$ rpki-client -vvf rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/323830343a313034343a383030303a3a2f33342d3334203d3e20323633363237.roa File: 323830343a313034343a383030303a3a2f33342d3334203d3e20323633363237.roa (raw, json) Hash identifier: J9Le6Bbc6N4UISlYVxo/r4aKlfm5ZmV4U66iaMUlRQs= Subject key identifier: E4:48:3D:C2:C0:52:C2:A3:00:6F:E4:94:32:1A:87:AD:01:1C:C4:A8 Certificate issuer: /CN=11A01506231611C87461442475B1401AD5DE38D2 Certificate serial: 1B7BC1376C3E1B1E3413DEBC6A50B0B014709332 Authority key identifier: 11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer Subject info access: rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/323830343a313034343a383030303a3a2f33342d3334203d3e20323633363237.roa Signing time: Tue 25 Mar 2025 20:13:31 +0000 ROA not before: Tue 25 Mar 2025 20:08:31 +0000 ROA not after: Tue 24 Mar 2026 20:13:31 +0000 asID: 263627 IP address blocks: 2804:1044:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 07:33:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:7b:c1:37:6c:3e:1b:1e:34:13:de:bc:6a:50:b0:b0:14:70:93:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11A01506231611C87461442475B1401AD5DE38D2 Validity Not Before: Mar 25 20:08:31 2025 GMT Not After : Mar 24 20:13:31 2026 GMT Subject: CN=E4483DC2C052C2A3006FE494321A87AD011CC4A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:67:ef:35:34:a0:7c:24:f3:0d:63:b5:1b:5a: 63:d6:7f:48:b5:74:d0:df:d5:65:49:e5:1d:c4:00: 34:f8:c7:6c:1f:68:1c:99:02:5c:f1:a1:2b:3e:b0: a0:6f:b3:c0:76:ee:4b:33:84:80:e1:df:1d:b7:eb: 5c:e9:24:4b:f4:9d:2f:06:bb:21:1c:21:46:68:8a: 32:23:51:52:54:e9:39:dd:d6:47:0a:f6:60:87:f2: 24:62:b7:75:fa:5e:0a:15:23:e5:07:94:d6:06:be: d4:61:67:75:a5:e7:01:59:4b:e9:c7:94:e7:ba:1a: 0b:25:57:d6:06:c8:0e:48:67:52:b4:bc:7a:37:62: 5e:34:3a:9b:32:e0:b2:3d:d1:9b:c6:9e:43:63:bc: fc:5e:73:af:c0:9c:59:48:e3:57:31:4f:df:b2:99: 0c:a5:0e:a7:ce:4c:9a:f3:4d:e9:df:d1:ee:8c:50: 46:f0:6c:88:4f:bf:c2:7f:18:db:5c:f6:a3:eb:24: 6f:6f:c9:a5:bf:7a:5b:f3:b2:5d:39:0c:88:4e:84: f1:97:b2:e1:85:eb:d7:6b:54:c7:b2:82:f3:3c:54: 84:c6:08:1e:fd:13:6b:54:6c:74:cd:3f:56:78:fe: ae:37:3e:30:21:e4:dc:4b:1a:15:8e:18:83:fd:cd: 03:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:48:3D:C2:C0:52:C2:A3:00:6F:E4:94:32:1A:87:AD:01:1C:C4:A8 X509v3 Authority Key Identifier: keyid:11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/323830343a313034343a383030303a3a2f33342d3334203d3e20323633363237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:1044:8000::/34 Signature Algorithm: sha256WithRSAEncryption b4:37:04:ee:0d:14:ae:61:e4:ae:a0:97:6e:14:45:03:72:69: 