$ rpki-client -vvf rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/323830343a376537303a633030303a3a2f33352d3335203d3e20323731363234.roa File: 323830343a376537303a633030303a3a2f33352d3335203d3e20323731363234.roa (raw, json) Hash identifier: VyJ+laIQREgdRaahdqaHLutm55MLj3dOXDnCZwu4gP4= Subject key identifier: 70:EE:B6:18:2C:9C:50:88:97:2F:BF:9B:9A:09:7E:3D:E3:27:21:C4 Certificate issuer: /CN=306F285229CADF2A417F8D22C75886C83340CA85 Certificate serial: 4305A9D59DB3B9B9E0D4BF0EDB2A273CA7E2E6CF Authority key identifier: 30:6F:28:52:29:CA:DF:2A:41:7F:8D:22:C7:58:86:C8:33:40:CA:85 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/306F285229CADF2A417F8D22C75886C83340CA85.cer Subject info access: rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/323830343a376537303a633030303a3a2f33352d3335203d3e20323731363234.roa Signing time: Thu 25 Sep 2025 13:22:18 +0000 ROA not before: Thu 25 Sep 2025 13:17:18 +0000 ROA not after: Thu 24 Sep 2026 13:22:18 +0000 asID: 271624 IP address blocks: 2804:7e70:c000::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/306F285229CADF2A417F8D22C75886C83340CA85.crl rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/306F285229CADF2A417F8D22C75886C83340CA85.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/306F285229CADF2A417F8D22C75886C83340CA85.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Oct 2025 21:46:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:05:a9:d5:9d:b3:b9:b9:e0:d4:bf:0e:db:2a:27:3c:a7:e2:e6:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=306F285229CADF2A417F8D22C75886C83340CA85 Validity Not Before: Sep 25 13:17:18 2025 GMT Not After : Sep 24 13:22:18 2026 GMT Subject: CN=70EEB6182C9C5088972FBF9B9A097E3DE32721C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:84:2d:88:be:c8:74:84:7d:01:c5:0c:25:4b: a2:a5:3d:24:54:95:d1:fb:8f:d7:38:4b:b9:5a:78: f5:66:cb:1d:63:9f:fd:be:8a:96:dd:af:1b:b8:78: f6:c9:02:23:36:cf:0f:ae:f6:13:60:a9:86:51:25: 96:94:3b:9c:bb:7c:62:a6:71:51:ad:01:88:98:6b: 82:fd:e8:50:ea:e6:4d:78:c5:86:6b:52:30:da:03: 0a:11:80:79:61:bf:e3:8e:5d:1d:04:92:6d:30:2d: 33:f8:8d:b4:48:89:a8:d7:1b:b2:c0:b5:5b:8c:84: fb:af:a4:95:ab:4c:7d:bc:85:4c:ca:4e:47:a3:8e: 52:b3:7d:64:da:b6:e2:19:3e:31:7d:7a:2d:a3:b1: c9:4c:06:57:a5:28:23:56:2d:77:ca:80:e6:3b:9b: 29:af:14:fd:19:0d:1e:7f:f9:0d:eb:f8:5c:63:8c: 2b:fe:0b:cf:29:78:2e:f1:18:de:0c:94:af:0b:82: 56:b2:16:9e:8e:57:f8:9d:cd:23:2a:be:03:a4:85: c0:08:42:bc:fb:f1:8b:ab:b4:db:c6:62:4f:2e:d3: ac:72:f1:0e:0a:fe:e2:e4:23:b6:5d:dd:f6:48:c1: e1:89:da:46:28:a8:6f:52:aa:ac:d8:6d:64:ae:07: 27:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:EE:B6:18:2C:9C:50:88:97:2F:BF:9B:9A:09:7E:3D:E3:27:21:C4 X509v3 Authority Key Identifier: keyid:30:6F:28:52:29:CA:DF:2A:41:7F:8D:22:C7:58:86:C8:33:40:CA:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/306F285229CADF2A417F8D22C75886C83340CA85.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/306F285229CADF2A417F8D22C75886C83340CA85.