$ rpki-client -vvf rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/323830343a393465383a323030313a3a2f34382d3438203d3e20323734343836.roa File: 323830343a393465383a323030313a3a2f34382d3438203d3e20323734343836.roa (raw, json) Hash identifier: HSUvzHiVpQpq4kNCy7yi2zvXEOwCT6X+P/m4EwuVhJk= Subject key identifier: 7D:68:72:F3:1E:3A:F4:78:4C:BB:1F:E1:2C:53:33:EC:6F:B7:AB:9E Certificate issuer: /CN=395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F Certificate serial: 4C5D8400EB6D61920506BDEF79788879DCD035BC Authority key identifier: 39:5A:3C:0B:8F:8A:2C:EF:DC:38:3D:57:6F:90:72:BC:CC:70:CB:9F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.cer Subject info access: rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/323830343a393465383a323030313a3a2f34382d3438203d3e20323734343836.roa Signing time: Tue 07 Oct 2025 13:05:42 +0000 ROA not before: Tue 07 Oct 2025 13:00:42 +0000 ROA not after: Tue 06 Oct 2026 13:05:42 +0000 asID: 274486 IP address blocks: 2804:94e8:2001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.crl rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 03:41:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:5d:84:00:eb:6d:61:92:05:06:bd:ef:79:78:88:79:dc:d0:35:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F Validity Not Before: Oct 7 13:00:42 2025 GMT Not After : Oct 6 13:05:42 2026 GMT Subject: CN=7D6872F31E3AF4784CBB1FE12C5333EC6FB7AB9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:bf:d4:e6:f3:89:bf:b6:53:8a:b3:4e:1f:0f: 5d:f3:05:43:42:77:ab:d1:2a:50:f8:97:50:ce:74: b4:5a:c8:c1:8c:2e:1a:63:06:29:c0:b2:f7:88:9b: e2:21:e8:2d:82:7e:4e:26:65:36:a0:25:35:88:f9: 3c:96:e2:fa:14:76:8b:a6:6c:99:f6:fc:3a:e0:a8: fc:ee:e9:13:70:56:39:f6:bb:4a:06:32:18:ae:31: 4e:26:30:97:3d:0f:75:7a:25:0f:64:7b:fe:40:b8: 30:e5:ec:d1:52:8c:0a:e9:63:2c:94:92:70:80:70: a5:ab:67:c7:07:5c:71:23:4a:43:0a:21:81:75:74: 56:50:40:96:c5:e7:d7:ca:cc:55:e1:5b:62:16:c8: 9d:1d:65:cf:6d:63:a3:fe:c4:f3:b9:a1:47:c9:0b: 48:9f:69:d2:da:92:a5:87:8a:77:61:3f:05:11:bf: 41:1f:75:da:d2:be:a0:09:f3:f9:fa:68:b9:61:bb: 1f:a7:d0:c8:d4:86:f9:a5:2c:37:65:b8:97:de:6d: 86:0e:24:3e:a2:6f:04:71:c8:3f:43:f1:e3:2e:28: 58:54:57:e7:ba:be:bf:05:a8:c3:bd:90:41:5c:ec: 68:9f:67:6e:42:f6:97:65:c7:1e:93:db:dd:8c:55: b5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:68:72:F3:1E:3A:F4:78:4C:BB:1F:E1:2C:53:33:EC:6F:B7:AB:9E X509v3 Authority Key Identifier: keyid:39:5A:3C:0B:8F:8A:2C:EF:DC:38:3D:57:6F:90:72:BC:CC:70:CB:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/323830343a393465383a323030313a3a2f34382d3438203d3e20323734343836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:94e8:2001::/48 