$ rpki-client -vvf rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/323830343a363339633a633030303a3a2f33342d3334203d3e20323639333732.roa File: 323830343a363339633a633030303a3a2f33342d3334203d3e20323639333732.roa (raw, json) Hash identifier: 0s92ovL9ZJEa5oqF9zq1QXf6poumaPwElurfAlI5ePY= Subject key identifier: 43:7C:77:47:B6:70:D2:22:4A:64:7A:AD:1B:DB:F1:69:33:17:66:59 Certificate issuer: /CN=DCED5196814C984EAFEFCDAE94DBA86A0D3C7F4A Certificate serial: 487191C4983805D7AF6B559DD956581389F83667 Authority key identifier: DC:ED:51:96:81:4C:98:4E:AF:EF:CD:AE:94:DB:A8:6A:0D:3C:7F:4A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCED5196814C984EAFEFCDAE94DBA86A0D3C7F4A.cer Subject info access: rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/323830343a363339633a633030303a3a2f33342d3334203d3e20323639333732.roa Signing time: Mon 29 Sep 2025 17:35:18 +0000 ROA not before: Mon 29 Sep 2025 17:30:18 +0000 ROA not after: Mon 28 Sep 2026 17:35:18 +0000 asID: 269372 IP address blocks: 2804:639c:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/DCED5196814C984EAFEFCDAE94DBA86A0D3C7F4A.crl rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/DCED5196814C984EAFEFCDAE94DBA86A0D3C7F4A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCED5196814C984EAFEFCDAE94DBA86A0D3C7F4A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 12:59:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:71:91:c4:98:38:05:d7:af:6b:55:9d:d9:56:58:13:89:f8:36:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCED5196814C984EAFEFCDAE94DBA86A0D3C7F4A Validity Not Before: Sep 29 17:30:18 2025 GMT Not After : Sep 28 17:35:18 2026 GMT Subject: CN=437C7747B670D2224A647AAD1BDBF16933176659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f7:fe:3a:0a:0c:bd:9d:e3:dc:39:a7:bd:9e: 9a:b7:a5:ed:a8:43:e9:b0:a2:a4:02:eb:60:db:f5: f5:01:2b:4a:3c:ed:0f:c1:6e:5a:ba:85:79:56:f6: 54:40:17:1d:e5:ff:94:43:d1:3b:73:21:df:41:85: 35:c1:74:35:6d:cd:cf:93:30:c2:3e:25:fa:58:08: 7c:2b:1f:46:46:5c:a5:e3:c2:50:02:2d:f8:0a:b8: e0:2e:e0:c4:6e:a6:4f:94:f0:d6:2a:f8:8e:e7:61: 2c:35:15:19:80:f9:96:1d:8a:85:aa:65:f1:12:16: 12:78:a0:30:d1:1b:96:e2:68:9c:94:42:f1:f4:2f: 5f:4f:4b:f5:3b:29:dc:de:30:61:c6:03:db:b3:e1: f7:82:03:31:8e:8a:ee:3c:5e:74:dc:5f:07:4f:bf: f8:3c:11:7b:51:dd:a9:ed:2d:da:5b:64:2c:84:6b: 77:73:7c:c0:ac:d6:65:a1:91:7b:31:00:8f:49:76: 67:bc:ba:8a:84:8c:ef:37:b4:24:7d:ba:23:67:d8: ac:a4:a5:bc:2e:53:22:e0:0a:5a:97:a0:ee:3e:eb: c7:b7:18:5d:d1:cd:d1:cb:e1:93:40:46:e5:ae:84: ac:04:ff:85:52:53:e4:61:e6:92:60:2a:d9:22:c3: ca:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:7C:77:47:B6:70:D2:22:4A:64:7A:AD:1B:DB:F1:69:33:17:66:59 X509v3 Authority Key Identifier: keyid:DC:ED:51:96:81:4C:98:4E:AF:EF:CD:AE:94:DB:A8:6A:0D:3C:7F:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/DCED5196814C984EAFEFCDAE94DBA86A0D3C7F4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCED5196814C984EAFEFCDAE94DBA86A0D3C7F4A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/323830343a363339633a633030303a3a2f33342d3334203d3e20323639333732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:639c:c000::/34 Signature Algorithm: sha256WithRSAEncryption 9e:db:63:d8:51:0b:76:03:64:be:df:e1:8b:33:ae:9d:b2:78: 67:6f:c7:e3:d1:4b:0e:87:a2:b7:bd:ce:13:c5:0b:d3:46:72: 02:42:31:d2:d2:69:b2:ef:21:9e:4f:04:07:fb:6b:64:ba:c4: 5a:be:59:38:de:da:01:4b:91:0e:43:cb:b8:9d:a9:56:9e:28: a5:6c:91:6b:f6:b7:be:84:36:b2:dd:95:c1:07:44:4a:22:d1: 8e:1c:ff:da:de:f6:6d:fd:f5:c6:01:77:c7:06:06:bf:a0:e5: 03:1a:a5:af:54:0f:21:6d:fc:2d:e0:5a:54:5d:15:f7:1e:e4: 91:74:4c:2b:42:24:47:a1:d6:7e:30:0f:b7:06:31:4b:70:b5: 2e:20:39:cf:bb:93:63:e9:44:7f:bb:39:d7:47:93:29:a2:26: 84:8e:93:6e:ee:b6:6a:67:67:96:e5:a9:8d:cf:97:ab:61:59: 7d:dc:79:73:2d:e9:68:4f:7c:5a:6b:dd:a0:76:dd:0d:62:dc: a9:f9:56:0e:6e:cd:df:d9:1a:4c:db:43:6b:71:33:00:49:43: 75:0b:97:6a:bc:32:14:36:5b:ad:e8:69:e5:9f:ac:0c:22:10: ce:24:fe:32:34:bb:6a:c3:5f:f7:fe:ba:d9:4a:a7:b7:c3:6f: 5d:1e:bb:e5 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUSHGRxJg4Bdeva1Wd2VZYE4n4NmcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENFRDUxOTY4MTRDOTg0RUFGRUZDREFFOTREQkE4NkEw RDNDN0Y0QTAeFw0yNTA5MjkxNzMwMThaFw0yNjA5MjgxNzM1MThaMDMxMTAvBgNV BAMTKDQzN0M3NzQ3QjY3MEQyMjI0QTY0N0FBRDFCREJGMTY5MzMxNzY2NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC39/46Cgy9nePcOae9npq3pe2o Q+mwoqQC62Db9fUBK0o87Q/Bblq6hXlW9lRAFx3l/5RD0TtzId9BhTXBdDVtzc+T MMI+JfpYCHwrH0ZGXKXjwlACLfgKuOAu4MRupk+U8NYq+I7nYSw1FRmA+ZYdioWq ZfESFhJ4oDDRG5biaJyUQvH0L19PS/U7KdzeMGHGA9uz4feCAzGOiu48XnTcXwdP v/g8EXtR3antLdpbZCyEa3dzfMCs1mWhkXsxAI9Jdme8uoqEjO83tCR9uiNn2Kyk pbwuUyLgClqXoO4+68e3GF3RzdHL4ZNARuWuhKwE/4VSU+Rh5pJgKtkiw8o7AgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUQ3x3R7Zw0iJKZHqtG9vxaTMXZlkwHwYDVR0j BBgwFoAU3O1RloFMmE6v782ulNuoag08f0owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRG43OGNUN3d4emNCOTdLZGo4Qm5YN2Y0UVZxdlQ2ZVVwdEhiRnc5bndv clkvMC9EQ0VENTE5NjgxNEM5ODRFQUZFRkNEQUU5NERCQTg2QTBEM0M3RjRBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDRUQ1MTk2ODE0Qzk4NEVB RkVGQ0RBRTk0REJBODZBMEQzQzdGNEEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0RuNzhjVDd3eHpjQjk3S2RqOEJuWDdmNFFWcXZUNmVVcHRIYkZ3OW53b3JZLzAv MzIzODMwMzQzYTM2MzMzOTYzM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzYzOTMzMzczMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEY5zAMA0GCSqGSIb3DQEBCwUA A4IBAQCe22PYUQt2A2S+3+GLM66dsnhnb8fj0UsOh6K3vc4TxQvTRnICQjHS0mmy 7yGeTwQH+2tkusRavlk43toBS5EOQ8u4nalWniilbJFr9re+hDay3ZXBB0RKItGO HP/a3vZt/fXGAXfHBga/oOUDGqWvVA8hbfwt4FpUXRX3HuSRdEwrQiRHodZ+MA+3 BjFLcLUuIDnPu5Nj6UR/uznXR5MpoiaEjpNu7rZqZ2eW5amNz5erYVl93HlzLelo T3xaa92gdt0NYtyp+VYObs3f2RpM20NrcTMASUN1C5dqvDIUNlut6Gnln6wMIhDO JP4yNLtqw1/3/rrZSqe3w29dHrvl -----END CERTIFICATE-----Generated at Mon Oct 20 23:12:15 2025 by rpki-client