$ rpki-client -vvf rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/323830343a393465383a3a2f33322d3332203d3e20323734343836.roa File: 323830343a393465383a3a2f33322d3332203d3e20323734343836.roa (raw, json) Hash identifier: aTaA7WmiUy+R0jgQpKmjz0NyFV8N03D7nxYMsvKxE50= Subject key identifier: D8:7B:65:31:FE:F2:FD:B3:4E:5F:02:E5:07:88:01:F1:EF:07:6D:EE Certificate issuer: /CN=395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F Certificate serial: 311AA914313E31D080662DB346786972135FDB4F Authority key identifier: 39:5A:3C:0B:8F:8A:2C:EF:DC:38:3D:57:6F:90:72:BC:CC:70:CB:9F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.cer Subject info access: rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/323830343a393465383a3a2f33322d3332203d3e20323734343836.roa Signing time: Mon 29 Sep 2025 22:25:20 +0000 ROA not before: Mon 29 Sep 2025 22:20:20 +0000 ROA not after: Mon 28 Sep 2026 22:25:20 +0000 asID: 274486 IP address blocks: 2804:94e8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.crl rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 03:41:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:1a:a9:14:31:3e:31:d0:80:66:2d:b3:46:78:69:72:13:5f:db:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F Validity Not Before: Sep 29 22:20:20 2025 GMT Not After : Sep 28 22:25:20 2026 GMT Subject: CN=D87B6531FEF2FDB34E5F02E5078801F1EF076DEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ee:08:dd:9d:39:7b:72:cf:60:4e:11:b1:b7: 53:67:f5:d6:65:eb:e6:99:f7:47:54:1e:dc:98:51: d4:d7:dd:aa:d3:fe:aa:96:aa:66:8d:7e:ac:36:3c: 54:4b:26:34:c8:48:64:1e:aa:81:5e:fd:d4:51:02: 11:95:89:34:3c:43:e7:88:19:85:43:a1:70:ec:32: 08:ab:d3:52:9f:5a:a9:86:7b:77:5b:00:68:db:76: 03:c7:f8:0c:c1:3b:e8:76:0f:d2:68:ce:74:ad:b0: 24:14:a0:fb:0f:9d:b0:b9:07:ce:62:b2:48:86:fd: 55:e4:e3:11:5e:8b:0b:bd:db:0b:13:76:2f:73:2b: 86:cc:c0:6f:ab:05:9e:8a:5c:d8:6a:c2:a3:c3:1b: 49:f9:ef:f7:cb:d9:2a:a0:a3:34:39:fb:d6:f6:52: 8a:be:4a:94:75:c8:6f:ff:f6:00:a0:6e:2e:63:65: d4:6a:75:6e:b6:68:77:f7:64:ec:55:ef:75:c3:01: db:79:4b:9a:28:d2:f3:8b:a3:31:33:92:84:f7:e1: d6:3f:85:60:09:70:22:4f:88:d9:ca:ce:c3:3f:e7: 57:12:0f:22:4d:99:b5:0d:c0:e5:3b:6a:76:f1:6f: 83:71:8c:df:fc:1c:d2:0e:6d:55:fc:21:e6:06:f1: 16:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:7B:65:31:FE:F2:FD:B3:4E:5F:02:E5:07:88:01:F1:EF:07:6D:EE X509v3 Authority Key Identifier: keyid:39:5A:3C:0B:8F:8A:2C:EF:DC:38:3D:57:6F:90:72:BC:CC:70:CB:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/323830343a393465383a3a2f33322d3332203d3e20323734343836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:94e8::/32 Signature Algorithm: sha256WithRSAEncryption 3f:f6:41:76:6b:22:4f:20:19:04:29:37:5f:b8:c4:3b:74:a7: 6f:b8:0b:93:9e:cb:34:96:08:0b:4b:8d:fa:87:76:6e:cf:d1: bb:df:6c:08:a1:54:d1:75:74:61:21:39:e7:1b:e1:08:19:b9: a4:79:42:95:2c:d6:bb:46:7b:34:be:ad:c4:83:2f:43:b1:76: f6:ba:07:09:02:60:bf:b1:04:5e:5c:72:a2:53:49:68:a1:b4: aa:5d:3c:b0:dc:20:a0:65:40:50:2d:05:06:7a:6c:ab:3e:45: 06:9e:ec:69:fd:8b:5c:a1:3c:95:41:96:a4:d1:d3:92:51:8f: bc:95:7b:a7:35:37:ae:6b:88:5b:c1:12:21:18:41:ef:16:b0: 11:2e:e3:b7:bf:a3:ab:52:c4:1b:10:9c:ce:ac:68:5a:82:85: d4:74:34:2c:b3:47:ba:72:02:18:ed:59:f6:07:1f:47:24:f8: de:96:8e:02:45:bf:38:b4:e8:f6:37:5f:dd:14:3c:82:e2:5c: 67:42:c4:cc:3b:9e:6d:17:0d:8c:e4:19:b8:fd:fb:4d:0d:a4: 93:02:10:08:90:bd:01:f6:a4:aa:04:23:16:2d:d8:a0:20:9a: e1:32:30:3c:f3:5b:da:80:4e:77:02:cc:f8:81:c1:c9:07:92: d5:66:93:52 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUMRqpFDE+MdCAZi2zRnhpchNf208wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk1QTNDMEI4RjhBMkNFRkRDMzgzRDU3NkY5MDcyQkND QzcwQ0I5RjAeFw0yNTA5MjkyMjIwMjBaFw0yNjA5MjgyMjI1MjBaMDMxMTAvBgNV BAMTKEQ4N0I2NTMxRkVGMkZEQjM0RTVGMDJFNTA3ODgwMUYxRUYwNzZERUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC87gjdnTl7cs9gThGxt1Nn9dZl 6+aZ90dUHtyYUdTX3arT/qqWqmaNfqw2PFRLJjTISGQeqoFe/dRRAhGViTQ8Q+eI GYVDoXDsMgir01KfWqmGe3dbAGjbdgPH+AzBO+h2D9JoznStsCQUoPsPnbC5B85i skiG/VXk4xFeiwu92wsTdi9zK4bMwG+rBZ6KXNhqwqPDG0n57/fL2SqgozQ5+9b2 Uoq+SpR1yG//9gCgbi5jZdRqdW62aHf3ZOxV73XDAdt5S5oo0vOLozEzkoT34dY/ hWAJcCJPiNnKzsM/51cSDyJNmbUNwOU7anbxb4NxjN/8HNIObVX8IeYG8RYvAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQU2HtlMf7y/bNOXwLlB4gB8e8Hbe4wHwYDVR0j BBgwFoAUOVo8C4+KLO/cOD1Xb5ByvMxwy58wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0t6anE2U3lCYVFvM2JEZlBkVlhjNExlWnU1OEtMQVJMODh0VDFwUjdw OXUvMC8zOTVBM0MwQjhGOEEyQ0VGREMzODNENTc2RjkwNzJCQ0NDNzBDQjlGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM5NUEzQzBCOEY4QTJDRUZE QzM4M0Q1NzZGOTA3MkJDQ0M3MENCOUYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NLempxNlN5QmFRbzNiRGZQZFZYYzRMZVp1NThLTEFSTDg4dFQxcFI3cDl1LzAv MzIzODMwMzQzYTM5MzQ2NTM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzM0 MzQzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASU6DANBgkqhkiG9w0BAQsFAAOCAQEAP/ZBdmsi TyAZBCk3X7jEO3Snb7gLk57LNJYIC0uN+od2bs/Ru99sCKFU0XV0YSE55xvhCBm5 pHlClSzWu0Z7NL6txIMvQ7F29roHCQJgv7EEXlxyolNJaKG0ql08sNwgoGVAUC0F Bnpsqz5FBp7saf2LXKE8lUGWpNHTklGPvJV7pzU3rmuIW8ESIRhB7xawES7jt7+j q1LEGxCczqxoWoKF1HQ0LLNHunICGO1Z9gcfRyT43paOAkW/OLTo9jdf3RQ8guJc Z0LEzDuebRcNjOQZuP37TQ2kkwIQCJC9AfakqgQjFi3YoCCa4TIwPPNb2oBOdwLM +IHByQeS1WaTUg== -----END CERTIFICATE-----Generated at Wed Nov 5 12:35:07 2025 by rpki-client