$ rpki-client -vvf rpki-repo.registro.br/repo/3UwMsVB8KBkJf4nb7ihz7ZRcWNpZ4nsotbSzNidtLcf1/0/323830343a383435303a383030303a3a2f33332d3333203d3e20323732323533.roa File: 323830343a383435303a383030303a3a2f33332d3333203d3e20323732323533.roa (raw, json) Hash identifier: Zh0f7PXpynQdF+LNUpLMkXKVuF2YwleFw3gZncRMMOw= Subject key identifier: 33:7F:45:99:EC:01:47:30:D1:7C:65:18:B1:C4:3C:1F:45:EE:34:9F Certificate issuer: /CN=6517ED7C130BCBAC13709ADF76E878D88CD96DD4 Certificate serial: 3E6531D0F88B3AEC66DB25D3C8C3DE5BE6CF2C59 Authority key identifier: 65:17:ED:7C:13:0B:CB:AC:13:70:9A:DF:76:E8:78:D8:8C:D9:6D:D4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6517ED7C130BCBAC13709ADF76E878D88CD96DD4.cer Subject info access: rsync://rpki-repo.registro.br/repo/3UwMsVB8KBkJf4nb7ihz7ZRcWNpZ4nsotbSzNidtLcf1/0/323830343a383435303a383030303a3a2f33332d3333203d3e20323732323533.roa Signing time: Thu 05 Jun 2025 14:43:00 +0000 ROA not before: Thu 05 Jun 2025 14:38:00 +0000 ROA not after: Thu 04 Jun 2026 14:43:00 +0000 asID: 272253 IP address blocks: 2804:8450:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3UwMsVB8KBkJf4nb7ihz7ZRcWNpZ4nsotbSzNidtLcf1/0/6517ED7C130BCBAC13709ADF76E878D88CD96DD4.crl rsync://rpki-repo.registro.br/repo/3UwMsVB8KBkJf4nb7ihz7ZRcWNpZ4nsotbSzNidtLcf1/0/6517ED7C130BCBAC13709ADF76E878D88CD96DD4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6517ED7C130BCBAC13709ADF76E878D88CD96DD4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 09:48:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:65:31:d0:f8:8b:3a:ec:66:db:25:d3:c8:c3:de:5b:e6:cf:2c:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6517ED7C130BCBAC13709ADF76E878D88CD96DD4 Validity Not Before: Jun 5 14:38:00 2025 GMT Not After : Jun 4 14:43:00 2026 GMT Subject: CN=337F4599EC014730D17C6518B1C43C1F45EE349F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b8:a2:52:c7:c7:e5:84:a2:a1:9a:ad:dc:a0: 55:71:1f:cd:22:28:8d:4a:77:b5:94:1d:af:38:20: 18:76:58:bc:4a:f3:45:00:81:af:fb:18:3e:21:b0: 92:be:62:dc:f2:c2:26:cb:6e:45:6e:2f:14:19:bc: 4e:92:95:1b:60:67:52:8e:50:0d:e6:2a:a9:3f:0a: cf:72:24:73:53:17:c8:c4:71:39:9b:77:75:5a:e3: 9b:b9:ec:cf:1f:c5:66:9f:ea:de:d8:aa:61:ed:0a: f5:e3:68:c3:4d:12:09:7c:5e:b6:0c:20:b9:2f:6f: 8b:b6:29:72:9c:7e:24:5f:25:09:7b:f8:5f:1a:5f: bc:e7:0a:9c:40:7a:83:8e:c5:3e:52:8c:ee:a5:42: c8:c0:a0:4b:0c:18:fc:44:77:41:e8:25:18:b9:fd: 42:19:4a:82:af:c6:c8:87:e4:0a:9f:9b:48:62:b5: 56:98:52:3f:bc:a8:e7:de:96:11:5e:44:23:56:bf: 7e:a1:f3:76:67:be:a7:c1:1a:4b:31:98:a1:9e:56: b5:01:b0:09:52:1c:a8:7b:45:f3:1a:db:af:8d:b3: 9d:ba:0e:59:46:29:f3:63:36:73:18:50:b6:dc:95: c9:01:99:8f:f1:d9:63:7c:63:09:25:da:16:99:22: 60:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:7F:45:99:EC:01:47:30:D1:7C:65:18:B1:C4:3C:1F:45:EE:34:9F X509v3 Authority Key Identifier: