$ rpki-client -vvf rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/323830343a346464343a3a2f33322d3438203d3e20323638323232.roa File: 323830343a346464343a3a2f33322d3438203d3e20323638323232.roa (raw, json) Hash identifier: fv6ZnXxZ45ntnnbYQPrDO2OsehPsbW9FdZy/XuAwgL0= Subject key identifier: 69:B8:3F:6B:6E:A5:9F:90:2D:EF:4C:C2:AB:2D:54:BF:8D:9B:7F:2D Certificate issuer: /CN=DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570 Certificate serial: 59BF87A1EADEC69439D9C9634605A2CE1A56CF08 Authority key identifier: DD:A1:EC:4A:0E:48:B5:C0:9F:B7:46:32:7F:05:F5:1E:B5:F8:E5:70 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.cer Subject info access: rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/323830343a346464343a3a2f33322d3438203d3e20323638323232.roa Signing time: Tue 22 Apr 2025 12:16:23 +0000 ROA not before: Tue 22 Apr 2025 12:11:23 +0000 ROA not after: Tue 21 Apr 2026 12:16:23 +0000 asID: 268222 IP address blocks: 2804:4dd4::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.crl rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 07:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:bf:87:a1:ea:de:c6:94:39:d9:c9:63:46:05:a2:ce:1a:56:cf:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570 Validity Not Before: Apr 22 12:11:23 2025 GMT Not After : Apr 21 12:16:23 2026 GMT Subject: CN=69B83F6B6EA59F902DEF4CC2AB2D54BF8D9B7F2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:33:68:61:da:48:ad:ca:a6:30:44:ab:fa:c4: 73:e3:7f:f8:aa:0d:15:53:21:12:d5:07:49:ab:31: ba:80:9c:4c:59:60:13:53:0b:46:b5:05:18:43:d8: 5c:0e:f7:ab:93:1b:ec:3c:26:73:7e:b9:67:b0:c3: f9:33:f1:d4:df:6d:70:85:98:2a:64:68:b0:40:18: 40:67:5e:62:d0:6d:d6:7b:93:e4:74:0e:49:70:0a: 70:32:68:5f:9e:0c:02:b3:54:bf:3f:fc:c0:f2:ed: 81:29:36:32:26:80:34:58:56:ca:e7:76:70:68:a9: b8:b8:41:ef:89:09:de:37:0e:a1:61:df:c1:b7:13: d9:3e:be:d8:5b:3a:3f:9b:52:d9:8b:b9:1a:82:ea: 20:fb:70:00:e8:35:ff:8d:bc:f2:61:ae:77:0d:98: e8:0b:6d:a1:27:7d:55:38:b9:32:e3:4a:7e:c1:79: db:cd:6e:bd:2a:73:37:d1:4c:27:77:f7:ba:78:3b: dd:7b:47:15:b4:8a:51:7e:6e:d1:28:48:8f:33:92: e7:2b:04:0a:56:d1:f7:d4:4e:83:18:c8:61:44:7d: 70:3f:bb:dc:f4:6e:a4:e0:bf:8f:df:92:a2:3c:b2: 30:08:6e:5c:af:c6:24:5b:38:70:0e:78:4e:9d:2e: e7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:B8:3F:6B:6E:A5:9F:90:2D:EF:4C:C2:AB:2D:54:BF:8D:9B:7F:2D X509v3 Authority Key Identifier: keyid:DD:A1:EC:4A:0E:48:B5:C0:9F:B7:46:32:7F:05:F5:1E:B5:F8:E5:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/323830343a346464343a3a2f33322d3438203d3e20323638323232.