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/323830343a376537303a633030303a3a2f33352d3335203d3e20323731363234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:7e70:c000::/35 Signature Algorithm: sha256WithRSAEncryption 89:80:85:be:18:e1:57:bc:52:f8:98:8e:a4:d1:d2:f6:42:96: f9:06:ac:4d:75:1c:84:c7:f2:c7:93:b3:ac:52:41:5b:00:9f: cf:0c:60:4f:19:22:41:62:ba:46:63:11:70:08:08:2f:07:9b: 58:c1:81:9d:cb:9c:83:fb:28:69:17:e6:e7:1c:88:d8:58:14: de:92:9e:0c:b0:fb:e6:e4:79:54:63:2f:05:d3:cc:43:43:d4: 62:ce:44:e5:31:ae:cd:3f:1c:e8:71:97:c8:df:ca:27:8f:46: ec:5c:68:09:03:58:7c:61:d0:bf:81:91:29:7d:ae:44:88:76: 2e:0d:aa:1b:91:a5:e7:c4:6d:c9:cc:a2:01:cc:f1:f3:18:43: 00:f7:a8:96:57:9e:98:ac:05:c7:d9:5c:99:c9:18:24:6e:eb: 4f:2d:e8:d0:60:5e:14:56:14:4a:02:4c:3a:54:ea:0c:06:79: 03:49:eb:e5:a0:f6:77:47:29:46:4b:18:3b:32:9a:9b:bc:39: 97:91:27:84:d2:ab:9f:e7:32:bd:54:46:6d:1f:e5:a0:eb:92: cb:6b:96:6a:53:c3:ec:b6:36:9d:0a:cd:cf:f0:f5:44:82:fe: a8:72:13:45:f6:d1:75:e4:1b:24:31:f0:e4:52:30:aa:ee:c6: b4:d6:af:a9 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUQwWp1Z2zubng1L8O2yonPKfi5s8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA2RjI4NTIyOUNBREYyQTQxN0Y4RDIyQzc1ODg2Qzgz MzQwQ0E4NTAeFw0yNTA5MjUxMzE3MThaFw0yNjA5MjQxMzIyMThaMDMxMTAvBgNV BAMTKDcwRUVCNjE4MkM5QzUwODg5NzJGQkY5QjlBMDk3RTNERTMyNzIxQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3hC2Ivsh0hH0BxQwlS6KlPSRU ldH7j9c4S7laePVmyx1jn/2+ipbdrxu4ePbJAiM2zw+u9hNgqYZRJZaUO5y7fGKm cVGtAYiYa4L96FDq5k14xYZrUjDaAwoRgHlhv+OOXR0Ekm0wLTP4jbRIiajXG7LA tVuMhPuvpJWrTH28hUzKTkejjlKzfWTatuIZPjF9ei2jsclMBlelKCNWLXfKgOY7 mymvFP0ZDR5/+Q3r+FxjjCv+C88peC7xGN4MlK8LglayFp6OV/idzSMqvgOkhcAI Qrz78YurtNvGYk8u06xy8Q4K/uLkI7Zd3fZIweGJ2kYoqG9SqqzYbWSuByc1AgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUcO62GCycUIiXL7+bmgl+PeMnIcQwHwYDVR0j BBgwFoAUMG8oUinK3ypBf40ix1iGyDNAyoUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRXJuSlJXZ2MyY3E1QTdxcndMTFBXSlVxSlBmVTI5bUJKektqMjVxWHJp N3IvMC8zMDZGMjg1MjI5Q0FERjJBNDE3RjhEMjJDNzU4ODZDODMzNDBDQTg1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMwNkYyODUyMjlDQURGMkE0 MTdGOEQyMkM3NTg4NkM4MzM0MENBODUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0VybkpSV2djMmNxNUE3cXJ3TExQV0pVcUpQZlUyOW1CSnpLajI1cVhyaTdyLzAv MzIzODMwMzQzYTM3NjUzNzMwM2E2MzMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk M2UyMDMyMzczMTM2MzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSgEfnDAMA0GCSqGSIb3DQEBCwUA A4IBAQCJgIW+GOFXvFL4mI6k0dL2Qpb5BqxNdRyEx/LHk7OsUkFbAJ/PDGBPGSJB YrpGYxFwCAgvB5tYwYGdy5yD+yhpF+bnHIjYWBTekp4MsPvm5HlUYy8F08xDQ9Ri zkTlMa7NPxzocZfI38onj0bsXGgJA1h8YdC/gZEpfa5EiHYuDaobkaXnxG3JzKIB zPHzGEMA96iWV56YrAXH2VyZyRgkbutPLejQYF4UVhRKAkw6VOoMBnkDSevloPZ3 RylGSxg7MpqbvDmXkSeE0quf5zK9VEZtH+Wg65LLa5ZqU8PstjadCs3P8PVEgv6o chNF9tF15BskMfDkUjCq7sa01q+p -----END CERTIFICATE-----Generated at Mon Oct 20 11:23:42 2025 by rpki-client