$ rpki-client -vvf rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/323830343a386637303a323030303a3a2f33362d3336203d3e20323632353835.roa File: 323830343a386637303a323030303a3a2f33362d3336203d3e20323632353835.roa (raw, json) Hash identifier: 9PWGUt01EPgrYhAHd1wor2VFvYNNDIWfNL0cmUjNbEU= Subject key identifier: 43:28:DF:3C:13:EF:AA:6D:48:C8:C6:09:D3:DA:A4:B2:2A:14:21:FB Certificate issuer: /CN=5AC853AE3F9CB62CC01BAF4379BF8072926B07A7 Certificate serial: 10C76E7C3293AEF842252097E5210D6829B03400 Authority key identifier: 5A:C8:53:AE:3F:9C:B6:2C:C0:1B:AF:43:79:BF:80:72:92:6B:07:A7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer Subject info access: rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/323830343a386637303a323030303a3a2f33362d3336203d3e20323632353835.roa Signing time: Thu 16 Oct 2025 16:05:06 +0000 ROA not before: Thu 16 Oct 2025 16:00:06 +0000 ROA not after: Thu 15 Oct 2026 16:05:06 +0000 asID: 262585 IP address blocks: 2804:8f70:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.crl rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 13:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:c7:6e:7c:32:93:ae:f8:42:25:20:97:e5:21:0d:68:29:b0:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AC853AE3F9CB62CC01BAF4379BF8072926B07A7 Validity Not Before: Oct 16 16:00:06 2025 GMT Not After : Oct 15 16:05:06 2026 GMT Subject: CN=4328DF3C13EFAA6D48C8C609D3DAA4B22A1421FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:be:59:6d:72:3a:d5:c0:7a:82:11:59:99:b4: 5a:fb:a3:cb:70:4f:42:62:ca:e4:d1:50:0c:6d:fe: d9:98:f6:ee:34:ae:f9:94:af:a8:15:69:20:e5:c0: a8:f0:c6:b1:3a:a2:22:06:07:55:70:0f:ba:fb:71: b5:a1:0d:cc:bf:82:43:05:5c:99:9d:70:bc:46:fe: 2f:34:23:b6:df:cb:ba:0c:d6:05:cd:d5:7b:37:4f: bb:20:d0:e4:9d:a5:59:af:0e:f7:63:fe:cf:62:c1: 72:7f:cb:91:cb:b9:29:87:a1:c4:74:02:88:68:d9: 21:1a:ed:a9:9d:3e:90:d4:3f:37:ec:6f:66:5f:2e: 9d:e0:32:87:ce:00:1d:71:30:36:4a:96:4d:21:e1: ac:0a:25:3f:bc:f6:75:5c:2a:2e:79:81:96:88:c7: 87:a5:8c:72:55:ca:f6:1c:d3:75:77:ab:18:15:4d: e2:1f:5a:c1:74:f0:13:c6:2c:c1:21:09:80:d4:97: bc:9b:28:0c:16:61:cb:17:3a:c2:b9:a9:14:cb:13: ae:4a:23:5c:e9:b4:2a:d7:a1:cf:ba:71:fa:f8:c5: 9a:40:a0:3a:85:ab:ac:b8:a8:f8:7e:6f:d9:8d:ad: 5d:8a:58:70:79:77:a1:a9:0b:75:ad:a3:d9:bd:3c: 1b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:28:DF:3C:13:EF:AA:6D:48:C8:C6:09:D3:DA:A4:B2:2A:14:21:FB X509v3 Authority Key Identifier: keyid:5A:C8:53:AE:3F:9C:B6:2C:C0:1B:AF:43:79:BF:80:72:92:6B:07:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/323830343a386637303a323030303a3a2f33362d3336203d3e20323632353835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8f70:2000::/36 Signature