$ rpki-client -vvf rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/323830343a333364343a313a3a2f34382d3438203d3e20323635343139.roa File: 323830343a333364343a313a3a2f34382d3438203d3e20323635343139.roa (raw, json) Hash identifier: v/vv5SOG4MKFrzM74dQfb1JZqKLPwC712Acu9aYRrr4= Subject key identifier: A8:7A:87:94:71:01:D0:4D:D6:3D:23:6B:7A:88:17:EB:77:E2:10:C2 Certificate issuer: /CN=09FAF7FC2061224C37D7CA16E7184E5BE3F1279F Certificate serial: 3AFA0D48CEA2A862D8C31B24F8C6CFF142CFC097 Authority key identifier: 09:FA:F7:FC:20:61:22:4C:37:D7:CA:16:E7:18:4E:5B:E3:F1:27:9F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09FAF7FC2061224C37D7CA16E7184E5BE3F1279F.cer Subject info access: rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/323830343a333364343a313a3a2f34382d3438203d3e20323635343139.roa Signing time: Fri 05 Sep 2025 17:21:30 +0000 ROA not before: Fri 05 Sep 2025 17:16:30 +0000 ROA not after: Fri 04 Sep 2026 17:21:30 +0000 asID: 265419 IP address blocks: 2804:33d4:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/09FAF7FC2061224C37D7CA16E7184E5BE3F1279F.crl rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/09FAF7FC2061224C37D7CA16E7184E5BE3F1279F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09FAF7FC2061224C37D7CA16E7184E5BE3F1279F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 17:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:fa:0d:48:ce:a2:a8:62:d8:c3:1b:24:f8:c6:cf:f1:42:cf:c0:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09FAF7FC2061224C37D7CA16E7184E5BE3F1279F Validity Not Before: Sep 5 17:16:30 2025 GMT Not After : Sep 4 17:21:30 2026 GMT Subject: CN=A87A87947101D04DD63D236B7A8817EB77E210C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:51:de:29:8f:c6:8a:3e:6f:be:7b:f2:f8:36: 6e:b9:34:98:58:39:54:a6:3b:23:4f:63:8b:e7:b0: 29:37:d7:54:9d:8b:c8:65:b9:d3:c2:9f:45:a9:21: b9:39:7d:cf:92:1f:a5:c2:24:11:96:a5:80:43:0c: bb:8b:2b:f2:2c:b9:42:86:6a:a3:1d:cb:80:29:0a: 82:0d:d3:5f:ef:a3:a4:54:ea:a2:c6:9c:c0:92:b3: e6:84:60:30:02:a3:29:f9:e7:ed:e5:29:68:df:c1: d7:34:0d:68:2d:39:9e:08:92:df:4a:6a:bf:ed:0d: 73:19:82:2b:56:49:f0:d1:fa:9e:cb:14:57:4d:04: 0a:03:fd:76:fb:f7:ad:8a:54:a8:22:85:4d:3f:92: 94:29:6f:52:2e:cd:66:91:ef:01:42:6e:41:59:e9: ac:6c:e9:38:da:a2:f2:f7:b7:bf:32:42:d6:ae:19: 7e:4b:33:d1:10:8e:6b:4c:9b:81:ca:30:48:e1:ea: f7:4e:ea:e1:af:75:27:38:de:7b:6e:df:4d:02:76: f2:89:f5:b4:f4:01:a4:3a:9e:dd:ee:3d:4a:f2:5e: f0:c5:6e:7c:f7:a4:b6:83:a5:66:87:42:df:8d:fe: 17:5c:c0:a5:95:00:57:83:44:b0:49:f1:c3:48:30: 21:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:7A:87:94:71:01:D0:4D:D6:3D:23:6B:7A:88:17:EB:77:E2:10:C2 X509v3 Authority Key Identifier: keyid:09:FA:F7:FC:20:61:22:4C:37:D7:CA:16:E7:18:4E:5B:E3:F1:27:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/09FAF7FC2061224C37D7CA16E7184E5BE3F1279F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09FAF7FC2061224C37D7CA16E7184E5BE3F1279F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/323830343a333364343a313a3a2f34382d3438203d3e20323635343139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:33d4:1::/48 