$ rpki-client -vvf rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/323830343a353730633a623030303a3a2f33362d3336203d3e20323638303430.roa File: 323830343a353730633a623030303a3a2f33362d3336203d3e20323638303430.roa (raw, json) Hash identifier: VbbGJ8kXVWVaWgkpRfTJcqYFKwhfCrLnwCzYQO9WjaY= Subject key identifier: 26:2A:B9:C4:36:45:C1:70:74:3E:F8:6F:F1:74:13:D0:19:8F:1F:F2 Certificate issuer: /CN=CEA74FF3945E7508599D54A721E47B3BA75706E3 Certificate serial: 079C252360F6D7845C6667475E85BEECE3DD1FB9 Authority key identifier: CE:A7:4F:F3:94:5E:75:08:59:9D:54:A7:21:E4:7B:3B:A7:57:06:E3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer Subject info access: rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/323830343a353730633a623030303a3a2f33362d3336203d3e20323638303430.roa Signing time: Mon 08 Sep 2025 21:31:25 +0000 ROA not before: Mon 08 Sep 2025 21:26:25 +0000 ROA not after: Mon 07 Sep 2026 21:31:25 +0000 asID: 268040 IP address blocks: 2804:570c:b000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.crl rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 05:11:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:9c:25:23:60:f6:d7:84:5c:66:67:47:5e:85:be:ec:e3:dd:1f:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEA74FF3945E7508599D54A721E47B3BA75706E3 Validity Not Before: Sep 8 21:26:25 2025 GMT Not After : Sep 7 21:31:25 2026 GMT Subject: CN=262AB9C43645C170743EF86FF17413D0198F1FF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5e:54:08:da:da:da:5a:00:ac:1b:b4:85:1c: 37:a5:db:e5:cb:97:c3:d7:32:5f:26:86:37:dd:c4: 47:06:71:54:3f:f8:e1:31:1e:2b:0d:a1:b7:9b:62: 9f:b6:48:3c:4e:7e:d4:01:8d:e6:65:81:1a:35:88: 08:5b:42:be:bd:34:50:8a:b8:27:a9:f0:32:5e:0a: 4b:2e:36:a1:70:a4:bf:81:c4:41:0d:23:60:e7:e7: 48:0d:c2:93:b8:a7:35:90:97:b7:21:52:bf:3d:54: 28:79:e7:fd:49:72:97:61:1c:12:39:0b:91:f1:4d: e7:2b:e6:ed:71:f6:b9:4e:aa:01:2f:ad:a1:e5:bc: 6b:cc:ca:3b:cf:f6:62:ed:f2:26:12:06:d6:29:1a: fa:cf:44:06:4b:7a:36:46:f6:39:f2:25:c0:a2:84: ca:8e:00:55:4c:f4:50:11:b8:87:87:2b:71:63:5a: 60:03:a0:3f:85:71:f9:34:1b:8b:ef:d7:c3:bd:ea: 17:1b:a6:e8:35:a6:b9:25:03:53:8b:10:ee:21:8a: 61:24:f0:45:91:ea:89:f0:83:a3:b3:e6:33:fe:97: d0:7f:29:b7:5d:9d:12:48:af:2e:fe:9f:2f:86:e8: 32:94:ce:98:7f:4c:d7:3a:6f:e4:ee:a3:f0:76:ef: 28:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:2A:B9:C4:36:45:C1:70:74:3E:F8:6F:F1:74:13:D0:19:8F:1F:F2 X509v3 Authority Key Identifier: keyid:CE:A7:4F:F3:94:5E:75:08:59:9D:54:A7:21:E4:7B:3B:A7:57:06:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/323830343a353730633a623030303a3a2f33362d3336203d3e20323638303430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:570c:b000::/36 