$ rpki-client -vvf rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/323830343a343534633a343030303a3a2f33342d3334203d3e20323636393137.roa File: 323830343a343534633a343030303a3a2f33342d3334203d3e20323636393137.roa (raw, json) Hash identifier: vlktq4+/3exJaySaGVGX53sqrFyxj5myXVMYbg4Lo0M= Subject key identifier: A6:FD:A6:AA:EC:A9:9A:A1:EC:7C:72:7F:AC:65:26:68:FA:B9:EA:8C Certificate issuer: /CN=D2F572ACB12354BDA22E38D3A999DE5A4EE48792 Certificate serial: 25E921D52EDB164DDE0E9FB280F26267E1B20719 Authority key identifier: D2:F5:72:AC:B1:23:54:BD:A2:2E:38:D3:A9:99:DE:5A:4E:E4:87:92 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.cer Subject info access: rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/323830343a343534633a343030303a3a2f33342d3334203d3e20323636393137.roa Signing time: Tue 08 Jul 2025 15:39:48 +0000 ROA not before: Tue 08 Jul 2025 15:34:48 +0000 ROA not after: Tue 07 Jul 2026 15:39:48 +0000 asID: 266917 IP address blocks: 2804:454c:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.crl rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 06:20:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:e9:21:d5:2e:db:16:4d:de:0e:9f:b2:80:f2:62:67:e1:b2:07:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2F572ACB12354BDA22E38D3A999DE5A4EE48792 Validity Not Before: Jul 8 15:34:48 2025 GMT Not After : Jul 7 15:39:48 2026 GMT Subject: CN=A6FDA6AAECA99AA1EC7C727FAC652668FAB9EA8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:36:99:ca:84:bc:2f:42:66:5f:cd:86:ad:4a: 8c:78:11:4b:d5:0f:a9:0c:cf:6a:79:aa:d5:af:36: 82:6f:8a:f6:53:8d:bb:c1:d8:66:06:1e:2f:78:24: bb:04:ed:24:18:02:6e:55:46:d4:c7:af:bd:2c:f6: 58:d1:af:e3:67:07:68:02:3b:4e:30:bb:ba:47:c6: 72:d6:e9:9f:b6:0a:ad:c6:5f:b4:d9:50:eb:dc:0b: 64:ba:fb:97:a8:cd:90:ba:1d:e8:9b:4d:3e:65:df: 14:b9:10:bb:4b:a7:50:97:01:f2:3c:c6:b8:41:11: 06:eb:20:e9:2e:e3:60:78:6f:a0:3e:1d:d9:50:82: 85:3c:53:f1:46:cb:d4:80:04:d4:a8:30:05:1c:2e: e9:b1:91:93:6f:c0:ce:bb:87:8c:e7:0f:24:24:72: 58:b5:e0:fb:b4:ce:e7:9e:31:c7:af:56:55:65:5e: b7:f4:d6:a1:3c:9c:e5:10:77:d1:52:51:20:52:0a: 9f:a2:30:02:2c:ff:0c:6c:39:c5:c3:7e:e0:55:8c: 99:62:81:d7:16:1f:62:ae:97:b2:57:2b:03:51:df: c3:b0:3b:de:68:a8:4b:fc:26:bd:6d:3b:75:89:1c: 67:9c:fd:1a:57:06:31:64:c3:bb:bf:73:9e:4f:fe: 5e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:FD:A6:AA:EC:A9:9A:A1:EC:7C:72:7F:AC:65:26:68:FA:B9:EA:8C X509v3 Authority Key Identifier: keyid:D2:F5:72:AC:B1:23:54:BD:A2:2E:38:D3:A9:99:DE:5A:4E:E4:87:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/323830343a343534633a343030303a3a2f33342d3334203d3e20323636393137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:454c:4000::/34 