$ rpki-client -vvf rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/323830343a383433303a343030303a3a2f33342d3334203d3e20323732323435.roa File: 323830343a383433303a343030303a3a2f33342d3334203d3e20323732323435.roa (raw, json) Hash identifier: q2PGSO3hZcdmOuVbZ+1bI6UNd2isAnoQ+lJNmyxlzPA= Subject key identifier: 17:68:C1:F5:B8:D5:71:05:81:3B:02:6F:DC:72:AC:BE:CC:F4:89:26 Certificate issuer: /CN=AA704690C0BE55D2FE25A9C58E4C5266F585493B Certificate serial: 1E97D57020F4B811240C12048C6D5CBC8C515D06 Authority key identifier: AA:70:46:90:C0:BE:55:D2:FE:25:A9:C5:8E:4C:52:66:F5:85:49:3B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA704690C0BE55D2FE25A9C58E4C5266F585493B.cer Subject info access: rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/323830343a383433303a343030303a3a2f33342d3334203d3e20323732323435.roa Signing time: Sat 23 Aug 2025 16:25:08 +0000 ROA not before: Sat 23 Aug 2025 16:20:08 +0000 ROA not after: Sat 22 Aug 2026 16:25:08 +0000 asID: 272245 IP address blocks: 2804:8430:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/AA704690C0BE55D2FE25A9C58E4C5266F585493B.crl rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/AA704690C0BE55D2FE25A9C58E4C5266F585493B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA704690C0BE55D2FE25A9C58E4C5266F585493B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 03:51:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:97:d5:70:20:f4:b8:11:24:0c:12:04:8c:6d:5c:bc:8c:51:5d:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA704690C0BE55D2FE25A9C58E4C5266F585493B Validity Not Before: Aug 23 16:20:08 2025 GMT Not After : Aug 22 16:25:08 2026 GMT Subject: CN=1768C1F5B8D57105813B026FDC72ACBECCF48926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:af:fd:dc:fd:b4:b1:7b:0b:86:6b:e2:49:a7: e3:d2:71:73:f8:a9:d1:a8:08:4c:dc:e1:cc:12:fc: 83:33:4a:01:f5:94:20:78:f2:4c:26:d8:c8:46:d0: 1b:a7:61:b1:71:3f:e1:d8:1e:aa:11:3f:3e:24:66: a9:d6:6a:8c:bd:4c:06:ef:05:96:3d:c3:33:d0:f2: 7c:51:cb:3d:a6:9e:ef:b7:e9:45:b1:0d:45:98:8f: b2:01:ea:9f:4d:82:70:e8:96:f2:37:6c:af:9e:09: 50:7e:47:8a:90:bc:99:29:8d:21:06:e6:1f:3d:23: 92:52:e4:f1:08:a0:ef:e6:4e:0c:34:e8:6f:cb:44: b2:ca:be:59:72:bd:85:25:28:59:87:0a:f3:11:31: b6:c7:2d:8a:4c:b0:9e:32:b7:f3:61:08:eb:d0:34: ab:74:db:97:35:0e:0b:3f:9d:ec:26:e7:74:00:52: 0f:e0:c3:02:d6:bd:cf:22:91:8b:0c:97:02:1f:f7: 5e:13:aa:2e:1e:ba:c3:db:f2:2c:89:50:b2:8a:c6: 8e:7c:fc:8e:9d:b1:05:d1:7b:31:74:ee:fe:1a:07: 4d:35:7c:2c:ee:68:ef:bf:60:19:5b:36:02:44:4b: a3:5f:f2:48:95:36:d1:a0:ad:3f:3d:29:d8:15:f7: 3b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:68:C1:F5:B8:D5:71:05:81:3B:02:6F:DC:72:AC:BE:CC:F4:89:26 X509v3 Authority Key Identifier: keyid:AA:70:46:90:C0:BE:55:D2:FE:25:A9:C5:8E:4C:52:66:F5:85:49:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/AA704690C0BE55D2FE25A9C58E4C5266F585493B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA704690C0BE55D2FE25A9C58E4C5266F585493B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/323830343a383433303a343030303a3a2f33342d3334203d3e20323732323435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8430:4000::/34 Signature Algorithm: sha256WithRSAEncryption 62:26:12:ea:b4:36:0e:27:94:03:23:89:51:a4:77:4b:16:ac: 60:28:42:20:18:1d:18:ec:ed:87:1c:9d:ed:bf:32:3b:83:ef: 4e:26:2a:b2:b2:60:83:dd:5e:ba:4a:2d:7c:41:84:a1:8a:97: 5e:ed:c9:56:11:10:76:4d:6f:5c:61:e4:d0:1a:e5:f1:47:20: 00:f0:0d:1f:24:97:f1:c8:34:91:ef:95:87:63:c3:8e:9a:08: 70:db:df:45:bf:2f:d2:b3:4d:21:6f:41:fd:3a:74:94:9d:60: 64:25:9a:1d:0a:3e:e1:da:0f:86:43:d5:90:1b:63:17:6f:50: c8:37:4c:b7:24:20:33:44:47:73:74:f9:ac:25:db:33:91:38: 82:04:0e:f9:a3:73:5d:ef:60:21:8d:bb:92:2f:64:f4:f7:09: ac:a4:bd:8b:48:cb:f8:ce:fa:cc:cc:3e:42:db:f8:b5:14:9e: 9d:12:9d:e2:07:be:ae:06:a1:7d:23:18:89:3a:56:2e:dd:45: 53:e4:0e:ab:31:3d:01:5d:02:d9:3d:ba:72:ce:d3:9a:03:da: 78:3e:b4:9b:cb:36:40:48:53:8c:15:4b:2b:30:7d:b9:50:a2: fa:dd:81:5a:b2:06:f4:41:33:fd:7d:86:09:3c:54:ec:78:09: 1b:8d:b0:63 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUHpfVcCD0uBEkDBIEjG1cvIxRXQYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE3MDQ2OTBDMEJFNTVEMkZFMjVBOUM1OEU0QzUyNjZG NTg1NDkzQjAeFw0yNTA4MjMxNjIwMDhaFw0yNjA4MjIxNjI1MDhaMDMxMTAvBgNV BAMTKDE3NjhDMUY1QjhENTcxMDU4MTNCMDI2RkRDNzJBQ0JFQ0NGNDg5MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKr/3c/bSxewuGa+JJp+PScXP4 qdGoCEzc4cwS/IMzSgH1lCB48kwm2MhG0BunYbFxP+HYHqoRPz4kZqnWaoy9TAbv BZY9wzPQ8nxRyz2mnu+36UWxDUWYj7IB6p9NgnDolvI3bK+eCVB+R4qQvJkpjSEG 5h89I5JS5PEIoO/mTgw06G/LRLLKvllyvYUlKFmHCvMRMbbHLYpMsJ4yt/NhCOvQ NKt025c1Dgs/newm53QAUg/gwwLWvc8ikYsMlwIf914Tqi4eusPb8iyJULKKxo58 /I6dsQXRezF07v4aB001fCzuaO+/YBlbNgJES6Nf8kiVNtGgrT89KdgV9zvJAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUF2jB9bjVcQWBOwJv3HKsvsz0iSYwHwYDVR0j BBgwFoAUqnBGkMC+VdL+JanFjkxSZvWFSTswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmQ4Z3dBYW4zTGZLVWhMQk5wYUF4RGtHRkdlV3J4VWRMY3RuSndlVkhQ ZnAvMC9BQTcwNDY5MEMwQkU1NUQyRkUyNUE5QzU4RTRDNTI2NkY1ODU0OTNCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBNzA0NjkwQzBCRTU1RDJG RTI1QTlDNThFNEM1MjY2RjU4NTQ5M0IuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0JkOGd3QWFuM0xmS1VoTEJOcGFBeERrR0ZHZVdyeFVkTGN0bkp3ZVZIUGZwLzAv MzIzODMwMzQzYTM4MzQzMzMwM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzczMjMyMzQzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEhDBAMA0GCSqGSIb3DQEBCwUA A4IBAQBiJhLqtDYOJ5QDI4lRpHdLFqxgKEIgGB0Y7O2HHJ3tvzI7g+9OJiqysmCD 3V66Si18QYShipde7clWERB2TW9cYeTQGuXxRyAA8A0fJJfxyDSR75WHY8OOmghw 299Fvy/Ss00hb0H9OnSUnWBkJZodCj7h2g+GQ9WQG2MXb1DIN0y3JCAzREdzdPms JdszkTiCBA75o3Nd72AhjbuSL2T09wmspL2LSMv4zvrMzD5C2/i1FJ6dEp3iB76u BqF9IxiJOlYu3UVT5A6rMT0BXQLZPbpyztOaA9p4PrSbyzZASFOMFUsrMH25UKL6 3YFasgb0QTP9fYYJPFTseAkbjbBj -----END CERTIFICATE-----Generated at Wed Nov 5 05:24:43 2025 by rpki-client