keyid:65:17:ED:7C:13:0B:CB:AC:13:70:9A:DF:76:E8:78:D8:8C:D9:6D:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3UwMsVB8KBkJf4nb7ihz7ZRcWNpZ4nsotbSzNidtLcf1/0/6517ED7C130BCBAC13709ADF76E878D88CD96DD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6517ED7C130BCBAC13709ADF76E878D88CD96DD4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UwMsVB8KBkJf4nb7ihz7ZRcWNpZ4nsotbSzNidtLcf1/0/323830343a383435303a383030303a3a2f33332d3333203d3e20323732323533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8450:8000::/33 Signature Algorithm: sha256WithRSAEncryption 65:73:53:8e:f9:b7:c3:fc:a1:43:4e:2d:4d:15:6d:bc:ea:9a: 74:71:f0:f6:ce:fd:2e:e3:e6:85:a5:ae:9b:5a:96:5b:fa:b1: a0:de:eb:28:08:41:7a:a0:5b:c7:af:3e:c0:bf:ce:e0:45:ff: ea:79:ac:f5:7a:af:27:07:4a:24:db:94:81:03:70:f9:56:6f: 6c:01:e6:44:ce:78:b9:85:aa:1f:4f:5a:c8:43:ea:57:0b:e0: 71:85:ab:23:c5:55:fc:b2:53:92:b8:9e:5d:fa:4d:88:43:57: e5:2b:33:49:6f:15:34:78:f6:5f:2b:14:4e:34:62:61:3e:4e: 85:8e:d2:a2:1e:52:41:e3:ce:1d:60:e1:56:71:2a:6b:c1:cb: af:11:c7:5d:03:d1:d9:4b:fd:64:f7:8a:ac:97:44:41:7b:84: 94:2e:c9:4f:28:2f:b5:c2:bf:7d:80:e0:4e:f4:17:8d:df:b3: 14:a9:76:3d:61:00:be:0a:f8:64:3d:de:fa:6f:3d:81:fc:19: 40:b2:91:5d:a7:04:ac:c3:2a:fc:58:b5:ca:f3:0f:63:a6:6a: 65:9d:8b:31:de:a6:7e:e4:7a:49:64:a1:48:07:77:d9:41:a8: 7e:03:47:d3:27:36:cc:9c:10:8b:44:94:1f:e9:35:30:7e:bc: ce:fb:ef:ad -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUPmUx0PiLOuxm2yXTyMPeW+bPLFkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjUxN0VEN0MxMzBCQ0JBQzEzNzA5QURGNzZFODc4RDg4 Q0Q5NkRENDAeFw0yNTA2MDUxNDM4MDBaFw0yNjA2MDQxNDQzMDBaMDMxMTAvBgNV BAMTKDMzN0Y0NTk5RUMwMTQ3MzBEMTdDNjUxOEIxQzQzQzFGNDVFRTM0OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0uKJSx8flhKKhmq3coFVxH80i KI1Kd7WUHa84IBh2WLxK80UAga/7GD4hsJK+YtzywibLbkVuLxQZvE6SlRtgZ1KO UA3mKqk/Cs9yJHNTF8jEcTmbd3Va45u57M8fxWaf6t7YqmHtCvXjaMNNEgl8XrYM ILkvb4u2KXKcfiRfJQl7+F8aX7znCpxAeoOOxT5SjO6lQsjAoEsMGPxEd0HoJRi5 /UIZSoKvxsiH5Aqfm0hitVaYUj+8qOfelhFeRCNWv36h83ZnvqfBGksxmKGeVrUB sAlSHKh7RfMa26+Ns526DllGKfNjNnMYULbclckBmY/x2WN8Ywkl2haZImBrAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUM39FmewBRzDRfGUYscQ8H0XuNJ8wHwYDVR0j BBgwFoAUZRftfBMLy6wTcJrfduh42IzZbdQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1V3TXNWQjhLQmtKZjRuYjdpaHo3WlJjV05wWjRuc290YlN6TmlkdExj ZjEvMC82NTE3RUQ3QzEzMEJDQkFDMTM3MDlBREY3NkU4NzhEODhDRDk2REQ0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1MTdFRDdDMTMwQkNCQUMx MzcwOUFERjc2RTg3OEQ4OENEOTZERDQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNVd01zVkI4S0JrSmY0bmI3aWh6N1pSY1dOcFo0bnNvdGJTek5pZHRMY2YxLzAv MzIzODMwMzQzYTM4MzQzNTMwM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk M2UyMDMyMzczMjMyMzUzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEhFCAMA0GCSqGSIb3DQEBCwUA A4IBAQBlc1OO+bfD/KFDTi1NFW286pp0cfD2zv0u4+aFpa6bWpZb+rGg3usoCEF6 oFvHrz7Av87gRf/qeaz1eq8nB0ok25SBA3D5Vm9sAeZEzni5haofT1rIQ+pXC+Bx hasjxVX8slOSuJ5d+k2IQ1flKzNJbxU0ePZfKxRONGJhPk6FjtKiHlJB484dYOFW cSprwcuvEcddA9HZS/1k94qsl0RBe4SULslPKC+1wr99gOBO9BeN37MUqXY9YQC+ CvhkPd76bz2B/BlAspFdpwSswyr8WLXK8w9jpmplnYsx3qZ+5HpJZKFIB3fZQah+ A0fTJzbMnBCLRJQf6TUwfrzO+++t -----END CERTIFICATE-----Generated at Thu Nov 6 00:09:21 2025 by rpki-client