$ rpki-client -vvf rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a3130303a3a2f34302d3430203d3e203631383838.roa File: 323830343a6536303a3130303a3a2f34302d3430203d3e203631383838.roa (raw, json) Hash identifier: XnXYekvsY2RVngEnSHnLLlNcex+uYy/z6OB/ZumJLMg= Subject key identifier: 7E:EB:8A:99:64:EC:83:2D:FC:CB:23:F2:D7:70:76:0E:4F:35:FE:3C Certificate issuer: /CN=961AE5D479B2534022682B64D7F0EFE6AA11F791 Certificate serial: 02EB0EA4BC6D263FE9E2B553E3B52843FBC4C91F Authority key identifier: 96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer Subject info access: rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a3130303a3a2f34302d3430203d3e203631383838.roa Signing time: Wed 05 Mar 2025 19:00:06 +0000 ROA not before: Wed 05 Mar 2025 18:55:06 +0000 ROA not after: Wed 04 Mar 2026 19:00:06 +0000 asID: 61888 IP address blocks: 2804:e60:100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 22:13:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:eb:0e:a4:bc:6d:26:3f:e9:e2:b5:53:e3:b5:28:43:fb:c4:c9:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=961AE5D479B2534022682B64D7F0EFE6AA11F791 Validity Not Before: Mar 5 18:55:06 2025 GMT Not After : Mar 4 19:00:06 2026 GMT Subject: CN=7EEB8A9964EC832DFCCB23F2D770760E4F35FE3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:c3:f0:a3:1e:86:f4:40:e5:f6:3d:fd:bd:3e: 7c:c6:e9:bb:02:9b:d5:a2:79:03:e8:61:83:6d:dd: 28:6c:e3:68:1f:20:bb:93:11:b9:d1:9d:5f:aa:c3: 66:40:19:d7:fa:1c:32:89:ed:99:dc:71:0b:e4:41: 5e:76:ac:c3:32:29:22:ed:15:69:eb:cd:b7:d7:e9: 1c:1f:62:98:fb:84:48:85:dc:4b:c2:b3:87:6e:4d: 65:67:a4:bb:42:6a:2c:19:c9:51:2b:d6:36:8f:10: 40:d8:f3:cb:95:c3:3f:08:84:86:44:60:28:87:ee: 04:0d:f7:e8:12:53:5e:40:20:21:25:d5:d3:00:ed: 15:9f:b4:da:fe:2a:db:b8:71:8a:a9:c8:0d:0b:23: e1:b5:d8:28:fe:6b:8f:0d:0e:33:8c:8a:40:b1:cc: c2:21:cc:85:24:a5:46:de:0f:c8:7c:4a:0b:a9:96: be:f2:33:cc:90:84:bc:5b:59:d7:9a:bf:43:33:42: be:f4:56:00:e4:d3:4e:57:58:27:20:d4:35:79:11: 0e:0b:d3:02:4c:50:bb:84:8f:12:98:6a:2d:2e:39: 32:a8:89:0f:d3:e7:29:e9:2e:25:11:50:37:2f:26: 90:70:81:bb:a9:6d:3b:d9:68:45:5e:41:02:07:9c: 2d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:EB:8A:99:64:EC:83:2D:FC:CB:23:F2:D7:70:76:0E:4F:35:FE:3C X509v3 Authority Key Identifier: keyid:96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a3130303a3a2f34302d3430203d3e203631383838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:e60:100::/40 Signature Algorithm: sha256WithRSAEncryption 58:ad:c5:8a:61:23:8e:ae:da:a6:61:1d:d5:7c:29:3b:14:70: 