$ rpki-client -vvf rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/323830343a393465383a313030303a3a2f34382d3438203d3e20323734343836.roa File: 323830343a393465383a313030303a3a2f34382d3438203d3e20323734343836.roa (raw, json) Hash identifier: kDMldU2cBIr1Vp1KF8PYKiw2kAkgoOXQkxXZnXmLDxc= Subject key identifier: B4:AB:03:47:BE:A7:F6:B4:0D:62:52:0F:43:CD:BE:08:74:A1:38:8C Certificate issuer: /CN=395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F Certificate serial: 738BB51873F57A2DDA763970EBF62FAB9EA327CF Authority key identifier: 39:5A:3C:0B:8F:8A:2C:EF:DC:38:3D:57:6F:90:72:BC:CC:70:CB:9F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.cer Subject info access: rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/323830343a393465383a313030303a3a2f34382d3438203d3e20323734343836.roa Signing time: Tue 07 Oct 2025 13:05:41 +0000 ROA not before: Tue 07 Oct 2025 13:00:41 +0000 ROA not after: Tue 06 Oct 2026 13:05:41 +0000 asID: 274486 IP address blocks: 2804:94e8:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.crl rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 03:41:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:8b:b5:18:73:f5:7a:2d:da:76:39:70:eb:f6:2f:ab:9e:a3:27:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F Validity Not Before: Oct 7 13:00:41 2025 GMT Not After : Oct 6 13:05:41 2026 GMT Subject: CN=B4AB0347BEA7F6B40D62520F43CDBE0874A1388C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a9:f7:55:6b:31:0f:4e:ba:1e:2c:21:a4:15: 49:93:d9:67:79:8d:98:36:f0:46:31:91:fc:76:cf: 5b:1e:5b:04:d7:ec:86:60:79:cf:f6:9b:bd:73:00: f3:5c:26:32:61:38:e4:4a:51:92:df:4d:f8:c6:8a: b9:15:72:00:6a:11:ec:e5:4d:17:48:b9:5c:48:dd: 6b:ec:f2:5c:eb:49:75:2f:8b:c6:e6:5d:38:34:aa: 8e:d1:e7:59:fd:5a:37:09:f3:8a:81:3c:3e:f1:b3: 55:36:9e:7f:55:59:78:b4:e4:51:4c:09:2c:46:2e: d2:f3:8a:b4:78:8e:3d:75:21:50:6c:40:ce:d2:d4: 85:55:d2:51:ea:f5:a3:06:3f:dd:e1:bc:20:92:12: 11:19:3c:4f:bb:1e:27:3c:4d:32:ec:02:f3:c6:5e: e1:17:54:13:09:e6:02:2d:55:2a:fa:ce:0e:ea:0b: 72:33:b1:86:af:2b:af:e4:a9:1f:7a:f4:aa:5f:53: 0f:2f:4a:91:a1:90:4b:64:5c:e4:12:66:86:42:e6: 62:e3:69:d4:ee:eb:f1:5c:03:6b:1a:aa:b8:d1:88: 9e:68:6a:d5:de:28:56:96:e3:c6:fe:f7:80:18:65: 46:1f:ea:3e:0d:90:67:d7:d1:61:6d:3c:1f:ca:5f: 82:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:AB:03:47:BE:A7:F6:B4:0D:62:52:0F:43:CD:BE:08:74:A1:38:8C X509v3 Authority Key Identifier: keyid:39:5A:3C:0B:8F:8A:2C:EF:DC:38:3D:57:6F:90:72:BC:CC:70:CB:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/323830343a393465383a313030303a3a2f34382d3438203d3e20323734343836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:94e8:1000::/48 Signature