Signature Algorithm: sha256WithRSAEncryption 01:5f:0b:43:e0:f4:b4:a7:2e:a8:0e:c9:37:0b:b9:35:5c:62: 0e:d0:5b:bb:18:be:1f:e9:88:37:60:3c:39:c8:44:94:25:13: 1e:e5:33:34:af:16:a8:aa:bc:34:e1:cb:e4:1c:56:ef:27:09: 59:9c:49:d1:32:2a:f5:0d:e5:60:b4:9b:4f:02:b3:d3:af:0f: 07:7f:80:6f:b0:aa:bd:e5:ea:94:fa:84:7c:e1:5c:42:85:36: cc:94:42:9e:d9:3e:f3:d8:1c:b7:ab:d4:4b:2c:d6:c6:0e:ad: 0f:40:8b:86:bb:da:89:c8:b4:2c:98:f6:d2:73:c0:3a:d9:c0: c5:5b:60:3c:4e:f4:86:42:6b:3f:1e:0b:c3:6c:7d:23:7e:8f: e7:1d:a2:98:6d:68:21:f6:64:5d:d6:62:61:38:ca:db:b0:1d: 7a:5e:24:3a:2a:f5:ee:18:fb:77:bc:ff:9b:ae:66:ad:9e:6e: b2:85:86:a8:13:1f:b1:61:a7:10:15:98:60:3c:11:d4:66:66: 0c:fe:73:0a:72:d3:f2:85:8c:c1:04:c8:88:7d:2f:19:08:f8: 64:b4:87:a2:06:2a:2a:bb:5b:d9:19:88:4f:2a:83:fe:a4:15: 51:ad:7e:fd:3a:24:d0:03:40:4f:98:23:d5:75:2e:67:6e:59: 24:00:43:62 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUJekh1S7bFk3eDp+ygPJiZ+GyBxkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJGNTcyQUNCMTIzNTRCREEyMkUzOEQzQTk5OURFNUE0 RUU0ODc5MjAeFw0yNTA3MDgxNTM0NDhaFw0yNjA3MDcxNTM5NDhaMDMxMTAvBgNV BAMTKEE2RkRBNkFBRUNBOTlBQTFFQzdDNzI3RkFDNjUyNjY4RkFCOUVBOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9NpnKhLwvQmZfzYatSox4EUvV D6kMz2p5qtWvNoJvivZTjbvB2GYGHi94JLsE7SQYAm5VRtTHr70s9ljRr+NnB2gC O04wu7pHxnLW6Z+2Cq3GX7TZUOvcC2S6+5eozZC6HeibTT5l3xS5ELtLp1CXAfI8 xrhBEQbrIOku42B4b6A+HdlQgoU8U/FGy9SABNSoMAUcLumxkZNvwM67h4znDyQk cli14Pu0zueeMcevVlVlXrf01qE8nOUQd9FSUSBSCp+iMAIs/wxsOcXDfuBVjJli gdcWH2Kul7JXKwNR38OwO95oqEv8Jr1tO3WJHGec/RpXBjFkw7u/c55P/l7nAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUpv2mquypmqHsfHJ/rGUmaPq56owwHwYDVR0j BBgwFoAU0vVyrLEjVL2iLjjTqZneWk7kh5IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1hmTXl5dUdYSjZ6dnFEYVNEWHdOQ0M4a2U2UVFKYlJTcWNpNlJmRkdt bk4vMC9EMkY1NzJBQ0IxMjM1NEJEQTIyRTM4RDNBOTk5REU1QTRFRTQ4NzkyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyRjU3MkFDQjEyMzU0QkRB MjJFMzhEM0E5OTlERTVBNEVFNDg3OTIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNYZk15eXVHWEo2enZxRGFTRFh3TkNDOGtlNlFRSmJSU3FjaTZSZkZHbW5OLzAv MzIzODMwMzQzYTM0MzUzNDYzM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzYzNjM5MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigERUxAMA0GCSqGSIb3DQEBCwUA A4IBAQABXwtD4PS0py6oDsk3C7k1XGIO0Fu7GL4f6Yg3YDw5yESUJRMe5TM0rxao qrw04cvkHFbvJwlZnEnRMir1DeVgtJtPArPTrw8Hf4BvsKq95eqU+oR84VxChTbM lEKe2T7z2By3q9RLLNbGDq0PQIuGu9qJyLQsmPbSc8A62cDFW2A8TvSGQms/HgvD bH0jfo/nHaKYbWgh9mRd1mJhOMrbsB16XiQ6KvXuGPt3vP+brmatnm6yhYaoEx+x YacQFZhgPBHUZmYM/nMKctPyhYzBBMiIfS8ZCPhktIeiBioqu1vZGYhPKoP+pBVR rX79OiTQA0BPmCPVdS5nblkkAENi -----END CERTIFICATE-----Generated at Wed Nov 5 20:54:28 2025 by rpki-client