$ rpki-client -vvf rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/323830343a366635303a3130303a3a2f34302d3430203d3e20323730363532.roa File: 323830343a366635303a3130303a3a2f34302d3430203d3e20323730363532.roa (raw, json) Hash identifier: guWzVWdZDSS3vHkNkAmE5el4RHx6iRZVqybu7ipDh6o= Subject key identifier: 0E:94:6E:CE:C2:BC:AF:4B:BC:F0:97:C3:2A:E0:CF:84:77:7D:19:55 Certificate issuer: /CN=0144765DC0A3D9D0EADA845625C5E7F14C552690 Certificate serial: 320A975B360C69C65ED3803B626E748D4490C6F6 Authority key identifier: 01:44:76:5D:C0:A3:D9:D0:EA:DA:84:56:25:C5:E7:F1:4C:55:26:90 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.cer Subject info access: rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/323830343a366635303a3130303a3a2f34302d3430203d3e20323730363532.roa Signing time: Sat 31 May 2025 13:37:26 +0000 ROA not before: Sat 31 May 2025 13:32:26 +0000 ROA not after: Sat 30 May 2026 13:37:26 +0000 asID: 270652 IP address blocks: 2804:6f50:100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.crl rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 06:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:0a:97:5b:36:0c:69:c6:5e:d3:80:3b:62:6e:74:8d:44:90:c6:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0144765DC0A3D9D0EADA845625C5E7F14C552690 Validity Not Before: May 31 13:32:26 2025 GMT Not After : May 30 13:37:26 2026 GMT Subject: CN=0E946ECEC2BCAF4BBCF097C32AE0CF84777D1955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:04:0e:25:ba:45:47:f1:00:62:14:24:44:f1: b1:f0:b3:cf:37:61:30:ac:d1:27:ef:0c:f0:42:98: 82:e8:da:fd:50:b3:55:47:ab:e4:b5:dd:b4:c3:0a: fe:e6:73:cc:56:7e:39:b8:62:f8:4c:df:88:4d:ab: 80:ca:34:e3:17:36:9c:48:c5:0e:01:ac:04:61:b7: fa:19:5b:1c:9b:d6:c7:7c:40:09:27:b5:29:79:f7: e6:f4:0d:66:9b:b0:ce:2c:9d:a7:8d:9b:69:b7:21: 07:51:93:1d:a2:d5:df:7a:bd:55:4b:6b:a0:e2:cb: 68:77:e6:0d:04:ce:e3:66:e2:ae:d1:71:5a:0c:28: a8:71:9b:d0:ed:ba:12:6b:65:a9:23:3e:78:62:5e: d9:58:76:a6:a1:e3:c1:f7:ff:cb:2e:8f:3f:16:10: fa:e8:f9:f9:e8:5f:0d:a1:e2:a1:c3:e7:3e:ba:6c: 51:3b:1c:1f:22:b7:a1:04:33:a0:f3:21:ea:67:f7: 66:be:77:e1:7d:e9:be:d2:73:13:d4:84:e5:02:e5: 94:fd:e7:6b:88:76:d0:85:30:d4:bd:ce:30:7d:5a: 8f:f8:e8:3f:0a:a1:8a:14:78:56:8f:a9:cb:b0:a6: b2:d0:94:ac:62:00:b3:9d:df:a9:76:98:87:e1:8e: 31:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:94:6E:CE:C2:BC:AF:4B:BC:F0:97:C3:2A:E0:CF:84:77:7D:19:55 X509v3 Authority Key Identifier: keyid:01:44:76:5D:C0:A3:D9:D0:EA:DA:84:56:25:C5:E7:F1:4C:55:26:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/323830343a366635303a3130303a3a2f34302d3430203d3e20323730363532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:6f50:100::/40 