:91:2d:32:62: 52:a6:9b:fa:cf:ed:22:32:9a:c7:19:aa:01:44:85: 9c:c1:f9:1d:57:dd:6e:26:b9:ed:db:48:95:3c:f6: 39:bf:27:09:aa:fa:a1:80:9e:70:a6:a5:f5:dd:4e: e9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:E3:12:4F:E5:2B:2E:70:00:23:8D:A8:BF:F3:3D:73:A1:E5:A9:4B X509v3 Authority Key Identifier: keyid:7A:94:1B:A4:F6:4F:42:20:35:AA:84:E4:6F:D1:4C:BA:BD:82:5B:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/7A941BA4F64F422035AA84E46FD14CBABD825B49.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A941BA4F64F422035AA84E46FD14CBABD825B49.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/323830343a6638633a383030303a3a2f33342d3334203d3e20323633353931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:f8c:8000::/34 Signature Algorithm: sha256WithRSAEncryption 44:df:ff:4c:9d:f1:39:fc:d1:4c:5b:1b:d0:77:2d:91:c7:09: 14:67:26:8f:a2:ae:0e:59:88:9b:3a:83:53:f0:5a:bc:b0:c8: c8:66:ad:11:7c:d8:ca:ef:35:9a:17:55:b9:f2:92:c7:9e:48: d1:2e:73:af:6e:bc:2c:03:70:38:0e:ad:0d:f9:40:75:88:9e: cf:10:aa:68:60:cc:de:a5:34:93:d6:24:b7:b6:bf:26:ed:6c: ca:a2:b0:3a:0b:a3:ca:cd:93:78:0f:e7:02:7b:58:dc:1f:ed: 1f:3c:76:5f:2a:38:c5:e7:52:63:2b:8a:95:d0:70:37:3d:31: 1d:74:c8:82:be:09:49:74:d1:a9:d9:15:73:da:fa:d9:24:3f: 15:c9:5e:3d:89:92:31:65:9a:89:0f:28:98:83:6c:67:1b:2e: 51:eb:57:51:17:ed:9d:04:1f:38:f6:78:23:54:a0:16:d5:6f: 77:e7:1f:b9:3c:1f:83:aa:b6:68:eb:ad:d1:aa:5b:07:db:fb: ec:de:a3:6b:9e:75:7f:58:66:20:78:91:87:87:4d:bf:25:ad: af:3e:5b:84:b6:db:24:5f:0f:b2:bb:1f:7b:b9:4f:c5:1f:ce: 94:01:dc:4b:39:cf:43:0d:33:60:8a:1b:f0:f7:2b:86:92:ab: 85:67:cf:3a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHlx0hDmHX5suVdsakgtfGaWOoP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0E5NDFCQTRGNjRGNDIyMDM1QUE4NEU0NkZEMTRDQkFC RDgyNUI0OTAeFw0yNTA5MjIxMzIxMjNaFw0yNjA5MjExMzI2MjNaMDMxMTAvBgNV BAMTKDJGRTMxMjRGRTUyQjJFNzAwMDIzOERBOEJGRjMzRDczQTFFNUE5NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAprqCuPjn2l+FdcqYmDwV2z81 +Z6Fv+oKcNQ/Pbc96HINm6QjuMctE8GAJSERTvoN1SWHbSAqKn8Fnm7OXygYe4xO x7VA0+yrb0705u1Cf97bSxXQ98vAsD3e4k1TvkW5eJBH4Z528V2rxjXGI6N5WCdf n9NjZ6Opl3AM9OGUhV3IDS8xgxoZSyOgGc/gISGtB1hR5oPxIFp78jEBj9aNodjd cLgq4ZgNXPofQJ1uIX4F6d4jkzqPxMbeEH0PXWOMl2BHhZkGPWkhoT3KkS0yYlKm m/rP7SIymscZqgFEhZzB+R1X3W4mue3bSJU89jm/Jwmq+qGAnnCmpfXdTukrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUL+MST+UrLnAAI42ov/M9c6HlqUswHwYDVR0j BBgwFoAUepQbpPZPQiA1qoTkb9FMur2CW0kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFFXeGtQbUZvelFlejZ3MWRScUY2ckhBanhDSkJyaE4yVXpnY0JiV2hL c3UvMC83QTk0MUJBNEY2NEY0MjIwMzVBQTg0RTQ2RkQxNENCQUJEODI1QjQ5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdBOTQxQkE0RjY0RjQyMjAz NUFBODRFNDZGRDE0Q0JBQkQ4MjVCNDkuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0RRV3hrUG1Gb3pRZXo2dzFkUnFGNnJIQWp4Q0pCcmhOMlV6Z2NCYldoS3N1LzAv MzIzODMwMzQzYTY2Mzg2MzNhMzgzMDMwMzAzYTNhMmYzMzM0MmQzMzM0MjAzZDNl MjAzMjM2MzMzNTM5MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYoBA+MgDANBgkqhkiG9w0BAQsFAAOC AQEARN//TJ3xOfzRTFsb0HctkccJFGcmj6KuDlmImzqDU/BavLDIyGatEXzYyu81 mhdVufKSx55I0S5zr268LANwOA6tDflAdYiezxCqaGDM3qU0k9Ykt7a/Ju1syqKw Ogujys2TeA/nAntY3B/tHzx2Xyo4xedSYyuKldBwNz0xHXTIgr4JSXTRqdkVc9r6 2SQ/FclePYmSMWWaiQ8omINsZxsuUetXURftnQQfOPZ4I1SgFtVvd+cfuTwfg6q2 aOut0apbB9v77N6ja551f1hmIHiRh4dNvyWtrz5bhLbbJF8Psrsfe7lPxR/OlAHc SznPQw0zYIob8PcrhpKrhWfPOg== -----END CERTIFICATE-----Generated at Mon Oct 20 19:21:15 2025 by rpki-client