$ rpki-client -vvf rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a633030303a3a2f33342d3334203d3e20323732353831.roa File: 323830343a383537383a633030303a3a2f33342d3334203d3e20323732353831.roa (raw, json) Hash identifier: zGFKaCoTgzOLsixISDZt41J5XhqS2zO2XKDeZGn9Mco= Subject key identifier: BC:CA:15:DD:43:0E:60:73:B3:94:5C:02:03:A8:53:C6:1F:CA:FD:55 Certificate issuer: /CN=C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1 Certificate serial: 3060944CDBABFE833BA952CCC50866D03A2641E0 Authority key identifier: C9:FB:3B:F7:40:A7:2E:4F:8F:F3:0F:75:F7:5D:58:9D:5F:FE:74:A1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1.cer Subject info access: rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a633030303a3a2f33342d3334203d3e20323732353831.roa Signing time: Tue 07 Oct 2025 16:15:41 +0000 ROA not before: Tue 07 Oct 2025 16:10:41 +0000 ROA not after: Tue 06 Oct 2026 16:15:41 +0000 asID: 272581 IP address blocks: 2804:8578:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1.crl rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 11:44:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:60:94:4c:db:ab:fe:83:3b:a9:52:cc:c5:08:66:d0:3a:26:41:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1 Validity Not Before: Oct 7 16:10:41 2025 GMT Not After : Oct 6 16:15:41 2026 GMT Subject: CN=BCCA15DD430E6073B3945C0203A853C61FCAFD55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:1e:7d:c7:a4:d7:94:8b:4a:d4:5f:7e:2a:91: 29:d7:43:e1:52:48:93:5e:0a:5e:c1:6c:d0:af:af: 6c:a6:6a:e5:ea:87:3d:27:61:cd:04:16:b7:38:04: a7:48:e5:1d:19:77:85:10:e2:dc:54:2f:0c:9d:36: 08:54:e0:1d:2c:a8:5c:13:29:ad:22:56:53:44:94: 59:43:90:41:2b:55:65:63:20:fb:25:16:c2:af:3a: 95:4b:3a:64:34:17:5e:57:b0:89:64:a7:72:94:d8: 9b:9e:c8:59:f9:8d:d1:9a:7c:45:27:f5:4a:c8:8b: d6:b1:2e:0b:61:5c:a5:48:27:28:35:0c:47:2f:32: 75:c2:af:fe:3a:9b:e9:e1:c2:f9:02:65:d0:ea:07: 95:3e:d5:da:ed:3d:7e:1d:ff:27:68:38:eb:63:ab: 0a:c0:84:13:4d:85:45:d6:7d:f2:e9:3a:cb:dd:06: e5:01:55:70:b0:7e:78:d0:cf:72:22:24:7b:96:ba: 23:a3:39:9f:bc:bc:a6:5f:dc:32:49:fa:2e:85:00: 9d:2f:1b:c1:1b:23:1e:13:de:5d:9c:a0:ae:15:92: 4d:97:25:0a:7b:29:92:70:2b:60:a4:56:bf:2d:ef: ad:6c:af:54:07:0a:91:70:74:e7:2b:cc:32:e5:dd: 50:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:CA:15:DD:43:0E:60:73:B3:94:5C:02:03:A8:53:C6:1F:CA:FD:55 X509v3 Authority Key Identifier: keyid:C9:FB:3B:F7:40:A7:2E:4F:8F:F3:0F:75:F7:5D:58:9D:5F:FE:74:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a633030303a3a2f33342d3334203d3e20323732353831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8578:c000::/34 Signature Algorithm: sha256WithRSAEncryption 