Algorithm: sha256WithRSAEncryption 79:6f:c4:0b:99:5a:4a:50:28:d9:1b:2b:74:d0:10:0c:a3:ae: 4a:ec:c3:f8:f8:04:8a:b1:89:24:1a:6b:83:88:5e:2c:26:40: fd:da:19:83:42:b5:28:1a:80:5f:40:06:9e:2d:89:2a:c8:74: 94:84:b0:39:10:ed:cb:c8:e8:29:5b:b2:8b:5c:33:45:40:41: 63:ff:ae:4d:f4:ee:c0:fb:3f:f1:c0:e4:31:f5:4d:1b:8d:59: 26:67:31:ed:68:6e:c5:70:9f:ea:43:5d:8b:71:98:cc:8d:78: d2:82:8e:b8:fa:fe:51:b8:37:42:0e:4e:53:41:fe:10:6d:8a: 4d:2c:5c:bf:4d:34:70:95:6d:ce:dc:c2:7f:67:7f:ef:03:78: 85:98:df:8a:77:1b:1b:1b:cc:ad:b0:55:86:cc:7c:8d:25:ad: a5:73:95:e9:5e:0a:b5:86:c6:18:ca:4c:c5:7e:89:8b:ad:5a: b6:34:9b:5f:c5:e8:52:b5:d3:4a:b1:ac:05:c4:9c:cf:69:6f: 81:f0:47:85:0b:39:db:6a:5c:16:d5:0c:28:68:4c:bd:d7:ec: e7:6a:6c:ba:77:30:98:f8:53:d7:63:81:85:47:44:9d:ef:53: de:70:87:f3:7d:cc:82:3e:51:90:8c:7c:b6:d4:2d:4c:ec:d2: e9:5b:84:12 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIUc4u1GHP1ei3adjlw6/Yvq56jJ88wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk1QTNDMEI4RjhBMkNFRkRDMzgzRDU3NkY5MDcyQkND QzcwQ0I5RjAeFw0yNTEwMDcxMzAwNDFaFw0yNjEwMDYxMzA1NDFaMDMxMTAvBgNV BAMTKEI0QUIwMzQ3QkVBN0Y2QjQwRDYyNTIwRjQzQ0RCRTA4NzRBMTM4OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlqfdVazEPTroeLCGkFUmT2Wd5 jZg28EYxkfx2z1seWwTX7IZgec/2m71zAPNcJjJhOORKUZLfTfjGirkVcgBqEezl TRdIuVxI3Wvs8lzrSXUvi8bmXTg0qo7R51n9WjcJ84qBPD7xs1U2nn9VWXi05FFM CSxGLtLzirR4jj11IVBsQM7S1IVV0lHq9aMGP93hvCCSEhEZPE+7Hic8TTLsAvPG XuEXVBMJ5gItVSr6zg7qC3IzsYavK6/kqR969KpfUw8vSpGhkEtkXOQSZoZC5mLj adTu6/FcA2saqrjRiJ5oatXeKFaW48b+94AYZUYf6j4NkGfX0WFtPB/KX4LlAgMB AAGjggJcMIICWDAdBgNVHQ4EFgQUtKsDR76n9rQNYlIPQ82+CHShOIwwHwYDVR0j BBgwFoAUOVo8C4+KLO/cOD1Xb5ByvMxwy58wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0t6anE2U3lCYVFvM2JEZlBkVlhjNExlWnU1OEtMQVJMODh0VDFwUjdw OXUvMC8zOTVBM0MwQjhGOEEyQ0VGREMzODNENTc2RjkwNzJCQ0NDNzBDQjlGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM5NUEzQzBCOEY4QTJDRUZE QzM4M0Q1NzZGOTA3MkJDQ0M3MENCOUYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NLempxNlN5QmFRbzNiRGZQZFZYYzRMZVp1NThLTEFSTDg4dFQxcFI3cDl1LzAv MzIzODMwMzQzYTM5MzQ2NTM4M2EzMTMwMzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNk M2UyMDMyMzczNDM0MzgzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgElOgQADANBgkqhkiG9w0BAQsF AAOCAQEAeW/EC5laSlAo2RsrdNAQDKOuSuzD+PgEirGJJBprg4heLCZA/doZg0K1 KBqAX0AGni2JKsh0lISwORDty8joKVuyi1wzRUBBY/+uTfTuwPs/8cDkMfVNG41Z Jmcx7WhuxXCf6kNdi3GYzI140oKOuPr+Ubg3Qg5OU0H+EG2KTSxcv000cJVtztzC f2d/7wN4hZjfincbGxvMrbBVhsx8jSWtpXOV6V4KtYbGGMpMxX6Ji61atjSbX8Xo UrXTSrGsBcScz2lvgfBHhQs522pcFtUMKGhMvdfs52psuncwmPhT12OBhUdEne9T 3nCH833Mgj5RkIx8ttQtTOzS6VuEEg== -----END CERTIFICATE-----Generated at Wed Nov 5 09:39:35 2025 by rpki-client