$ rpki-client -vvf rpki-repo.registro.br/repo/7iJ3x1q7wJ12aX5y3BXWwkdvgghfQJNyc2vxuYVjQX9J/0/323830343a373361383a3a2f33332d3333203d3e20323730393239.roa File: 323830343a373361383a3a2f33332d3333203d3e20323730393239.roa (raw, json) Hash identifier: /yxQTlfzSdQJc7clXy4HDkpFbboPx8+9Jj5a7KFzn0g= Subject key identifier: DF:3C:1E:82:7C:50:97:2D:A5:11:72:3A:88:B5:BD:70:DE:61:97:10 Certificate issuer: /CN=85AD900E6B9C4A7FB3FB3B2BF3E7B938960F0B59 Certificate serial: 3D37F1D3AA319D2D6C80F6AF185365F8A607D733 Authority key identifier: 85:AD:90:0E:6B:9C:4A:7F:B3:FB:3B:2B:F3:E7:B9:38:96:0F:0B:59 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85AD900E6B9C4A7FB3FB3B2BF3E7B938960F0B59.cer Subject info access: rsync://rpki-repo.registro.br/repo/7iJ3x1q7wJ12aX5y3BXWwkdvgghfQJNyc2vxuYVjQX9J/0/323830343a373361383a3a2f33332d3333203d3e20323730393239.roa Signing time: Tue 04 Nov 2025 13:53:21 +0000 ROA not before: Tue 04 Nov 2025 13:48:21 +0000 ROA not after: Tue 03 Nov 2026 13:53:21 +0000 asID: 270929 IP address blocks: 2804:73a8::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7iJ3x1q7wJ12aX5y3BXWwkdvgghfQJNyc2vxuYVjQX9J/0/85AD900E6B9C4A7FB3FB3B2BF3E7B938960F0B59.crl rsync://rpki-repo.registro.br/repo/7iJ3x1q7wJ12aX5y3BXWwkdvgghfQJNyc2vxuYVjQX9J/0/85AD900E6B9C4A7FB3FB3B2BF3E7B938960F0B59.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85AD900E6B9C4A7FB3FB3B2BF3E7B938960F0B59.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 09:56:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:37:f1:d3:aa:31:9d:2d:6c:80:f6:af:18:53:65:f8:a6:07:d7:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85AD900E6B9C4A7FB3FB3B2BF3E7B938960F0B59 Validity Not Before: Nov 4 13:48:21 2025 GMT Not After : Nov 3 13:53:21 2026 GMT Subject: CN=DF3C1E827C50972DA511723A88B5BD70DE619710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:53:3d:7f:31:8a:e6:71:e9:24:08:9c:3c:e3: 21:29:1a:e0:b8:96:dd:2f:c8:8f:db:c3:be:24:5a: 0d:03:c7:c0:eb:e1:25:27:35:49:fd:bf:e5:01:0a: 15:c0:68:24:2d:07:67:38:62:d1:9e:a2:a5:9d:b6: c5:c5:c0:b7:8c:c6:7d:c7:dd:1d:36:d9:ea:f0:65: d1:49:23:cb:95:c8:56:c7:79:71:01:f8:c4:5c:fa: 67:5e:05:0f:fa:a9:f9:5f:ca:dc:a8:42:bb:2e:57: e6:90:ae:b4:ee:ea:38:b2:a8:19:d9:b5:6d:46:af: 9d:2f:b0:53:87:fd:05:af:42:ed:71:2f:5a:7f:bc: 0a:e4:dc:e8:84:a4:b9:1f:91:c5:6f:52:a6:eb:d7: 08:32:ef:33:7c:8e:00:ac:67:54:81:e7:a2:51:53: b4:dc:28:18:f7:d1:d3:79:56:e8:f9:16:77:b7:50: 48:ab:e5:9e:e9:d4:26:4d:83:20:16:2c:f1:c2:9a: 51:1c:18:73:37:66:31:ef:f6:26:d7:37:72:7b:d7: 1e:03:36:b4:82:0b:a3:a6:30:ee:0b:fe:ad:3a:7d: b0:33:f0:16:50:6d:33:bc:82:77:b8:ba:d8:f4:77: 65:d4:5a:48:5d:df:9c:9e:3c:8e:45:c4:9e:80:25: 7d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:3C:1E:82:7C:50:97:2D:A5:11:72:3A:88:B5:BD:70:DE:61:97:10 X509v3 Authority Key Identifier: keyid:85:AD:90:0E:6B:9C:4A:7F:B3:FB:3B:2B:F3:E7:B9:38:96:0F:0B:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7iJ3x1q7wJ12aX5y3BXWwkdvgghfQJNyc2vxuYVjQX9J/0/85AD900E6B9C4A7FB3FB3B2BF3E7B938960F0B59.