$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/323830343a6165303a3a2f33322d3332203d3e203238333532.roa File: 323830343a6165303a3a2f33322d3332203d3e203238333532.roa (raw, json) Hash identifier: QFG3QgCr9ptBxEYoHPZk0OTDX0Xn/NBwyqC+vdpzyfw= Subject key identifier: B3:CF:F3:73:20:D4:43:0E:80:60:96:C2:EC:B9:47:A1:5D:85:4F:0F Certificate issuer: /CN=D05E9D7E25FDD9255E0A8745221B447549A33F95 Certificate serial: 58589003750570EB9C937A0EC77164206CF1BF5E Authority key identifier: D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer Subject info access: rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/323830343a6165303a3a2f33322d3332203d3e203238333532.roa Signing time: Tue 04 Feb 2025 12:06:24 +0000 ROA not before: Tue 04 Feb 2025 12:01:24 +0000 ROA not after: Tue 03 Feb 2026 12:06:24 +0000 asID: 28352 IP address blocks: 2804:ae0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 12:36:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:58:90:03:75:05:70:eb:9c:93:7a:0e:c7:71:64:20:6c:f1:bf:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D05E9D7E25FDD9255E0A8745221B447549A33F95 Validity Not Before: Feb 4 12:01:24 2025 GMT Not After : Feb 3 12:06:24 2026 GMT Subject: CN=B3CFF37320D4430E806096C2ECB947A15D854F0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a4:11:31:88:7c:98:95:0c:3e:4b:03:01:b5: 24:16:5f:a0:0e:4b:9f:bd:a0:39:d3:d4:0c:98:aa: d3:5c:80:98:2a:3a:29:83:f8:30:8a:5d:e7:85:a7: fa:40:ef:4a:da:29:4e:17:04:01:dc:11:97:80:95: f3:39:48:2a:86:49:ca:6e:39:03:61:83:16:70:ba: 8c:fd:a6:e2:26:94:41:7c:db:5f:40:fb:fe:ef:99: 4d:eb:17:0c:a0:b2:2d:57:d1:45:8e:4c:ae:ac:84: 47:cd:d7:3c:ae:7e:e5:3a:83:18:13:3d:0a:4c:c2: fa:36:88:ce:fa:f1:ec:82:60:70:d4:1c:01:8e:31: 0d:a9:9e:3c:61:1b:8f:df:ea:b3:72:4b:6a:98:66: 1c:33:4e:3c:ac:d1:2a:fc:df:7d:d6:96:e4:da:17: dc:c2:0a:bc:c3:cc:1e:29:75:fc:50:33:ce:ff:7c: 29:63:0b:8e:3e:f1:98:6b:b6:8f:f7:3c:25:9d:59: 66:ea:46:d9:d5:f7:97:a8:e3:19:7d:b0:b4:68:6b: 93:9b:a5:a8:be:67:91:ed:52:07:38:ac:a9:e4:a8: 0d:ef:98:ce:1f:8c:c2:77:6b:1f:75:e5:f0:01:a8: b9:8f:d6:62:e0:1b:f0:23:6b:7e:7b:a2:d0:fe:d0: 40:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:CF:F3:73:20:D4:43:0E:80:60:96:C2:EC:B9:47:A1:5D:85:4F:0F X509v3 Authority Key Identifier: keyid:D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/323830343a6165303a3a2f33322d3332203d3e203238333532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:ae0::/32 Signature Algorithm: sha256WithRSAEncryption ad:95:0f:4e:5b:c8:57:c9:09:22:7f:9f:38:9d:40:09:d9:58: a5:ca:9b:be:21:d4:35:73:fa:a6:f0:ac:97:27:f6:6e:aa:e0: da:6d:23:db:85:4b:5f:13:7a:6f:85:e9:10:26:0d:e4:c0:23: ee:ff:ff:80:99:29:f1:c0:c4:5e:1e:fa:d1:6f:91:ca:46:96: 65:7a:16:71:c9:dc:6b:64:46:9c:f2:10:a3:8a:40:9a:1b:56: 35:92:e9:0c:16:0d:19:ca:0f:cb:fc:f2:ee:53:e4:dc:cf:15: 0f:24:77:9b:25:86:9f:1c:46:39:e2:ad:4f:d1:f6:91:d7:8a: 7a:76:bc:3b:f7:30:13:fb:e0:8f:2b:aa:6a:d3:a8:16:30:2e: 0b:d5:97:5d:4e:6d:a4:a3:18:4c:ba:70:77:2c:bf:4b:27:2b: 89:38:d8:2f:b9:f4:c9:08:77:e5:b3:10:c6:cb:ec:6c:4f:b3: ce:70:15:67:76:fc:45:d2:60:e8:d8:91:ca:25:d9:6c:7b:96: 51:f6:a5:33:1b:52:a6:41:0f:50:8d:6f:80:07:19:61:2b:fa: d1:50:77:a6:11:41:e5:ee:5e:ee:e5:98:74:8e:28:64:92:be: 8d:68:68:2f:fc:93:2f:63:46:8b:25:cd:29:f6:a6:30:09:b7: d3:e9:98:3a -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgIUWFiQA3UFcOuck3oOx3FkIGzxv14wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA1RTlEN0UyNUZERDkyNTVFMEE4NzQ1MjIxQjQ0NzU0 OUEzM0Y5NTAeFw0yNTAyMDQxMjAxMjRaFw0yNjAyMDMxMjA2MjRaMDMxMTAvBgNV BAMTKEIzQ0ZGMzczMjBENDQzMEU4MDYwOTZDMkVDQjk0N0ExNUQ4NTRGMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1pBExiHyYlQw+SwMBtSQWX6AO S5+9oDnT1AyYqtNcgJgqOimD+DCKXeeFp/pA70raKU4XBAHcEZeAlfM5SCqGScpu OQNhgxZwuoz9puImlEF8219A+/7vmU3rFwygsi1X0UWOTK6shEfN1zyufuU6gxgT PQpMwvo2iM768eyCYHDUHAGOMQ2pnjxhG4/f6rNyS2qYZhwzTjys0Sr8333WluTa F9zCCrzDzB4pdfxQM87/fCljC44+8Zhrto/3PCWdWWbqRtnV95eo4xl9sLRoa5Ob pai+Z5HtUgc4rKnkqA3vmM4fjMJ3ax915fABqLmP1mLgG/Aja357otD+0EAxAgMB AAGjggJMMIICSDAdBgNVHQ4EFgQUs8/zcyDUQw6AYJbC7LlHoV2FTw8wHwYDVR0j BBgwFoAU0F6dfiX92SVeCodFIhtEdUmjP5UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOGk2ODZQYktMWHZHY0ZXcjZ2cHN5R3VXdDdDRHczVDFYQ0Y1bXpxdG9l SHMvMC9EMDVFOUQ3RTI1RkREOTI1NUUwQTg3NDUyMjFCNDQ3NTQ5QTMzRjk1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwNUU5RDdFMjVGREQ5MjU1 RTBBODc0NTIyMUI0NDc1NDlBMzNGOTUuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzhpNjg2UGJLTFh2R2NGV3I2dnBzeUd1V3Q3Q0R3M1QxWENGNW16cXRvZUhzLzAv MzIzODMwMzQzYTYxNjUzMDNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzgzMzM1 MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAoBArgMA0GCSqGSIb3DQEBCwUAA4IBAQCtlQ9OW8hXyQki f584nUAJ2Vilypu+IdQ1c/qm8KyXJ/ZuquDabSPbhUtfE3pvhekQJg3kwCPu//+A mSnxwMReHvrRb5HKRpZlehZxydxrZEac8hCjikCaG1Y1kukMFg0Zyg/L/PLuU+Tc zxUPJHebJYafHEY54q1P0faR14p6drw79zAT++CPK6pq06gWMC4L1ZddTm2koxhM unB3LL9LJyuJONgvufTJCHflsxDGy+xsT7POcBVndvxF0mDo2JHKJdlse5ZR9qUz G1KmQQ9QjW+ABxlhK/rRUHemEUHl7l7u5Zh0jihkkr6NaGgv/JMvY0aLJc0p9qYw CbfT6Zg6 -----END CERTIFICATE-----Generated at Wed Nov 5 20:05:27 2025 by rpki-client