$ rpki-client -vvf rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/323830343a373261303a393230303a3a2f34302d3430203d3e20323730383635.roa File: 323830343a373261303a393230303a3a2f34302d3430203d3e20323730383635.roa (raw, json) Hash identifier: io5yRG2PhsCKHUMpxm6iOUhJkjmMdbdmYPZLs+Bdypg= Subject key identifier: A0:E5:B6:E4:8C:86:32:C8:BA:66:56:F0:09:38:89:79:D3:92:8F:47 Certificate issuer: /CN=7E7A96BA6C40877E5B4EBDC50EC232C6DFC46DE0 Certificate serial: 323BA83BC4C06D7305CE0823D4C92B4BEE4BDA26 Authority key identifier: 7E:7A:96:BA:6C:40:87:7E:5B:4E:BD:C5:0E:C2:32:C6:DF:C4:6D:E0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E7A96BA6C40877E5B4EBDC50EC232C6DFC46DE0.cer Subject info access: rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/323830343a373261303a393230303a3a2f34302d3430203d3e20323730383635.roa Signing time: Sat 01 Nov 2025 01:03:17 +0000 ROA not before: Sat 01 Nov 2025 00:58:17 +0000 ROA not after: Sat 31 Oct 2026 01:03:17 +0000 asID: 270865 IP address blocks: 2804:72a0:9200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/7E7A96BA6C40877E5B4EBDC50EC232C6DFC46DE0.crl rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/7E7A96BA6C40877E5B4EBDC50EC232C6DFC46DE0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E7A96BA6C40877E5B4EBDC50EC232C6DFC46DE0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 19:31:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:3b:a8:3b:c4:c0:6d:73:05:ce:08:23:d4:c9:2b:4b:ee:4b:da:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E7A96BA6C40877E5B4EBDC50EC232C6DFC46DE0 Validity Not Before: Nov 1 00:58:17 2025 GMT Not After : Oct 31 01:03:17 2026 GMT Subject: CN=A0E5B6E48C8632C8BA6656F009388979D3928F47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5a:30:82:21:30:74:bd:ec:a5:f1:93:88:ce: 54:bc:67:4b:3b:8b:04:9d:f5:ed:3a:c5:84:94:67: 4d:3b:d4:81:c6:5d:20:84:0e:12:89:18:15:b8:ed: 24:e1:90:06:15:6d:f3:be:35:27:e2:80:84:79:39: 24:84:99:fb:51:3d:d4:a1:60:89:45:5e:95:cf:2a: 92:fb:46:27:f7:d0:1a:13:8d:5c:45:ff:b4:04:fb: 6f:52:17:f4:b9:9c:65:22:a8:d9:61:dd:05:1d:36: e3:7e:71:a9:fd:53:a6:6e:7e:50:46:5d:a1:45:0f: 73:64:fd:1c:fd:7f:6c:e7:31:95:4c:cc:48:ae:66: ef:f3:0f:ec:cc:79:3b:20:91:19:c7:1a:72:c8:e8: b9:58:ce:e8:fa:5a:2e:4a:5e:fa:3c:b6:d3:3c:b6: 49:0e:7f:e0:bb:5f:8d:3c:12:76:ad:e0:2e:fb:57: 3e:e8:3b:c2:43:a9:d4:08:7f:ee:ce:16:55:47:ed: 4e:86:3a:62:3d:e1:94:81:32:68:9e:66:16:e0:5d: c9:28:aa:1d:92:0e:05:09:24:17:03:d6:5d:ab:a3: 26:14:77:eb:2e:45:8a:d6:99:71:15:bc:89:ff:ec: d2:f2:dc:02:52:f4:b7:fa:80:40:a8:85:1b:59:a8: b3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:E5:B6:E4:8C:86:32:C8:BA:66:56:F0:09:38:89:79:D3:92:8F:47 X509v3 Authority Key Identifier: keyid:7E:7A:96:BA:6C:40:87:7E:5B:4E:BD:C5:0E:C2:32:C6:DF:C4:6D:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/7E7A96BA6C40877E5B4EBDC50EC232C6DFC46DE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E7A96BA6C40877E5B4EBDC50EC232C6DFC46DE0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/323830343a373261303a393230303a3a2f34302d3430203d3e20323730383635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:72a0:9200::/40 Signature Algorithm: sha256WithRSAEncryption 3a:80:97:cd:44:f8:8d:61:b9:e8:fe:01:8e:e9:8a:48:a9:da: 82:b0:ed:3b:2f:4a:ee:d2:61:ec:3a:54:ed:1b:06:f7:cd:4c: 64:10:2e:64:3d:5c:d6:fa:39:3c:b3:26:f1:05:52:29:0b:4b: 15:80:90:03:37:5d:e6:6b:f6:0d:82:6d:6a:f2:ec:e0:bc:4f: 1d:81:41:b3:12:ff:3b:d2:97:5e:8f:52:fd:0e:64:af:ea:be: 59:05:e2:e4:5a:f1:c1:4e:1b:8e:94:b6:9c:eb:69:30:cc:aa: 21:0d:3c:3e:0d:59:df:4a:bd:38:7a:76:48:2c:4d:1c:04:c9: 7d:8e:e9:d8:2f:78:98:2c:4b:c2:a5:95:d0:24:2a:10:ce:cc: f0:c4:80:83:8b:8c:0a:02:3c:95:62:98:c3:b7:fe:aa:05:df: d2:3b:c8:74:6d:49:87:61:b8:43:70:5d:18:8b:82:26:f9:1d: 26:d5:a3:1e:a6:ce:66:15:c0:de:ec:91:bd:40:db:68:13:83: 20:de:4f:d4:62:06:22:c2:f7:e1:8c:82:22:d2:44:ff:39:23: 04:7e:ed:3f:80:8d:21:39:c9:71:e5:27:aa:fe:0e:90:d9:55: 57:67:1d:76:8a:cd:ec:4e:48:01:bf:c7:9e:85:dd:d8:b2:29: de:cf:da:c1 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUMjuoO8TAbXMFzggj1MkrS+5L2iYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U3QTk2QkE2QzQwODc3RTVCNEVCREM1MEVDMjMyQzZE RkM0NkRFMDAeFw0yNTExMDEwMDU4MTdaFw0yNjEwMzEwMTAzMTdaMDMxMTAvBgNV BAMTKEEwRTVCNkU0OEM4NjMyQzhCQTY2NTZGMDA5Mzg4OTc5RDM5MjhGNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaWjCCITB0veyl8ZOIzlS8Z0s7 iwSd9e06xYSUZ0071IHGXSCEDhKJGBW47SThkAYVbfO+NSfigIR5OSSEmftRPdSh YIlFXpXPKpL7Rif30BoTjVxF/7QE+29SF/S5nGUiqNlh3QUdNuN+can9U6ZuflBG XaFFD3Nk/Rz9f2znMZVMzEiuZu/zD+zMeTsgkRnHGnLI6LlYzuj6Wi5KXvo8ttM8 tkkOf+C7X408Enat4C77Vz7oO8JDqdQIf+7OFlVH7U6GOmI94ZSBMmieZhbgXcko qh2SDgUJJBcD1l2royYUd+suRYrWmXEVvIn/7NLy3AJS9Lf6gECohRtZqLP9AgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUoOW25IyGMsi6ZlbwCTiJedOSj0cwHwYDVR0j BBgwFoAUfnqWumxAh35bTr3FDsIyxt/EbeAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNG5MQkQ5NHJRNk5KNWhZRFNRNGY5TVQ5cGtxYWRmdTlGQnNhd1NWVm1x TnMvMC83RTdBOTZCQTZDNDA4NzdFNUI0RUJEQzUwRUMyMzJDNkRGQzQ2REUwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdFN0E5NkJBNkM0MDg3N0U1 QjRFQkRDNTBFQzIzMkM2REZDNDZERTAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzRuTEJEOTRyUTZOSjVoWURTUTRmOU1UOXBrcWFkZnU5RkJzYXdTVlZtcU5zLzAv MzIzODMwMzQzYTM3MzI2MTMwM2EzOTMyMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk M2UyMDMyMzczMDM4MzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEcqCSMA0GCSqGSIb3DQEBCwUA A4IBAQA6gJfNRPiNYbno/gGO6YpIqdqCsO07L0ru0mHsOlTtGwb3zUxkEC5kPVzW +jk8sybxBVIpC0sVgJADN13ma/YNgm1q8uzgvE8dgUGzEv870pdej1L9DmSv6r5Z BeLkWvHBThuOlLac62kwzKohDTw+DVnfSr04enZILE0cBMl9junYL3iYLEvCpZXQ JCoQzszwxICDi4wKAjyVYpjDt/6qBd/SO8h0bUmHYbhDcF0Yi4Im+R0m1aMeps5m FcDe7JG9QNtoE4Mg3k/UYgYiwvfhjIIi0kT/OSMEfu0/gI0hOclx5Seq/g6Q2VVX Zx12is3sTkgBv8eehd3Ysinez9rB -----END CERTIFICATE-----Generated at Wed Nov 5 08:16:05 2025 by rpki-client