$ rpki-client -vvf rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/323830343a393465383a333030303a3a2f34382d3438203d3e20323734343836.roa File: 323830343a393465383a333030303a3a2f34382d3438203d3e20323734343836.roa (raw, json) Hash identifier: U35HynX+Hd2ZOm85T2tKJnlJAzZrKjlfbQLABLn2/C0= Subject key identifier: A5:31:2F:15:24:82:54:B6:41:34:62:2D:D2:F6:FF:0F:E5:5B:3C:F5 Certificate issuer: /CN=395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F Certificate serial: 707B6609123E9E2AACFA095B352113BB353116F1 Authority key identifier: 39:5A:3C:0B:8F:8A:2C:EF:DC:38:3D:57:6F:90:72:BC:CC:70:CB:9F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.cer Subject info access: rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/323830343a393465383a333030303a3a2f34382d3438203d3e20323734343836.roa Signing time: Tue 07 Oct 2025 13:05:42 +0000 ROA not before: Tue 07 Oct 2025 13:00:42 +0000 ROA not after: Tue 06 Oct 2026 13:05:42 +0000 asID: 274486 IP address blocks: 2804:94e8:3000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.crl rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 03:41:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:7b:66:09:12:3e:9e:2a:ac:fa:09:5b:35:21:13:bb:35:31:16:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F Validity Not Before: Oct 7 13:00:42 2025 GMT Not After : Oct 6 13:05:42 2026 GMT Subject: CN=A5312F15248254B64134622DD2F6FF0FE55B3CF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:de:50:ca:7a:40:91:f3:b4:d0:45:ed:58:d3: a1:92:2e:23:c7:4d:f4:f0:71:d0:aa:49:de:eb:f6: 03:09:db:b8:de:57:ca:45:5c:c7:b7:d7:7a:3c:76: 49:82:2f:68:6e:b2:8c:fc:29:41:39:f6:62:bf:4a: bf:91:f1:f3:9c:d0:83:73:f2:8a:30:4c:6b:f9:b9: 79:4c:39:52:fa:1c:a0:97:4b:66:24:40:c9:14:68: c8:e2:6f:d0:fd:ff:3f:c6:d2:72:a2:e2:80:23:0b: ea:2f:1f:6d:22:2c:17:50:b4:a3:13:d7:d3:41:c8: 36:e0:66:a3:e0:78:ea:da:9f:00:48:a9:20:bd:4c: f8:cb:0c:c2:84:25:b7:52:a3:19:96:37:9a:6e:bf: 0c:98:5e:23:0d:ec:f7:bb:b8:26:15:37:31:13:e6: ae:23:24:8d:91:ae:fb:f8:9d:8f:74:c9:88:8e:1c: f1:bc:c4:04:79:68:09:7a:eb:58:d1:c0:5a:57:f8: 7a:e5:f3:90:45:24:1b:b8:b5:0d:6f:ec:dc:d4:2c: 17:74:5d:da:c0:39:68:1f:af:34:5b:91:ce:b9:be: 9d:0f:8b:24:fa:02:c7:df:12:72:e4:92:54:cc:3e: ff:fe:4e:53:b0:e3:4d:70:d0:3c:0c:55:52:1d:50: 8e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:31:2F:15:24:82:54:B6:41:34:62:2D:D2:F6:FF:0F:E5:5B:3C:F5 X509v3 Authority Key Identifier: keyid:39:5A:3C:0B:8F:8A:2C:EF:DC:38:3D:57:6F:90:72:BC:CC:70:CB:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/323830343a393465383a333030303a3a2f34382d3438203d3e20323734343836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:94e8:3000::/48 Signature