$ rpki-client -vvf rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/323830343a343764343a383030303a3a2f33332d3333203d3e20323637303739.roa File: 323830343a343764343a383030303a3a2f33332d3333203d3e20323637303739.roa (raw, json) Hash identifier: r9uwNoqWXxMPRkFK1KKwTZcCqv/uwDxnlUfI2DXE0d0= Subject key identifier: 7A:C7:BD:F3:91:C4:5D:CE:81:32:9C:01:ED:62:96:E7:F1:E2:E0:CD Certificate issuer: /CN=A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398 Certificate serial: 0EA53D33D2D490FBBB1D3C113EAFADDC32EB42F3 Authority key identifier: A2:A4:1D:63:7E:87:1B:A0:DC:D8:B3:DB:98:BD:91:BC:AB:7C:E3:98 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398.cer Subject info access: rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/323830343a343764343a383030303a3a2f33332d3333203d3e20323637303739.roa Signing time: Tue 04 Nov 2025 18:57:32 +0000 ROA not before: Tue 04 Nov 2025 18:52:32 +0000 ROA not after: Tue 03 Nov 2026 18:57:32 +0000 asID: 267079 IP address blocks: 2804:47d4:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398.crl rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 14:29:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:a5:3d:33:d2:d4:90:fb:bb:1d:3c:11:3e:af:ad:dc:32:eb:42:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398 Validity Not Before: Nov 4 18:52:32 2025 GMT Not After : Nov 3 18:57:32 2026 GMT Subject: CN=7AC7BDF391C45DCE81329C01ED6296E7F1E2E0CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2c:72:f8:b2:98:76:48:30:d2:6b:07:23:d6: 91:98:11:1a:4c:22:90:22:3d:a1:bb:70:71:1f:bd: 54:b4:0d:f8:8d:35:8f:b9:d1:f4:24:45:bf:4b:e5: af:7c:24:cc:22:07:f5:18:16:55:60:d5:6a:f1:4c: 13:dc:a4:98:60:a0:23:ad:36:c8:be:43:da:e5:ae: de:01:22:4c:8a:2b:12:01:d6:32:5a:f9:eb:7f:99: 9c:91:da:a2:0a:4b:ca:c6:f5:af:7e:f8:97:34:84: 33:9e:95:4d:0b:fd:05:2c:8d:7b:7b:9a:dd:ec:b0: 34:d1:f8:1f:21:ed:57:67:14:30:86:11:82:ab:66: f9:0b:ac:0f:24:2b:69:0c:37:9a:ba:8b:f1:db:39: ea:35:84:8d:89:a4:e5:68:ec:a9:68:1e:73:4d:b8: 3a:9c:16:d4:47:cc:57:44:69:ca:1a:62:a5:7d:1a: a9:56:ba:81:69:e1:cd:83:9e:6d:0d:de:e8:8d:35: ab:cf:fd:ca:fd:9d:48:b1:b0:f2:79:13:41:f2:63: 29:89:26:54:10:b5:98:19:7a:2e:86:ec:b3:ac:7b: 4a:1a:2f:04:12:1e:3d:95:6b:4d:5f:7a:1e:fe:f2: 04:7a:43:f8:df:a0:41:a2:b6:e9:60:3f:81:f8:d4: 87:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:C7:BD:F3:91:C4:5D:CE:81:32:9C:01:ED:62:96:E7:F1:E2:E0:CD X509v3 Authority Key Identifier: keyid:A2:A4:1D:63:7E:87:1B:A0:DC:D8:B3:DB:98:BD:91:BC:AB:7C:E3:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/323830343a343764343a383030303a3a2f33332d3333203d3e20323637303739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:47d4:8000::/33 Signature