$ rpki-client -vvf rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/323830343a6638633a633030303a3a2f33342d3334203d3e20323633353931.roa File: 323830343a6638633a633030303a3a2f33342d3334203d3e20323633353931.roa (raw, json) Hash identifier: NI6Hc4dSY29o9JeK+qLzrrslzt7QbZlizIaSzIdqbCI= Subject key identifier: B2:D1:30:9B:46:19:60:48:8E:6A:85:9F:65:E9:9B:41:F0:A2:1F:E8 Certificate issuer: /CN=7A941BA4F64F422035AA84E46FD14CBABD825B49 Certificate serial: 35DE781C41827ABA348E0CD5CF5E6FF6FFE6FC87 Authority key identifier: 7A:94:1B:A4:F6:4F:42:20:35:AA:84:E4:6F:D1:4C:BA:BD:82:5B:49 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A941BA4F64F422035AA84E46FD14CBABD825B49.cer Subject info access: rsync://rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/323830343a6638633a633030303a3a2f33342d3334203d3e20323633353931.roa Signing time: Mon 22 Sep 2025 13:26:21 +0000 ROA not before: Mon 22 Sep 2025 13:21:21 +0000 ROA not after: Mon 21 Sep 2026 13:26:21 +0000 asID: 263591 IP address blocks: 2804:f8c:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/7A941BA4F64F422035AA84E46FD14CBABD825B49.crl rsync://rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/7A941BA4F64F422035AA84E46FD14CBABD825B49.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A941BA4F64F422035AA84E46FD14CBABD825B49.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 17:38:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:de:78:1c:41:82:7a:ba:34:8e:0c:d5:cf:5e:6f:f6:ff:e6:fc:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A941BA4F64F422035AA84E46FD14CBABD825B49 Validity Not Before: Sep 22 13:21:21 2025 GMT Not After : Sep 21 13:26:21 2026 GMT Subject: CN=B2D1309B461960488E6A859F65E99B41F0A21FE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:71:98:d3:49:c2:7f:28:56:3d:48:94:f5:34: a2:af:36:c1:9c:6a:41:3c:c7:f7:b5:4e:0e:bb:2b: ad:fb:9f:98:3b:05:7f:1a:ef:ef:8a:cd:37:4d:70: 33:b1:a0:65:e1:03:30:6a:66:b4:68:a1:b9:11:c7: 59:e4:ec:4e:b6:4f:22:14:e3:eb:0e:a2:6d:3a:82: 38:94:2f:9c:e6:5b:f8:19:03:d6:a7:50:e7:59:67: 3d:db:b0:ff:1f:52:82:29:36:d9:44:53:1d:12:96: 32:77:5d:d9:43:b9:05:4b:36:48:91:0c:eb:96:a3: 9f:2d:8e:3a:59:54:bd:3c:18:91:f5:75:48:0a:38: 75:81:c9:3c:6a:14:68:35:aa:4c:c2:66:fa:8d:46: ab:50:7f:9c:31:ae:9d:47:fb:7f:e3:64:83:b2:ef: 7e:9f:9b:63:32:5f:13:d8:0f:fe:68:98:36:fa:fd: ca:d5:43:15:10:55:38:15:4e:0a:49:3d:f5:24:42: b3:d6:75:f3:05:95:ad:3f:74:0a:fc:01:ac:88:56: 02:58:b7:46:5f:91:ae:00:ca:18:d0:6a:03:4b:5d: d3:fa:51:2b:1a:84:4a:f4:90:d4:8d:6c:ff:41:5c: 94:4f:3b:50:de:ae:02:42:a9:ec:fd:a4:80:7f:ad: 4d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:D1:30:9B:46:19:60:48:8E:6A:85:9F:65:E9:9B:41:F0:A2:1F:E8 X509v3 Authority Key Identifier: keyid:7A:94:1B:A4:F6:4F:42:20:35:AA:84:E4:6F:D1:4C:BA:BD:82:5B:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/7A941BA4F64F422035AA84E46FD14CBABD825B49.