Algorithm: sha256WithRSAEncryption 95:82:a0:ac:b4:f2:1f:2a:34:73:05:cb:ed:a8:42:13:b2:00: 5e:77:b6:9a:14:2b:78:27:03:a5:6b:8f:01:ca:51:b1:dd:1f: f4:03:29:c3:4a:42:66:a7:a4:7a:e4:bf:ff:88:cb:c4:52:3f: e2:2c:9c:0f:65:3d:2d:1a:46:d4:6a:84:81:4c:60:d6:89:98: 80:3b:38:aa:9e:00:c1:b5:18:f7:2b:77:2c:6a:f3:f8:6b:7a: 00:a2:69:95:2b:c6:3f:aa:0e:f1:8d:f9:83:9d:39:77:56:17: 41:22:74:c1:87:d3:96:ae:0e:d7:83:bb:51:e5:d0:ab:d4:cf: 7c:65:32:7b:0c:6a:a1:35:f2:47:d7:0c:7b:8f:7f:c4:87:30: 98:4d:69:b6:70:c4:34:95:a7:4a:27:fb:be:9c:50:2c:89:66: 45:70:b3:ba:07:9a:72:e7:cd:b0:e5:a7:3b:01:a5:30:d0:d2: 4b:96:39:60:ba:ed:ab:65:83:0b:99:2a:af:28:a8:34:bd:d7: 4b:18:d6:0f:ff:76:d1:6d:99:ef:61:5a:6c:de:22:d5:ee:28: 2c:8a:6b:95:e4:13:1f:fb:1c:55:24:a5:13:5d:33:47:1d:7d: 8c:86:bd:29:5c:83:33:75:25:23:d8:2b:b8:ca:93:87:98:0a: bf:c2:4b:00 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIUcHtmCRI+niqs+glbNSETuzUxFvEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk1QTNDMEI4RjhBMkNFRkRDMzgzRDU3NkY5MDcyQkND QzcwQ0I5RjAeFw0yNTEwMDcxMzAwNDJaFw0yNjEwMDYxMzA1NDJaMDMxMTAvBgNV BAMTKEE1MzEyRjE1MjQ4MjU0QjY0MTM0NjIyREQyRjZGRjBGRTU1QjNDRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk3lDKekCR87TQRe1Y06GSLiPH TfTwcdCqSd7r9gMJ27jeV8pFXMe313o8dkmCL2husoz8KUE59mK/Sr+R8fOc0INz 8oowTGv5uXlMOVL6HKCXS2YkQMkUaMjib9D9/z/G0nKi4oAjC+ovH20iLBdQtKMT 19NByDbgZqPgeOranwBIqSC9TPjLDMKEJbdSoxmWN5puvwyYXiMN7Pe7uCYVNzET 5q4jJI2Rrvv4nY90yYiOHPG8xAR5aAl661jRwFpX+Hrl85BFJBu4tQ1v7NzULBd0 XdrAOWgfrzRbkc65vp0PiyT6AsffEnLkklTMPv/+TlOw401w0DwMVVIdUI4FAgMB AAGjggJcMIICWDAdBgNVHQ4EFgQUpTEvFSSCVLZBNGIt0vb/D+VbPPUwHwYDVR0j BBgwFoAUOVo8C4+KLO/cOD1Xb5ByvMxwy58wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0t6anE2U3lCYVFvM2JEZlBkVlhjNExlWnU1OEtMQVJMODh0VDFwUjdw OXUvMC8zOTVBM0MwQjhGOEEyQ0VGREMzODNENTc2RjkwNzJCQ0NDNzBDQjlGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM5NUEzQzBCOEY4QTJDRUZE QzM4M0Q1NzZGOTA3MkJDQ0M3MENCOUYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NLempxNlN5QmFRbzNiRGZQZFZYYzRMZVp1NThLTEFSTDg4dFQxcFI3cDl1LzAv MzIzODMwMzQzYTM5MzQ2NTM4M2EzMzMwMzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNk M2UyMDMyMzczNDM0MzgzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgElOgwADANBgkqhkiG9w0BAQsF AAOCAQEAlYKgrLTyHyo0cwXL7ahCE7IAXne2mhQreCcDpWuPAcpRsd0f9AMpw0pC ZqekeuS//4jLxFI/4iycD2U9LRpG1GqEgUxg1omYgDs4qp4AwbUY9yt3LGrz+Gt6 AKJplSvGP6oO8Y35g505d1YXQSJ0wYfTlq4O14O7UeXQq9TPfGUyewxqoTXyR9cM e49/xIcwmE1ptnDENJWnSif7vpxQLIlmRXCzugeacufNsOWnOwGlMNDSS5Y5YLrt q2WDC5kqryioNL3XSxjWD/920W2Z72FabN4i1e4oLIprleQTH/scVSSlE10zRx19 jIa9KVyDM3UlI9gruMqTh5gKv8JLAA== -----END CERTIFICATE-----Generated at Wed Nov 5 09:39:58 2025 by rpki-client