0b:11:bf:f2:77:98:2c:3b:09:d0:02:5c:9f:c4:ec:7d:d1:ca: e7:58:5f:1c:c4:0c:9f:1b:3c:54:fe:93:80:3a:91:19:0e:d8: a5:bc:80:bb:8c:fc:ca:63:13:8d:f8:f1:6c:06:e8:e6:50:fd: 7d:c5:e3:bc:3b:db:8d:54:0e:0d:bc:5d:19:1a:b6:8c:c0:11: f8:1c:d5:e2:32:13:d0:10:f8:31:f4:a0:b8:ed:ad:df:47:2f: e0:65:2a:1c:3c:33:98:a8:06:9d:f7:84:f7:5d:a5:56:e5:71: 5b:d1:5c:3f:4a:40:ff:df:7c:2e:29:65:66:37:ae:1f:34:90: 79:43:8f:e6:91:0a:41:c6:00:c9:a2:c3:fa:f7:db:1c:b4:15: be:b4:f7:11:bc:20:2e:02:45:ac:e4:bc:80:0a:d5:db:97:3d: ff:23:66:d0:46:e7:46:58:9b:91:30:1e:2c:a0:f1:b4:00:6f: f6:73:89:8f:c4:91:c4:fd:cc:15:eb:51:29:7e:3c:eb:c8:c4: 11:23:2d:1b:06:38:66:b4:6d:5b:16:09:6d:67:1b:c1:66:01: f3:06:45:ab:b9:55:3c:73:96:40:4b:ef:02:ac:71:93:9a:51: 7a:48:01:18 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgIUAusOpLxtJj/p4rVT47UoQ/vEyR8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTYxQUU1RDQ3OUIyNTM0MDIyNjgyQjY0RDdGMEVGRTZB QTExRjc5MTAeFw0yNTAzMDUxODU1MDZaFw0yNjAzMDQxOTAwMDZaMDMxMTAvBgNV BAMTKDdFRUI4QTk5NjRFQzgzMkRGQ0NCMjNGMkQ3NzA3NjBFNEYzNUZFM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxw/CjHob0QOX2Pf29PnzG6bsC m9WieQPoYYNt3Shs42gfILuTEbnRnV+qw2ZAGdf6HDKJ7ZnccQvkQV52rMMyKSLt FWnrzbfX6RwfYpj7hEiF3EvCs4duTWVnpLtCaiwZyVEr1jaPEEDY88uVwz8IhIZE YCiH7gQN9+gSU15AICEl1dMA7RWftNr+Ktu4cYqpyA0LI+G12Cj+a48NDjOMikCx zMIhzIUkpUbeD8h8Sguplr7yM8yQhLxbWdeav0MzQr70VgDk005XWCcg1DV5EQ4L 0wJMULuEjxKYai0uOTKoiQ/T5ynpLiURUDcvJpBwgbupbTvZaEVeQQIHnC0ZAgMB AAGjggJVMIICUTAdBgNVHQ4EFgQUfuuKmWTsgy38yyPy13B2Dk81/jwwHwYDVR0j BBgwFoAUlhrl1HmyU0AiaCtk1/Dv5qoR95EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMzRoUzdCOHVHWXNEVk42eVVvVDVMckVpNWVFaTFuVFh6SDNLNW1RS1JC QmUvMS85NjFBRTVENDc5QjI1MzQwMjI2ODJCNjREN0YwRUZFNkFBMTFGNzkxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk2MUFFNUQ0NzlCMjUzNDAy MjY4MkI2NEQ3RjBFRkU2QUExMUY3OTEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzM0aFM3Qjh1R1lzRFZONnlVb1Q1THJFaTVlRWkxblRYekgzSzVtUUtSQkJlLzEv MzIzODMwMzQzYTY1MzYzMDNhMzEzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIw MzYzMTM4MzgzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEDmABMA0GCSqGSIb3DQEBCwUAA4IBAQBY rcWKYSOOrtqmYR3VfCk7FHALEb/yd5gsOwnQAlyfxOx90crnWF8cxAyfGzxU/pOA OpEZDtilvIC7jPzKYxON+PFsBujmUP19xeO8O9uNVA4NvF0ZGraMwBH4HNXiMhPQ EPgx9KC47a3fRy/gZSocPDOYqAad94T3XaVW5XFb0Vw/SkD/33wuKWVmN64fNJB5 Q4/mkQpBxgDJosP699sctBW+tPcRvCAuAkWs5LyACtXblz3/I2bQRudGWJuRMB4s oPG0AG/2c4mPxJHE/cwV61EpfjzryMQRIy0bBjhmtG1bFgltZxvBZgHzBkWruVU8 c5ZAS+8CrHGTmlF6SAEY -----END CERTIFICATE-----Generated at Wed Nov 5 10:25:10 2025 by rpki-client