$ rpki-client -vvf rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/323830343a326437303a3330303a3a2f34312d3431203d3e20323635323832.roa File: 323830343a326437303a3330303a3a2f34312d3431203d3e20323635323832.roa (raw, json) Hash identifier: PiW5duALHil8KLibp8tUS/Vk3EcvZD5ZMKNYP5RAazU= Subject key identifier: 20:74:6D:C3:51:AA:C3:DF:1E:41:0F:03:1D:29:AA:9F:08:D9:5B:FF Certificate issuer: /CN=9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC Certificate serial: 1CE1B1083E7BAAD5BF02A588440A6C0246B2A175 Authority key identifier: 9C:B6:D5:EC:53:00:D1:A3:6F:F8:93:C6:0F:39:0D:64:BF:00:F1:EC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.cer Subject info access: rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/323830343a326437303a3330303a3a2f34312d3431203d3e20323635323832.roa Signing time: Mon 15 Sep 2025 14:00:02 +0000 ROA not before: Mon 15 Sep 2025 13:55:02 +0000 ROA not after: Mon 14 Sep 2026 14:00:02 +0000 asID: 265282 IP address blocks: 2804:2d70:300::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.crl rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 11:52:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:e1:b1:08:3e:7b:aa:d5:bf:02:a5:88:44:0a:6c:02:46:b2:a1:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC Validity Not Before: Sep 15 13:55:02 2025 GMT Not After : Sep 14 14:00:02 2026 GMT Subject: CN=20746DC351AAC3DF1E410F031D29AA9F08D95BFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:70:33:bb:9a:15:6e:ef:c2:10:4e:28:12:cc: 9e:14:67:db:41:2d:5d:44:a1:eb:41:ad:d0:67:7b: f9:86:9e:93:9a:fb:0b:c0:77:d1:d2:3f:32:ea:0d: 60:9d:16:35:fb:6d:c4:a1:2e:a9:18:cc:2f:81:ad: ae:34:4b:10:97:d6:b2:0a:4c:95:47:51:b7:e5:92: 34:c6:30:f6:7d:4c:ed:1a:e2:d0:3c:60:e7:b3:5f: e1:18:ed:f4:5b:5d:8b:cf:cc:ca:b1:87:c4:07:9a: 1f:8c:90:a5:f5:42:77:2b:ad:d0:79:9d:b2:6a:ab: 4c:06:b3:33:61:13:f8:ef:b4:5c:da:1f:e9:56:10: 92:d5:ef:36:cd:2f:0b:63:a7:a6:1b:26:6a:8b:a6: c2:dc:a1:d2:bb:08:e9:dd:3a:3b:30:ea:37:de:5e: aa:0f:e6:86:d9:f5:70:0b:c4:a7:83:44:2a:40:33: 7c:d2:2b:a6:6a:2d:b8:cc:c7:93:31:c7:e3:5d:ba: fb:2b:1e:0f:6b:43:31:87:53:0f:07:d2:c1:39:8c: 1b:1e:c8:e0:7c:19:7f:7c:d9:e4:ed:5f:22:ad:ca: af:0b:75:e9:df:b7:00:df:a3:fc:4e:36:da:c2:d7: 5c:d7:8b:07:55:b0:70:2a:3c:be:2a:00:aa:ab:3b: 34:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:74:6D:C3:51:AA:C3:DF:1E:41:0F:03:1D:29:AA:9F:08:D9:5B:FF X509v3 Authority Key Identifier: keyid:9C:B6:D5:EC:53:00:D1:A3:6F:F8:93:C6:0F:39:0D:64:BF:00:F1:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/323830343a326437303a3330303a3a2f34312d3431203d3e20323635323832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:2d70:300::/41 