$ rpki-client -vvf rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/323830343a343034383a343138303a3a2f34342d3434203d3e20323635393439.roa File: 323830343a343034383a343138303a3a2f34342d3434203d3e20323635393439.roa (raw, json) Hash identifier: 8pRzyt9oKL936Lq1pXfOXg0CrOSFWQSd7jQBgXRtGTs= Subject key identifier: D6:95:AF:6A:D0:1D:5E:DF:F6:23:13:CE:5B:F1:96:9A:83:04:89:B8 Certificate issuer: /CN=FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922 Certificate serial: 5AEB6F96941B16ABC669B332708D8E48CE53C301 Authority key identifier: FF:4A:CB:08:28:10:1F:FD:6F:91:BF:BC:FB:F0:5E:E9:8F:2F:99:22 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.cer Subject info access: rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/323830343a343034383a343138303a3a2f34342d3434203d3e20323635393439.roa Signing time: Fri 24 Oct 2025 22:10:15 +0000 ROA not before: Fri 24 Oct 2025 22:05:15 +0000 ROA not after: Fri 23 Oct 2026 22:10:15 +0000 asID: 265949 IP address blocks: 2804:4048:4180::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.crl rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 07:44:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:eb:6f:96:94:1b:16:ab:c6:69:b3:32:70:8d:8e:48:ce:53:c3:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922 Validity Not Before: Oct 24 22:05:15 2025 GMT Not After : Oct 23 22:10:15 2026 GMT Subject: CN=D695AF6AD01D5EDFF62313CE5BF1969A830489B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e8:55:52:e6:fc:15:d4:08:4e:e0:f8:12:76: ba:f7:9b:a7:53:4e:a5:0c:0e:b5:55:ae:42:18:c7: 70:55:12:c3:12:c6:11:37:fc:2d:5c:27:33:8e:1c: e3:f8:f2:c9:9a:69:c7:8a:a7:31:d2:31:03:b4:22: 89:76:c6:72:fc:76:1b:c8:05:2b:90:9b:0b:99:f1: 07:5d:7f:c5:64:62:60:fa:f6:9c:74:e8:54:cc:e7: 0d:97:9d:e6:9a:f9:df:65:cf:20:94:0e:8a:77:e7: 6f:c0:cb:7e:74:06:3a:ae:71:4d:4d:6e:bd:af:ed: 18:a1:ba:48:4a:28:67:a9:51:f2:3c:20:94:7c:c4: 05:8e:ef:cf:4c:ec:28:71:5f:ed:89:9a:63:d9:75: fe:ca:97:9b:41:51:c3:5e:4b:4c:9b:e1:a6:50:48: f5:dd:f3:e6:6e:ce:f5:09:83:88:31:99:d0:5b:cd: 2a:64:bd:eb:87:0b:b1:84:da:51:1d:e9:d1:0e:ba: 9e:85:cd:a3:08:70:4b:1d:1b:12:ba:29:25:3a:59: e6:3f:6f:44:c5:fe:dd:b9:20:15:41:2f:5d:37:6f: ea:4a:37:eb:af:dc:1f:81:cb:05:23:1f:06:2e:64: 0d:5d:ad:99:23:1e:97:2f:cd:02:0c:71:ae:76:86: e8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:95:AF:6A:D0:1D:5E:DF:F6:23:13:CE:5B:F1:96:9A:83:04:89:B8 X509v3 Authority Key Identifier: keyid:FF:4A:CB:08:28:10:1F:FD:6F:91:BF:BC:FB:F0:5E:E9:8F:2F:99:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/323830343a343034383a343138303a3a2f34342d3434203d3e20323635393439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:4048:4180::/44 