50:c9:24:84:57:0f:99:35:11:05:40:4e:a9:7e:b7:a5:66:53: c4:18:31:66:61:0f:b2:70:b0:1d:71:a1:0c:ad:af:3b:19:1f: 74:9d:df:f2:38:fc:b3:c2:b3:0c:e1:dc:fc:3b:a3:60:b3:c5: 83:d8:ff:de:b0:58:01:e9:bb:9b:3d:f7:cc:e4:4c:7f:36:5f: e7:f8:88:b8:71:d6:b7:08:0c:b1:bc:16:aa:ae:6f:f7:45:09: ca:12:bf:c0:e0:98:99:cc:0f:2a:f1:92:bf:aa:02:49:34:8e: 56:1b:97:8a:1c:de:37:63:77:fa:a8:f4:34:1e:b0:b8:e3:b5: ea:a3:7e:1f:89:26:11:e6:3b:62:d3:0e:8d:75:f6:b9:b0:1b: fb:bf:21:fc:d8:76:a7:54:d9:36:9b:0d:92:e8:62:52:1a:56: 29:fb:6e:73:c4:2a:fb:8a:90:cb:50:12:14:cb:fc:1e:4b:c4: 02:82:de:8c:7c:b5:be:73:92:30:1c:bd:b9:a2:e5:2a:51:0f: 0d:f0:a6:8a:9b:dd:b6:6a:b5:8c:50:f9:cd:97:4c:2f:8f:e8: cb:26:3a:d3:58:05:03:6d:2e:2a:9c:2e:7b:12:5e:6b:d0:cf: 22:e5:93:97:8d:b9:ad:33:41:62:36:c9:da:ac:ab:84:db:c8: 6c:97:a8:8a -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUMGCUTNur/oM7qVLMxQhm0DomQeAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlGQjNCRjc0MEE3MkU0RjhGRjMwRjc1Rjc1RDU4OUQ1 RkZFNzRBMTAeFw0yNTEwMDcxNjEwNDFaFw0yNjEwMDYxNjE1NDFaMDMxMTAvBgNV BAMTKEJDQ0ExNURENDMwRTYwNzNCMzk0NUMwMjAzQTg1M0M2MUZDQUZENTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUHn3HpNeUi0rUX34qkSnXQ+FS SJNeCl7BbNCvr2ymauXqhz0nYc0EFrc4BKdI5R0Zd4UQ4txULwydNghU4B0sqFwT Ka0iVlNElFlDkEErVWVjIPslFsKvOpVLOmQ0F15XsIlkp3KU2JueyFn5jdGafEUn 9UrIi9axLgthXKVIJyg1DEcvMnXCr/46m+nhwvkCZdDqB5U+1drtPX4d/ydoOOtj qwrAhBNNhUXWffLpOsvdBuUBVXCwfnjQz3IiJHuWuiOjOZ+8vKZf3DJJ+i6FAJ0v G8EbIx4T3l2coK4Vkk2XJQp7KZJwK2CkVr8t761sr1QHCpFwdOcrzDLl3VCjAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUvMoV3UMOYHOzlFwCA6hTxh/K/VUwHwYDVR0j BBgwFoAUyfs790CnLk+P8w91911YnV/+dKEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQUtjWHRWUTRmdEx6WnZjQk02N2I3TW1TYlM3aTRuVnBKQ0Q1VEY5d2ZB OXovMC9DOUZCM0JGNzQwQTcyRTRGOEZGMzBGNzVGNzVENTg5RDVGRkU3NEExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5RkIzQkY3NDBBNzJFNEY4 RkYzMEY3NUY3NUQ1ODlENUZGRTc0QTEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0FLY1h0VlE0ZnRMelp2Y0JNNjdiN01tU2JTN2k0blZwSkNENVRGOXdmQTl6LzAv MzIzODMwMzQzYTM4MzUzNzM4M2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzczMjM1MzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEhXjAMA0GCSqGSIb3DQEBCwUA A4IBAQBQySSEVw+ZNREFQE6pfrelZlPEGDFmYQ+ycLAdcaEMra87GR90nd/yOPyz wrMM4dz8O6Ngs8WD2P/esFgB6bubPffM5Ex/Nl/n+Ii4cda3CAyxvBaqrm/3RQnK Er/A4JiZzA8q8ZK/qgJJNI5WG5eKHN43Y3f6qPQ0HrC447Xqo34fiSYR5jti0w6N dfa5sBv7vyH82HanVNk2mw2S6GJSGlYp+25zxCr7ipDLUBIUy/weS8QCgt6MfLW+ c5IwHL25ouUqUQ8N8KaKm922arWMUPnNl0wvj+jLJjrTWAUDbS4qnC57El5r0M8i 5ZOXjbmtM0FiNsnarKuE28hsl6iK -----END CERTIFICATE-----Generated at Wed Nov 5 13:02:07 2025 by rpki-client