Signature Algorithm: sha256WithRSAEncryption 9a:49:03:90:e9:cf:1f:bd:a6:93:06:d9:b8:af:eb:5b:a1:25: f3:f8:22:03:bb:c4:e1:d5:b6:20:f2:73:57:b4:99:55:0c:38: 6f:11:8d:0b:0e:d5:cc:e5:74:6d:0f:6d:f5:55:82:06:6b:d9: 92:a7:0b:29:62:1b:0c:ca:6c:04:77:b4:6e:49:71:12:44:a6: 71:79:b1:a9:f2:d0:1c:d9:8a:b1:69:e9:8d:74:70:c8:52:49: fd:81:d7:33:c1:b3:4f:a6:a1:e9:ab:4e:1e:4b:a8:cd:27:c7: 53:9a:5e:c9:d0:c8:4c:ca:25:95:26:52:37:ab:2d:7a:9b:38: 7f:d3:74:a3:9f:96:f7:6d:67:8c:b0:77:ee:b5:09:da:24:cc: 44:06:b9:46:f3:f0:ea:4b:32:74:06:23:21:38:79:c3:1f:aa: 12:bd:5b:71:1d:18:14:b4:12:7c:f1:68:33:46:c0:e2:5e:15: a6:9e:77:da:45:87:28:ca:8f:79:ef:27:d8:f3:d4:6b:8f:3a: bf:0d:d8:59:38:b0:40:48:06:a2:81:35:f8:09:8a:fc:e8:99: 96:19:03:87:e4:95:cc:07:bb:50:50:ea:eb:68:24:9c:91:9c: 89:76:42:be:bd:e6:69:e1:90:c4:19:7f:6c:a8:55:2a:39:c7: 75:55:26:1b -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgIUHOGxCD57qtW/AqWIRApsAkayoXUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNCNkQ1RUM1MzAwRDFBMzZGRjg5M0M2MEYzOTBENjRC RjAwRjFFQzAeFw0yNTA5MTUxMzU1MDJaFw0yNjA5MTQxNDAwMDJaMDMxMTAvBgNV BAMTKDIwNzQ2REMzNTFBQUMzREYxRTQxMEYwMzFEMjlBQTlGMDhEOTVCRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgcDO7mhVu78IQTigSzJ4UZ9tB LV1EoetBrdBne/mGnpOa+wvAd9HSPzLqDWCdFjX7bcShLqkYzC+Bra40SxCX1rIK TJVHUbflkjTGMPZ9TO0a4tA8YOezX+EY7fRbXYvPzMqxh8QHmh+MkKX1QncrrdB5 nbJqq0wGszNhE/jvtFzaH+lWEJLV7zbNLwtjp6YbJmqLpsLcodK7COndOjsw6jfe XqoP5obZ9XALxKeDRCpAM3zSK6ZqLbjMx5Mxx+NduvsrHg9rQzGHUw8H0sE5jBse yOB8GX982eTtXyKtyq8LdenftwDfo/xONtrC11zXiwdVsHAqPL4qAKqrOzRNAgMB AAGjggJaMIICVjAdBgNVHQ4EFgQUIHRtw1Gqw98eQQ8DHSmqnwjZW/8wHwYDVR0j BBgwFoAUnLbV7FMA0aNv+JPGDzkNZL8A8ewwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSHZ4ZjNlSjV4MkNMeGsyTkZhVUZhUnhoR21XeFIxR28zdFdZdHREOGRF Tk4vMC85Q0I2RDVFQzUzMDBEMUEzNkZGODkzQzYwRjM5MEQ2NEJGMDBGMUVDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDQjZENUVDNTMwMEQxQTM2 RkY4OTNDNjBGMzkwRDY0QkYwMEYxRUMuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0h2eGYzZUo1eDJDTHhrMk5GYVVGYVJ4aEdtV3hSMUdvM3RXWXR0RDhkRU5OLzAv MzIzODMwMzQzYTMyNjQzNzMwM2EzMzMwMzAzYTNhMmYzNDMxMmQzNDMxMjAzZDNl MjAzMjM2MzUzMjM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwcoBC1wAwAwDQYJKoZIhvcNAQELBQAD ggEBAJpJA5Dpzx+9ppMG2biv61uhJfP4IgO7xOHVtiDyc1e0mVUMOG8RjQsO1czl dG0PbfVVggZr2ZKnCyliGwzKbAR3tG5JcRJEpnF5sany0BzZirFp6Y10cMhSSf2B 1zPBs0+moemrTh5LqM0nx1OaXsnQyEzKJZUmUjerLXqbOH/TdKOflvdtZ4ywd+61 CdokzEQGuUbz8OpLMnQGIyE4ecMfqhK9W3EdGBS0EnzxaDNGwOJeFaaed9pFhyjK j3nvJ9jz1GuPOr8N2Fk4sEBIBqKBNfgJivzomZYZA4fklcwHu1BQ6utoJJyRnIl2 Qr695mnhkMQZf2yoVSo5x3VVJhs= -----END CERTIFICATE-----Generated at Mon Oct 20 19:48:06 2025 by rpki-client