Signature Algorithm: sha256WithRSAEncryption 82:0e:8c:2c:94:cd:63:cb:0a:70:a6:aa:47:24:a7:75:13:32: 3b:15:78:3b:d7:cf:7c:33:e0:f7:60:09:ca:7f:70:70:bb:78: d9:d6:68:15:14:01:03:e9:2c:98:17:55:68:b0:96:f9:ef:6d: 12:83:11:37:7b:c7:0c:80:c6:23:b9:9d:da:49:b7:99:e7:e5: 5a:53:08:b0:70:0c:af:3e:37:6e:25:4c:d4:f4:8f:ae:f1:f8: d8:e6:bb:64:8b:5b:d4:30:29:aa:f3:b1:2b:fd:0c:10:a3:0e: ce:cb:62:ba:53:d1:c1:c2:9b:c6:59:fb:68:3d:62:1a:16:60: 60:ff:39:23:94:16:93:6a:4a:da:77:c4:d7:1f:21:23:8d:8d: b6:c0:46:6b:f7:69:b7:5f:2d:eb:66:41:59:d7:5c:66:2c:a6: b0:19:de:e5:14:2e:f3:6c:15:6e:c4:ca:14:6b:a2:d5:94:5b: 25:5e:69:b5:e8:4f:90:55:5b:7e:72:a3:c4:51:aa:8c:16:fe: 21:73:ae:53:91:56:10:d7:0d:49:2b:ac:37:29:e4:2d:a3:e3: 90:a5:76:03:21:3e:6e:bc:87:cd:67:65:92:3f:c7:0e:0e:1c: 18:c8:ba:63:7c:0a:ed:ec:ef:fc:14:54:c7:79:49:de:aa:01: c2:55:fc:0b -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIUWutvlpQbFqvGabMycI2OSM5TwwEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY0QUNCMDgyODEwMUZGRDZGOTFCRkJDRkJGMDVFRTk4 RjJGOTkyMjAeFw0yNTEwMjQyMjA1MTVaFw0yNjEwMjMyMjEwMTVaMDMxMTAvBgNV BAMTKEQ2OTVBRjZBRDAxRDVFREZGNjIzMTNDRTVCRjE5NjlBODMwNDg5QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf6FVS5vwV1AhO4PgSdrr3m6dT TqUMDrVVrkIYx3BVEsMSxhE3/C1cJzOOHOP48smaaceKpzHSMQO0Iol2xnL8dhvI BSuQmwuZ8Qddf8VkYmD69px06FTM5w2Xneaa+d9lzyCUDop352/Ay350BjqucU1N br2v7RihukhKKGepUfI8IJR8xAWO789M7ChxX+2JmmPZdf7Kl5tBUcNeS0yb4aZQ SPXd8+ZuzvUJg4gxmdBbzSpkveuHC7GE2lEd6dEOup6FzaMIcEsdGxK6KSU6WeY/ b0TF/t25IBVBL103b+pKN+uv3B+BywUjHwYuZA1drZkjHpcvzQIMca52hujnAgMB AAGjggJcMIICWDAdBgNVHQ4EFgQU1pWvatAdXt/2IxPOW/GWmoMEibgwHwYDVR0j BBgwFoAU/0rLCCgQH/1vkb+8+/Be6Y8vmSIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDl3QVc5Z21YU21vMnNlNWJQa0RUaUw1VkUzejdvWFVBZWhhQ0syZ3pX ZVovMC9GRjRBQ0IwODI4MTAxRkZENkY5MUJGQkNGQkYwNUVFOThGMkY5OTIyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGNEFDQjA4MjgxMDFGRkQ2 RjkxQkZCQ0ZCRjA1RUU5OEYyRjk5MjIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0Q5d0FXOWdtWFNtbzJzZTViUGtEVGlMNVZFM3o3b1hVQWVoYUNLMmd6V2VaLzAv MzIzODMwMzQzYTM0MzAzNDM4M2EzNDMxMzgzMDNhM2EyZjM0MzQyZDM0MzQyMDNk M2UyMDMyMzYzNTM5MzQzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCgEQEhBgDANBgkqhkiG9w0BAQsF AAOCAQEAgg6MLJTNY8sKcKaqRySndRMyOxV4O9fPfDPg92AJyn9wcLt42dZoFRQB A+ksmBdVaLCW+e9tEoMRN3vHDIDGI7md2km3meflWlMIsHAMrz43biVM1PSPrvH4 2Oa7ZItb1DApqvOxK/0MEKMOzstiulPRwcKbxln7aD1iGhZgYP85I5QWk2pK2nfE 1x8hI42NtsBGa/dpt18t62ZBWddcZiymsBne5RQu82wVbsTKFGui1ZRbJV5ptehP kFVbfnKjxFGqjBb+IXOuU5FWENcNSSusNynkLaPjkKV2AyE+bryHzWdlkj/HDg4c GMi6Y3wK7ezv/BRUx3lJ3qoBwlX8Cw== -----END CERTIFICATE-----Generated at Wed Nov 5 23:20:47 2025 by rpki-client