$ rpki-client -vvf rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/323830343a363061383a3a2f33322d3332203d3e20323639313832.roa File: 323830343a363061383a3a2f33322d3332203d3e20323639313832.roa (raw, json) Hash identifier: VbzwdwroSrPtSNFEnkX/NfeAHcH0g/RNK1BB3om6vyw= Subject key identifier: 51:3E:EE:93:7D:39:FC:E0:84:8D:2D:13:05:4B:50:D8:5D:30:BE:26 Certificate issuer: /CN=6571B526A451E2EEFF0FFCACF46BBC2BC74D8906 Certificate serial: 458D6ACC126162A4CE9893A817F04F26E1B95259 Authority key identifier: 65:71:B5:26:A4:51:E2:EE:FF:0F:FC:AC:F4:6B:BC:2B:C7:4D:89:06 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.cer Subject info access: rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/323830343a363061383a3a2f33322d3332203d3e20323639313832.roa Signing time: Wed 01 Oct 2025 13:11:43 +0000 ROA not before: Wed 01 Oct 2025 13:06:43 +0000 ROA not after: Wed 30 Sep 2026 13:11:43 +0000 asID: 269182 IP address blocks: 2804:60a8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.crl rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 00:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:8d:6a:cc:12:61:62:a4:ce:98:93:a8:17:f0:4f:26:e1:b9:52:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6571B526A451E2EEFF0FFCACF46BBC2BC74D8906 Validity Not Before: Oct 1 13:06:43 2025 GMT Not After : Sep 30 13:11:43 2026 GMT Subject: CN=513EEE937D39FCE0848D2D13054B50D85D30BE26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:34:02:e4:2e:c8:34:69:57:4d:5e:c0:0a:73: 9f:a5:71:cc:10:e9:fb:a6:60:f0:ee:95:ea:9f:4d: bc:13:93:ec:d4:57:d8:ba:44:d9:10:38:e0:aa:57: 23:06:83:21:c0:e6:8c:ef:9b:39:e2:46:e9:b6:93: 47:ad:c3:bd:90:ac:0d:74:59:95:29:04:d6:f1:95: 38:0f:91:9e:14:1c:95:dd:79:3f:03:76:f6:3d:b6: 9f:6e:42:c6:d6:bd:97:25:ad:cd:fa:e3:cb:46:19: e0:9e:db:18:2b:c0:63:17:7c:eb:6d:a0:db:a4:d8: 89:f7:d0:df:d9:e2:60:09:c1:66:34:d4:e6:f6:38: 32:51:68:9e:8f:16:17:3d:f4:35:fe:b3:37:24:e4: 13:d0:56:2a:cc:17:d7:8f:30:a0:7e:4b:bc:43:fb: 6b:77:2f:6b:91:54:29:a7:1a:6b:b8:33:62:50:99: 9f:e1:c4:a6:0a:e8:67:5a:53:b5:5b:cb:f7:4a:f1: fa:2b:0c:72:94:14:5a:a4:a5:36:31:31:86:06:01: 3c:dc:60:45:b3:87:5a:a6:d6:74:3e:25:31:28:cf: 31:7e:fc:58:29:03:6c:1d:8c:0b:c5:58:10:ac:0c: 5a:73:20:43:f7:31:c2:c3:b6:d0:6f:54:b9:b7:e3: 44:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:3E:EE:93:7D:39:FC:E0:84:8D:2D:13:05:4B:50:D8:5D:30:BE:26 X509v3 Authority Key Identifier: keyid:65:71:B5:26:A4:51:E2:EE:FF:0F:FC:AC:F4:6B:BC:2B:C7:4D:89:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/323830343a363061383a3a2f33322d3332203d3e20323639313832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:60a8::/32 Signature Algorithm: sha256WithRSAEncryption 5c:10:13:9b:9f:a6:d8:51:94:8e:c7:a5:36:29:9e:ce:21:d5: e5:3e:03:76:88:db:25:a3:0a:b7:ac:b5:21:5a:20:20:b1:30: 24:32:30:60:d6:3a:56:c6:b1:1b:a5:0b:27:f8:f8:6a:c9:1a: 06:56:81:a6:9a:df:e8:13:89:4a:32:30:a4:c4:7d:55:87:b4: f8:82:ec:29:7a:c1:84:11:cc:05:51:65:88:42:43:e6:37:18: b6:83:99:82:fd:94:c2:99:85:87:e4:db:d8:02:b7:71:8f:19: 9a:fd:09:51:98:72:3a:e0:59:61:4b:34:43:4f:a7:b3:e9:41: 9b:a4:21:71:24:f1:21:64:b6:f9:1a:61:80:63:c0:9f:88:92: 73:6d:72:e3:ed:6f:4e:f9:c0:0a:93:c7:d8:fd:f4:c3:8e:31: 8c:f6:e4:b6:bf:b8:e2:a1:10:21:a5:13:34:e6:b8:6f:b0:32: 42:86:95:38:71:1b:9a:c1:16:dd:f2:a3:fa:91:c6:fd:f1:71: d7:ec:94:f6:77:0f:fd:ce:89:4a:16:83:9b:b4:3e:5c:11:e2: a7:7a:a5:c0:0b:44:dd:a8:95:6c:3a:fb:8b:ff:73:21:53:dc: 2e:d3:f7:8b:a4:c1:aa:45:f5:e4:ed:5b:9c:1f:fa:72:41:10: 77:aa:e9:26 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIURY1qzBJhYqTOmJOoF/BPJuG5UlkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU3MUI1MjZBNDUxRTJFRUZGMEZGQ0FDRjQ2QkJDMkJD NzREODkwNjAeFw0yNTEwMDExMzA2NDNaFw0yNjA5MzAxMzExNDNaMDMxMTAvBgNV BAMTKDUxM0VFRTkzN0QzOUZDRTA4NDhEMkQxMzA1NEI1MEQ4NUQzMEJFMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsNALkLsg0aVdNXsAKc5+lccwQ 6fumYPDuleqfTbwTk+zUV9i6RNkQOOCqVyMGgyHA5ozvmzniRum2k0etw72QrA10 WZUpBNbxlTgPkZ4UHJXdeT8DdvY9tp9uQsbWvZclrc3648tGGeCe2xgrwGMXfOtt oNuk2In30N/Z4mAJwWY01Ob2ODJRaJ6PFhc99DX+szck5BPQVirMF9ePMKB+S7xD +2t3L2uRVCmnGmu4M2JQmZ/hxKYK6GdaU7Vby/dK8forDHKUFFqkpTYxMYYGATzc YEWzh1qm1nQ+JTEozzF+/FgpA2wdjAvFWBCsDFpzIEP3McLDttBvVLm340TvAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUUT7uk305/OCEjS0TBUtQ2F0wviYwHwYDVR0j BBgwFoAUZXG1JqRR4u7/D/ys9Gu8K8dNiQYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vODV4TTNlaWc0ZUFjWk1pVTFrNlJNYkVCZUhzV2RIZENRaURlWDF4ZVJZ cWEvMC82NTcxQjUyNkE0NTFFMkVFRkYwRkZDQUNGNDZCQkMyQkM3NEQ4OTA2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1NzFCNTI2QTQ1MUUyRUVG RjBGRkNBQ0Y0NkJCQzJCQzc0RDg5MDYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzg1eE0zZWlnNGVBY1pNaVUxazZSTWJFQmVIc1dkSGRDUWlEZVgxeGVSWXFhLzAv MzIzODMwMzQzYTM2MzA2MTM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM5 MzEzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKARgqDANBgkqhkiG9w0BAQsFAAOCAQEAXBATm5+m 2FGUjselNimeziHV5T4DdojbJaMKt6y1IVogILEwJDIwYNY6VsaxG6ULJ/j4aska BlaBpprf6BOJSjIwpMR9VYe0+ILsKXrBhBHMBVFliEJD5jcYtoOZgv2UwpmFh+Tb 2AK3cY8Zmv0JUZhyOuBZYUs0Q0+ns+lBm6QhcSTxIWS2+RphgGPAn4iSc21y4+1v TvnACpPH2P30w44xjPbktr+44qEQIaUTNOa4b7AyQoaVOHEbmsEW3fKj+pHG/fFx 1+yU9ncP/c6JShaDm7Q+XBHip3qlwAtE3aiVbDr7i/9zIVPcLtP3i6TBqkX15O1b nB/6ckEQd6rpJg== -----END CERTIFICATE-----Generated at Wed Nov 5 09:32:38 2025 by rpki-client