Algorithm: sha256WithRSAEncryption 73:aa:c9:c0:20:20:5f:17:6a:10:10:4b:24:3e:26:e4:ee:39: 3b:66:17:c6:38:39:66:bc:75:22:27:83:27:74:ba:91:bf:af: dc:2d:1f:3e:53:8d:78:fb:b3:72:06:66:98:62:cd:0f:89:77: 0d:6c:9c:7e:7a:36:e2:ba:7e:16:ef:77:4d:b5:72:68:2a:00: 59:de:eb:a5:e6:fd:1a:f7:a2:71:06:dc:a0:8b:bd:a0:96:de: 65:39:d1:33:06:86:8f:a5:a0:97:69:9d:e0:c6:3d:39:ec:15: 00:d9:c1:0d:ac:06:a8:0e:e1:09:75:52:a4:3e:39:c9:d6:f3: e9:3e:56:56:38:7b:a9:87:69:6b:02:b6:c0:64:f1:58:f1:db: 2e:66:75:a6:1d:50:4e:cc:e2:e8:e7:1c:b9:ba:81:c7:85:52: 9a:fb:e5:f8:70:4f:58:30:c5:af:8c:fb:8f:fc:3c:c6:85:56: e7:a3:90:af:4b:b3:98:2b:61:60:a8:31:dd:12:97:19:48:9b: 56:18:47:a9:5c:11:fd:e5:dd:ee:49:ad:5f:93:fb:1d:f5:b1: 46:8c:d2:68:3b:ae:4c:3e:41:eb:d3:b3:8a:fa:0e:fd:d0:59: 4b:0e:ea:e4:24:d4:46:c1:a1:b0:0e:94:41:1a:46:77:2b:b3: 1a:87:7b:f3 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUDqU9M9LUkPu7HTwRPq+t3DLrQvMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJBNDFENjM3RTg3MUJBMERDRDhCM0RCOThCRDkxQkNB QjdDRTM5ODAeFw0yNTExMDQxODUyMzJaFw0yNjExMDMxODU3MzJaMDMxMTAvBgNV BAMTKDdBQzdCREYzOTFDNDVEQ0U4MTMyOUMwMUVENjI5NkU3RjFFMkUwQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdLHL4sph2SDDSawcj1pGYERpM IpAiPaG7cHEfvVS0DfiNNY+50fQkRb9L5a98JMwiB/UYFlVg1WrxTBPcpJhgoCOt Nsi+Q9rlrt4BIkyKKxIB1jJa+et/mZyR2qIKS8rG9a9++Jc0hDOelU0L/QUsjXt7 mt3ssDTR+B8h7VdnFDCGEYKrZvkLrA8kK2kMN5q6i/HbOeo1hI2JpOVo7KloHnNN uDqcFtRHzFdEacoaYqV9GqlWuoFp4c2Dnm0N3uiNNavP/cr9nUixsPJ5E0HyYymJ JlQQtZgZei6G7LOse0oaLwQSHj2Va01feh7+8gR6Q/jfoEGitulgP4H41IczAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUese985HEXc6BMpwB7WKW5/Hi4M0wHwYDVR0j BBgwFoAUoqQdY36HG6Dc2LPbmL2RvKt845gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNndjVVo2eWNHTVo0WENvOWYzUXlkdEppVUdGanBzcm94Y2l1ZldaZmRy QXUvMC9BMkE0MUQ2MzdFODcxQkEwRENEOEIzREI5OEJEOTFCQ0FCN0NFMzk4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EyQTQxRDYzN0U4NzFCQTBE Q0Q4QjNEQjk4QkQ5MUJDQUI3Q0UzOTguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzZ3Y1VaNnljR01aNFhDbzlmM1F5ZHRKaVVHRmpwc3JveGNpdWZXWmZkckF1LzAv MzIzODMwMzQzYTM0Mzc2NDM0M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk M2UyMDMyMzYzNzMwMzczOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygER9SAMA0GCSqGSIb3DQEBCwUA A4IBAQBzqsnAICBfF2oQEEskPibk7jk7ZhfGODlmvHUiJ4MndLqRv6/cLR8+U414 +7NyBmaYYs0PiXcNbJx+ejbiun4W73dNtXJoKgBZ3uul5v0a96JxBtygi72glt5l OdEzBoaPpaCXaZ3gxj057BUA2cENrAaoDuEJdVKkPjnJ1vPpPlZWOHuph2lrArbA ZPFY8dsuZnWmHVBOzOLo5xy5uoHHhVKa++X4cE9YMMWvjPuP/DzGhVbno5CvS7OY K2FgqDHdEpcZSJtWGEepXBH95d3uSa1fk/sd9bFGjNJoO65MPkHr07OK+g790FlL DurkJNRGwaGwDpRBGkZ3K7Mah3vz -----END CERTIFICATE-----Generated at Wed Nov 5 21:52:23 2025 by rpki-client