Algorithm: sha256WithRSAEncryption b2:e4:49:52:1a:07:a7:8f:c2:bb:44:f6:01:bf:90:ad:2e:42: 10:82:e9:7e:20:55:56:34:d2:5d:ae:3c:6b:8c:e7:f8:bf:87: 3d:e7:67:92:a4:b6:d3:59:02:44:a9:7b:2e:61:64:21:cb:44: b5:a6:2a:fc:a7:00:57:d7:e4:e2:07:91:85:33:0c:f4:84:dd: f3:40:60:cb:e6:a6:7c:05:5c:df:a8:c0:f1:b1:8c:05:75:9a: fa:64:e7:aa:36:c8:a8:f5:06:6f:10:a1:2e:94:fd:00:21:94: 90:45:6d:8e:67:0e:b3:d3:03:5d:0b:e1:b2:df:87:d7:a6:0e: e1:83:ae:c8:a6:4b:32:74:75:c4:d8:f2:8e:74:29:10:d7:a9: 54:93:91:be:ad:db:e0:49:90:60:28:11:b6:89:c7:15:28:a8: 70:99:6d:77:a3:89:a0:78:4a:0e:65:cc:01:40:d4:b0:92:d5: 17:9e:f3:b0:c1:d7:81:e7:45:dd:01:43:e1:3b:95:b2:dc:ac: 7f:0f:a6:2a:99:6e:ee:37:52:ad:46:e1:d3:32:ac:de:b6:48: e1:54:97:2f:4e:59:ce:5d:5a:27:13:2f:4c:d8:1e:ab:d3:08: 51:ea:48:14:8d:23:2a:f5:00:1b:03:ed:2c:88:5e:95:c6:68: 8f:6e:41:8c -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUEMdufDKTrvhCJSCX5SENaCmwNAAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFDODUzQUUzRjlDQjYyQ0MwMUJBRjQzNzlCRjgwNzI5 MjZCMDdBNzAeFw0yNTEwMTYxNjAwMDZaFw0yNjEwMTUxNjA1MDZaMDMxMTAvBgNV BAMTKDQzMjhERjNDMTNFRkFBNkQ0OEM4QzYwOUQzREFBNEIyMkExNDIxRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXvlltcjrVwHqCEVmZtFr7o8tw T0JiyuTRUAxt/tmY9u40rvmUr6gVaSDlwKjwxrE6oiIGB1VwD7r7cbWhDcy/gkMF XJmdcLxG/i80I7bfy7oM1gXN1Xs3T7sg0OSdpVmvDvdj/s9iwXJ/y5HLuSmHocR0 Aoho2SEa7amdPpDUPzfsb2ZfLp3gMofOAB1xMDZKlk0h4awKJT+89nVcKi55gZaI x4eljHJVyvYc03V3qxgVTeIfWsF08BPGLMEhCYDUl7ybKAwWYcsXOsK5qRTLE65K I1zptCrXoc+6cfr4xZpAoDqFq6y4qPh+b9mNrV2KWHB5d6GpC3Wto9m9PBsTAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUQyjfPBPvqm1IyMYJ09qksioUIfswHwYDVR0j BBgwFoAUWshTrj+ctizAG69Deb+AcpJrB6cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR21uUmM2Q1BwSkxDeEdORGUxeEFybmVIelpvRDJYMlA4NE1HVHZwRWta ZnQvMC81QUM4NTNBRTNGOUNCNjJDQzAxQkFGNDM3OUJGODA3MjkyNkIwN0E3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVBQzg1M0FFM0Y5Q0I2MkND MDFCQUY0Mzc5QkY4MDcyOTI2QjA3QTcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0dtblJjNkNQcEpMQ3hHTkRlMXhBcm5lSHpab0QyWDJQODRNR1R2cEVrWmZ0LzAv MzIzODMwMzQzYTM4NjYzNzMwM2EzMjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk M2UyMDMyMzYzMjM1MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEj3AgMA0GCSqGSIb3DQEBCwUA A4IBAQCy5ElSGgenj8K7RPYBv5CtLkIQgul+IFVWNNJdrjxrjOf4v4c952eSpLbT WQJEqXsuYWQhy0S1pir8pwBX1+TiB5GFMwz0hN3zQGDL5qZ8BVzfqMDxsYwFdZr6 ZOeqNsio9QZvEKEulP0AIZSQRW2OZw6z0wNdC+Gy34fXpg7hg67IpksydHXE2PKO dCkQ16lUk5G+rdvgSZBgKBG2iccVKKhwmW13o4mgeEoOZcwBQNSwktUXnvOwwdeB 50XdAUPhO5Wy3Kx/D6YqmW7uN1KtRuHTMqzetkjhVJcvTlnOXVonEy9M2B6r0whR 6kgUjSMq9QAbA+0siF6VxmiPbkGM -----END CERTIFICATE-----Generated at Mon Oct 20 19:13:54 2025 by rpki-client