$ rpki-client -vvf rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/323830343a343034383a343130303a3a2f34342d3434203d3e20323635393439.roa File: 323830343a343034383a343130303a3a2f34342d3434203d3e20323635393439.roa (raw, json) Hash identifier: g8l0/tSjcKhIaUC0SlVVhkO3pLYOBU75RScol8wWaJ8= Subject key identifier: C8:5E:AB:95:18:D0:61:83:DE:ED:4A:36:1D:AC:EC:69:A8:1A:1B:7A Certificate issuer: /CN=FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922 Certificate serial: 363AFE82C13B47DC3488A20A0C613DA66C413CA2 Authority key identifier: FF:4A:CB:08:28:10:1F:FD:6F:91:BF:BC:FB:F0:5E:E9:8F:2F:99:22 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.cer Subject info access: rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/323830343a343034383a343130303a3a2f34342d3434203d3e20323635393439.roa Signing time: Fri 24 Oct 2025 22:10:15 +0000 ROA not before: Fri 24 Oct 2025 22:05:15 +0000 ROA not after: Fri 23 Oct 2026 22:10:15 +0000 asID: 265949 IP address blocks: 2804:4048:4100::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.crl rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 07:44:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:3a:fe:82:c1:3b:47:dc:34:88:a2:0a:0c:61:3d:a6:6c:41:3c:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922 Validity Not Before: Oct 24 22:05:15 2025 GMT Not After : Oct 23 22:10:15 2026 GMT Subject: CN=C85EAB9518D06183DEED4A361DACEC69A81A1B7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7c:be:91:55:83:76:67:0d:b1:93:9d:b3:4c: d8:ba:c8:68:c3:01:ad:3d:f2:19:9d:5e:b0:72:8c: 43:5c:6e:ad:27:6e:f5:14:42:0e:6d:79:e1:c9:bf: af:a2:49:fa:b7:28:85:b1:c1:8d:47:42:73:15:80: a3:15:ef:82:c5:c5:bf:65:ac:0a:9f:e5:b3:0b:0e: dc:02:c8:15:67:af:1c:2a:cf:10:6a:78:a8:b5:29: f4:dd:96:28:90:37:40:17:b3:a4:f3:a1:98:f2:15: 8b:14:a3:bc:01:f3:95:a0:a6:81:76:a5:81:32:0c: 83:0f:af:a8:89:52:62:83:3a:f3:fb:90:a2:25:51: 99:cf:0a:93:5c:e6:d2:6e:14:da:89:8a:56:79:1b: b9:3d:2b:46:fc:71:b3:f4:52:95:35:ba:70:79:3e: df:68:ee:44:43:2b:99:cf:02:e0:18:d7:89:0d:10: 13:8e:41:2e:36:ec:c3:52:03:5e:98:b0:9d:bd:0b: c0:28:75:a5:e3:c3:2e:39:a4:e6:b2:f6:26:2b:f8: a9:86:af:3f:8f:bc:2b:d8:83:70:77:48:72:63:4b: f5:1e:54:fd:a9:1d:6b:33:7f:8b:75:45:69:0a:4c: 2c:5f:95:5d:10:df:26:2a:cf:8b:62:5b:f9:b7:58: a3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:5E:AB:95:18:D0:61:83:DE:ED:4A:36:1D:AC:EC:69:A8:1A:1B:7A X509v3 Authority Key Identifier: keyid:FF:4A:CB:08:28:10:1F:FD:6F:91:BF:BC:FB:F0:5E:E9:8F:2F:99:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/323830343a343034383a343130303a3a2f34342d3434203d3e20323635393439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:4048:4100::/44 