$ rpki-client -vvf rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/323830343a373261303a343030303a3a2f34302d3430203d3e20323730383635.roa File: 323830343a373261303a343030303a3a2f34302d3430203d3e20323730383635.roa (raw, json) Hash identifier: n8wleTNmGwDwNstpjfrJ8d+sXAHiXEIw7xdw82mHV2k= Subject key identifier: 0B:20:10:F9:62:EB:24:4A:62:33:9B:C8:D7:28:F6:40:7E:39:9A:70 Certificate issuer: /CN=7E7A96BA6C40877E5B4EBDC50EC232C6DFC46DE0 Certificate serial: 2C41926B99D3B51DC180D4028FEE7AC17F754950 Authority key identifier: 7E:7A:96:BA:6C:40:87:7E:5B:4E:BD:C5:0E:C2:32:C6:DF:C4:6D:E0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E7A96BA6C40877E5B4EBDC50EC232C6DFC46DE0.cer Subject info access: rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/323830343a373261303a343030303a3a2f34302d3430203d3e20323730383635.roa Signing time: Fri 31 Oct 2025 23:42:38 +0000 ROA not before: Fri 31 Oct 2025 23:37:38 +0000 ROA not after: Fri 30 Oct 2026 23:42:38 +0000 asID: 270865 IP address blocks: 2804:72a0:4000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/7E7A96BA6C40877E5B4EBDC50EC232C6DFC46DE0.crl rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/7E7A96BA6C40877E5B4EBDC50EC232C6DFC46DE0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E7A96BA6C40877E5B4EBDC50EC232C6DFC46DE0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 19:31:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:41:92:6b:99:d3:b5:1d:c1:80:d4:02:8f:ee:7a:c1:7f:75:49:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E7A96BA6C40877E5B4EBDC50EC232C6DFC46DE0 Validity Not Before: Oct 31 23:37:38 2025 GMT Not After : Oct 30 23:42:38 2026 GMT Subject: CN=0B2010F962EB244A62339BC8D728F6407E399A70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:42:a0:44:a3:ba:68:41:56:e9:29:26:11:6d: dc:fc:2e:3f:f2:89:3c:ce:ad:5d:cb:16:26:7e:d0: dc:b8:26:2f:e6:c4:62:bd:8a:6b:60:08:87:53:36: 63:90:48:aa:39:ff:a2:b5:ce:29:1a:76:32:86:55: 57:bd:91:23:ca:7e:58:89:87:5a:60:96:6c:5b:22: b9:6e:60:70:f3:82:33:2b:41:f8:86:88:73:40:bc: b0:16:e5:8e:eb:61:3c:23:aa:78:58:23:d5:9b:4c: 59:19:06:7b:0c:e0:bd:62:91:d8:38:49:2f:e1:0c: 24:24:df:7a:88:9d:fc:7b:48:9a:59:32:e2:03:6e: 60:9e:09:1f:5b:1c:69:c5:75:b7:63:71:c8:f7:ea: b2:8a:09:01:ca:e1:6c:03:c8:a8:ea:fa:73:14:ff: 34:c0:49:62:fa:82:dc:a4:8e:f5:d6:29:2b:fa:a0: f8:fc:33:9c:a0:07:cf:07:6d:ec:14:85:54:21:8f: 7b:68:1f:bb:1e:49:53:0a:02:95:0d:a7:5c:be:b4: 7f:7d:13:fa:68:33:8c:65:26:f6:22:3a:04:51:cf: cf:fc:13:34:fe:77:a0:57:9f:f1:2d:87:0b:2a:2e: b3:38:7c:b8:5b:23:d0:46:d4:60:02:9e:52:3e:ff: 83:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:20:10:F9:62:EB:24:4A:62:33:9B:C8:D7:28:F6:40:7E:39:9A:70 X509v3 Authority Key Identifier: keyid:7E:7A:96:BA:6C:40:87:7E:5B:4E:BD:C5:0E:C2:32:C6:DF:C4:6D:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/7E7A96BA6C40877E5B4EBDC50EC232C6DFC46DE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E7A96BA6C40877E5B4EBDC50EC232C6DFC46DE0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/323830343a373261303a343030303a3a2f34302d3430203d3e20323730383635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:72a0:4000::/40 Signature Algorithm: sha256WithRSAEncryption 87:be:8c:39:85:c0:42:82:e1:92:d5:f5:fb:5b:d8:99:09:00: 91:3a:8e:1d:14:ae:90:28:08:90:cd:de:23:60:cc:2f:d4:85: 86:1e:fe:75:fa:64:56:25:6b:45:f5:94:b8:c7:e2:91:da:62: 23:9d:f9:46:c8:ae:ae:e7:ac:98:8b:ce:31:c7:48:f0:8d:96: 7b:f5:2d:7e:c2:95:1e:c5:da:57:ef:5e:d2:5a:06:ae:72:42: f0:4c:54:0f:0b:92:e0:ba:d4:5b:55:d8:52:32:9f:02:4a:a1: 0d:cb:a1:0f:0c:65:c2:c8:f7:11:92:d8:e9:97:d7:3a:35:03: 9d:16:8d:e8:8f:d7:18:89:36:d7:c0:8a:ab:09:a9:a1:6c:23: 14:ec:5f:22:6c:45:82:59:90:8c:68:6d:50:d7:3d:40:ef:0f: 41:8f:00:fb:46:51:84:a2:db:e8:24:93:eb:dd:62:20:40:e7: 6f:98:8c:33:19:af:0e:6f:4b:88:c5:91:55:af:33:ce:e4:f8: 3f:8c:f2:62:12:43:5b:1d:b2:1c:f5:22:2f:a8:a4:27:ab:59: f0:82:be:e7:92:9b:d7:79:8c:e3:cb:2c:78:39:ea:be:de:f8: 02:f7:62:cf:05:fc:20:13:81:bc:13:9b:d5:8a:03:2c:1a:5c: 3f:a5:b8:e1 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIULEGSa5nTtR3BgNQCj+56wX91SVAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U3QTk2QkE2QzQwODc3RTVCNEVCREM1MEVDMjMyQzZE RkM0NkRFMDAeFw0yNTEwMzEyMzM3MzhaFw0yNjEwMzAyMzQyMzhaMDMxMTAvBgNV BAMTKDBCMjAxMEY5NjJFQjI0NEE2MjMzOUJDOEQ3MjhGNjQwN0UzOTlBNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjQqBEo7poQVbpKSYRbdz8Lj/y iTzOrV3LFiZ+0Ny4Ji/mxGK9imtgCIdTNmOQSKo5/6K1zikadjKGVVe9kSPKfliJ h1pglmxbIrluYHDzgjMrQfiGiHNAvLAW5Y7rYTwjqnhYI9WbTFkZBnsM4L1ikdg4 SS/hDCQk33qInfx7SJpZMuIDbmCeCR9bHGnFdbdjccj36rKKCQHK4WwDyKjq+nMU /zTASWL6gtykjvXWKSv6oPj8M5ygB88HbewUhVQhj3toH7seSVMKApUNp1y+tH99 E/poM4xlJvYiOgRRz8/8EzT+d6BXn/EthwsqLrM4fLhbI9BG1GACnlI+/4PXAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUCyAQ+WLrJEpiM5vI1yj2QH45mnAwHwYDVR0j BBgwFoAUfnqWumxAh35bTr3FDsIyxt/EbeAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNG5MQkQ5NHJRNk5KNWhZRFNRNGY5TVQ5cGtxYWRmdTlGQnNhd1NWVm1x TnMvMC83RTdBOTZCQTZDNDA4NzdFNUI0RUJEQzUwRUMyMzJDNkRGQzQ2REUwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdFN0E5NkJBNkM0MDg3N0U1 QjRFQkRDNTBFQzIzMkM2REZDNDZERTAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzRuTEJEOTRyUTZOSjVoWURTUTRmOU1UOXBrcWFkZnU5RkJzYXdTVlZtcU5zLzAv MzIzODMwMzQzYTM3MzI2MTMwM2EzNDMwMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk M2UyMDMyMzczMDM4MzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEcqBAMA0GCSqGSIb3DQEBCwUA A4IBAQCHvow5hcBCguGS1fX7W9iZCQCROo4dFK6QKAiQzd4jYMwv1IWGHv51+mRW JWtF9ZS4x+KR2mIjnflGyK6u56yYi84xx0jwjZZ79S1+wpUexdpX717SWgauckLw TFQPC5LgutRbVdhSMp8CSqENy6EPDGXCyPcRktjpl9c6NQOdFo3oj9cYiTbXwIqr CamhbCMU7F8ibEWCWZCMaG1Q1z1A7w9BjwD7RlGEotvoJJPr3WIgQOdvmIwzGa8O b0uIxZFVrzPO5Pg/jPJiEkNbHbIc9SIvqKQnq1nwgr7nkpvXeYzjyyx4Oeq+3vgC 92LPBfwgE4G8E5vVigMsGlw/pbjh -----END CERTIFICATE-----Generated at Wed Nov 5 08:17:05 2025 by rpki-client