Signature Algorithm: sha256WithRSAEncryption 5e:68:81:27:e8:c5:6e:14:30:a5:30:c7:f1:cc:0b:71:ee:50: 51:eb:14:2e:ac:28:2c:0c:6d:33:05:62:e3:b6:e2:23:d2:fc: c0:6f:54:35:bd:58:4e:8d:7d:d9:a6:d6:d5:2f:86:fc:2c:a9: f8:c9:95:7b:bb:98:19:b5:92:4b:77:59:44:d2:1e:0f:a2:09: 88:a9:fb:4f:59:97:2b:11:2e:c4:bf:2c:0e:50:e5:80:9d:f1: ad:90:0a:90:19:17:6b:c0:66:5b:1c:46:65:85:58:85:b1:b7: 15:02:4f:3f:69:d5:6f:ab:93:1e:88:bc:e5:8a:c1:50:5a:ef: 46:21:f9:33:f0:f1:6f:9c:85:f8:21:8c:0a:ef:f3:d3:2e:c3: 74:b0:ed:64:79:10:7c:60:02:f0:2b:ac:a0:2c:4b:34:89:44: 69:5a:a1:51:5f:3d:2c:7d:58:fe:81:82:f3:25:bf:e1:b7:52: 74:28:d7:d7:9c:c6:3a:15:8f:67:0d:87:5d:1b:d4:cd:d4:be: 3c:b5:d8:14:bf:79:55:b5:4e:73:09:a2:d7:2c:cd:38:28:12: 70:d2:f4:f4:4e:5f:0b:09:2e:69:37:25:7b:6e:80:c4:35:46: c3:0f:b4:ec:55:10:91:d5:74:d8:e7:3c:0e:43:51:e6:65:9e: a5:2c:a5:e4 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIUTF2EAOttYZIFBr3veXiIedzQNbwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk1QTNDMEI4RjhBMkNFRkRDMzgzRDU3NkY5MDcyQkND QzcwQ0I5RjAeFw0yNTEwMDcxMzAwNDJaFw0yNjEwMDYxMzA1NDJaMDMxMTAvBgNV BAMTKDdENjg3MkYzMUUzQUY0Nzg0Q0JCMUZFMTJDNTMzM0VDNkZCN0FCOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrv9Tm84m/tlOKs04fD13zBUNC d6vRKlD4l1DOdLRayMGMLhpjBinAsveIm+Ih6C2Cfk4mZTagJTWI+TyW4voUdoum bJn2/DrgqPzu6RNwVjn2u0oGMhiuMU4mMJc9D3V6JQ9ke/5AuDDl7NFSjArpYyyU knCAcKWrZ8cHXHEjSkMKIYF1dFZQQJbF59fKzFXhW2IWyJ0dZc9tY6P+xPO5oUfJ C0ifadLakqWHindhPwURv0EfddrSvqAJ8/n6aLlhux+n0MjUhvmlLDdluJfebYYO JD6ibwRxyD9D8eMuKFhUV+e6vr8FqMO9kEFc7GifZ25C9pdlxx6T292MVbUJAgMB AAGjggJcMIICWDAdBgNVHQ4EFgQUfWhy8x469HhMux/hLFMz7G+3q54wHwYDVR0j BBgwFoAUOVo8C4+KLO/cOD1Xb5ByvMxwy58wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0t6anE2U3lCYVFvM2JEZlBkVlhjNExlWnU1OEtMQVJMODh0VDFwUjdw OXUvMC8zOTVBM0MwQjhGOEEyQ0VGREMzODNENTc2RjkwNzJCQ0NDNzBDQjlGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM5NUEzQzBCOEY4QTJDRUZE QzM4M0Q1NzZGOTA3MkJDQ0M3MENCOUYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NLempxNlN5QmFRbzNiRGZQZFZYYzRMZVp1NThLTEFSTDg4dFQxcFI3cDl1LzAv MzIzODMwMzQzYTM5MzQ2NTM4M2EzMjMwMzAzMTNhM2EyZjM0MzgyZDM0MzgyMDNk M2UyMDMyMzczNDM0MzgzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgElOggATANBgkqhkiG9w0BAQsF AAOCAQEAXmiBJ+jFbhQwpTDH8cwLce5QUesULqwoLAxtMwVi47biI9L8wG9UNb1Y To192abW1S+G/Cyp+MmVe7uYGbWSS3dZRNIeD6IJiKn7T1mXKxEuxL8sDlDlgJ3x rZAKkBkXa8BmWxxGZYVYhbG3FQJPP2nVb6uTHoi85YrBUFrvRiH5M/Dxb5yF+CGM Cu/z0y7DdLDtZHkQfGAC8CusoCxLNIlEaVqhUV89LH1Y/oGC8yW/4bdSdCjX15zG OhWPZw2HXRvUzdS+PLXYFL95VbVOcwmi1yzNOCgScNL09E5fCwkuaTcle26AxDVG ww+07FUQkdV02Oc8DkNR5mWepSyl5A== -----END CERTIFICATE-----Generated at Wed Nov 5 09:39:55 2025 by rpki-client