$ rpki-client -vvf rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/323830343a343034383a343131303a3a2f34342d3434203d3e20323635393439.roa File: 323830343a343034383a343131303a3a2f34342d3434203d3e20323635393439.roa (raw, json) Hash identifier: hB6GZrapWVT+nZyDAtSBayPQVOJQA3CPhxdpm15MnK0= Subject key identifier: 9A:DC:44:15:42:AC:3D:8A:A5:AD:BD:DC:E0:87:92:2E:5D:E5:25:1D Certificate issuer: /CN=FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922 Certificate serial: 0278E3A15C2EC634EE666B16A8AC9611BBC5CF07 Authority key identifier: FF:4A:CB:08:28:10:1F:FD:6F:91:BF:BC:FB:F0:5E:E9:8F:2F:99:22 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.cer Subject info access: rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/323830343a343034383a343131303a3a2f34342d3434203d3e20323635393439.roa Signing time: Fri 24 Oct 2025 22:10:15 +0000 ROA not before: Fri 24 Oct 2025 22:05:15 +0000 ROA not after: Fri 23 Oct 2026 22:10:15 +0000 asID: 265949 IP address blocks: 2804:4048:4110::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.crl rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 07:44:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:78:e3:a1:5c:2e:c6:34:ee:66:6b:16:a8:ac:96:11:bb:c5:cf:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922 Validity Not Before: Oct 24 22:05:15 2025 GMT Not After : Oct 23 22:10:15 2026 GMT Subject: CN=9ADC441542AC3D8AA5ADBDDCE087922E5DE5251D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e9:ba:3c:3c:ae:c3:e5:38:5b:89:bc:3d:2c: e9:52:60:84:06:ca:7e:cf:dd:65:f7:71:82:cd:e2: 7d:b6:d3:fc:50:98:29:d8:75:6e:8b:09:24:d1:ab: f7:8d:3c:f5:87:3d:dd:91:a5:b9:d3:d7:e3:65:d4: fe:c7:af:7d:c9:e8:3a:4a:91:d1:c7:26:23:87:08: 83:5e:a9:9c:e9:51:be:14:d6:b2:bd:91:5f:28:d5: d2:1e:00:07:1d:36:ba:34:01:f4:88:24:61:af:8b: 28:81:5f:02:d1:4a:ec:c1:e7:bd:71:46:31:aa:d0: f0:0b:5f:17:71:02:1d:cc:e8:38:70:4e:68:4f:fc: 39:55:59:aa:fd:db:eb:2c:8f:d9:5f:66:3b:d7:dc: df:ac:75:9e:c6:19:19:f4:25:42:cc:17:c8:f0:ef: 39:69:6e:2d:28:f3:c3:b4:c4:91:ec:93:a0:53:82: 8f:7e:d3:44:a6:1c:bc:86:2d:20:11:f4:80:e0:fb: f9:7b:3b:20:a0:09:f6:8d:cd:fb:a0:a6:c7:12:2d: 04:05:50:aa:e0:cb:93:bc:9f:37:e5:97:93:4d:a3: f4:39:b6:8e:c6:50:76:19:0f:c9:7f:28:0d:25:65: 66:a1:2b:fd:64:ba:1b:d0:fb:06:3e:fb:86:68:6a: e6:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:DC:44:15:42:AC:3D:8A:A5:AD:BD:DC:E0:87:92:2E:5D:E5:25:1D X509v3 Authority Key Identifier: keyid:FF:4A:CB:08:28:10:1F:FD:6F:91:BF:BC:FB:F0:5E:E9:8F:2F:99:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/323830343a343034383a343131303a3a2f34342d3434203d3e20323635393439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:4048:4110::/44 