Signature Algorithm: sha256WithRSAEncryption b0:79:fb:b3:7d:1b:a1:11:72:92:68:7a:eb:e3:7c:d7:e1:fb: 78:45:06:c6:4b:58:3d:0d:86:01:e2:fc:41:b1:48:49:f2:b5: fd:26:d4:97:4e:4c:8c:44:09:7e:ca:c6:9c:48:53:d5:b5:e3: 60:2f:9f:62:86:97:22:4a:97:f1:82:8a:86:7e:b5:0d:f8:2e: c3:f3:34:25:5e:79:96:20:a5:91:9f:0d:54:72:23:c6:1f:4a: a6:93:fd:dc:0f:41:b1:40:dd:f1:27:e1:25:a5:ce:e4:5e:9a: ca:03:b3:a1:e4:0c:e8:f3:81:af:3a:78:cb:4b:65:51:52:f9: 4b:fd:f3:78:ca:5e:07:53:05:b6:51:5a:a4:ef:5c:de:9d:2e: 5b:2a:9d:80:54:42:d4:ef:b8:f4:c7:f5:ec:89:78:d3:2f:c8: ea:8b:9d:a7:ca:d5:e2:38:b0:28:a5:2b:3f:14:26:b2:fe:c1: 34:d5:8e:0a:59:7b:1c:37:a5:3b:6a:bc:85:67:fc:24:64:59: e4:0a:8a:1f:0b:58:12:00:2f:5f:f8:a2:7e:c5:02:ba:41:4d: a2:0f:d2:ea:7d:ad:dd:62:99:af:b5:8d:27:31:a3:97:87:28: 0d:19:94:71:d9:30:e0:29:83:19:37:51:b8:5d:e4:01:d8:3b: ba:a4:0f:88 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUB5wlI2D214RcZmdHXoW+7OPdH7kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBNzRGRjM5NDVFNzUwODU5OUQ1NEE3MjFFNDdCM0JB NzU3MDZFMzAeFw0yNTA5MDgyMTI2MjVaFw0yNjA5MDcyMTMxMjVaMDMxMTAvBgNV BAMTKDI2MkFCOUM0MzY0NUMxNzA3NDNFRjg2RkYxNzQxM0QwMTk4RjFGRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBXlQI2traWgCsG7SFHDel2+XL l8PXMl8mhjfdxEcGcVQ/+OExHisNobebYp+2SDxOftQBjeZlgRo1iAhbQr69NFCK uCep8DJeCksuNqFwpL+BxEENI2Dn50gNwpO4pzWQl7chUr89VCh55/1JcpdhHBI5 C5HxTecr5u1x9rlOqgEvraHlvGvMyjvP9mLt8iYSBtYpGvrPRAZLejZG9jnyJcCi hMqOAFVM9FARuIeHK3FjWmADoD+Fcfk0G4vv18O96hcbpug1prklA1OLEO4himEk 8EWR6onwg6Oz5jP+l9B/KbddnRJIry7+ny+G6DKUzph/TNc6b+Tuo/B27yi/AgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUJiq5xDZFwXB0Pvhv8XQT0BmPH/IwHwYDVR0j BBgwFoAUzqdP85RedQhZnVSnIeR7O6dXBuMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRzJqSDQ4OUhzWHBtelh2ZjhYV2c1RGcyRFo4NVU2RmJjVm1NUHFMRm9G NmcvMC9DRUE3NEZGMzk0NUU3NTA4NTk5RDU0QTcyMUU0N0IzQkE3NTcwNkUzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFQTc0RkYzOTQ1RTc1MDg1 OTlENTRBNzIxRTQ3QjNCQTc1NzA2RTMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0cyakg0ODlIc1hwbXpYdmY4WFdnNURnMkRaODVVNkZiY1ZtTVBxTEZvRjZnLzAv MzIzODMwMzQzYTM1MzczMDYzM2E2MjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk M2UyMDMyMzYzODMwMzQzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEVwywMA0GCSqGSIb3DQEBCwUA A4IBAQCwefuzfRuhEXKSaHrr43zX4ft4RQbGS1g9DYYB4vxBsUhJ8rX9JtSXTkyM RAl+ysacSFPVteNgL59ihpciSpfxgoqGfrUN+C7D8zQlXnmWIKWRnw1UciPGH0qm k/3cD0GxQN3xJ+Elpc7kXprKA7Oh5Azo84GvOnjLS2VRUvlL/fN4yl4HUwW2UVqk 71zenS5bKp2AVELU77j0x/XsiXjTL8jqi52nytXiOLAopSs/FCay/sE01Y4KWXsc N6U7aryFZ/wkZFnkCoofC1gSAC9f+KJ+xQK6QU2iD9Lqfa3dYpmvtY0nMaOXhygN GZRx2TDgKYMZN1G4XeQB2Du6pA+I -----END CERTIFICATE-----Generated at Mon Oct 20 16:22:36 2025 by rpki-client