$ rpki-client -vvf rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/323830343a363339633a383030303a3a2f33342d3334203d3e20323639333732.roa File: 323830343a363339633a383030303a3a2f33342d3334203d3e20323639333732.roa (raw, json) Hash identifier: 4v2HSwIQXZYEZEfOMZLBjL0NS/KH7yeNz0Mmmdqs+DA= Subject key identifier: 09:1C:65:17:0A:FE:F6:75:3A:79:47:1D:A2:C3:AA:7E:13:73:68:BC Certificate issuer: /CN=DCED5196814C984EAFEFCDAE94DBA86A0D3C7F4A Certificate serial: 335F55C785F5297FC04498CF761AEE0D03353289 Authority key identifier: DC:ED:51:96:81:4C:98:4E:AF:EF:CD:AE:94:DB:A8:6A:0D:3C:7F:4A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCED5196814C984EAFEFCDAE94DBA86A0D3C7F4A.cer Subject info access: rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/323830343a363339633a383030303a3a2f33342d3334203d3e20323639333732.roa Signing time: Mon 29 Sep 2025 17:35:18 +0000 ROA not before: Mon 29 Sep 2025 17:30:18 +0000 ROA not after: Mon 28 Sep 2026 17:35:18 +0000 asID: 269372 IP address blocks: 2804:639c:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/DCED5196814C984EAFEFCDAE94DBA86A0D3C7F4A.crl rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/DCED5196814C984EAFEFCDAE94DBA86A0D3C7F4A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCED5196814C984EAFEFCDAE94DBA86A0D3C7F4A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 12:59:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:5f:55:c7:85:f5:29:7f:c0:44:98:cf:76:1a:ee:0d:03:35:32:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCED5196814C984EAFEFCDAE94DBA86A0D3C7F4A Validity Not Before: Sep 29 17:30:18 2025 GMT Not After : Sep 28 17:35:18 2026 GMT Subject: CN=091C65170AFEF6753A79471DA2C3AA7E137368BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:db:43:4e:db:1a:10:ef:f1:df:a3:67:8a:94: c9:ca:1c:93:3b:73:bb:bb:5f:a0:5f:0d:bd:84:3b: 2a:af:19:f7:80:05:6a:8f:d5:a1:03:25:37:42:ff: 7b:2b:75:57:17:52:84:c1:ec:86:25:90:73:8a:de: 03:16:fc:11:b7:e6:54:1e:ff:25:58:0d:a9:ff:5d: da:f8:3a:e9:c4:f5:89:b8:a5:3d:0e:8b:7b:62:86: 6a:2e:d1:d4:f3:ab:0c:26:ad:9f:52:a3:32:4a:2c: 03:5a:ab:eb:a3:ad:50:a5:da:2e:3c:94:50:d4:d5: 36:2c:82:09:a8:14:f0:a4:a8:47:fd:6d:ae:3c:ed: 06:29:bd:5f:40:dc:48:0f:08:40:85:59:55:f7:2d: 29:37:06:b2:b7:3b:1a:14:a6:7e:a8:9e:1e:b7:cf: 0c:93:ca:2d:e2:d0:c2:48:7f:40:a7:94:de:04:b5: 4e:fb:c2:3a:84:3b:c7:a4:75:3a:8e:a2:20:83:6a: f9:c3:f0:f9:c9:dc:93:98:12:a2:35:9c:ce:c4:71: 9c:28:5a:c2:60:4d:c0:1c:92:ca:8a:56:08:1d:ae: c3:81:b3:ce:fa:c8:1f:1f:79:02:95:99:e4:c5:4b: 93:d9:b0:3a:14:b2:2b:21:e7:6d:ef:ee:6b:f3:25: c8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:1C:65:17:0A:FE:F6:75:3A:79:47:1D:A2:C3:AA:7E:13:73:68:BC X509v3 Authority Key Identifier: keyid:DC:ED:51:96:81:4C:98:4E:AF:EF:CD:AE:94:DB:A8:6A:0D:3C:7F:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/DCED5196814C984EAFEFCDAE94DBA86A0D3C7F4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCED5196814C984EAFEFCDAE94DBA86A0D3C7F4A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/323830343a363339633a383030303a3a2f33342d3334203d3e20323639333732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:639c:8000::/34 Signature Algorithm: sha256WithRSAEncryption 36:80:da:b6:77:6e:61:3a:12:5c:e8:27:ec:cb:63:ff:93:9d: b4:99:57:89:be:45:1f:7e:39:89:ae:11:04:cf:b6:99:29:4f: 05:6e:7d:7f:e5:54:02:1d:82:38:22:b0:ea:e9:b8:1c:52:68: 54:40:80:bb:f5:e6:42:de:8e:34:cd:3b:33:8b:ab:67:64:74: f0:8c:dd:96:a9:42:07:1d:b6:f1:35:49:e9:ca:bc:f6:28:80: d5:d3:00:af:57:dc:59:f7:41:63:90:36:11:84:d9:0a:97:8f: ed:ed:3e:bd:04:b6:07:31:24:2e:a5:11:42:a5:9e:d7:06:7b: 4c:0d:2c:75:91:c2:ee:a5:cb:5c:a2:bd:9f:96:a8:f7:59:4e: 53:54:1e:0c:46:73:3a:3b:34:f9:9e:ad:8b:5e:5f:e1:77:28: b4:bd:52:99:7b:87:d9:11:2a:81:60:21:b8:5e:04:f0:1a:5a: b1:60:08:28:b9:d2:91:46:ce:2c:f0:9c:9a:e4:a6:0c:e5:a6: 0e:27:7b:f7:9c:53:59:d2:09:71:b1:7f:41:d1:7d:4a:af:21: a3:1b:61:6c:ba:bc:7b:75:f5:f9:6d:0d:9c:b5:99:03:34:40: 93:22:d8:c2:c4:63:d4:26:fc:62:45:3f:ce:c0:bc:74:10:2a: 25:2f:11:df -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUM19Vx4X1KX/ARJjPdhruDQM1MokwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENFRDUxOTY4MTRDOTg0RUFGRUZDREFFOTREQkE4NkEw RDNDN0Y0QTAeFw0yNTA5MjkxNzMwMThaFw0yNjA5MjgxNzM1MThaMDMxMTAvBgNV BAMTKDA5MUM2NTE3MEFGRUY2NzUzQTc5NDcxREEyQzNBQTdFMTM3MzY4QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU20NO2xoQ7/Hfo2eKlMnKHJM7 c7u7X6BfDb2EOyqvGfeABWqP1aEDJTdC/3srdVcXUoTB7IYlkHOK3gMW/BG35lQe /yVYDan/Xdr4OunE9Ym4pT0Oi3tihmou0dTzqwwmrZ9SozJKLANaq+ujrVCl2i48 lFDU1TYsggmoFPCkqEf9ba487QYpvV9A3EgPCECFWVX3LSk3BrK3OxoUpn6onh63 zwyTyi3i0MJIf0CnlN4EtU77wjqEO8ekdTqOoiCDavnD8PnJ3JOYEqI1nM7EcZwo WsJgTcAcksqKVggdrsOBs876yB8feQKVmeTFS5PZsDoUsish523v7mvzJcgdAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUCRxlFwr+9nU6eUcdosOqfhNzaLwwHwYDVR0j BBgwFoAU3O1RloFMmE6v782ulNuoag08f0owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRG43OGNUN3d4emNCOTdLZGo4Qm5YN2Y0UVZxdlQ2ZVVwdEhiRnc5bndv clkvMC9EQ0VENTE5NjgxNEM5ODRFQUZFRkNEQUU5NERCQTg2QTBEM0M3RjRBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDRUQ1MTk2ODE0Qzk4NEVB RkVGQ0RBRTk0REJBODZBMEQzQzdGNEEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0RuNzhjVDd3eHpjQjk3S2RqOEJuWDdmNFFWcXZUNmVVcHRIYkZ3OW53b3JZLzAv MzIzODMwMzQzYTM2MzMzOTYzM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzYzOTMzMzczMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEY5yAMA0GCSqGSIb3DQEBCwUA A4IBAQA2gNq2d25hOhJc6Cfsy2P/k520mVeJvkUffjmJrhEEz7aZKU8Fbn1/5VQC HYI4IrDq6bgcUmhUQIC79eZC3o40zTszi6tnZHTwjN2WqUIHHbbxNUnpyrz2KIDV 0wCvV9xZ90FjkDYRhNkKl4/t7T69BLYHMSQupRFCpZ7XBntMDSx1kcLupctcor2f lqj3WU5TVB4MRnM6OzT5nq2LXl/hdyi0vVKZe4fZESqBYCG4XgTwGlqxYAgoudKR Rs4s8Jya5KYM5aYOJ3v3nFNZ0glxsX9B0X1KryGjG2Fsurx7dfX5bQ2ctZkDNECT ItjCxGPUJvxiRT/OwLx0EColLxHf -----END CERTIFICATE-----Generated at Mon Oct 20 23:11:34 2025 by rpki-client