$ rpki-client -vvf rpki-repo.registro.br/repo/n3bRx5jhRCUF39MPeZK7jJ8ZYLSSKo71cK2fsADYtc1/0/323830343a343433633a3a2f33322d313238203d3e20323637363131.roa File: 323830343a343433633a3a2f33322d313238203d3e20323637363131.roa (raw, json) Hash identifier: bL/3cJavWtCjzV3M2Smxs5oF64TchmbOwc08G5LhIYM= Subject key identifier: CA:B8:E4:17:E5:68:9C:B2:89:6A:F2:71:D3:73:D9:9B:32:3E:D0:A8 Certificate issuer: /CN=5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9 Certificate serial: 61CA3D395FF156CEFF2FC104C6C688E389A1858C Authority key identifier: 5A:1E:4C:0F:6F:96:E5:93:3B:E0:09:91:E3:86:C3:F9:65:E7:C3:E9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9.cer Subject info access: rsync://rpki-repo.registro.br/repo/n3bRx5jhRCUF39MPeZK7jJ8ZYLSSKo71cK2fsADYtc1/0/323830343a343433633a3a2f33322d313238203d3e20323637363131.roa Signing time: Mon 06 Oct 2025 16:07:25 +0000 ROA not before: Mon 06 Oct 2025 16:02:25 +0000 ROA not after: Mon 05 Oct 2026 16:07:25 +0000 asID: 267611 IP address blocks: 2804:443c::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/n3bRx5jhRCUF39MPeZK7jJ8ZYLSSKo71cK2fsADYtc1/0/5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9.crl rsync://rpki-repo.registro.br/repo/n3bRx5jhRCUF39MPeZK7jJ8ZYLSSKo71cK2fsADYtc1/0/5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 09:43:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:ca:3d:39:5f:f1:56:ce:ff:2f:c1:04:c6:c6:88:e3:89:a1:85:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9 Validity Not Before: Oct 6 16:02:25 2025 GMT Not After : Oct 5 16:07:25 2026 GMT Subject: CN=CAB8E417E5689CB2896AF271D373D99B323ED0A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:12:be:4d:fb:00:bc:d6:f4:08:a6:32:be:52: 2c:75:45:88:07:57:0e:ea:53:8d:83:fb:d0:0c:7f: 15:bb:2c:1c:3d:49:d9:1b:8f:ea:a5:32:0c:ed:5e: 7a:7f:7f:8f:ab:2b:37:79:2f:17:d2:19:10:3a:e5: a8:cd:58:8c:38:f4:83:ce:70:97:e3:4b:57:3d:1f: a3:e1:02:39:50:61:0b:a6:06:58:3f:dc:6c:2e:a7: 4e:4e:c4:99:db:30:ee:e1:f9:ee:b1:d9:bd:63:7a: 63:2b:03:53:7a:29:77:dd:06:a5:c7:27:25:26:16: 22:22:13:c7:6f:e2:c1:cd:f8:ed:78:c6:27:1c:c1: 1b:00:4e:b7:4e:54:4c:dd:0e:00:48:3d:92:e5:6a: 5b:4f:93:91:b3:3f:f5:be:ad:4c:b9:54:ef:75:6f: 04:c7:f0:a1:eb:37:c5:22:23:9a:46:bb:e3:be:22: c2:47:15:3d:40:26:03:8c:ac:d1:e4:d3:cc:c8:7f: 1e:4c:68:95:ed:c6:d9:7f:28:ec:4d:2d:62:d8:60: 73:5d:0b:ed:92:8b:0d:6f:61:c3:75:d0:c4:c6:8f: c1:ce:2c:b9:6f:03:1f:9e:85:59:6d:9c:59:1b:f5: 5e:a2:92:59:3a:1b:d7:0a:d1:3a:60:d6:67:f8:7f: a2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B8:E4:17:E5:68:9C:B2:89:6A:F2:71:D3:73:D9:9B:32:3E:D0:A8 X509v3 Authority Key Identifier: keyid:5A:1E:4C:0F:6F:96:E5:93:3B:E0:09:91:E3:86:C3:F9:65:E7:C3:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/n3bRx5jhRCUF39MPeZK7jJ8ZYLSSKo71cK2fsADYtc1/0/5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/n3bRx5jhRCUF39MPeZK7jJ8ZYLSSKo71cK2fsADYtc1/0/323830343a343433633a3a2f33322d313238203d3e20323637363131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:443c::/32 