$ rpki-client -vvf rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/323830343a393465383a333030313a3a2f34382d3438203d3e20323734343836.roa File: 323830343a393465383a333030313a3a2f34382d3438203d3e20323734343836.roa (raw, json) Hash identifier: Ww2I+OLikcbCS5DKkV4LVqPogqvnCstjGKT2xvimr1M= Subject key identifier: 42:89:43:7B:9A:57:44:1B:46:50:7E:AE:48:30:98:E3:60:5A:D0:3F Certificate issuer: /CN=395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F Certificate serial: 778A37C97DE4F46C1E5E0887E5728DBC66C9F24F Authority key identifier: 39:5A:3C:0B:8F:8A:2C:EF:DC:38:3D:57:6F:90:72:BC:CC:70:CB:9F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.cer Subject info access: rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/323830343a393465383a333030313a3a2f34382d3438203d3e20323734343836.roa Signing time: Tue 07 Oct 2025 13:05:41 +0000 ROA not before: Tue 07 Oct 2025 13:00:41 +0000 ROA not after: Tue 06 Oct 2026 13:05:41 +0000 asID: 274486 IP address blocks: 2804:94e8:3001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.crl rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 03:41:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:8a:37:c9:7d:e4:f4:6c:1e:5e:08:87:e5:72:8d:bc:66:c9:f2:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F Validity Not Before: Oct 7 13:00:41 2025 GMT Not After : Oct 6 13:05:41 2026 GMT Subject: CN=4289437B9A57441B46507EAE483098E3605AD03F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c1:47:6f:15:19:a3:ba:88:54:c8:ab:4c:9b: eb:62:a3:ed:81:6f:29:74:21:b9:0a:f3:84:9f:a6: ee:fb:96:b4:a4:2f:30:73:26:a4:5b:a9:5c:31:80: 84:db:43:95:f8:05:5d:67:4f:ca:83:f0:d2:80:45: 2b:b5:b2:a1:c5:31:9f:22:2f:e3:1a:12:78:5b:64: f1:e1:2f:24:ee:be:e8:0d:18:23:e4:10:13:9a:85: bf:85:b5:f7:a5:53:ef:5b:69:d8:e0:42:79:9d:de: a1:db:0b:25:b2:3c:6c:c4:c2:da:66:46:c6:a6:ca: a9:13:2f:57:11:4a:52:64:6b:71:1b:7c:a7:a3:6d: b0:1f:d3:02:99:22:41:48:af:22:fb:f2:e8:09:6a: 9b:65:b9:26:34:57:9c:75:70:f2:1f:2d:e2:53:67: d4:bc:74:ad:5f:36:b2:84:9a:94:04:d7:2c:aa:dc: 87:01:c7:9b:74:22:d5:4f:6d:5f:b8:1b:79:5a:69: 06:3f:cb:dc:1a:2c:00:6f:cd:30:b4:10:e2:82:5c: 91:33:0f:74:ca:dd:f2:42:66:d8:a0:68:04:3b:8f: 05:b9:32:a9:06:26:8a:25:89:ad:15:dd:fe:c2:10: 0c:23:94:05:c6:1e:bf:72:ce:e3:d1:c8:6a:45:f0: f5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:89:43:7B:9A:57:44:1B:46:50:7E:AE:48:30:98:E3:60:5A:D0:3F X509v3 Authority Key Identifier: keyid:39:5A:3C:0B:8F:8A:2C:EF:DC:38:3D:57:6F:90:72:BC:CC:70:CB:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/323830343a393465383a333030313a3a2f34382d3438203d3e20323734343836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:94e8:3001::/48 