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85AD900E6B9C4A7FB3FB3B2BF3E7B938960F0B59.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7iJ3x1q7wJ12aX5y3BXWwkdvgghfQJNyc2vxuYVjQX9J/0/323830343a373361383a3a2f33332d3333203d3e20323730393239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:73a8::/33 Signature Algorithm: sha256WithRSAEncryption 0b:cd:23:57:0c:f1:16:fa:9c:a7:a9:84:59:bc:b8:53:db:3b: ef:c5:9d:40:f5:09:57:47:7b:64:df:55:1d:b2:76:ae:37:70: 87:f2:1a:83:eb:2b:09:f4:2d:80:90:4a:cb:f4:6b:8e:16:04: be:13:14:ae:12:b8:19:f8:fb:b4:61:d7:08:3d:89:a1:29:c1: ab:ec:46:17:35:9f:14:bd:11:6b:48:8d:f0:76:8b:f4:cf:d4: 6d:b1:16:93:c2:c0:01:cd:c5:0b:5a:0f:8b:9f:dc:c6:56:96: 66:ab:6e:84:c4:9b:52:eb:1a:cb:7b:71:0d:df:88:be:51:7a: a2:fe:7d:23:d6:46:c4:de:c1:30:08:b2:7c:57:76:ba:e7:a1: 4a:64:f6:aa:48:72:80:4c:4c:30:f6:df:57:e5:52:6d:4b:9c: 47:dc:18:d8:66:8c:61:a0:14:64:2d:b8:37:8f:aa:03:9a:0a: 7a:df:b6:ba:e1:48:74:48:7a:bb:44:d8:e0:da:26:10:b7:99: 7b:3d:dd:e6:38:32:b2:81:4d:c3:53:7f:57:d0:7e:63:f4:aa: fd:a6:8f:ab:e1:32:2e:75:16:46:24:14:64:27:7f:b7:03:40: 68:22:bc:e8:5d:53:31:03:16:3c:d3:4f:c8:b0:10:92:09:ec: 54:e6:da:9d -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUPTfx06oxnS1sgPavGFNl+KYH1zMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVBRDkwMEU2QjlDNEE3RkIzRkIzQjJCRjNFN0I5Mzg5 NjBGMEI1OTAeFw0yNTExMDQxMzQ4MjFaFw0yNjExMDMxMzUzMjFaMDMxMTAvBgNV BAMTKERGM0MxRTgyN0M1MDk3MkRBNTExNzIzQTg4QjVCRDcwREU2MTk3MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXUz1/MYrmcekkCJw84yEpGuC4 lt0vyI/bw74kWg0Dx8Dr4SUnNUn9v+UBChXAaCQtB2c4YtGeoqWdtsXFwLeMxn3H 3R022erwZdFJI8uVyFbHeXEB+MRc+mdeBQ/6qflfytyoQrsuV+aQrrTu6jiyqBnZ tW1Gr50vsFOH/QWvQu1xL1p/vArk3OiEpLkfkcVvUqbr1wgy7zN8jgCsZ1SB56JR U7TcKBj30dN5Vuj5Fne3UEir5Z7p1CZNgyAWLPHCmlEcGHM3ZjHv9ibXN3J71x4D NrSCC6OmMO4L/q06fbAz8BZQbTO8gne4utj0d2XUWkhd35yePI5FxJ6AJX1PAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQU3zwegnxQly2lEXI6iLW9cN5hlxAwHwYDVR0j BBgwFoAUha2QDmucSn+z+zsr8+e5OJYPC1kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN2lKM3gxcTd3SjEyYVg1eTNCWFd3a2R2Z2doZlFKTnljMnZ4dVlWalFY OUovMC84NUFEOTAwRTZCOUM0QTdGQjNGQjNCMkJGM0U3QjkzODk2MEYwQjU5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg1QUQ5MDBFNkI5QzRBN0ZC M0ZCM0IyQkYzRTdCOTM4OTYwRjBCNTkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzdpSjN4MXE3d0oxMmFYNXkzQlhXd2tkdmdnaGZRSk55YzJ2eHVZVmpRWDlKLzAv MzIzODMwMzQzYTM3MzM2MTM4M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNzMw MzkzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH AQH/BBIwEDAOBAIAAjAIAwYHKARzqAAwDQYJKoZIhvcNAQELBQADggEBAAvNI1cM 8Rb6nKephFm8uFPbO+/FnUD1CVdHe2TfVR2ydq43cIfyGoPrKwn0LYCQSsv0a44W BL4TFK4SuBn4+7Rh1wg9iaEpwavsRhc1nxS9EWtIjfB2i/TP1G2xFpPCwAHNxQta D4uf3MZWlmarboTEm1LrGst7cQ3fiL5ReqL+fSPWRsTewTAIsnxXdrrnoUpk9qpI coBMTDD231flUm1LnEfcGNhmjGGgFGQtuDePqgOaCnrftrrhSHRIertE2ODaJhC3 mXs93eY4MrKBTcNTf1fQfmP0qv2mj6vhMi51FkYkFGQnf7cDQGgivOhdUzEDFjzT T8iwEJIJ7FTm2p0= -----END CERTIFICATE-----Generated at Wed Nov 5 13:33:03 2025 by rpki-client