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A941BA4F64F422035AA84E46FD14CBABD825B49.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/323830343a6638633a633030303a3a2f33342d3334203d3e20323633353931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:f8c:c000::/34 Signature Algorithm: sha256WithRSAEncryption 26:14:0a:37:22:72:9b:7c:13:85:1e:b9:f9:62:7e:3f:5c:11: d4:a7:f9:02:58:9f:ce:3a:2e:00:44:d1:28:b0:af:84:22:5a: f8:8f:f1:39:5a:17:e0:8d:db:fa:68:43:4b:02:c8:44:78:4b: 5c:52:75:0e:20:bf:e5:49:96:06:e8:66:f0:bf:b5:00:4b:5d: 38:3b:e9:d0:63:c0:03:d8:6c:52:0b:86:85:5e:e0:c5:90:ef: 8e:c7:80:c7:13:26:69:18:ae:fc:0c:4b:88:35:6e:e0:f5:36: 70:0c:1b:7b:89:24:c2:37:cc:97:32:3d:36:b9:14:11:12:ed: 8f:e3:99:a0:c0:e9:cc:54:60:93:56:bf:53:b0:24:f0:4b:51: d7:13:5f:f7:07:c1:76:22:92:d3:d2:62:71:8c:1c:fe:1d:fa: 24:7b:ce:41:20:dc:21:2b:5d:f1:ee:41:de:04:4b:ca:bf:2a: c9:dc:c4:05:06:4b:9d:b8:d0:40:87:e8:be:aa:f0:ea:35:66: ab:43:99:7c:b8:80:a4:ee:c4:20:07:73:c4:58:23:00:ea:57: 41:4b:0b:a9:90:e6:63:df:63:9a:a9:8c:dc:bd:3b:bc:6b:ba: 2f:e4:f1:55:d3:72:57:3d:3c:c6:3d:15:a0:78:ba:59:57:56: e5:c2:2d:97 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNd54HEGCero0jgzVz15v9v/m/IcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0E5NDFCQTRGNjRGNDIyMDM1QUE4NEU0NkZEMTRDQkFC RDgyNUI0OTAeFw0yNTA5MjIxMzIxMjFaFw0yNjA5MjExMzI2MjFaMDMxMTAvBgNV BAMTKEIyRDEzMDlCNDYxOTYwNDg4RTZBODU5RjY1RTk5QjQxRjBBMjFGRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCcZjTScJ/KFY9SJT1NKKvNsGc akE8x/e1Tg67K637n5g7BX8a7++KzTdNcDOxoGXhAzBqZrRoobkRx1nk7E62TyIU 4+sOom06gjiUL5zmW/gZA9anUOdZZz3bsP8fUoIpNtlEUx0SljJ3XdlDuQVLNkiR DOuWo58tjjpZVL08GJH1dUgKOHWByTxqFGg1qkzCZvqNRqtQf5wxrp1H+3/jZIOy 736fm2MyXxPYD/5omDb6/crVQxUQVTgVTgpJPfUkQrPWdfMFla0/dAr8AayIVgJY t0Zfka4AyhjQagNLXdP6USsahEr0kNSNbP9BXJRPO1DergJCqez9pIB/rU3BAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUstEwm0YZYEiOaoWfZembQfCiH+gwHwYDVR0j BBgwFoAUepQbpPZPQiA1qoTkb9FMur2CW0kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFFXeGtQbUZvelFlejZ3MWRScUY2ckhBanhDSkJyaE4yVXpnY0JiV2hL c3UvMC83QTk0MUJBNEY2NEY0MjIwMzVBQTg0RTQ2RkQxNENCQUJEODI1QjQ5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdBOTQxQkE0RjY0RjQyMjAz NUFBODRFNDZGRDE0Q0JBQkQ4MjVCNDkuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0RRV3hrUG1Gb3pRZXo2dzFkUnFGNnJIQWp4Q0pCcmhOMlV6Z2NCYldoS3N1LzAv MzIzODMwMzQzYTY2Mzg2MzNhNjMzMDMwMzAzYTNhMmYzMzM0MmQzMzM0MjAzZDNl MjAzMjM2MzMzNTM5MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYoBA+MwDANBgkqhkiG9w0BAQsFAAOC AQEAJhQKNyJym3wThR65+WJ+P1wR1Kf5AlifzjouAETRKLCvhCJa+I/xOVoX4I3b +mhDSwLIRHhLXFJ1DiC/5UmWBuhm8L+1AEtdODvp0GPAA9hsUguGhV7gxZDvjseA xxMmaRiu/AxLiDVu4PU2cAwbe4kkwjfMlzI9NrkUERLtj+OZoMDpzFRgk1a/U7Ak 8EtR1xNf9wfBdiKS09JicYwc/h36JHvOQSDcIStd8e5B3gRLyr8qydzEBQZLnbjQ QIfovqrw6jVmq0OZfLiApO7EIAdzxFgjAOpXQUsLqZDmY99jmqmM3L07vGu6L+Tx VdNyVz08xj0VoHi6WVdW5cItlw== -----END CERTIFICATE-----Generated at Mon Oct 20 19:21:16 2025 by rpki-client