$ rpki-client -vvf rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/323830343a373633303a3a2f33322d3332203d3e20323731303935.roa File: 323830343a373633303a3a2f33322d3332203d3e20323731303935.roa (raw, json) Hash identifier: kOaelJSbrawNGUj8SHViCcp4NpZdOn1Ab0xJJJsOHrU= Subject key identifier: 32:9F:7A:4B:9D:0C:FF:74:1F:E6:6C:F5:A2:23:DE:08:63:24:6F:57 Certificate issuer: /CN=BB28C577DF924111463D0D089EB3700DB6333A08 Certificate serial: 41E8B34C96B8E45513AD3F3C9ACB0F3D3D2E0541 Authority key identifier: BB:28:C5:77:DF:92:41:11:46:3D:0D:08:9E:B3:70:0D:B6:33:3A:08 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB28C577DF924111463D0D089EB3700DB6333A08.cer Subject info access: rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/323830343a373633303a3a2f33322d3332203d3e20323731303935.roa Signing time: Mon 13 Jan 2025 16:25:46 +0000 ROA not before: Mon 13 Jan 2025 16:20:46 +0000 ROA not after: Mon 12 Jan 2026 16:25:46 +0000 asID: 271095 IP address blocks: 2804:7630::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/BB28C577DF924111463D0D089EB3700DB6333A08.crl rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/BB28C577DF924111463D0D089EB3700DB6333A08.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB28C577DF924111463D0D089EB3700DB6333A08.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 01:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:e8:b3:4c:96:b8:e4:55:13:ad:3f:3c:9a:cb:0f:3d:3d:2e:05:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB28C577DF924111463D0D089EB3700DB6333A08 Validity Not Before: Jan 13 16:20:46 2025 GMT Not After : Jan 12 16:25:46 2026 GMT Subject: CN=329F7A4B9D0CFF741FE66CF5A223DE0863246F57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:89:d8:fc:29:7a:aa:89:bd:1a:db:34:96:a9: 58:a6:b1:a6:72:ec:bd:de:08:d2:32:24:5d:92:82: 86:08:66:e5:6f:05:7c:1d:f4:bf:dc:c5:82:f4:98: f9:09:af:f8:8e:9e:e0:d6:de:63:fd:5a:38:45:56: 2e:85:a1:82:98:cd:f8:09:cf:96:da:0a:d4:d8:b2: ba:d5:a6:3b:c5:60:a7:77:0c:43:de:e7:5c:ba:4a: 2b:1a:e2:9c:27:b0:7a:ac:a3:2e:f9:52:1a:cd:54: 5c:82:f9:c7:15:8e:7c:aa:b7:e9:38:c1:0b:9b:b8: d4:3c:e9:4d:16:ae:0a:4a:b0:31:48:35:1f:e3:6e: 7d:8d:f8:e9:c4:cc:44:e7:25:8b:da:be:8f:97:0d: 7f:c2:b4:01:c9:3f:94:2d:58:c9:a2:b5:0f:55:1d: f9:40:87:8b:77:0a:1a:6d:31:e8:00:4f:75:a7:4a: 04:48:d1:45:cc:38:35:9b:a4:ab:d7:be:83:a3:00: 47:ad:bb:00:62:77:49:75:f5:e8:f8:9c:6a:ce:8c: e3:97:fd:59:90:e2:eb:11:3a:de:48:9f:a5:a6:44: 20:48:0d:8e:ed:8e:58:d8:37:09:5b:fe:2e:9b:cb: f0:c9:a2:5e:f1:aa:1c:a2:75:98:d2:6b:3b:80:1c: dc:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:9F:7A:4B:9D:0C:FF:74:1F:E6:6C:F5:A2:23:DE:08:63:24:6F:57 X509v3 Authority Key Identifier: keyid:BB:28:C5:77:DF:92:41:11:46:3D:0D:08:9E:B3:70:0D:B6:33:3A:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/BB28C577DF924111463D0D089EB3700DB6333A08.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB28C577DF924111463D0D089EB3700DB6333A08.