Signature Algorithm: sha256WithRSAEncryption 91:f2:86:96:82:c2:ac:3a:45:87:04:87:54:e3:81:a7:80:2b: 95:97:58:77:4e:e4:24:b2:3c:c2:10:09:88:8d:9d:6a:7d:30: 75:45:6e:8a:6a:92:66:0b:a3:4d:89:eb:2f:ac:1b:9b:c3:e1: 3c:b3:18:6d:cd:34:ba:47:45:b0:d7:ad:50:0a:cc:95:6b:a3: 0a:9b:9c:1a:1a:fc:a9:41:61:fa:16:ee:84:3d:5c:4f:29:8a: c0:d5:c2:31:37:ed:ef:1f:2e:ce:04:5b:84:2d:92:75:fc:a8: 9c:1e:a7:65:d3:f8:e7:ea:95:0f:9b:5f:d2:c0:39:33:be:72: a9:1c:96:a0:1b:8f:81:fc:82:ce:15:ad:23:d0:a0:2a:15:6e: 02:70:82:6d:c5:18:07:e2:05:15:2a:a1:59:3d:c4:4d:75:80: 32:cc:a3:14:7d:0b:45:f2:b0:25:20:b4:4f:6b:fc:f3:bc:cc: 11:b5:22:3e:7b:80:87:46:ab:f3:67:e0:23:7a:1a:1d:df:85: 02:cf:8b:c9:0b:68:9e:92:35:f2:00:2e:a1:cf:10:b2:50:1c: 82:c0:fc:17:72:63:9f:17:8b:44:95:4c:d3:4a:42:e9:43:1b: 2d:45:f4:d5:4a:cb:a6:49:58:89:a6:22:37:24:f8:02:8e:89: 7c:30:ce:b2 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIUNjr+gsE7R9w0iKIKDGE9pmxBPKIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY0QUNCMDgyODEwMUZGRDZGOTFCRkJDRkJGMDVFRTk4 RjJGOTkyMjAeFw0yNTEwMjQyMjA1MTVaFw0yNjEwMjMyMjEwMTVaMDMxMTAvBgNV BAMTKEM4NUVBQjk1MThEMDYxODNERUVENEEzNjFEQUNFQzY5QTgxQTFCN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvfL6RVYN2Zw2xk52zTNi6yGjD Aa098hmdXrByjENcbq0nbvUUQg5teeHJv6+iSfq3KIWxwY1HQnMVgKMV74LFxb9l rAqf5bMLDtwCyBVnrxwqzxBqeKi1KfTdliiQN0AXs6TzoZjyFYsUo7wB85WgpoF2 pYEyDIMPr6iJUmKDOvP7kKIlUZnPCpNc5tJuFNqJilZ5G7k9K0b8cbP0UpU1unB5 Pt9o7kRDK5nPAuAY14kNEBOOQS427MNSA16YsJ29C8AodaXjwy45pOay9iYr+KmG rz+PvCvYg3B3SHJjS/UeVP2pHWszf4t1RWkKTCxflV0Q3yYqz4tiW/m3WKOfAgMB AAGjggJcMIICWDAdBgNVHQ4EFgQUyF6rlRjQYYPe7Uo2HazsaagaG3owHwYDVR0j BBgwFoAU/0rLCCgQH/1vkb+8+/Be6Y8vmSIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDl3QVc5Z21YU21vMnNlNWJQa0RUaUw1VkUzejdvWFVBZWhhQ0syZ3pX ZVovMC9GRjRBQ0IwODI4MTAxRkZENkY5MUJGQkNGQkYwNUVFOThGMkY5OTIyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGNEFDQjA4MjgxMDFGRkQ2 RjkxQkZCQ0ZCRjA1RUU5OEYyRjk5MjIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0Q5d0FXOWdtWFNtbzJzZTViUGtEVGlMNVZFM3o3b1hVQWVoYUNLMmd6V2VaLzAv MzIzODMwMzQzYTM0MzAzNDM4M2EzNDMxMzAzMDNhM2EyZjM0MzQyZDM0MzQyMDNk M2UyMDMyMzYzNTM5MzQzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCgEQEhBADANBgkqhkiG9w0BAQsF AAOCAQEAkfKGloLCrDpFhwSHVOOBp4ArlZdYd07kJLI8whAJiI2dan0wdUVuimqS ZgujTYnrL6wbm8PhPLMYbc00ukdFsNetUArMlWujCpucGhr8qUFh+hbuhD1cTymK wNXCMTft7x8uzgRbhC2SdfyonB6nZdP45+qVD5tf0sA5M75yqRyWoBuPgfyCzhWt I9CgKhVuAnCCbcUYB+IFFSqhWT3ETXWAMsyjFH0LRfKwJSC0T2v887zMEbUiPnuA h0ar82fgI3oaHd+FAs+LyQtonpI18gAuoc8QslAcgsD8F3JjnxeLRJVM00pC6UMb LUX01UrLpklYiaYiNyT4Ao6JfDDOsg== -----END CERTIFICATE-----Generated at Wed Nov 5 23:20:48 2025 by rpki-client