0f:7b:96:c5:67:54:f1:08:f1:57:9e:9c:07:43:39:0e:a0:4d: 5e:b4:86:4b:d4:6c:5d:5b:04:13:23:91:be:5c:d3:b1:bd:d1: 69:74:9d:b2:bc:19:3f:ef:30:d1:2a:59:98:18:9d:73:9c:20: 36:a4:04:b7:f8:21:ce:12:e0:20:f3:21:99:a4:c1:0b:88:37: 40:7d:28:3d:55:c5:26:11:f6:19:40:f1:87:c7:d4:8e:b1:00: 6c:5b:a8:71:d8:ce:c9:bd:51:ad:dd:ec:26:51:60:54:19:f1: 37:35:b1:49:74:47:a2:a9:91:57:69:7a:0b:32:16:d4:1d:0b: 67:0f:3d:44:61:c8:74:6e:6f:04:44:86:ab:99:29:11:53:aa: 9c:4f:39:ea:99:01:c3:d3:10:02:6d:64:a0:67:44:ca:b8:fc: 6d:66:d5:e9:65:a9:c3:cb:02:63:73:ec:29:30:40:10:7b:97: fa:d9:48:b6:5d:b3:38:0f:6b:4f:6d:db:53:ba:fa:b9:a0:1b: 84:f0:6f:88:2e:71:70:46:0a:6d:d7:3a:b6:3c:95:b5:1b:4c: 3b:de:cd:26:58:86:85:bc:28:cb:a6:ff:37:72:fa:a8:a5:9a: fa:a4:35:af -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUG3vBN2w+Gx40E968alCwsBRwkzIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFBMDE1MDYyMzE2MTFDODc0NjE0NDI0NzVCMTQwMUFE NURFMzhEMjAeFw0yNTAzMjUyMDA4MzFaFw0yNjAzMjQyMDEzMzFaMDMxMTAvBgNV BAMTKEU0NDgzREMyQzA1MkMyQTMwMDZGRTQ5NDMyMUE4N0FEMDExQ0M0QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwZ+81NKB8JPMNY7UbWmPWf0i1 dNDf1WVJ5R3EADT4x2wfaByZAlzxoSs+sKBvs8B27kszhIDh3x2361zpJEv0nS8G uyEcIUZoijIjUVJU6Tnd1kcK9mCH8iRit3X6XgoVI+UHlNYGvtRhZ3Wl5wFZS+nH lOe6GgslV9YGyA5IZ1K0vHo3Yl40Opsy4LI90ZvGnkNjvPxec6/AnFlI41cxT9+y mQylDqfOTJrzTenf0e6MUEbwbIhPv8J/GNtc9qPrJG9vyaW/elvzsl05DIhOhPGX suGF69drVMeygvM8VITGCB79E2tUbHTNP1Z4/q43PjAh5NxLGhWOGIP9zQOVAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQU5Eg9wsBSwqMAb+SUMhqHrQEcxKgwHwYDVR0j BBgwFoAUEaAVBiMWEch0YUQkdbFAGtXeONIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM3lqR2FYcGpoUG5ERVhoUnE4aDhkUVQ4dTNxYnZDempTbVRWdjN4VEx6 V2kvMC8xMUEwMTUwNjIzMTYxMUM4NzQ2MTQ0MjQ3NUIxNDAxQUQ1REUzOEQyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzExQTAxNTA2MjMxNjExQzg3 NDYxNDQyNDc1QjE0MDFBRDVERTM4RDIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzN5akdhWHBqaFBuREVYaFJxOGg4ZFFUOHUzcWJ2Q3pqU21UVnYzeFRMeldpLzAv MzIzODMwMzQzYTMxMzAzNDM0M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzYzMzM2MzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEEESAMA0GCSqGSIb3DQEBCwUA A4IBAQC0NwTuDRSuYeSuoJduFEUDcmkPe5bFZ1TxCPFXnpwHQzkOoE1etIZL1Gxd WwQTI5G+XNOxvdFpdJ2yvBk/7zDRKlmYGJ1znCA2pAS3+CHOEuAg8yGZpMELiDdA fSg9VcUmEfYZQPGHx9SOsQBsW6hx2M7JvVGt3ewmUWBUGfE3NbFJdEeiqZFXaXoL MhbUHQtnDz1EYch0bm8ERIarmSkRU6qcTznqmQHD0xACbWSgZ0TKuPxtZtXpZanD ywJjc+wpMEAQe5f62Ui2XbM4D2tPbdtTuvq5oBuE8G+ILnFwRgpt1zq2PJW1G0w7 3s0mWIaFvCjLpv83cvqopZr6pDWv -----END CERTIFICATE-----Generated at Wed Nov 5 23:25:51 2025 by rpki-client