$ rpki-client -vvf rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/323830343a376537303a343030303a3a2f33342d3334203d3e20323731363234.roa File: 323830343a376537303a343030303a3a2f33342d3334203d3e20323731363234.roa (raw, json) Hash identifier: xd5yFRuyokBlr5ND3hnaWl7vaw6ribAS64SaJ+hGLjE= Subject key identifier: B0:AA:61:85:2A:BB:80:A1:82:FA:0F:AE:94:D4:16:36:77:F7:34:62 Certificate issuer: /CN=306F285229CADF2A417F8D22C75886C83340CA85 Certificate serial: 7E26250128CC0733E0861B3A903E11F66CCB8FFC Authority key identifier: 30:6F:28:52:29:CA:DF:2A:41:7F:8D:22:C7:58:86:C8:33:40:CA:85 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/306F285229CADF2A417F8D22C75886C83340CA85.cer Subject info access: rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/323830343a376537303a343030303a3a2f33342d3334203d3e20323731363234.roa Signing time: Thu 25 Sep 2025 13:22:17 +0000 ROA not before: Thu 25 Sep 2025 13:17:17 +0000 ROA not after: Thu 24 Sep 2026 13:22:17 +0000 asID: 271624 IP address blocks: 2804:7e70:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/306F285229CADF2A417F8D22C75886C83340CA85.crl rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/306F285229CADF2A417F8D22C75886C83340CA85.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/306F285229CADF2A417F8D22C75886C83340CA85.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Oct 2025 21:46:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:26:25:01:28:cc:07:33:e0:86:1b:3a:90:3e:11:f6:6c:cb:8f:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=306F285229CADF2A417F8D22C75886C83340CA85 Validity Not Before: Sep 25 13:17:17 2025 GMT Not After : Sep 24 13:22:17 2026 GMT Subject: CN=B0AA61852ABB80A182FA0FAE94D4163677F73462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a8:7b:9a:9b:37:68:b5:98:9a:e9:de:70:d0: f2:eb:05:98:0f:07:c1:12:be:07:78:7f:9f:fa:b0: 40:12:be:35:7a:6c:dc:a0:f8:d8:89:aa:8e:d3:f6: 18:d9:61:fe:e8:e0:80:35:57:a5:7b:3c:e4:f5:dd: 72:8d:0f:27:78:0f:a9:9e:37:6e:9d:52:c4:d6:e5: 05:b5:45:3e:83:87:55:83:eb:4f:0c:8d:18:d8:6c: 8f:38:8b:cc:09:ae:db:ec:6f:8a:49:d0:bf:00:89: e8:7d:75:00:2b:f2:5c:fe:8f:e2:7e:47:3d:38:6b: 99:53:15:fb:05:01:12:9a:52:60:89:ad:ef:a4:66: 23:65:68:bb:13:43:6b:87:35:78:bf:c6:ad:53:56: 4b:81:45:51:ae:df:91:38:1f:73:cf:5f:cb:74:a9: 77:bc:74:20:04:e9:1f:f0:25:f4:fa:46:dc:cd:b3: ac:36:ec:90:6d:0b:c3:b5:85:b9:f4:0f:f4:ad:63: 84:5a:72:b0:61:79:9f:ff:50:52:9c:f9:76:59:42: 82:7b:73:8c:fb:a6:0b:0a:c7:a7:35:99:e1:a8:77: 6e:70:60:6b:0d:89:21:a3:7a:05:c2:16:45:41:02: 9d:cb:c5:78:b6:03:97:28:39:9a:70:c4:5b:f9:4c: ee:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:AA:61:85:2A:BB:80:A1:82:FA:0F:AE:94:D4:16:36:77:F7:34:62 X509v3 Authority Key Identifier: keyid:30:6F:28:52:29:CA:DF:2A:41:7F:8D:22:C7:58:86:C8:33:40:CA:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/306F285229CADF2A417F8D22C75886C83340CA85.