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/323830343a373633303a3a2f33322d3332203d3e20323731303935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:7630::/32 Signature Algorithm: sha256WithRSAEncryption 68:c4:0a:db:94:bc:b4:92:b4:c5:84:ba:da:ce:1e:95:c7:4d: 93:e5:18:00:a5:27:3b:83:d5:91:09:3b:0c:d5:10:36:0b:74: 18:17:1b:b0:7f:e8:4b:6e:bf:36:57:08:9e:63:67:81:25:c9: bc:d4:89:59:19:72:33:ba:54:09:53:c2:c2:69:be:28:67:ae: 65:42:63:84:b9:a1:54:c6:7a:a4:fb:e6:04:d4:5f:b7:9b:9d: 3f:09:0a:f9:75:9c:cb:6f:9f:6e:0e:14:16:bb:75:66:d9:c3: 80:0a:2a:79:18:6f:7d:50:85:8a:b6:9c:59:5e:c3:71:31:7c: 56:89:25:fc:24:f5:70:26:ed:8a:d6:c8:68:a2:cd:a9:67:59: e6:b9:dc:cc:cf:3e:4e:f3:d6:58:f7:84:50:27:f8:23:ad:4a: 1a:42:a4:32:54:95:18:76:81:58:4c:27:4e:44:8d:9f:36:c2: 24:b6:be:1e:80:95:c2:0c:fb:ec:c5:e7:4d:5c:dc:36:e8:a0: 2f:44:ac:f3:79:d8:31:1c:fd:b6:c0:a2:d4:86:4b:38:3b:34: 15:31:e4:1b:93:d7:49:ef:48:66:06:82:f3:c8:f7:eb:32:d8: 70:7d:79:ba:7c:f8:c1:25:45:14:3d:03:de:e5:1a:a9:20:9e: 7c:e5:78:81 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUQeizTJa45FUTrT88mssPPT0uBUEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkIyOEM1NzdERjkyNDExMTQ2M0QwRDA4OUVCMzcwMERC NjMzM0EwODAeFw0yNTAxMTMxNjIwNDZaFw0yNjAxMTIxNjI1NDZaMDMxMTAvBgNV BAMTKDMyOUY3QTRCOUQwQ0ZGNzQxRkU2NkNGNUEyMjNERTA4NjMyNDZGNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNidj8KXqqib0a2zSWqVimsaZy 7L3eCNIyJF2SgoYIZuVvBXwd9L/cxYL0mPkJr/iOnuDW3mP9WjhFVi6FoYKYzfgJ z5baCtTYsrrVpjvFYKd3DEPe51y6Sisa4pwnsHqsoy75UhrNVFyC+ccVjnyqt+k4 wQubuNQ86U0WrgpKsDFINR/jbn2N+OnEzETnJYvavo+XDX/CtAHJP5QtWMmitQ9V HflAh4t3ChptMegAT3WnSgRI0UXMODWbpKvXvoOjAEetuwBid0l19ej4nGrOjOOX /VmQ4usROt5In6WmRCBIDY7tjljYNwlb/i6by/DJol7xqhyidZjSazuAHNzfAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUMp96S50M/3Qf5mz1oiPeCGMkb1cwHwYDVR0j BBgwFoAUuyjFd9+SQRFGPQ0InrNwDbYzOggwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEhWS2JzaG9RVnVGR2pmZWdrSFNDazJOMkhIbzVic2hYelFNZTNHYmNO WUcvMC9CQjI4QzU3N0RGOTI0MTExNDYzRDBEMDg5RUIzNzAwREI2MzMzQTA4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JCMjhDNTc3REY5MjQxMTE0 NjNEMEQwODlFQjM3MDBEQjYzMzNBMDguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzRIVktic2hvUVZ1RkdqZmVna0hTQ2syTjJISG81YnNoWHpRTWUzR2JjTllHLzAv MzIzODMwMzQzYTM3MzYzMzMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMx MzAzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKAR2MDANBgkqhkiG9w0BAQsFAAOCAQEAaMQK25S8 tJK0xYS62s4elcdNk+UYAKUnO4PVkQk7DNUQNgt0GBcbsH/oS26/NlcInmNngSXJ vNSJWRlyM7pUCVPCwmm+KGeuZUJjhLmhVMZ6pPvmBNRft5udPwkK+XWcy2+fbg4U Frt1ZtnDgAoqeRhvfVCFiracWV7DcTF8Vokl/CT1cCbtitbIaKLNqWdZ5rnczM8+ TvPWWPeEUCf4I61KGkKkMlSVGHaBWEwnTkSNnzbCJLa+HoCVwgz77MXnTVzcNuig L0Ss83nYMRz9tsCi1IZLODs0FTHkG5PXSe9IZgaC88j36zLYcH15unz4wSVFFD0D 3uUaqSCefOV4gQ== -----END CERTIFICATE-----Generated at Wed Nov 5 13:06:49 2025 by rpki-client