Signature Algorithm: sha256WithRSAEncryption 17:b3:1a:d1:d1:fe:39:86:c2:9f:62:76:ca:a4:9c:05:c8:57: cf:56:c0:5c:86:25:70:d6:aa:db:9d:17:6e:b7:e0:63:dd:4c: 25:d9:3c:71:ff:7e:9f:37:a2:fd:0d:75:a3:08:c8:f1:7a:7c: da:ef:10:10:e8:52:9b:8a:b6:00:2c:f3:da:2f:7a:ca:4e:9f: 69:df:11:d1:3d:14:14:64:da:bc:dd:7a:f6:e5:10:00:cb:71: 9e:b1:d7:e2:dd:88:58:bd:88:25:5f:4a:f6:90:58:79:b5:e2: 1e:ed:d9:08:42:fd:a5:da:bc:c3:bb:c8:f2:3c:ae:21:df:15: 65:39:f7:78:c7:47:64:d6:4b:a6:4e:2b:47:79:8e:d6:4e:25: 1a:88:45:7b:c1:d1:b0:17:c0:ef:40:5d:04:74:d7:df:2f:da: 25:d1:0d:de:0e:ee:23:9f:32:09:68:ae:52:ce:6c:24:0b:ae: b2:12:6b:93:98:aa:1e:a2:82:94:f4:f8:3c:5a:9d:a1:6d:2a: 9c:7c:2b:33:63:89:e3:17:36:60:c2:4e:07:c9:02:a5:d6:83: b0:b7:2d:04:eb:16:c3:39:8e:0c:82:84:0c:9c:5d:02:9b:16: f0:01:37:93:91:15:b9:80:e7:40:d0:db:a3:56:fd:49:1a:b7: 42:56:32:4a -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUYco9OV/xVs7/L8EExsaI44mhhYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUExRTRDMEY2Rjk2RTU5MzNCRTAwOTkxRTM4NkMzRjk2 NUU3QzNFOTAeFw0yNTEwMDYxNjAyMjVaFw0yNjEwMDUxNjA3MjVaMDMxMTAvBgNV BAMTKENBQjhFNDE3RTU2ODlDQjI4OTZBRjI3MUQzNzNEOTlCMzIzRUQwQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Er5N+wC81vQIpjK+Uix1RYgH Vw7qU42D+9AMfxW7LBw9Sdkbj+qlMgztXnp/f4+rKzd5LxfSGRA65ajNWIw49IPO cJfjS1c9H6PhAjlQYQumBlg/3Gwup05OxJnbMO7h+e6x2b1jemMrA1N6KXfdBqXH JyUmFiIiE8dv4sHN+O14xiccwRsATrdOVEzdDgBIPZLlaltPk5GzP/W+rUy5VO91 bwTH8KHrN8UiI5pGu+O+IsJHFT1AJgOMrNHk08zIfx5MaJXtxtl/KOxNLWLYYHNd C+2Siw1vYcN10MTGj8HOLLlvAx+ehVltnFkb9V6iklk6G9cK0Tpg1mf4f6K7AgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUyrjkF+VonLKJavJx03PZmzI+0KgwHwYDVR0j BBgwFoAUWh5MD2+W5ZM74AmR44bD+WXnw+kwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9uM2JSeDVqaFJDVUYzOU1QZVpLN2pKOFpZTFNTS283MWNLMmZzQURZdGMx LzAvNUExRTRDMEY2Rjk2RTU5MzNCRTAwOTkxRTM4NkMzRjk2NUU3QzNFOS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS81QTFFNEMwRjZGOTZFNTkzM0JF MDA5OTFFMzg2QzNGOTY1RTdDM0U5LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9u M2JSeDVqaFJDVUYzOU1QZVpLN2pKOFpZTFNTS283MWNLMmZzQURZdGMxLzAvMzIz ODMwMzQzYTM0MzQzMzYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2Mzcz NjMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcB Af8EETAPMA0EAgACMAcDBQAoBEQ8MA0GCSqGSIb3DQEBCwUAA4IBAQAXsxrR0f45 hsKfYnbKpJwFyFfPVsBchiVw1qrbnRdut+Bj3Uwl2Txx/36fN6L9DXWjCMjxenza 7xAQ6FKbirYALPPaL3rKTp9p3xHRPRQUZNq83Xr25RAAy3Gesdfi3YhYvYglX0r2 kFh5teIe7dkIQv2l2rzDu8jyPK4h3xVlOfd4x0dk1kumTitHeY7WTiUaiEV7wdGw F8DvQF0EdNffL9ol0Q3eDu4jnzIJaK5SzmwkC66yEmuTmKoeooKU9Pg8Wp2hbSqc fCszY4njFzZgwk4HyQKl1oOwty0E6xbDOY4MgoQMnF0CmxbwATeTkRW5gOdA0Nuj Vv1JGrdCVjJK -----END CERTIFICATE-----Generated at Mon Oct 20 11:23:43 2025 by rpki-client