Signature Algorithm: sha256WithRSAEncryption 23:c8:ac:2b:02:a9:75:fc:c0:7c:90:b6:93:2f:6e:2c:43:46: 81:a0:5d:f5:4c:c3:10:47:a0:74:58:77:5d:31:60:77:87:ec: e9:4f:e6:74:20:41:90:5d:32:f2:03:45:bb:ba:de:19:aa:94: df:68:79:84:df:8a:5d:ff:47:c4:1c:e0:29:da:b4:05:fc:56: b9:52:b9:cf:3b:f1:02:40:50:0f:15:29:86:a9:ec:ec:7b:5f: fa:00:45:3a:d3:23:88:f5:5f:3d:f4:fc:c0:a0:d3:26:55:9d: 69:67:e9:2f:58:34:a2:74:2c:24:da:64:00:df:63:72:29:ad: 1d:ed:4a:01:0f:11:42:e3:59:a3:ed:3f:d3:a2:f1:9f:a8:0c: 9b:5e:b2:c5:ac:b6:58:3b:ce:3a:de:d5:9d:2c:41:02:47:94: 13:21:57:d4:00:92:b2:2d:9d:47:e6:45:03:cc:db:4f:22:14: f8:ab:eb:a1:6e:b0:2a:e3:b2:ff:de:91:e5:0b:16:63:24:07: 09:f0:a9:7a:d1:60:e6:22:f7:3c:d9:57:3e:14:0c:3e:06:07: b2:2f:45:80:20:92:6e:c0:8c:e0:4a:6a:4a:ac:53:71:12:da: 19:99:e2:5c:9f:b6:63:45:45:18:22:ac:8b:cb:a8:29:aa:fd: 52:86:3c:e6 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIUd4o3yX3k9GweXgiH5XKNvGbJ8k8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk1QTNDMEI4RjhBMkNFRkRDMzgzRDU3NkY5MDcyQkND QzcwQ0I5RjAeFw0yNTEwMDcxMzAwNDFaFw0yNjEwMDYxMzA1NDFaMDMxMTAvBgNV BAMTKDQyODk0MzdCOUE1NzQ0MUI0NjUwN0VBRTQ4MzA5OEUzNjA1QUQwM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhwUdvFRmjuohUyKtMm+tio+2B byl0IbkK84Sfpu77lrSkLzBzJqRbqVwxgITbQ5X4BV1nT8qD8NKARSu1sqHFMZ8i L+MaEnhbZPHhLyTuvugNGCPkEBOahb+FtfelU+9badjgQnmd3qHbCyWyPGzEwtpm RsamyqkTL1cRSlJka3EbfKejbbAf0wKZIkFIryL78ugJaptluSY0V5x1cPIfLeJT Z9S8dK1fNrKEmpQE1yyq3IcBx5t0ItVPbV+4G3laaQY/y9waLABvzTC0EOKCXJEz D3TK3fJCZtigaAQ7jwW5MqkGJoolia0V3f7CEAwjlAXGHr9yzuPRyGpF8PVZAgMB AAGjggJcMIICWDAdBgNVHQ4EFgQUQolDe5pXRBtGUH6uSDCY42Ba0D8wHwYDVR0j BBgwFoAUOVo8C4+KLO/cOD1Xb5ByvMxwy58wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0t6anE2U3lCYVFvM2JEZlBkVlhjNExlWnU1OEtMQVJMODh0VDFwUjdw OXUvMC8zOTVBM0MwQjhGOEEyQ0VGREMzODNENTc2RjkwNzJCQ0NDNzBDQjlGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM5NUEzQzBCOEY4QTJDRUZE QzM4M0Q1NzZGOTA3MkJDQ0M3MENCOUYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NLempxNlN5QmFRbzNiRGZQZFZYYzRMZVp1NThLTEFSTDg4dFQxcFI3cDl1LzAv MzIzODMwMzQzYTM5MzQ2NTM4M2EzMzMwMzAzMTNhM2EyZjM0MzgyZDM0MzgyMDNk M2UyMDMyMzczNDM0MzgzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgElOgwATANBgkqhkiG9w0BAQsF AAOCAQEAI8isKwKpdfzAfJC2ky9uLENGgaBd9UzDEEegdFh3XTFgd4fs6U/mdCBB kF0y8gNFu7reGaqU32h5hN+KXf9HxBzgKdq0BfxWuVK5zzvxAkBQDxUphqns7Htf +gBFOtMjiPVfPfT8wKDTJlWdaWfpL1g0onQsJNpkAN9jcimtHe1KAQ8RQuNZo+0/ 06Lxn6gMm16yxay2WDvOOt7VnSxBAkeUEyFX1ACSsi2dR+ZFA8zbTyIU+KvroW6w KuOy/96R5QsWYyQHCfCpetFg5iL3PNlXPhQMPgYHsi9FgCCSbsCM4EpqSqxTcRLa GZniXJ+2Y0VFGCKsi8uoKar9UoY85g== -----END CERTIFICATE-----Generated at Wed Nov 5 16:05:52 2025 by rpki-client