$ rpki-client -vvf rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/323830343a333334303a626230303a3a2f34382d3438203d3e20323635333834.roa File: 323830343a333334303a626230303a3a2f34382d3438203d3e20323635333834.roa (raw, json) Hash identifier: KVu7BWA6lXL2b/fgPF/llndpELv/wWkWLmloLx1QiaM= Subject key identifier: 6F:D7:DD:F1:39:BB:87:8F:14:CF:F4:3E:8B:22:F6:F8:B7:2C:74:29 Certificate issuer: /CN=1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5 Certificate serial: 46F54930B0243828983934EC8D3EB0E693EB284A Authority key identifier: 1B:7A:42:89:6A:4F:BF:2E:2E:2B:04:94:30:0A:B6:F0:09:4E:F9:E5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.cer Subject info access: rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/323830343a333334303a626230303a3a2f34382d3438203d3e20323635333834.roa Signing time: Tue 29 Jul 2025 15:15:10 +0000 ROA not before: Tue 29 Jul 2025 15:10:10 +0000 ROA not after: Tue 28 Jul 2026 15:15:10 +0000 asID: 265384 IP address blocks: 2804:3340:bb00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.crl rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 10 Aug 2025 13:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:f5:49:30:b0:24:38:28:98:39:34:ec:8d:3e:b0:e6:93:eb:28:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5 Validity Not Before: Jul 29 15:10:10 2025 GMT Not After : Jul 28 15:15:10 2026 GMT Subject: CN=6FD7DDF139BB878F14CFF43E8B22F6F8B72C7429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f0:dc:2d:5b:0e:d0:4b:41:3e:8d:20:46:7a: d5:9e:94:0f:22:db:a4:a4:c4:10:4d:31:2c:12:c6: 5f:53:f7:f7:0b:4f:d1:6a:2e:db:97:31:43:62:13: 00:87:d9:35:e4:42:a2:de:96:9f:b1:63:e5:6a:51: 24:06:88:d6:da:5a:1f:5f:1b:64:ce:80:dd:a9:1b: 2b:80:4b:67:39:e5:aa:25:05:ac:ef:94:63:b2:42: 16:d5:d7:08:0c:72:16:e1:49:b6:1f:b4:f1:b5:63: 70:7a:9b:4b:f9:96:fc:da:76:79:49:f7:08:6b:26: cc:e1:3e:b4:f3:f9:a3:12:79:21:2c:47:5c:1e:df: ca:88:f9:5b:18:04:48:0b:fc:bd:3e:d9:f4:4b:d4: 14:69:c5:62:ce:c2:c0:5b:69:a3:3e:75:fe:ec:97: f5:55:f0:76:a5:ce:cd:a9:cd:e4:da:a7:f5:fe:16: e6:78:e6:3a:5c:f5:dd:f2:08:f6:bf:b6:fe:35:93: 51:29:d9:ea:38:0f:25:01:b8:99:04:25:df:d2:25: 87:0f:92:19:5b:64:5c:41:70:1a:02:58:47:c1:b8: f7:96:0d:13:45:40:db:80:77:0b:92:28:63:57:4c: b2:cb:f6:63:1b:90:a5:bd:f2:f6:f0:19:cd:a0:a9: 14:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:D7:DD:F1:39:BB:87:8F:14:CF:F4:3E:8B:22:F6:F8:B7:2C:74:29 X509v3 Authority Key Identifier: keyid:1B:7A:42:89:6A:4F:BF:2E:2E:2B:04:94:30:0A:B6:F0:09:4E:F9:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/323830343a333334303a626230303a3a2f34382d3438203d3e20323635333834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:3340:bb00::/48 