Signature Algorithm: sha256WithRSAEncryption 2a:b9:68:89:61:61:13:cc:90:c1:65:14:41:ac:d5:cc:d9:02: fb:f8:09:0c:a1:69:de:9d:88:6b:8c:2b:5d:51:9f:92:0e:5a: df:a8:a2:28:35:a0:56:11:e3:32:13:ea:5d:46:44:ed:7a:98: 5b:b2:e4:ee:6c:83:3d:95:9e:2b:eb:17:24:9e:db:e7:b4:66: ae:db:69:ae:66:3d:fe:6e:cf:fc:28:e3:27:c7:c2:03:a6:7b: c2:24:e9:18:da:67:0d:91:ab:77:64:e3:1a:60:a2:b4:22:e7: 30:31:3e:00:2b:03:fa:d3:b3:75:ef:c4:78:52:ca:9d:05:ea: 77:bd:d7:64:c2:b0:7d:56:b5:ee:5c:89:35:d1:27:32:cf:d0: c3:b1:12:0e:06:df:96:82:31:60:64:f8:be:e3:1c:de:d7:ad: 22:d9:e9:0f:f2:3c:3e:e9:aa:df:ad:5a:56:42:62:57:be:99: 18:8d:1b:3a:ec:a2:39:9f:94:a7:ec:2d:57:b5:ec:a6:60:9f: 59:51:8f:26:4f:c2:3c:54:ad:83:db:9b:50:31:63:f9:74:53: c3:b6:b7:41:26:f0:07:8e:45:3c:02:10:f8:aa:0a:cd:74:04: 6c:b5:8f:39:25:f5:2b:48:d4:b8:cf:14:cf:ad:00:e2:f7:62: df:f0:dc:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMgqXWzYMacZe04A7Ym50jUSQxvYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE0NDc2NURDMEEzRDlEMEVBREE4NDU2MjVDNUU3RjE0 QzU1MjY5MDAeFw0yNTA1MzExMzMyMjZaFw0yNjA1MzAxMzM3MjZaMDMxMTAvBgNV BAMTKDBFOTQ2RUNFQzJCQ0FGNEJCQ0YwOTdDMzJBRTBDRjg0Nzc3RDE5NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3BA4lukVH8QBiFCRE8bHws883 YTCs0SfvDPBCmILo2v1Qs1VHq+S13bTDCv7mc8xWfjm4YvhM34hNq4DKNOMXNpxI xQ4BrARht/oZWxyb1sd8QAkntSl59+b0DWabsM4snaeNm2m3IQdRkx2i1d96vVVL a6Diy2h35g0EzuNm4q7RcVoMKKhxm9DtuhJrZakjPnhiXtlYdqah48H3/8sujz8W EPro+fnoXw2h4qHD5z66bFE7HB8it6EEM6DzIepn92a+d+F96b7ScxPUhOUC5ZT9 52uIdtCFMNS9zjB9Wo/46D8KoYoUeFaPqcuwprLQlKxiALOd36l2mIfhjjF5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUDpRuzsK8r0u88JfDKuDPhHd9GVUwHwYDVR0j BBgwFoAUAUR2XcCj2dDq2oRWJcXn8UxVJpAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNnpvaUxNWmduVlhaVWRkUjloQ1JVY2tWaWtMaFA4ZWhFVTVoeFJlTFk3 bkMvMS8wMTQ0NzY1REMwQTNEOUQwRUFEQTg0NTYyNUM1RTdGMTRDNTUyNjkwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAxNDQ3NjVEQzBBM0Q5RDBF QURBODQ1NjI1QzVFN0YxNEM1NTI2OTAuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzZ6b2lMTVpnblZYWlVkZFI5aENSVWNrVmlrTGhQOGVoRVU1aHhSZUxZN25DLzEv MzIzODMwMzQzYTM2NjYzNTMwM2EzMTMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl MjAzMjM3MzAzNjM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBG9QATANBgkqhkiG9w0BAQsFAAOC AQEAKrloiWFhE8yQwWUUQazVzNkC+/gJDKFp3p2Ia4wrXVGfkg5a36iiKDWgVhHj MhPqXUZE7XqYW7Lk7myDPZWeK+sXJJ7b57RmrttprmY9/m7P/CjjJ8fCA6Z7wiTp GNpnDZGrd2TjGmCitCLnMDE+ACsD+tOzde/EeFLKnQXqd73XZMKwfVa17lyJNdEn Ms/Qw7ESDgbfloIxYGT4vuMc3tetItnpD/I8Pumq361aVkJiV76ZGI0bOuyiOZ+U p+wtV7XspmCfWVGPJk/CPFStg9ubUDFj+XRTw7a3QSbwB45FPAIQ+KoKzXQEbLWP OSX1K0jUuM8Uz60A4vdi3/Dcdw== -----END CERTIFICATE-----Generated at Wed Nov 5 13:03:51 2025 by rpki-client