$ rpki-client -vvf rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/0/323830343a333766383a383030303a3a2f33332d313238203d3e20323636343437.roa File: 323830343a333766383a383030303a3a2f33332d313238203d3e20323636343437.roa (raw, json) Hash identifier: x0XByOgEjdZ3jyG4PawZc0MasOgp61+3tOi2Kpz2g8E= Subject key identifier: DF:B0:D6:C8:40:6D:B9:DA:D3:BF:89:4E:06:C4:02:63:8D:5D:09:B2 Certificate issuer: /CN=12906B35BFA4F45F5A7C880F666D38AAA21A0056 Certificate serial: 2AD88BF3AF0BEFECA7B7CAFAF4D9BA6C989ACA8A Authority key identifier: 12:90:6B:35:BF:A4:F4:5F:5A:7C:88:0F:66:6D:38:AA:A2:1A:00:56 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12906B35BFA4F45F5A7C880F666D38AAA21A0056.cer Subject info access: rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/0/323830343a333766383a383030303a3a2f33332d313238203d3e20323636343437.roa Signing time: Tue 23 Sep 2025 21:34:28 +0000 ROA not before: Tue 23 Sep 2025 21:29:28 +0000 ROA not after: Tue 22 Sep 2026 21:34:28 +0000 asID: 266447 IP address blocks: 2804:37f8:8000::/33 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/0/12906B35BFA4F45F5A7C880F666D38AAA21A0056.crl rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/0/12906B35BFA4F45F5A7C880F666D38AAA21A0056.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12906B35BFA4F45F5A7C880F666D38AAA21A0056.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 01:14:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:d8:8b:f3:af:0b:ef:ec:a7:b7:ca:fa:f4:d9:ba:6c:98:9a:ca:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12906B35BFA4F45F5A7C880F666D38AAA21A0056 Validity Not Before: Sep 23 21:29:28 2025 GMT Not After : Sep 22 21:34:28 2026 GMT Subject: CN=DFB0D6C8406DB9DAD3BF894E06C402638D5D09B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:59:75:89:bc:72:95:5c:48:a0:fb:15:91:a5: 38:d9:fa:47:36:52:aa:78:4b:dc:6f:98:7c:32:e8: be:fb:eb:1c:57:57:00:37:c7:88:ad:d0:1f:f1:cf: 11:d6:64:88:28:12:a2:a7:ae:43:de:56:eb:1c:f6: ba:1b:4c:59:4d:0f:a5:f2:bf:f1:ce:b2:62:db:d0: 3e:41:a1:78:7a:05:14:f2:fb:7b:df:45:cb:76:8d: 7f:f9:f5:35:1e:15:af:65:3c:45:be:fd:ba:f2:e1: 6a:07:9e:17:b4:65:32:b7:f9:f9:88:2f:59:bc:84: 29:b6:f9:2b:37:e5:70:04:f4:6a:ca:5d:47:d3:3f: 48:c0:29:c2:13:82:b3:5b:01:72:55:ab:e8:ea:ce: b8:6b:97:19:d9:57:8c:e8:fc:25:b4:63:e2:13:16: eb:ae:7f:fb:a4:f6:05:8a:ec:e9:40:57:0b:76:4a: e9:f8:82:e8:0f:e6:6d:8f:38:b0:49:11:1f:e1:cd: 6a:32:9e:ec:59:70:53:0c:5e:f2:1e:4c:de:94:a3: 4b:1f:39:6a:61:58:fd:b9:c9:9f:00:4a:11:89:e6: 50:8f:cb:87:d9:6f:75:d0:7d:de:d5:27:0b:d7:f5: 6f:e4:0b:01:6e:e8:9d:42:40:fd:59:77:cb:1c:15: bf:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B0:D6:C8:40:6D:B9:DA:D3:BF:89:4E:06:C4:02:63:8D:5D:09:B2 X509v3 Authority Key Identifier: keyid:12:90:6B:35:BF:A4:F4:5F:5A:7C:88:0F:66:6D:38:AA:A2:1A:00:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/0/12906B35BFA4F45F5A7C880F666D38AAA21A0056.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12906B35BFA4F45F5A7C880F666D38AAA21A0056.