$ rpki-client -vvf rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/323830343a376537303a633030303a3a2f33342d3334203d3e20323731363234.roa File: 323830343a376537303a633030303a3a2f33342d3334203d3e20323731363234.roa (raw, json) Hash identifier: lVlDuEr/uZGePnYoueUBgOXNIyiPW0J0SIegldh6BTw= Subject key identifier: 40:A2:34:60:7A:1A:27:9A:12:F7:FA:F6:F2:90:9C:43:CE:E5:97:C1 Certificate issuer: /CN=306F285229CADF2A417F8D22C75886C83340CA85 Certificate serial: 09AFD28F0FCCB4136DE8FEA9032F85FD69E812D1 Authority key identifier: 30:6F:28:52:29:CA:DF:2A:41:7F:8D:22:C7:58:86:C8:33:40:CA:85 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/306F285229CADF2A417F8D22C75886C83340CA85.cer Subject info access: rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/323830343a376537303a633030303a3a2f33342d3334203d3e20323731363234.roa Signing time: Thu 25 Sep 2025 13:22:18 +0000 ROA not before: Thu 25 Sep 2025 13:17:18 +0000 ROA not after: Thu 24 Sep 2026 13:22:18 +0000 asID: 271624 IP address blocks: 2804:7e70:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/306F285229CADF2A417F8D22C75886C83340CA85.crl rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/306F285229CADF2A417F8D22C75886C83340CA85.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/306F285229CADF2A417F8D22C75886C83340CA85.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Oct 2025 21:46:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:af:d2:8f:0f:cc:b4:13:6d:e8:fe:a9:03:2f:85:fd:69:e8:12:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=306F285229CADF2A417F8D22C75886C83340CA85 Validity Not Before: Sep 25 13:17:18 2025 GMT Not After : Sep 24 13:22:18 2026 GMT Subject: CN=40A234607A1A279A12F7FAF6F2909C43CEE597C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4d:22:e2:be:f3:4a:28:9f:95:a6:9a:c0:b2: 29:fb:91:a5:1f:e8:72:15:d7:7b:50:e0:3a:ca:8b: e5:a8:ac:7d:f1:92:19:4f:7a:dc:e1:2d:67:80:a2: d1:ff:fd:94:8a:b4:91:d2:26:e4:a2:a5:18:48:ed: 3e:9d:d9:8a:b6:8e:e8:7f:c8:55:e7:a6:8a:3f:0f: d3:75:b3:c7:be:73:6a:65:23:ff:bd:83:e3:96:90: f5:10:7d:69:d0:90:85:d5:ff:57:28:7d:92:57:3f: 13:99:9d:59:ad:80:d1:a0:73:07:4c:f1:a3:2f:cb: 28:06:42:b7:37:d8:78:bd:2e:c1:66:c4:2f:b0:18: 5b:23:43:e1:dc:82:1f:ec:1a:de:79:c8:56:54:34: d8:ce:08:9c:a6:87:c1:de:ec:b0:f1:32:8d:00:60: 97:d4:b9:c8:06:42:62:a3:61:6f:67:b8:f4:15:81: 3c:04:b2:a6:81:d8:18:9d:70:c0:35:51:df:cc:9e: 21:08:3d:d8:d4:fb:a7:9e:9e:c0:0d:22:f0:af:28: 4d:82:2f:4d:6c:11:6e:1d:af:ff:c6:2a:62:9a:5c: af:87:0c:8c:2a:cb:f6:fa:b9:a0:da:8e:e3:ab:10: d4:f2:b6:98:35:31:25:9a:33:b8:da:7b:6f:1f:df: 8e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:A2:34:60:7A:1A:27:9A:12:F7:FA:F6:F2:90:9C:43:CE:E5:97:C1 X509v3 Authority Key Identifier: keyid:30:6F:28:52:29:CA:DF:2A:41:7F:8D:22:C7:58:86:C8:33:40:CA:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/306F285229CADF2A417F8D22C75886C83340CA85.