$ rpki-client -vvf rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/323830343a373261303a663830303a3a2f33382d3338203d3e20323730383635.roa File: 323830343a373261303a663830303a3a2f33382d3338203d3e20323730383635.roa (raw, json) Hash identifier: oYQ6evit7fb+UkhzUMALFdmqPy04iUSKhq32mOB94O4= Subject key identifier: F8:FD:76:73:49:E7:B8:35:71:40:AA:C7:23:F0:AC:42:81:DE:12:6B Certificate issuer: /CN=7E7A96BA6C40877E5B4EBDC50EC232C6DFC46DE0 Certificate serial: 7B65A2061BEC18A8341AAD6345513BA21609FDF6 Authority key identifier: 7E:7A:96:BA:6C:40:87:7E:5B:4E:BD:C5:0E:C2:32:C6:DF:C4:6D:E0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E7A96BA6C40877E5B4EBDC50EC232C6DFC46DE0.cer Subject info access: rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/323830343a373261303a663830303a3a2f33382d3338203d3e20323730383635.roa Signing time: Sat 01 Nov 2025 01:03:25 +0000 ROA not before: Sat 01 Nov 2025 00:58:25 +0000 ROA not after: Sat 31 Oct 2026 01:03:25 +0000 asID: 270865 IP address blocks: 2804:72a0:f800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/7E7A96BA6C40877E5B4EBDC50EC232C6DFC46DE0.crl rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/7E7A96BA6C40877E5B4EBDC50EC232C6DFC46DE0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E7A96BA6C40877E5B4EBDC50EC232C6DFC46DE0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 19:31:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:65:a2:06:1b:ec:18:a8:34:1a:ad:63:45:51:3b:a2:16:09:fd:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E7A96BA6C40877E5B4EBDC50EC232C6DFC46DE0 Validity Not Before: Nov 1 00:58:25 2025 GMT Not After : Oct 31 01:03:25 2026 GMT Subject: CN=F8FD767349E7B8357140AAC723F0AC4281DE126B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d7:05:38:cc:70:9d:d0:c1:23:d1:ab:44:1f: 34:74:e5:d4:97:7a:7f:1d:f1:3c:f7:1a:fa:8d:bf: 4d:f1:85:84:9e:ee:e0:5f:1c:de:03:16:f4:5b:44: aa:27:8e:43:07:0b:f7:0c:e1:d9:27:cd:23:39:96: bc:fe:79:7e:dd:75:67:b7:be:aa:88:de:5b:6c:0b: 24:a6:80:ed:9d:36:c3:f7:5e:86:c6:5f:8b:58:5e: 88:9c:56:f7:53:43:5a:d5:ce:fe:9f:c0:35:51:c6: 0d:60:f9:33:d4:e2:5a:ad:5a:36:d8:52:c5:97:b9: d0:42:ea:69:d7:63:4f:75:f5:e6:e2:54:52:38:fb: 4c:a0:0d:4a:14:98:58:3c:15:13:f1:5b:92:8d:fa: 05:56:b0:92:a2:da:5e:52:8b:03:46:64:b8:c2:71: 66:36:3f:d5:f7:43:bc:85:ea:dd:7c:fe:25:41:8a: 8d:b3:62:b4:ef:e3:25:cd:e7:65:4b:b7:be:8d:34: 6b:13:07:76:80:c4:b2:e7:ad:e8:56:1e:61:f2:27: 46:71:71:1a:29:7b:cb:b3:62:b0:97:5b:53:a3:dd: b7:88:cb:e4:90:22:37:dc:a0:7d:f2:2a:79:f9:4a: fe:1f:c3:46:07:5d:e8:13:1e:6f:1b:63:3f:7b:b9: e1:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:FD:76:73:49:E7:B8:35:71:40:AA:C7:23:F0:AC:42:81:DE:12:6B X509v3 Authority Key Identifier: keyid:7E:7A:96:BA:6C:40:87:7E:5B:4E:BD:C5:0E:C2:32:C6:DF:C4:6D:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/7E7A96BA6C40877E5B4EBDC50EC232C6DFC46DE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E7A96BA6C40877E5B4EBDC50EC232C6DFC46DE0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/323830343a373261303a663830303a3a2f33382d3338203d3e20323730383635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:72a0:f800::/38 Signature Algorithm: sha256WithRSAEncryption 5a:39:fc:96:11:8c:d7:6b:7e:0d:5b:93:65:be:de:2d:64:d9: 16:33:89:df:07:3b:c0:98:6e:26:05:1d:6e:c5:f5:e7:06:30: c2:30:7a:32:50:05:36:93:89:d9:e0:84:2b:41:37:e8:ba:23: a1:52:95:16:07:06:fa:86:46:d3:ed:2c:46:67:46:5f:fa:ab: e4:48:d8:a6:be:07:58:b9:c3:51:00:c8:3a:0f:c8:02:21:07: a9:33:b7:02:f1:0d:98:67:91:58:ed:54:b1:7a:e1:27:32:37: 57:57:0d:5d:80:f6:94:ee:e7:c8:8a:05:5a:4e:54:5d:f6:b2: d3:0e:13:b6:49:26:ca:a8:d1:9f:73:b5:9e:f4:bf:cd:bd:07: aa:22:b7:1d:72:d6:61:fc:01:03:24:c8:c8:36:67:b3:96:78: 10:7e:f8:4b:d4:d0:0a:b8:3a:b5:16:02:8b:af:4f:71:7b:ea: de:ce:db:46:f1:9d:a8:6a:80:23:9e:5f:03:6b:79:83:11:ce: 08:7b:dd:47:db:7f:8b:66:b8:e1:a7:ce:5f:24:de:ab:cb:8a: a1:a2:f0:47:4c:8c:99:89:65:f0:9e:fe:a2:23:5b:00:77:e6: c0:03:46:8f:b0:cd:e8:ce:26:c4:4a:be:56:c6:c0:47:52:08: ee:97:c5:27 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUe2WiBhvsGKg0Gq1jRVE7ohYJ/fYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U3QTk2QkE2QzQwODc3RTVCNEVCREM1MEVDMjMyQzZE RkM0NkRFMDAeFw0yNTExMDEwMDU4MjVaFw0yNjEwMzEwMTAzMjVaMDMxMTAvBgNV BAMTKEY4RkQ3NjczNDlFN0I4MzU3MTQwQUFDNzIzRjBBQzQyODFERTEyNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy1wU4zHCd0MEj0atEHzR05dSX en8d8Tz3GvqNv03xhYSe7uBfHN4DFvRbRKonjkMHC/cM4dknzSM5lrz+eX7ddWe3 vqqI3ltsCySmgO2dNsP3XobGX4tYXoicVvdTQ1rVzv6fwDVRxg1g+TPU4lqtWjbY UsWXudBC6mnXY0919ebiVFI4+0ygDUoUmFg8FRPxW5KN+gVWsJKi2l5SiwNGZLjC cWY2P9X3Q7yF6t18/iVBio2zYrTv4yXN52VLt76NNGsTB3aAxLLnrehWHmHyJ0Zx cRope8uzYrCXW1Oj3beIy+SQIjfcoH3yKnn5Sv4fw0YHXegTHm8bYz97ueHJAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQU+P12c0nnuDVxQKrHI/CsQoHeEmswHwYDVR0j BBgwFoAUfnqWumxAh35bTr3FDsIyxt/EbeAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNG5MQkQ5NHJRNk5KNWhZRFNRNGY5TVQ5cGtxYWRmdTlGQnNhd1NWVm1x TnMvMC83RTdBOTZCQTZDNDA4NzdFNUI0RUJEQzUwRUMyMzJDNkRGQzQ2REUwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdFN0E5NkJBNkM0MDg3N0U1 QjRFQkRDNTBFQzIzMkM2REZDNDZERTAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzRuTEJEOTRyUTZOSjVoWURTUTRmOU1UOXBrcWFkZnU5RkJzYXdTVlZtcU5zLzAv MzIzODMwMzQzYTM3MzI2MTMwM2E2NjM4MzAzMDNhM2EyZjMzMzgyZDMzMzgyMDNk M2UyMDMyMzczMDM4MzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAigEcqD4MA0GCSqGSIb3DQEBCwUA A4IBAQBaOfyWEYzXa34NW5Nlvt4tZNkWM4nfBzvAmG4mBR1uxfXnBjDCMHoyUAU2 k4nZ4IQrQTfouiOhUpUWBwb6hkbT7SxGZ0Zf+qvkSNimvgdYucNRAMg6D8gCIQep M7cC8Q2YZ5FY7VSxeuEnMjdXVw1dgPaU7ufIigVaTlRd9rLTDhO2SSbKqNGfc7We 9L/NvQeqIrcdctZh/AEDJMjINmezlngQfvhL1NAKuDq1FgKLr09xe+rezttG8Z2o aoAjnl8Da3mDEc4Ie91H23+LZrjhp85fJN6ry4qhovBHTIyZiWXwnv6iI1sAd+bA A0aPsM3ozibESr5WxsBHUgjul8Un -----END CERTIFICATE-----Generated at Wed Nov 5 08:15:56 2025 by rpki-client