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/0/323830343a333766383a383030303a3a2f33332d313238203d3e20323636343437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:37f8:8000::/33 Signature Algorithm: sha256WithRSAEncryption 95:88:22:a9:84:de:c0:6c:8c:a4:88:f3:4e:fb:b2:66:44:d4: 7f:6c:10:60:e3:8d:b7:d8:4a:b1:30:38:88:cc:99:db:54:0b: 65:71:0d:c5:7f:b5:e7:46:1a:de:e2:7a:93:6f:29:eb:a1:e4: 30:d8:77:60:d8:f8:e0:63:67:51:ec:41:6a:95:3b:90:6b:92: 63:35:1c:26:8d:53:33:6c:1e:2f:ee:65:d2:c9:4b:c3:ea:0c: ca:50:8c:e2:e8:9d:03:47:6a:98:f3:8a:b2:c6:5e:10:61:c6: d3:12:5b:22:d7:29:6b:75:e9:ff:09:10:23:b4:0c:a4:a1:d2: 6d:80:e1:76:98:b4:72:63:c8:32:a0:0b:05:2d:cc:8e:13:79: 7e:e6:fe:a3:a9:3e:7b:9b:a2:96:30:a6:b7:c8:af:33:24:89: 75:21:12:32:fd:18:9e:b6:93:8d:3f:1e:c8:72:df:bb:1e:78: 6e:43:89:a4:77:8f:3a:3e:1f:4a:51:a3:41:5c:54:45:97:b7: 99:73:53:c2:bf:b5:c1:5a:f1:6f:ab:98:8e:e3:df:61:e8:26: f5:c3:4c:09:67:5c:94:14:2a:ac:89:b1:3f:ff:4e:2c:25:4b: 54:9f:0f:0e:85:71:20:60:b4:ae:b3:d0:d9:8a:2d:6e:47:2f: 6a:6d:c7:d0 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUKtiL868L7+ynt8r69Nm6bJiayoowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI5MDZCMzVCRkE0RjQ1RjVBN0M4ODBGNjY2RDM4QUFB MjFBMDA1NjAeFw0yNTA5MjMyMTI5MjhaFw0yNjA5MjIyMTM0MjhaMDMxMTAvBgNV BAMTKERGQjBENkM4NDA2REI5REFEM0JGODk0RTA2QzQwMjYzOEQ1RDA5QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPWXWJvHKVXEig+xWRpTjZ+kc2 Uqp4S9xvmHwy6L776xxXVwA3x4it0B/xzxHWZIgoEqKnrkPeVusc9robTFlND6Xy v/HOsmLb0D5BoXh6BRTy+3vfRct2jX/59TUeFa9lPEW+/bry4WoHnhe0ZTK3+fmI L1m8hCm2+Ss35XAE9GrKXUfTP0jAKcITgrNbAXJVq+jqzrhrlxnZV4zo/CW0Y+IT Fuuuf/uk9gWK7OlAVwt2Sun4gugP5m2POLBJER/hzWoynuxZcFMMXvIeTN6Uo0sf OWphWP25yZ8AShGJ5lCPy4fZb3XQfd7VJwvX9W/kCwFu6J1CQP1Zd8scFb+7AgMB AAGjggJdMIICWTAdBgNVHQ4EFgQU37DWyEBtudrTv4lOBsQCY41dCbIwHwYDVR0j BBgwFoAUEpBrNb+k9F9afIgPZm04qqIaAFYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSHFSeHFmZ1VkN1hFaHpYSEdCVXlNd0FiM0xWem13UVhXVjNQeWtRNkF5 NFgvMC8xMjkwNkIzNUJGQTRGNDVGNUE3Qzg4MEY2NjZEMzhBQUEyMUEwMDU2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEyOTA2QjM1QkZBNEY0NUY1 QTdDODgwRjY2NkQzOEFBQTIxQTAwNTYuY2VyMIG4BggrBgEFBQcBCwSBqzCBqDCB pQYIKwYBBQUHMAuGgZhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0hxUnhxZmdVZDdYRWh6WEhHQlV5TXdBYjNMVnptd1FYV1YzUHlrUTZBeTRYLzAv MzIzODMwMzQzYTMzMzc2NjM4M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMxMzIzODIw M2QzZTIwMzIzNjM2MzQzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYHKAQ3+IAwDQYJKoZIhvcNAQEL BQADggEBAJWIIqmE3sBsjKSI8077smZE1H9sEGDjjbfYSrEwOIjMmdtUC2VxDcV/ tedGGt7iepNvKeuh5DDYd2DY+OBjZ1HsQWqVO5BrkmM1HCaNUzNsHi/uZdLJS8Pq DMpQjOLonQNHapjzirLGXhBhxtMSWyLXKWt16f8JECO0DKSh0m2A4XaYtHJjyDKg CwUtzI4TeX7m/qOpPnubopYwprfIrzMkiXUhEjL9GJ62k40/Hshy37seeG5DiaR3 jzo+H0pRo0FcVEWXt5lzU8K/tcFa8W+rmI7j32HoJvXDTAlnXJQUKqyJsT//Tiwl S1SfDw6FcSBgtK6z0NmKLW5HL2ptx9A= -----END CERTIFICATE-----Generated at Mon Oct 20 11:23:22 2025 by rpki-client