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:4dd4::/32 Signature Algorithm: sha256WithRSAEncryption 6c:4f:e3:0e:61:b1:c3:3a:1c:d0:e5:56:35:cc:8d:c7:0c:59: 32:24:2e:e8:a2:33:4c:5e:a5:1a:55:ab:37:1f:39:6e:11:e4: 6c:c4:9f:90:8c:fc:db:96:e1:b2:5e:61:bc:81:39:86:1c:42: cb:ba:f2:79:c3:5c:8f:f2:66:cb:e4:60:a1:30:8a:c8:3d:0c: 09:91:4d:6a:53:26:80:88:c7:9c:4a:8d:4b:af:a3:45:b0:b1: 5c:2d:c0:c2:25:ea:32:20:43:f1:a4:20:27:d9:d9:3a:5e:2a: 1a:10:c3:98:b1:dc:f3:37:aa:52:2b:02:57:ab:56:6a:8e:9f: dd:7f:0a:2c:ba:13:71:d9:cb:b8:91:fd:34:6c:76:87:fe:22: 70:b8:17:a7:6b:3f:57:e4:3e:62:92:60:28:68:0e:1a:b9:99: c4:68:ec:c2:5c:e5:9b:b8:96:a4:f6:76:e0:2e:23:25:81:ed: ad:a0:37:3f:81:e5:7e:c4:25:ef:d5:b1:24:cb:d3:34:b9:94: 85:d8:d2:a8:ad:50:27:c7:79:33:8a:e9:ae:49:e5:67:f6:5e: d6:70:63:5d:77:e2:2c:1f:60:a3:89:81:b3:bd:96:15:c8:12: e9:ea:c7:5d:40:91:a5:2d:b6:06:57:ea:83:77:39:30:78:c3: b6:2e:3e:21 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUWb+HoerexpQ52cljRgWizhpWzwgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERBMUVDNEEwRTQ4QjVDMDlGQjc0NjMyN0YwNUY1MUVC NUY4RTU3MDAeFw0yNTA0MjIxMjExMjNaFw0yNjA0MjExMjE2MjNaMDMxMTAvBgNV BAMTKDY5QjgzRjZCNkVBNTlGOTAyREVGNENDMkFCMkQ1NEJGOEQ5QjdGMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2M2hh2kityqYwRKv6xHPjf/iq DRVTIRLVB0mrMbqAnExZYBNTC0a1BRhD2FwO96uTG+w8JnN+uWeww/kz8dTfbXCF mCpkaLBAGEBnXmLQbdZ7k+R0DklwCnAyaF+eDAKzVL8//MDy7YEpNjImgDRYVsrn dnBoqbi4Qe+JCd43DqFh38G3E9k+vthbOj+bUtmLuRqC6iD7cADoNf+NvPJhrncN mOgLbaEnfVU4uTLjSn7BedvNbr0qczfRTCd397p4O917RxW0ilF+btEoSI8zkucr BApW0ffUToMYyGFEfXA/u9z0bqTgv4/fkqI8sjAIblyvxiRbOHAOeE6dLue3AgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUabg/a26ln5At70zCqy1Uv42bfy0wHwYDVR0j BBgwFoAU3aHsSg5ItcCft0YyfwX1HrX45XAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM3hFekhobkFaZWFkelI4a1lmVnNHbVZadGZYS1ZwR1FSZE5ZZFQ3WERq UksvMC9EREExRUM0QTBFNDhCNUMwOUZCNzQ2MzI3RjA1RjUxRUI1RjhFNTcwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0REQTFFQzRBMEU0OEI1QzA5 RkI3NDYzMjdGMDVGNTFFQjVGOEU1NzAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzN4RXpIaG5BWmVhZHpSOGtZZlZzR21WWnRmWEtWcEdRUmROWWRUN1hEalJLLzAv MzIzODMwMzQzYTM0NjQ2NDM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM4 MzIzMjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKARN1DANBgkqhkiG9w0BAQsFAAOCAQEAbE/jDmGx wzoc0OVWNcyNxwxZMiQu6KIzTF6lGlWrNx85bhHkbMSfkIz825bhsl5hvIE5hhxC y7ryecNcj/Jmy+RgoTCKyD0MCZFNalMmgIjHnEqNS6+jRbCxXC3AwiXqMiBD8aQg J9nZOl4qGhDDmLHc8zeqUisCV6tWao6f3X8KLLoTcdnLuJH9NGx2h/4icLgXp2s/ V+Q+YpJgKGgOGrmZxGjswlzlm7iWpPZ24C4jJYHtraA3P4HlfsQl79WxJMvTNLmU hdjSqK1QJ8d5M4rprknlZ/Ze1nBjXXfiLB9go4mBs72WFcgS6erHXUCRpS22Blfq g3c5MHjDti4+IQ== -----END CERTIFICATE-----Generated at Wed Nov 5 21:27:40 2025 by rpki-client