$ rpki-client -vvf rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/1/323830343a343138633a343030303a3a2f33342d3334203d3e20323637343430.roa File: 323830343a343138633a343030303a3a2f33342d3334203d3e20323637343430.roa (raw, json) Hash identifier: rb+kfdQ/RYcBAJOYBwwoxXJYAKtxHQYFM5M/k2D0khg= Subject key identifier: 95:66:B7:3F:CC:57:4F:FC:EC:4A:CC:74:95:42:C7:89:FA:FC:CE:05 Certificate issuer: /CN=22BBA4A3F11C75C5D904F2E8B727716DD04FFCAA Certificate serial: 62B6D68D5E4E27011E55478E77614EB929DFB651 Authority key identifier: 22:BB:A4:A3:F1:1C:75:C5:D9:04:F2:E8:B7:27:71:6D:D0:4F:FC:AA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22BBA4A3F11C75C5D904F2E8B727716DD04FFCAA.cer Subject info access: rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/1/323830343a343138633a343030303a3a2f33342d3334203d3e20323637343430.roa Signing time: Mon 03 Nov 2025 14:14:55 +0000 ROA not before: Mon 03 Nov 2025 14:09:55 +0000 ROA not after: Mon 02 Nov 2026 14:14:55 +0000 asID: 267440 IP address blocks: 2804:418c:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/1/22BBA4A3F11C75C5D904F2E8B727716DD04FFCAA.crl rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/1/22BBA4A3F11C75C5D904F2E8B727716DD04FFCAA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22BBA4A3F11C75C5D904F2E8B727716DD04FFCAA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 21:20:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:b6:d6:8d:5e:4e:27:01:1e:55:47:8e:77:61:4e:b9:29:df:b6:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22BBA4A3F11C75C5D904F2E8B727716DD04FFCAA Validity Not Before: Nov 3 14:09:55 2025 GMT Not After : Nov 2 14:14:55 2026 GMT Subject: CN=9566B73FCC574FFCEC4ACC749542C789FAFCCE05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fd:53:c5:60:ac:50:8e:aa:c7:88:7e:ab:18: 9a:f5:bd:af:dd:d3:af:e9:87:f3:b0:89:cd:d6:fe: 2e:d5:64:83:73:e6:e1:da:a2:29:ad:c0:1b:0e:fd: b9:ba:b5:09:f7:51:2d:e8:45:a3:98:0d:3f:5b:3a: 7a:5a:7a:7a:f2:4c:87:6e:2c:f8:c1:7a:78:25:e9: db:96:98:d3:8a:26:a9:a5:be:9e:f4:f4:db:31:d6: aa:ab:57:c0:3a:cb:61:45:7c:c8:52:e3:5f:0b:fa: c7:22:5d:b4:c3:5d:42:8d:71:e2:be:48:ea:8e:32: 58:fa:64:65:04:ca:9f:37:30:33:9d:c6:a4:65:65: ff:51:05:69:81:d2:36:78:fb:42:20:67:fd:0a:ed: b6:04:4d:2d:f1:0e:27:8a:43:70:62:9f:e1:9e:5f: 8a:1b:15:2c:d2:74:83:20:4f:d5:c2:0f:18:d0:65: 86:67:dd:af:d7:90:92:40:71:bd:35:f3:0f:ff:14: 5e:b3:f9:84:0e:48:87:4d:a7:ce:ce:f0:e2:bd:73: c6:9d:71:7f:14:45:cd:46:84:d5:3d:c3:65:15:e3: 23:e8:8d:0a:dc:fc:4c:93:4f:64:42:5e:5c:75:89: 9e:34:9c:62:ce:ea:23:d1:12:9f:e1:d9:18:f7:a0: 35:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:66:B7:3F:CC:57:4F:FC:EC:4A:CC:74:95:42:C7:89:FA:FC:CE:05 X509v3 Authority Key Identifier: keyid:22:BB:A4:A3:F1:1C:75:C5:D9:04:F2:E8:B7:27:71:6D:D0:4F:FC:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/1/22BBA4A3F11C75C5D904F2E8B727716DD04FFCAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22BBA4A3F11C75C5D904F2E8B727716DD04FFCAA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/1/323830343a343138633a343030303a3a2f33342d3334203d3e20323637343430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:418c:4000::/34 Signature Algorithm: sha256WithRSAEncryption 84:7e:48:10:3e:9b:5d:0f:4c:91:92:7a:dd:9d:15:a9:d7:42: 6a:71:9b:94:88:96:97:b1:e5:e2:cf:47:67:bc:88:1f:c1:09: 08:d1:03:10:56:5e:51:23:c0:3e:f8:f2:4e:61:61:af:d8:60: ab:59:18:32:8f:29:70:ea:b2:7a:03:c7:9f:37:04:0a:48:3e: 11:b4:78:b7:8f:98:86:a9:51:aa:a1:ef:79:56:c0:da:f8:e1: a4:92:36:cf:49:18:5d:0f:cb:d0:13:a3:cd:a3:14:9d:26:90: 9c:7c:52:db:30:3e:a1:d4:f1:e1:92:37:d3:5b:5e:65:5b:e6: 0d:ad:04:cb:1a:92:6c:c4:61:80:25:a7:30:7f:a9:f4:4d:8b: 5b:89:fa:55:38:32:78:54:e6:5f:38:5b:ae:0e:37:ae:4a:da: 09:d3:69:fc:ee:da:9c:dc:d9:c5:bd:84:c8:7a:2d:23:22:8b: f2:42:39:b2:41:ed:f8:4a:04:81:d5:99:c5:4e:35:9b:cb:07: a3:1a:54:b8:4a:ea:51:19:b8:85:78:03:98:e7:d2:5d:fa:3a: 98:ab:32:56:46:f1:f1:30:c7:c0:76:f8:c3:9f:47:9d:d2:2e: 25:39:e2:18:66:be:d2:46:31:e7:56:a7:5a:bc:68:ac:ca:01: 4e:07:c6:a4 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUYrbWjV5OJwEeVUeOd2FOuSnftlEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjJCQkE0QTNGMTFDNzVDNUQ5MDRGMkU4QjcyNzcxNkRE MDRGRkNBQTAeFw0yNTExMDMxNDA5NTVaFw0yNjExMDIxNDE0NTVaMDMxMTAvBgNV BAMTKDk1NjZCNzNGQ0M1NzRGRkNFQzRBQ0M3NDk1NDJDNzg5RkFGQ0NFMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj/VPFYKxQjqrHiH6rGJr1va/d 06/ph/Owic3W/i7VZINz5uHaoimtwBsO/bm6tQn3US3oRaOYDT9bOnpaenryTIdu LPjBengl6duWmNOKJqmlvp709Nsx1qqrV8A6y2FFfMhS418L+sciXbTDXUKNceK+ SOqOMlj6ZGUEyp83MDOdxqRlZf9RBWmB0jZ4+0IgZ/0K7bYETS3xDieKQ3Bin+Ge X4obFSzSdIMgT9XCDxjQZYZn3a/XkJJAcb018w//FF6z+YQOSIdNp87O8OK9c8ad cX8URc1GhNU9w2UV4yPojQrc/EyTT2RCXlx1iZ40nGLO6iPREp/h2Rj3oDXbAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUlWa3P8xXT/zsSsx0lULHifr8zgUwHwYDVR0j BBgwFoAUIruko/EcdcXZBPLotydxbdBP/KowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNzluSGlENGlwenI3M1U4TDVTUUhNYUtSQmtTMUdzNWFoQTRjdDlSQzN3 OEEvMS8yMkJCQTRBM0YxMUM3NUM1RDkwNEYyRThCNzI3NzE2REQwNEZGQ0FBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIyQkJBNEEzRjExQzc1QzVE OTA0RjJFOEI3Mjc3MTZERDA0RkZDQUEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzc5bkhpRDRpcHpyNzNVOEw1U1FITWFLUkJrUzFHczVhaEE0Y3Q5UkMzdzhBLzEv MzIzODMwMzQzYTM0MzEzODYzM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzYzNzM0MzQzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEQYxAMA0GCSqGSIb3DQEBCwUA A4IBAQCEfkgQPptdD0yRknrdnRWp10JqcZuUiJaXseXiz0dnvIgfwQkI0QMQVl5R I8A++PJOYWGv2GCrWRgyjylw6rJ6A8efNwQKSD4RtHi3j5iGqVGqoe95VsDa+OGk kjbPSRhdD8vQE6PNoxSdJpCcfFLbMD6h1PHhkjfTW15lW+YNrQTLGpJsxGGAJacw f6n0TYtbifpVODJ4VOZfOFuuDjeuStoJ02n87tqc3NnFvYTIei0jIovyQjmyQe34 SgSB1ZnFTjWbywejGlS4SupRGbiFeAOY59Jd+jqYqzJWRvHxMMfAdvjDn0ed0i4l OeIYZr7SRjHnVqdavGisygFOB8ak -----END CERTIFICATE-----Generated at Wed Nov 5 21:27:35 2025 by rpki-client