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/306F285229CADF2A417F8D22C75886C83340CA85.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/323830343a376537303a633030303a3a2f33342d3334203d3e20323731363234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:7e70:c000::/34 Signature Algorithm: sha256WithRSAEncryption 73:05:e6:35:28:10:97:6c:0a:37:6d:ab:9a:6d:cc:b7:d3:4a: b4:35:7d:b1:a1:01:87:95:69:ca:be:09:56:24:a2:b5:80:4b: e3:6c:43:c2:15:6b:97:86:ac:3e:a6:3e:8c:1a:21:e0:1c:81: 37:cb:78:c4:03:d0:9d:99:19:d8:cc:89:52:1a:e0:93:b3:02: 4f:21:bb:c2:ab:77:cf:81:49:25:fa:0b:e5:0d:f8:38:2f:4e: 91:13:57:59:f9:1f:1f:52:48:62:15:48:dc:32:14:a7:c0:78: 47:cc:9b:ed:4f:45:82:8d:62:75:99:5f:be:74:54:05:d8:0d: 20:04:55:56:f2:7f:bf:ca:ae:68:02:66:95:7d:66:64:04:68: c4:7c:26:33:93:ee:ab:ba:d3:57:5c:f1:88:af:8e:f3:d6:f6: 95:d1:37:57:6b:be:2c:06:d8:4d:36:f1:c7:00:1c:52:25:6f: d8:00:44:d0:76:94:14:63:4f:7b:55:2c:cd:49:3e:78:9c:02: 8b:dc:db:03:1f:a0:93:bb:1d:0c:ec:9c:ba:7a:07:b3:8e:3a: 5a:07:32:24:cd:4b:42:41:84:fd:d1:fa:c1:d6:0f:f9:f1:b8: 46:60:c4:6b:85:86:a1:0e:92:a0:fd:4c:79:d8:a6:dc:8c:a8: 97:91:29:08 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUCa/Sjw/MtBNt6P6pAy+F/WnoEtEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA2RjI4NTIyOUNBREYyQTQxN0Y4RDIyQzc1ODg2Qzgz MzQwQ0E4NTAeFw0yNTA5MjUxMzE3MThaFw0yNjA5MjQxMzIyMThaMDMxMTAvBgNV BAMTKDQwQTIzNDYwN0ExQTI3OUExMkY3RkFGNkYyOTA5QzQzQ0VFNTk3QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmTSLivvNKKJ+VpprAsin7kaUf 6HIV13tQ4DrKi+WorH3xkhlPetzhLWeAotH//ZSKtJHSJuSipRhI7T6d2Yq2juh/ yFXnpoo/D9N1s8e+c2plI/+9g+OWkPUQfWnQkIXV/1cofZJXPxOZnVmtgNGgcwdM 8aMvyygGQrc32Hi9LsFmxC+wGFsjQ+Hcgh/sGt55yFZUNNjOCJymh8He7LDxMo0A YJfUucgGQmKjYW9nuPQVgTwEsqaB2BidcMA1Ud/MniEIPdjU+6eensANIvCvKE2C L01sEW4dr//GKmKaXK+HDIwqy/b6uaDajuOrENTytpg1MSWaM7jae28f346HAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUQKI0YHoaJ5oS9/r28pCcQ87ll8EwHwYDVR0j BBgwFoAUMG8oUinK3ypBf40ix1iGyDNAyoUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRXJuSlJXZ2MyY3E1QTdxcndMTFBXSlVxSlBmVTI5bUJKektqMjVxWHJp N3IvMC8zMDZGMjg1MjI5Q0FERjJBNDE3RjhEMjJDNzU4ODZDODMzNDBDQTg1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMwNkYyODUyMjlDQURGMkE0 MTdGOEQyMkM3NTg4NkM4MzM0MENBODUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0VybkpSV2djMmNxNUE3cXJ3TExQV0pVcUpQZlUyOW1CSnpLajI1cVhyaTdyLzAv MzIzODMwMzQzYTM3NjUzNzMwM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzczMTM2MzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEfnDAMA0GCSqGSIb3DQEBCwUA A4IBAQBzBeY1KBCXbAo3bauabcy300q0NX2xoQGHlWnKvglWJKK1gEvjbEPCFWuX hqw+pj6MGiHgHIE3y3jEA9CdmRnYzIlSGuCTswJPIbvCq3fPgUkl+gvlDfg4L06R E1dZ+R8fUkhiFUjcMhSnwHhHzJvtT0WCjWJ1mV++dFQF2A0gBFVW8n+/yq5oAmaV fWZkBGjEfCYzk+6rutNXXPGIr47z1vaV0TdXa74sBthNNvHHABxSJW/YAETQdpQU Y097VSzNST54nAKL3NsDH6CTux0M7Jy6egezjjpaBzIkzUtCQYT90frB1g/58bhG YMRrhYahDpKg/Ux52KbcjKiXkSkI -----END CERTIFICATE-----Generated at Mon Oct 20 11:28:43 2025 by rpki-client