$ rpki-client -vvf rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/323830343a3134303a3a2f33322d313238203d3e203533313338.roa File: 323830343a3134303a3a2f33322d313238203d3e203533313338.roa (raw, json) Hash identifier: LqeZnwKDXDTNwr+ak5RShDJ/CXx7aCz5TV0Xv6trEoI= Subject key identifier: 31:F8:20:05:2D:83:BF:F4:5B:B5:BE:98:F8:13:C7:B3:DC:4A:B5:21 Certificate issuer: /CN=3917E4BBB4D1FD99400ED98C98A323ADAAB38977 Certificate serial: 25A6087D70200E6087BAC4E10E7E5D144E8B8D66 Authority key identifier: 39:17:E4:BB:B4:D1:FD:99:40:0E:D9:8C:98:A3:23:AD:AA:B3:89:77 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer Subject info access: rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/323830343a3134303a3a2f33322d313238203d3e203533313338.roa Signing time: Fri 19 Sep 2025 13:10:10 +0000 ROA not before: Fri 19 Sep 2025 13:05:10 +0000 ROA not after: Fri 18 Sep 2026 13:10:10 +0000 asID: 53138 IP address blocks: 2804:140::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.crl rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 10:16:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:a6:08:7d:70:20:0e:60:87:ba:c4:e1:0e:7e:5d:14:4e:8b:8d:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3917E4BBB4D1FD99400ED98C98A323ADAAB38977 Validity Not Before: Sep 19 13:05:10 2025 GMT Not After : Sep 18 13:10:10 2026 GMT Subject: CN=31F820052D83BFF45BB5BE98F813C7B3DC4AB521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:06:9e:90:31:1b:94:a8:7d:bb:3d:3b:1f:a6: 27:6c:34:0e:a8:72:77:06:b8:51:df:68:76:38:0e: bf:fb:65:59:90:d0:8d:f1:6d:c3:4b:3a:49:f4:76: a5:ff:d3:eb:9d:60:54:57:37:81:10:a1:c1:c9:ae: ab:f0:76:4f:f1:3e:1d:e2:68:0a:54:e7:dc:42:a9: 23:02:92:9b:fb:6e:b7:fc:ac:44:81:ca:c5:31:b6: 63:b0:66:8d:69:d6:cc:a3:eb:57:b6:c5:94:4d:5c: b0:d8:35:df:b4:09:48:45:db:b9:6f:4b:a9:dd:12: 0e:70:78:1c:92:18:0e:f2:49:9c:1d:19:28:e2:cb: 5a:47:c1:3f:56:d1:51:bb:e0:e1:1e:5c:86:3f:ef: 07:cc:83:24:fb:44:e2:40:aa:ad:89:6e:67:01:05: 27:fd:50:f6:a3:68:ff:97:a6:ff:e9:8b:f9:29:38: bd:0d:ac:78:a5:b3:15:91:8f:7a:cd:db:c3:3f:be: 63:c8:df:41:c6:5d:4e:1a:57:7b:7e:0c:59:8a:d7: b3:09:77:e6:99:8b:de:f6:c1:b6:91:71:b3:3c:c7: 97:cb:b3:c8:22:7e:c5:ab:6c:a3:53:8d:e8:a1:63: ae:8d:8e:e7:3f:71:da:40:eb:12:90:75:3f:19:d8: 4d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:F8:20:05:2D:83:BF:F4:5B:B5:BE:98:F8:13:C7:B3:DC:4A:B5:21 X509v3 Authority Key Identifier: keyid:39:17:E4:BB:B4:D1:FD:99:40:0E:D9:8C:98:A3:23:AD:AA:B3:89:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/323830343a3134303a3a2f33322d313238203d3e203533313338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:140::/32 Signature Algorithm: sha256WithRSAEncryption 64:2a:f3:2e:c8:7c:a2:81:87:58:2f:fd:ee:19:f1:9c:67:2e: 45:52:22:b2:71:3f:80:ce:17:1a:08:33:1e:ed:1a:16:82:03: f0:3c:1b:4c:50:2d:78:2d:c4:46:90:06:a0:d2:c0:ff:10:24: e9:91:a9:0f:a2:54:04:17:4b:62:7f:3a:a1:26:74:07:f2:ae: c6:cd:ed:cd:cb:03:a3:d9:1b:89:0f:70:dc:f7:f7:a4:8d:df: 8f:83:50:90:be:94:a1:b0:5b:84:ed:1a:58:64:2c:17:9c:d6: 8f:fb:82:b3:95:d0:da:e5:6b:d7:57:9d:70:fb:24:00:96:fd: 44:17:12:07:92:35:1c:d8:a4:3f:a1:2f:c3:d7:ef:78:86:6a: ef:a7:a7:2d:cd:32:35:58:ba:02:9f:5a:b2:e2:59:43:cd:a4: 2e:e6:8a:4e:37:b0:25:81:2a:41:5b:4a:bb:d1:1b:a0:f4:c4: 1f:b4:68:73:96:81:b0:bc:5a:e5:63:c7:41:62:a1:68:d2:a0: a1:7a:18:33:7b:8c:58:97:06:91:b4:66:88:53:e0:48:a8:f5: 92:3f:53:f5:e8:00:9d:dd:95:c6:38:75:01:50:57:d9:b4:ac: fb:8c:75:c8:d9:c9:89:8a:f2:2c:c8:53:72:03:9d:94:72:74: 3c:a0:fd:10 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIUJaYIfXAgDmCHusThDn5dFE6LjWYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzkxN0U0QkJCNEQxRkQ5OTQwMEVEOThDOThBMzIzQURB QUIzODk3NzAeFw0yNTA5MTkxMzA1MTBaFw0yNjA5MTgxMzEwMTBaMDMxMTAvBgNV BAMTKDMxRjgyMDA1MkQ4M0JGRjQ1QkI1QkU5OEY4MTNDN0IzREM0QUI1MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDABp6QMRuUqH27PTsfpidsNA6o cncGuFHfaHY4Dr/7ZVmQ0I3xbcNLOkn0dqX/0+udYFRXN4EQocHJrqvwdk/xPh3i aApU59xCqSMCkpv7brf8rESBysUxtmOwZo1p1syj61e2xZRNXLDYNd+0CUhF27lv S6ndEg5weBySGA7ySZwdGSjiy1pHwT9W0VG74OEeXIY/7wfMgyT7ROJAqq2JbmcB BSf9UPajaP+Xpv/pi/kpOL0NrHilsxWRj3rN28M/vmPI30HGXU4aV3t+DFmK17MJ d+aZi972wbaRcbM8x5fLs8gifsWrbKNTjeihY66Njuc/cdpA6xKQdT8Z2E3hAgMB AAGjggJOMIICSjAdBgNVHQ4EFgQUMfggBS2Dv/Rbtb6Y+BPHs9xKtSEwHwYDVR0j BBgwFoAUORfku7TR/ZlADtmMmKMjraqziXcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFlYcTNDSkszMkdpWHFHYllTTWtta2UyRk0yeGY0RnhWZWduNzVvTkJk a0cvMC8zOTE3RTRCQkI0RDFGRDk5NDAwRUQ5OEM5OEEzMjNBREFBQjM4OTc3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM5MTdFNEJCQjREMUZEOTk0 MDBFRDk4Qzk4QTMyM0FEQUFCMzg5NzcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0RZWHEzQ0pLMzJHaVhxR2JZU01rbWtlMkZNMnhmNEZ4VmVnbjc1b05CZGtHLzAv MzIzODMwMzQzYTMxMzQzMDNhM2EyZjMzMzIyZDMxMzIzODIwM2QzZTIwMzUzMzMx MzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB /wQRMA8wDQQCAAIwBwMFACgEAUAwDQYJKoZIhvcNAQELBQADggEBAGQq8y7IfKKB h1gv/e4Z8ZxnLkVSIrJxP4DOFxoIMx7tGhaCA/A8G0xQLXgtxEaQBqDSwP8QJOmR qQ+iVAQXS2J/OqEmdAfyrsbN7c3LA6PZG4kPcNz396SN34+DUJC+lKGwW4TtGlhk LBec1o/7grOV0Nrla9dXnXD7JACW/UQXEgeSNRzYpD+hL8PX73iGau+npy3NMjVY ugKfWrLiWUPNpC7mik43sCWBKkFbSrvRG6D0xB+0aHOWgbC8WuVjx0FioWjSoKF6 GDN7jFiXBpG0ZohT4Eio9ZI/U/XoAJ3dlcY4dQFQV9m0rPuMdcjZyYmK8izIU3ID nZRydDyg/RA= -----END CERTIFICATE-----Generated at Mon Oct 20 15:28:11 2025 by rpki-client