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/306F285229CADF2A417F8D22C75886C83340CA85.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/323830343a376537303a343030303a3a2f33342d3334203d3e20323731363234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:7e70:4000::/34 Signature Algorithm: sha256WithRSAEncryption 90:f3:33:8f:40:7c:93:7c:08:6a:e1:6d:10:13:da:9c:24:e2: b7:49:b6:a0:6f:ef:0b:62:a8:24:c0:bf:29:db:02:bf:a9:4c: b3:53:52:9c:da:a2:5b:a4:58:d5:a7:70:6d:0a:3f:34:f3:90: e0:9e:f6:4a:05:6b:2b:bc:be:7a:8f:e1:04:fb:a7:a7:a7:8b: 74:56:ea:1e:53:f7:af:cc:58:6c:31:34:9a:df:94:ac:d5:e7: 33:ee:0a:49:a5:86:68:d8:7b:12:e6:d8:86:cb:21:02:af:38: ac:8e:de:c2:06:75:ea:9d:be:7a:b2:ba:5a:df:0d:b0:7e:f0: 85:10:7b:77:c4:15:a8:30:50:cd:09:f6:83:63:d5:1e:8b:02: 64:eb:6c:ff:16:46:fa:f0:24:d5:f1:40:ae:3a:f3:16:f8:de: 59:40:20:5c:f6:e1:99:e9:54:3c:3a:10:52:79:0c:93:e7:1a: 85:79:08:9e:df:2f:c7:0b:f8:2d:c8:3b:94:9e:ca:20:82:87: 17:0d:8b:9d:c4:1b:b8:cf:9a:6a:e1:0a:14:83:55:e4:b1:ac: ab:7d:d7:8d:43:72:83:0f:60:e2:13:76:46:47:0b:b5:f8:1e: 48:e1:ae:66:61:67:5f:73:4a:5a:19:dd:0c:f4:2d:f7:f9:d7: 9c:86:be:fd -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUfiYlASjMBzPghhs6kD4R9mzLj/wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA2RjI4NTIyOUNBREYyQTQxN0Y4RDIyQzc1ODg2Qzgz MzQwQ0E4NTAeFw0yNTA5MjUxMzE3MTdaFw0yNjA5MjQxMzIyMTdaMDMxMTAvBgNV BAMTKEIwQUE2MTg1MkFCQjgwQTE4MkZBMEZBRTk0RDQxNjM2NzdGNzM0NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyqHuamzdotZia6d5w0PLrBZgP B8ESvgd4f5/6sEASvjV6bNyg+NiJqo7T9hjZYf7o4IA1V6V7POT13XKNDyd4D6me N26dUsTW5QW1RT6Dh1WD608MjRjYbI84i8wJrtvsb4pJ0L8Aieh9dQAr8lz+j+J+ Rz04a5lTFfsFARKaUmCJre+kZiNlaLsTQ2uHNXi/xq1TVkuBRVGu35E4H3PPX8t0 qXe8dCAE6R/wJfT6RtzNs6w27JBtC8O1hbn0D/StY4RacrBheZ//UFKc+XZZQoJ7 c4z7pgsKx6c1meGod25wYGsNiSGjegXCFkVBAp3LxXi2A5coOZpwxFv5TO55AgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUsKphhSq7gKGC+g+ulNQWNnf3NGIwHwYDVR0j BBgwFoAUMG8oUinK3ypBf40ix1iGyDNAyoUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRXJuSlJXZ2MyY3E1QTdxcndMTFBXSlVxSlBmVTI5bUJKektqMjVxWHJp N3IvMC8zMDZGMjg1MjI5Q0FERjJBNDE3RjhEMjJDNzU4ODZDODMzNDBDQTg1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMwNkYyODUyMjlDQURGMkE0 MTdGOEQyMkM3NTg4NkM4MzM0MENBODUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0VybkpSV2djMmNxNUE3cXJ3TExQV0pVcUpQZlUyOW1CSnpLajI1cVhyaTdyLzAv MzIzODMwMzQzYTM3NjUzNzMwM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzczMTM2MzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEfnBAMA0GCSqGSIb3DQEBCwUA A4IBAQCQ8zOPQHyTfAhq4W0QE9qcJOK3Sbagb+8LYqgkwL8p2wK/qUyzU1Kc2qJb pFjVp3BtCj8085DgnvZKBWsrvL56j+EE+6enp4t0VuoeU/evzFhsMTSa35Ss1ecz 7gpJpYZo2HsS5tiGyyECrzisjt7CBnXqnb56srpa3w2wfvCFEHt3xBWoMFDNCfaD Y9UeiwJk62z/Fkb68CTV8UCuOvMW+N5ZQCBc9uGZ6VQ8OhBSeQyT5xqFeQie3y/H C/gtyDuUnsoggocXDYudxBu4z5pq4QoUg1XksayrfdeNQ3KDD2DiE3ZGRwu1+B5I 4a5mYWdfc0paGd0M9C33+dechr79 -----END CERTIFICATE-----Generated at Mon Oct 20 11:28:21 2025 by rpki-client