Signature Algorithm: sha256WithRSAEncryption 0d:4a:4c:89:11:30:69:be:dd:ad:7d:ff:d4:39:32:a2:e4:32: e7:e7:14:37:1b:8e:a9:1c:c9:a5:54:e6:8f:e4:bb:fa:45:a3: f0:78:b4:06:c3:94:8b:17:1b:18:6b:a8:8b:ed:8f:2b:09:41: 97:08:de:80:94:b7:33:be:f5:54:cc:47:77:52:fd:68:83:d3: a8:13:49:18:8a:bb:98:0d:26:0a:c5:83:3b:07:03:b4:16:f0: 2a:cc:8a:85:64:14:73:8d:c9:95:21:66:2b:45:7e:00:c8:97: a1:27:9b:7b:e3:ec:ca:ee:38:eb:94:e7:99:d3:76:31:fb:7a: fe:66:e2:82:72:f8:c0:46:c2:3e:69:67:7f:b3:e4:9e:bb:24: 40:d7:46:80:2e:5c:10:98:48:af:9c:9f:5f:23:ec:0a:e7:a5: 97:c3:59:5d:af:cd:65:46:23:b8:02:97:d7:49:af:ac:46:67: 41:33:ba:54:20:01:ac:e3:df:8d:f2:86:0f:9a:fa:72:f8:14: 54:48:dc:7c:63:e9:f3:b7:28:40:7f:e6:5b:98:1d:1a:51:43: 4d:19:b7:9b:f4:05:7e:0c:80:d0:3c:f0:55:0e:ba:a4:56:90: 26:9c:da:08:1a:5d:3a:ad:3d:c7:8a:0f:73:57:2b:d0:47:dc: 10:f3:28:95 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIUAnjjoVwuxjTuZmsWqKyWEbvFzwcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY0QUNCMDgyODEwMUZGRDZGOTFCRkJDRkJGMDVFRTk4 RjJGOTkyMjAeFw0yNTEwMjQyMjA1MTVaFw0yNjEwMjMyMjEwMTVaMDMxMTAvBgNV BAMTKDlBREM0NDE1NDJBQzNEOEFBNUFEQkREQ0UwODc5MjJFNURFNTI1MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw6bo8PK7D5Thbibw9LOlSYIQG yn7P3WX3cYLN4n220/xQmCnYdW6LCSTRq/eNPPWHPd2RpbnT1+Nl1P7Hr33J6DpK kdHHJiOHCINeqZzpUb4U1rK9kV8o1dIeAAcdNro0AfSIJGGviyiBXwLRSuzB571x RjGq0PALXxdxAh3M6DhwTmhP/DlVWar92+ssj9lfZjvX3N+sdZ7GGRn0JULMF8jw 7zlpbi0o88O0xJHsk6BTgo9+00SmHLyGLSAR9IDg+/l7OyCgCfaNzfugpscSLQQF UKrgy5O8nzfll5NNo/Q5to7GUHYZD8l/KA0lZWahK/1kuhvQ+wY++4ZoaubhAgMB AAGjggJcMIICWDAdBgNVHQ4EFgQUmtxEFUKsPYqlrb3c4IeSLl3lJR0wHwYDVR0j BBgwFoAU/0rLCCgQH/1vkb+8+/Be6Y8vmSIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDl3QVc5Z21YU21vMnNlNWJQa0RUaUw1VkUzejdvWFVBZWhhQ0syZ3pX ZVovMC9GRjRBQ0IwODI4MTAxRkZENkY5MUJGQkNGQkYwNUVFOThGMkY5OTIyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGNEFDQjA4MjgxMDFGRkQ2 RjkxQkZCQ0ZCRjA1RUU5OEYyRjk5MjIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0Q5d0FXOWdtWFNtbzJzZTViUGtEVGlMNVZFM3o3b1hVQWVoYUNLMmd6V2VaLzAv MzIzODMwMzQzYTM0MzAzNDM4M2EzNDMxMzEzMDNhM2EyZjM0MzQyZDM0MzQyMDNk M2UyMDMyMzYzNTM5MzQzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCgEQEhBEDANBgkqhkiG9w0BAQsF AAOCAQEADUpMiREwab7drX3/1DkyouQy5+cUNxuOqRzJpVTmj+S7+kWj8Hi0BsOU ixcbGGuoi+2PKwlBlwjegJS3M771VMxHd1L9aIPTqBNJGIq7mA0mCsWDOwcDtBbw KsyKhWQUc43JlSFmK0V+AMiXoSebe+Psyu4465TnmdN2Mft6/mbignL4wEbCPmln f7PknrskQNdGgC5cEJhIr5yfXyPsCuell8NZXa/NZUYjuAKX10mvrEZnQTO6VCAB rOPfjfKGD5r6cvgUVEjcfGPp87coQH/mW5gdGlFDTRm3m/QFfgyA0DzwVQ66pFaQ JpzaCBpdOq09x4oPc1cr0EfcEPMolQ== -----END CERTIFICATE-----Generated at Wed Nov 5 19:22:41 2025 by rpki-client