$ rpki-client -vvf rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/1/323830343a313365633a386230303a3a2f34302d3430203d3e20323633333032.roa File: 323830343a313365633a386230303a3a2f34302d3430203d3e20323633333032.roa (raw, json) Hash identifier: LqAF6buy64mfAZF0xaqfk9n8Z+eAvO7eVl39nB9JcQ4= Subject key identifier: F6:6F:9C:17:8C:0D:CF:60:AB:35:19:1E:9D:25:C9:E6:7D:8B:8D:4F Certificate issuer: /CN=1B07C34ADF8156B6635F6C7E1EA217E154F40A7F Certificate serial: 302F4B15A1926E6DB6F7952CB0DD504233292D96 Authority key identifier: 1B:07:C3:4A:DF:81:56:B6:63:5F:6C:7E:1E:A2:17:E1:54:F4:0A:7F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B07C34ADF8156B6635F6C7E1EA217E154F40A7F.cer Subject info access: rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/1/323830343a313365633a386230303a3a2f34302d3430203d3e20323633333032.roa Signing time: Mon 03 Nov 2025 18:34:38 +0000 ROA not before: Mon 03 Nov 2025 18:29:38 +0000 ROA not after: Mon 02 Nov 2026 18:34:38 +0000 asID: 263302 IP address blocks: 2804:13ec:8b00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/1/1B07C34ADF8156B6635F6C7E1EA217E154F40A7F.crl rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/1/1B07C34ADF8156B6635F6C7E1EA217E154F40A7F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B07C34ADF8156B6635F6C7E1EA217E154F40A7F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 06:35:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:2f:4b:15:a1:92:6e:6d:b6:f7:95:2c:b0:dd:50:42:33:29:2d:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B07C34ADF8156B6635F6C7E1EA217E154F40A7F Validity Not Before: Nov 3 18:29:38 2025 GMT Not After : Nov 2 18:34:38 2026 GMT Subject: CN=F66F9C178C0DCF60AB35191E9D25C9E67D8B8D4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:38:c9:4f:c9:88:37:24:f2:79:37:24:29:86: 13:8a:e5:68:3d:2a:3f:87:15:d0:13:59:34:60:44: 45:e9:84:f9:04:2d:d6:7c:bb:eb:d7:45:4b:47:29: cb:c1:45:a0:30:84:21:7c:bd:6a:62:a6:bc:26:02: 8b:44:72:ec:d4:c1:3f:d0:18:cd:e8:3c:53:1f:78: e6:cf:de:9b:2c:97:0f:92:cd:96:5f:ac:8e:79:77: 0f:63:34:83:d2:4e:75:a1:9f:18:0b:9a:20:b3:90: 0e:48:e6:89:70:0a:39:d2:af:8c:a2:85:29:46:b1: f0:06:fc:e0:6b:39:f8:2f:f1:ce:40:21:51:df:01: bc:2d:dc:59:f8:56:db:04:68:0f:9a:7b:68:29:36: ac:98:a4:28:60:f1:0b:af:36:03:d9:9e:ca:69:df: f9:ea:08:f0:40:a2:85:2f:12:64:cb:90:39:9f:b5: 1a:d6:85:7c:4a:27:8d:35:ec:04:cc:71:16:f0:3b: 2f:a0:b4:b3:e0:01:55:54:72:82:95:aa:8b:87:69: ae:2b:c4:42:23:a5:fa:c8:99:f7:f0:17:e3:ce:d5: 71:3d:84:24:86:51:a4:b9:d6:20:7e:64:1e:3d:0b: d3:bf:a1:cb:94:1d:db:64:7b:19:98:cd:91:4e:91: 50:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:6F:9C:17:8C:0D:CF:60:AB:35:19:1E:9D:25:C9:E6:7D:8B:8D:4F X509v3 Authority Key Identifier: keyid:1B:07:C3:4A:DF:81:56:B6:63:5F:6C:7E:1E:A2:17:E1:54:F4:0A:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/1/1B07C34ADF8156B6635F6C7E1EA217E154F40A7F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B07C34ADF8156B6635F6C7E1EA217E154F40A7F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/1/323830343a313365633a386230303a3a2f34302d3430203d3e20323633333032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:13ec:8b00::/40 Signature Algorithm: sha256WithRSAEncryption 66:79:1f:19:f9:4b:7b:65:f5:d9:6c:6a:88:a0:1c:69:c2:76: 3b:83:5c:7d:14:aa:9c:2f:0e:97:05:9c:c1:ce:88:be:f3:f4: a8:93:1d:c8:cb:da:0a:9d:7e:fb:0a:6c:1b:07:8a:66:54:3f: 60:97:26:5a:73:0b:97:35:62:9c:75:ef:45:d4:2b:4c:a0:ae: e8:b8:d6:1b:11:a8:2e:b5:81:81:46:ca:9e:60:f4:0d:18:dd: 1c:b1:b5:2a:78:d3:1d:32:58:9d:1e:b3:28:75:c0:8e:67:b0: 03:20:dc:2d:27:ca:dc:9f:2e:50:18:62:08:6c:eb:cc:ae:16: 08:7d:e3:07:86:a8:9c:c3:d2:11:06:de:f5:d6:3c:1f:94:85: d3:41:9a:f4:45:c7:bc:24:ed:31:7d:65:16:e7:3a:70:88:74: b8:68:ea:9f:3f:2a:a7:e6:be:7f:97:c4:98:58:dc:53:67:97: 10:37:8b:c2:5d:e8:1a:f8:fc:75:4e:f5:38:22:6c:1d:ad:58: 9c:32:fb:95:48:b3:62:1d:fe:8e:e0:01:01:55:11:38:10:a5: 80:a3:94:14:ff:c0:ac:59:98:37:8d:cb:82:99:76:d8:04:01: 84:ab:10:24:9d:5f:70:80:de:f4:0d:f0:f5:0f:b9:f5:26:18: 5c:df:85:60 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUMC9LFaGSbm2295UssN1QQjMpLZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUIwN0MzNEFERjgxNTZCNjYzNUY2QzdFMUVBMjE3RTE1 NEY0MEE3RjAeFw0yNTExMDMxODI5MzhaFw0yNjExMDIxODM0MzhaMDMxMTAvBgNV BAMTKEY2NkY5QzE3OEMwRENGNjBBQjM1MTkxRTlEMjVDOUU2N0Q4QjhENEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtOMlPyYg3JPJ5NyQphhOK5Wg9 Kj+HFdATWTRgREXphPkELdZ8u+vXRUtHKcvBRaAwhCF8vWpiprwmAotEcuzUwT/Q GM3oPFMfeObP3psslw+SzZZfrI55dw9jNIPSTnWhnxgLmiCzkA5I5olwCjnSr4yi hSlGsfAG/OBrOfgv8c5AIVHfAbwt3Fn4VtsEaA+ae2gpNqyYpChg8QuvNgPZnspp 3/nqCPBAooUvEmTLkDmftRrWhXxKJ4017ATMcRbwOy+gtLPgAVVUcoKVqouHaa4r xEIjpfrImffwF+PO1XE9hCSGUaS51iB+ZB49C9O/ocuUHdtkexmYzZFOkVATAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQU9m+cF4wNz2CrNRkenSXJ5n2LjU8wHwYDVR0j BBgwFoAUGwfDSt+BVrZjX2x+HqIX4VT0Cn8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ2dndWhHdE12RTFoQVZ5Mk52cHpDdjNGTDJOa1ZiVkhMeWNVaXNjc0hw Yk4vMS8xQjA3QzM0QURGODE1NkI2NjM1RjZDN0UxRUEyMTdFMTU0RjQwQTdGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCMDdDMzRBREY4MTU2QjY2 MzVGNkM3RTFFQTIxN0UxNTRGNDBBN0YuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NnZ3VoR3RNdkUxaEFWeTJOdnB6Q3YzRkwyTmtWYlZITHljVWlzY3NIcGJOLzEv MzIzODMwMzQzYTMxMzM2NTYzM2EzODYyMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk M2UyMDMyMzYzMzMzMzAzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEE+yLMA0GCSqGSIb3DQEBCwUA A4IBAQBmeR8Z+Ut7ZfXZbGqIoBxpwnY7g1x9FKqcLw6XBZzBzoi+8/Sokx3Iy9oK nX77CmwbB4pmVD9glyZacwuXNWKcde9F1CtMoK7ouNYbEagutYGBRsqeYPQNGN0c sbUqeNMdMlidHrModcCOZ7ADINwtJ8rcny5QGGIIbOvMrhYIfeMHhqicw9IRBt71 1jwflIXTQZr0Rce8JO0xfWUW5zpwiHS4aOqfPyqn5r5/l8SYWNxTZ5cQN4vCXega +Px1TvU4ImwdrVicMvuVSLNiHf6O4AEBVRE4EKWAo5QU/8CsWZg3jcuCmXbYBAGE qxAknV9wgN70DfD1D7n1Jhhc34Vg -----END CERTIFICATE-----Generated at Wed Nov 5 16:55:51 2025 by rpki-client