$ rpki-client -vvf rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/323830343a343034383a343139303a3a2f34342d3434203d3e20323635393439.roa File: 323830343a343034383a343139303a3a2f34342d3434203d3e20323635393439.roa (raw, json) Hash identifier: mFBvQ9U6S9ziGHYVsmFoKj+ZF8wnQ9qJb6vsgKrGp8c= Subject key identifier: 83:CC:DC:50:99:6B:B4:5B:47:69:B8:D8:FC:D9:13:AF:08:A4:EE:AB Certificate issuer: /CN=FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922 Certificate serial: 71008795C3B25C6AAFD7A77BD49CC072F5892B99 Authority key identifier: FF:4A:CB:08:28:10:1F:FD:6F:91:BF:BC:FB:F0:5E:E9:8F:2F:99:22 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.cer Subject info access: rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/323830343a343034383a343139303a3a2f34342d3434203d3e20323635393439.roa Signing time: Fri 24 Oct 2025 22:10:15 +0000 ROA not before: Fri 24 Oct 2025 22:05:15 +0000 ROA not after: Fri 23 Oct 2026 22:10:15 +0000 asID: 265949 IP address blocks: 2804:4048:4190::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.crl rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 07:44:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:00:87:95:c3:b2:5c:6a:af:d7:a7:7b:d4:9c:c0:72:f5:89:2b:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922 Validity Not Before: Oct 24 22:05:15 2025 GMT Not After : Oct 23 22:10:15 2026 GMT Subject: CN=83CCDC50996BB45B4769B8D8FCD913AF08A4EEAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:02:c9:04:e6:cc:46:89:2d:35:f9:d9:3f:08: 24:fe:5b:e8:73:9b:8a:1d:f7:1e:f8:40:1c:f3:43: 04:b2:26:54:8e:2b:40:3d:f7:f2:2b:a7:c6:1d:91: 6c:bd:cc:cb:00:08:b8:b8:c2:da:e8:30:53:22:c9: 27:a8:80:33:80:b3:4a:4b:a0:f2:64:8d:79:46:27: 14:77:17:a0:d6:8a:47:f3:b1:4f:7f:90:e7:e9:bb: 5a:0e:a3:8a:2d:7f:28:74:5e:b1:9e:a8:5b:dc:76: b0:ed:14:48:75:09:e8:ae:bb:47:07:04:59:24:b3: 26:0b:f1:8c:0c:ea:1b:14:6f:fc:c2:b4:2a:a5:b9: ef:d2:f9:c0:52:81:eb:81:ad:5e:b4:c0:f4:22:8e: bb:ed:0f:ef:9b:cf:14:2a:58:23:66:cb:39:86:c1: 11:bd:7a:2e:86:6d:3b:e4:51:2b:9c:3b:cd:f4:82: 49:bd:d5:43:28:05:4e:58:2f:d8:0f:8f:84:35:b5: bf:d5:3b:af:e2:37:d0:08:4d:e0:7b:1b:ef:78:10: e2:5f:1b:29:4a:05:5f:46:e6:09:66:eb:55:44:9e: 9c:7c:17:f4:9a:bb:9c:a3:6b:3b:d0:57:cf:8c:86: 61:34:27:6f:01:a7:f9:53:77:c0:56:fd:79:6b:16: 61:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:CC:DC:50:99:6B:B4:5B:47:69:B8:D8:FC:D9:13:AF:08:A4:EE:AB X509v3 Authority Key Identifier: keyid:FF:4A:CB:08:28:10:1F:FD:6F:91:BF:BC:FB:F0:5E:E9:8F:2F:99:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/323830343a343034383a343139303a3a2f34342d3434203d3e20323635393439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:4048:4190::/44 