Signature Algorithm: sha256WithRSAEncryption 81:2c:e6:ab:c7:63:50:dd:c7:d2:9a:19:77:17:e4:29:2f:42: 2c:10:8a:49:ba:a6:24:04:bd:52:21:73:9a:75:d4:8a:cd:a6: fe:10:83:80:10:ca:ef:91:3b:8b:9e:cb:0e:95:9d:85:5c:04: f0:84:09:86:f5:ae:cc:53:3f:44:e5:e0:78:d9:38:a4:3e:7a: 5c:8c:d8:f9:97:7d:f5:17:18:d4:f7:e5:5b:63:07:3d:cb:ce: 70:af:05:ef:fe:10:d5:2f:6a:99:d1:ad:cb:b9:7b:b4:3c:2c: 78:24:1c:11:49:11:27:32:45:06:7c:5a:5a:7f:a5:ac:72:05: e5:e7:00:c0:dd:17:b8:77:4f:5c:14:36:64:db:60:b5:4a:f2: 0b:ca:1d:3b:60:e5:f6:86:65:34:ab:15:93:a9:43:8e:d3:ff: 59:b8:fd:94:f9:c8:5c:a1:4d:d0:eb:8c:40:89:b3:f5:b0:4f: c1:df:2d:78:b5:b9:4e:42:23:b8:ed:8b:22:a5:7d:76:a2:a1: a8:2f:63:00:75:e6:6b:0a:1d:cb:aa:91:5c:90:bd:39:4c:b3: 29:cd:7d:40:9c:da:a2:fa:53:86:12:7d:6b:4e:c7:ed:4c:9f: 0f:3f:e7:92:6d:16:76:7d:69:47:b2:86:5d:63:9b:b4:78:dd: ec:6e:89:da -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIURvVJMLAkOCiYOTTsjT6w5pPrKEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI3QTQyODk2QTRGQkYyRTJFMkIwNDk0MzAwQUI2RjAw OTRFRjlFNTAeFw0yNTA3MjkxNTEwMTBaFw0yNjA3MjgxNTE1MTBaMDMxMTAvBgNV BAMTKDZGRDdEREYxMzlCQjg3OEYxNENGRjQzRThCMjJGNkY4QjcyQzc0MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh8NwtWw7QS0E+jSBGetWelA8i 26SkxBBNMSwSxl9T9/cLT9FqLtuXMUNiEwCH2TXkQqLelp+xY+VqUSQGiNbaWh9f G2TOgN2pGyuAS2c55aolBazvlGOyQhbV1wgMchbhSbYftPG1Y3B6m0v5lvzadnlJ 9whrJszhPrTz+aMSeSEsR1we38qI+VsYBEgL/L0+2fRL1BRpxWLOwsBbaaM+df7s l/VV8Halzs2pzeTap/X+FuZ45jpc9d3yCPa/tv41k1Ep2eo4DyUBuJkEJd/SJYcP khlbZFxBcBoCWEfBuPeWDRNFQNuAdwuSKGNXTLLL9mMbkKW98vbwGc2gqRR1AgMB AAGjggJcMIICWDAdBgNVHQ4EFgQUb9fd8Tm7h48Uz/Q+iyL2+LcsdCkwHwYDVR0j BBgwFoAUG3pCiWpPvy4uKwSUMAq28AlO+eUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMk5QOGNQRDQ0VGp3ZlBXUER2cFJVM3pTeGdZSjlZVkVXQ2phaWdmY2VR cHQvMC8xQjdBNDI4OTZBNEZCRjJFMkUyQjA0OTQzMDBBQjZGMDA5NEVGOUU1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCN0E0Mjg5NkE0RkJGMkUy RTJCMDQ5NDMwMEFCNkYwMDk0RUY5RTUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJOUDhjUEQ0NFRqd2ZQV1BEdnBSVTN6U3hnWUo5WVZFV0NqYWlnZmNlUXB0LzAv MzIzODMwMzQzYTMzMzMzNDMwM2E2MjYyMzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNk M2UyMDMyMzYzNTMzMzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEM0C7ADANBgkqhkiG9w0BAQsF AAOCAQEAgSzmq8djUN3H0poZdxfkKS9CLBCKSbqmJAS9UiFzmnXUis2m/hCDgBDK 75E7i57LDpWdhVwE8IQJhvWuzFM/ROXgeNk4pD56XIzY+Zd99RcY1PflW2MHPcvO cK8F7/4Q1S9qmdGty7l7tDwseCQcEUkRJzJFBnxaWn+lrHIF5ecAwN0XuHdPXBQ2 ZNtgtUryC8odO2Dl9oZlNKsVk6lDjtP/Wbj9lPnIXKFN0OuMQImz9bBPwd8teLW5 TkIjuO2LIqV9dqKhqC9jAHXmawody6qRXJC9OUyzKc19QJzaovpThhJ9a07H7Uyf Dz/nkm0Wdn1pR7KGXWObtHjd7G6J2g== -----END CERTIFICATE-----Generated at Sun Aug 10 04:48:08 2025 by rpki-client