Signature Algorithm: sha256WithRSAEncryption 4e:b8:ba:2e:94:be:f1:8f:97:0b:be:65:77:b4:e9:df:08:b5: 9e:a0:40:19:7d:bf:cb:6b:37:d1:a6:98:dc:b5:f0:8e:86:fb: 8c:44:cb:3e:69:9d:3e:e2:02:d7:14:8e:ba:58:4d:89:81:e7: 30:3b:ae:9b:13:8b:e1:f6:27:65:3d:7e:da:9e:36:4b:99:d6: cc:d7:3c:6f:38:a7:a6:6c:d6:9f:e0:cf:9e:d9:82:25:15:07: da:6d:3f:c2:a4:0b:1e:e0:10:b3:ec:33:52:ff:9e:e8:94:29: ed:32:73:60:2e:a2:a8:d7:1a:b9:ee:16:80:06:54:7b:43:c8: ad:7a:ff:37:4d:c2:df:46:36:74:ac:8b:6f:98:a2:e1:c6:87: df:6c:8c:94:aa:48:b2:ee:c2:65:73:df:48:08:73:04:de:38: c1:ff:e1:86:9a:4a:a6:28:b7:5c:c8:6c:4f:4d:1f:57:23:57: b2:4e:e9:75:39:2a:03:69:4d:b8:44:39:af:b2:bc:53:fd:61: c6:1b:d3:a3:b1:2d:24:76:e1:6e:08:98:89:65:e2:b6:45:98: c0:56:c8:2c:a3:11:71:0e:4a:3f:3f:68:5a:e0:a3:cf:e2:b1: dd:d5:b3:17:d8:21:5f:c9:79:b9:46:f5:71:3c:d1:f8:47:14: d5:47:29:45 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUOvoNSM6iqGLYwxsk+MbP8ULPwJcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGQUY3RkMyMDYxMjI0QzM3RDdDQTE2RTcxODRFNUJF M0YxMjc5RjAeFw0yNTA5MDUxNzE2MzBaFw0yNjA5MDQxNzIxMzBaMDMxMTAvBgNV BAMTKEE4N0E4Nzk0NzEwMUQwNERENjNEMjM2QjdBODgxN0VCNzdFMjEwQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhUd4pj8aKPm++e/L4Nm65NJhY OVSmOyNPY4vnsCk311Sdi8hludPCn0WpIbk5fc+SH6XCJBGWpYBDDLuLK/IsuUKG aqMdy4ApCoIN01/vo6RU6qLGnMCSs+aEYDACoyn55+3lKWjfwdc0DWgtOZ4Ikt9K ar/tDXMZgitWSfDR+p7LFFdNBAoD/Xb7962KVKgihU0/kpQpb1IuzWaR7wFCbkFZ 6axs6TjaovL3t78yQtauGX5LM9EQjmtMm4HKMEjh6vdO6uGvdSc43ntu300CdvKJ 9bT0AaQ6nt3uPUryXvDFbnz3pLaDpWaHQt+N/hdcwKWVAFeDRLBJ8cNIMCHhAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUqHqHlHEB0E3WPSNreogX63fiEMIwHwYDVR0j BBgwFoAUCfr3/CBhIkw318oW5xhOW+PxJ58wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSHJZZG5wNnNxOWdUeWMxTXBKVmFTejZhNEI5TWhIU1VlSnJ4eFNBd3Ry OGMvMC8wOUZBRjdGQzIwNjEyMjRDMzdEN0NBMTZFNzE4NEU1QkUzRjEyNzlGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA5RkFGN0ZDMjA2MTIyNEMz N0Q3Q0ExNkU3MTg0RTVCRTNGMTI3OUYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0hyWWRucDZzcTlnVHljMU1wSlZhU3o2YTRCOU1oSFNVZUpyeHhTQXd0cjhjLzAv MzIzODMwMzQzYTMzMzM2NDM0M2EzMTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMy MzYzNTM0MzEzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF BQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEM9QAATANBgkqhkiG9w0BAQsFAAOCAQEA Tri6LpS+8Y+XC75ld7Tp3wi1nqBAGX2/y2s30aaY3LXwjob7jETLPmmdPuIC1xSO ulhNiYHnMDuumxOL4fYnZT1+2p42S5nWzNc8bzinpmzWn+DPntmCJRUH2m0/wqQL HuAQs+wzUv+e6JQp7TJzYC6iqNcaue4WgAZUe0PIrXr/N03C30Y2dKyLb5ii4caH 32yMlKpIsu7CZXPfSAhzBN44wf/hhppKpii3XMhsT00fVyNXsk7pdTkqA2lNuEQ5 r7K8U/1hxhvTo7EtJHbhbgiYiWXitkWYwFbILKMRcQ5KPz9oWuCjz+Kx3dWzF9gh X8l5uUb1cTzR+EcU1UcpRQ== -----END CERTIFICATE-----Generated at Mon Oct 20 21:24:29 2025 by rpki-client