$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353332633a3132383a3a2f34352d3435203d3e20323638353638.roa File: 323830343a353332633a3132383a3a2f34352d3435203d3e20323638353638.roa (raw, json) Hash identifier: jYqIvgvI7eoe1oKBoIW6be65albM2mDC2tG8E2kwjyg= Subject key identifier: 48:03:70:40:89:2B:BB:F6:B9:3B:85:69:78:57:C7:06:49:F2:31:88 Certificate issuer: /CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C Certificate serial: 3561B45C3316F6F23DFF41D58215D121BCAB0CA5 Authority key identifier: FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer Subject info access: rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353332633a3132383a3a2f34352d3435203d3e20323638353638.roa Signing time: Mon 13 Jan 2025 12:54:56 +0000 ROA not before: Mon 13 Jan 2025 12:49:56 +0000 ROA not after: Mon 12 Jan 2026 12:54:56 +0000 asID: 268568 IP address blocks: 2804:532c:128::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 11:12:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:61:b4:5c:33:16:f6:f2:3d:ff:41:d5:82:15:d1:21:bc:ab:0c:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C Validity Not Before: Jan 13 12:49:56 2025 GMT Not After : Jan 12 12:54:56 2026 GMT Subject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ubject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:77:0f:7a:22:c7:92:d4:f2:79:e9:e5:e5:c4: 63:1e:a0:84:04:97:6f:db:f2:63:86:75:22:34:fe: a5:fe:50:0f:76:fd:67:db:47:cd:5e:69:b9:83:08: 55:51:6e:b5:1c:a9:e1:1c:db:2f:c6:f3:11:c6:92: e9:89:cb:52:e6:00:25:5d:42:ea:52:b1:3f:e8:b1: c2:aa:cc:b7:32:11:9a:41:bf:2c:8a:c3:26:99:84: b5:33:ff:40:8a:6a:2e:64:b2:0a:c2:f5:36:bc:5f: ea:e5:d6:0c:ee:86:6a:3c:90:80:26:6e:9b:e9:e6: a8:bc:2e:76:bb:2e:ee:99:6c:99:98:e1:a5:a4:c2: 58:5d:e8:ea:1d:44:6e:53:2c:a6:8e:eb:9b:08:0e: 05:59:75:52:8f:44:be:17:30:e9:e1:f3:f3:e0:fd: bf:42:62:73:36:6c:12:4d:ec:20:c6:67:62:8f:fb: 68:b6:f6:ef:37:8a:dd:e7:bf:2f:92:34:41:90:c7: 09:fc:49:44:d7:0d:23:ea:04:7d:37:77:1f:c1:6b: 74:8f:5d:2f:76:e3:bf:48:2e:64:28:1a:c0:6a:f4: 92:56:e6:59:ae:e2:74:8c:0f:67:44:92:b5:43:73: 01:be:95:be:86:f5:e0:c8:ec:23:da:a7:ce:c5:4b: b9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:03:70:40:89:2B:BB:F6:B9:3B:85:69:78:57:C7:06:49:F2:31:88 X509v3 Authority Key Identifier: keyid:FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353332633a3132383a3a2f34352d3435203d3e20323638353638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:532c:128::/45 Signature Algorithm: sha256WithRSAEncryption 94:68:33:db:de:a3:f7:76:21:b9:7e:0a:14:cd:80:96:03:a4: 76:e6:2b:89:d1:bb:df:0e:29:ae:ba:2f:da:f5:46:ea:d5:e4: bf:80:0e:60:29:29:7e:3b:5b:69:84:e0:ed:f4:c2:29:d9:4a: 99:2d:54:40:e7:65:30:ee:4a:2e:be:70:04:e4:2d:87:e5:2e: 6a:5e:ff:ce:b4:97:4f:e3:ac:ea:e5:1d:25:3c:79:e3:7e:8c: 93:b1:93:2d:3b:99:bc:b9:bf:3b:8d:e9:25:2a:00:a2:33:5f: dc:e3:5f:03:19:1f:e7:ad:f2:81:09:3b:c0:a1:a0:bd:66:b8: bd:dd:6d:2f:5b:94:e6:25:69:bc:02:e1:25:99:5f:95:79:c0: bb:39:42:74:fc:dc:03:d1:44:23:63:19:43:2f:10:20:bb:c3: e0:fa:4a:92:64:65:80:e4:a3:fa:27:b7:47:1a:f7:cf:11:3b: b1:dc:60:f7:3c:62:1e:84:55:74:1a:cf:be:de:50:5f:9d:ef: a1:16:8d:93:79:09:6f:20:e7:52:e7:9f:0d:6e:ee:bc:7c:72: 3f:8c:fa:b7:1b:f7:b2:36:8c:b7:cf:e6:2c:c2:a2:ae:8e:52: 2a:06:4a:af:b1:62:c8:93:4e:f9:3e:8d:e2:af:62:87:b3:93: 92:38:66:48 -----BEGIN CERTIFICATE----- MIIHTDCCBjSgAwIBAgIUNWG0XDMW9vI9/0HVghXRIbyrDKUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY4OTVDODJGNTczQkUwRTRERjM4NDlBMTIxRDg3ODNB QzZBRTIyQzAeFw0yNTAxMTMxMjQ5NTZaFw0yNjAxMTIxMjU0NTZaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDU3NzBGN0EyMkM3OTJENEYy NzlFOUU1RTVDNDYzMUVBMDg0MDQ5NzZGREJGMjYzODY3NTIyMzRGRUE1RkU1MDBG NzZGRDY3REI0N0NENUU2OUI5ODMwODU1NTE2RUI1MUNBOUUxMUNEQjJGQzZGMzEx QzY5MkU5ODlDQjUyRTYwMDI1NUQ0MkVBNTJCMTNGRThCMUMyQUFDQ0I3MzIxMTlB NDFCRjJDOEFDMzI2OTk4NEI1MzNGRjQwOEE2QTJFNjRCMjBBQzJGNTM2QkM1RkVB RTVENjBDRUU4NjZBM0M5MDgwMjY2RTlCRTlFNkE4QkMyRTc2QkIyRUVFOTk2Qzk5 OThFMUE1QTRDMjU4NURFOEVBMUQ0NDZFNTMyQ0E2OEVFQjlCMDgwRTA1NTk3NTUy OEY0NEJFMTczMEU5RTFGM0YzRTBGREJGNDI2MjczMzY2QzEyNERFQzIwQzY2NzYy OEZGQjY4QjZGNkVGMzc4QURERTdCRjJGOTIzNDQxOTBDNzA5RkM0OTQ0RDcwRDIz RUEwNDdEMzc3NzFGQzE2Qjc0OEY1RDJGNzZFM0JGNDgyRTY0MjgxQUMwNkFGNDky NTZFNjU5QUVFMjc0OEMwRjY3NDQ5MkI1NDM3MzAxQkU5NUJFODZGNUUwQzhFQzIz REFBN0NFQzU0QkI5QjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEA1XcPeiLHktTyeenl5cRjHqCEBJdv2/JjhnUiNP6l/lAPdv1n20fN Xmm5gwhVUW61HKnhHNsvxvMRxpLpictS5gAlXULqUrE/6LHCqsy3MhGaQb8sisMm mYS1M/9AimouZLIKwvU2vF/q5dYM7oZqPJCAJm6b6eaovC52uy7umWyZmOGlpMJY XejqHURuUyymjuubCA4FWXVSj0S+FzDp4fPz4P2/QmJzNmwSTewgxmdij/totvbv N4rd578vkjRBkMcJ/ElE1w0j6gR9N3cfwWt0j10vduO/SC5kKBrAavSSVuZZruJ0 jA9nRJK1Q3MBvpW+hvXgyOwj2qfOxUu5uQIDAQABo4ICWjCCAlYwHQYDVR0OBBYE FEgDcECJK7v2uTuFaXhXxwZJ8jGIMB8GA1UdIwQYMBaAFP+JXIL1c74OTfOEmhId h4OsauIsMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlIanRnOWR2RFU3U0hS aUt0b3U3czhzOXliQ1ZOTmkzSnRDeFdDR3pBWXpuLzEvRkY4OTVDODJGNTczQkUw RTRERjM4NDlBMTIxRDg3ODNBQzZBRTIyQy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p Y2JyX3JlcG8vMS9GRjg5NUM4MkY1NzNCRTBFNERGMzg0OUExMjFEODc4M0FDNkFF MjJDLmNlcjCBtAYIKwYBBQUHAQsEgacwgaQwgaEGCCsGAQUFBzALhoGUcnN5bmM6 Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85SGp0ZzlkdkRVN1NIUmlLdG91 N3M4czl5YkNWTk5pM0p0Q3hXQ0d6QVl6bi8xLzMyMzgzMDM0M2EzNTMzMzI2MzNh MzEzMjM4M2EzYTJmMzQzNTJkMzQzNTIwM2QzZTIwMzIzNjM4MzUzNjM4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcDKARTLAEoMA0GCSqGSIb3DQEBCwUAA4IBAQCUaDPb3qP3diG5fgoUzYCW A6R25iuJ0bvfDimuui/a9Ubq1eS/gA5gKSl+O1tphODt9MIp2UqZLVRA52Uw7kou vnAE5C2H5S5qXv/OtJdP46zq5R0lPHnjfoyTsZMtO5m8ub87jeklKgCiM1/c418D GR/nrfKBCTvAoaC9Zri93W0vW5TmJWm8AuElmV+VecC7OUJ0/NwD0UQjYxlDLxAg u8Pg+kqSZGWA5KP6J7dHGvfPETux3GD3PGIehFV0Gs++3lBfne+hFo2TeQlvIOdS 558Nbu68fHI/jPq3G/eyNoy3z+YswqKujlIqBkqvsWLIk075Po3ir2KHs5OSOGZI -----END CERTIFICATE-----Generated at Wed Nov 5 13:03:56 2025 by rpki-client