Signature Algorithm: sha256WithRSAEncryption 0c:bf:37:16:04:cb:76:b8:5a:69:62:66:f6:4c:11:c6:d8:53: 43:5a:d0:21:09:b4:80:41:b4:72:64:ed:f8:6f:1f:e4:e6:f1: 36:84:9b:7d:40:bc:f2:46:60:30:48:82:e9:71:68:49:9e:dc: cb:41:02:79:23:a1:79:98:7a:9c:8c:65:25:02:27:2c:92:37: 2b:1a:de:7d:a1:d9:e4:92:0b:60:2f:87:ad:7f:17:12:94:cb: 70:6e:4e:fd:dc:01:5e:4f:3f:18:9f:b6:1d:48:3d:c5:4e:1a: f9:56:1d:df:10:ff:7b:06:70:eb:d8:e8:55:e6:14:a6:86:88: 9e:b4:8d:05:2b:5d:23:6a:7c:34:15:6d:8d:be:ef:d8:c4:c9: f8:4d:9d:98:c9:50:98:99:a1:4f:82:c8:a7:4d:df:a9:56:bf: f7:56:3c:0a:51:b6:c6:7a:24:48:9f:a7:81:f5:5c:f9:4c:f9: 43:ef:1e:7c:d1:50:ab:3b:dd:9d:14:34:fb:3b:ea:24:2a:ea: f6:85:bc:ca:f4:23:2b:37:6c:4e:12:eb:fe:87:f1:37:47:99: 8b:df:78:16:52:7d:d4:e0:35:b5:cb:40:5e:b8:00:27:5d:c6: 66:90:16:78:ab:ef:cd:7a:c2:10:b7:07:7b:b6:bd:64:e9:87: 53:81:bc:d5 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIUcQCHlcOyXGqv16d71JzAcvWJK5kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY0QUNCMDgyODEwMUZGRDZGOTFCRkJDRkJGMDVFRTk4 RjJGOTkyMjAeFw0yNTEwMjQyMjA1MTVaFw0yNjEwMjMyMjEwMTVaMDMxMTAvBgNV BAMTKDgzQ0NEQzUwOTk2QkI0NUI0NzY5QjhEOEZDRDkxM0FGMDhBNEVFQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/AskE5sxGiS01+dk/CCT+W+hz m4od9x74QBzzQwSyJlSOK0A99/Irp8YdkWy9zMsACLi4wtroMFMiySeogDOAs0pL oPJkjXlGJxR3F6DWikfzsU9/kOfpu1oOo4otfyh0XrGeqFvcdrDtFEh1Ceiuu0cH BFkksyYL8YwM6hsUb/zCtCqlue/S+cBSgeuBrV60wPQijrvtD++bzxQqWCNmyzmG wRG9ei6GbTvkUSucO830gkm91UMoBU5YL9gPj4Q1tb/VO6/iN9AITeB7G+94EOJf GylKBV9G5glm61VEnpx8F/Sau5yjazvQV8+MhmE0J28Bp/lTd8BW/XlrFmHRAgMB AAGjggJcMIICWDAdBgNVHQ4EFgQUg8zcUJlrtFtHabjY/NkTrwik7qswHwYDVR0j BBgwFoAU/0rLCCgQH/1vkb+8+/Be6Y8vmSIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDl3QVc5Z21YU21vMnNlNWJQa0RUaUw1VkUzejdvWFVBZWhhQ0syZ3pX ZVovMC9GRjRBQ0IwODI4MTAxRkZENkY5MUJGQkNGQkYwNUVFOThGMkY5OTIyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGNEFDQjA4MjgxMDFGRkQ2 RjkxQkZCQ0ZCRjA1RUU5OEYyRjk5MjIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0Q5d0FXOWdtWFNtbzJzZTViUGtEVGlMNVZFM3o3b1hVQWVoYUNLMmd6V2VaLzAv MzIzODMwMzQzYTM0MzAzNDM4M2EzNDMxMzkzMDNhM2EyZjM0MzQyZDM0MzQyMDNk M2UyMDMyMzYzNTM5MzQzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCgEQEhBkDANBgkqhkiG9w0BAQsF AAOCAQEADL83FgTLdrhaaWJm9kwRxthTQ1rQIQm0gEG0cmTt+G8f5ObxNoSbfUC8 8kZgMEiC6XFoSZ7cy0ECeSOheZh6nIxlJQInLJI3KxrefaHZ5JILYC+HrX8XEpTL cG5O/dwBXk8/GJ+2HUg9xU4a+VYd3xD/ewZw69joVeYUpoaInrSNBStdI2p8NBVt jb7v2MTJ+E2dmMlQmJmhT4LIp03fqVa/91Y8ClG2xnokSJ+ngfVc+Uz5Q+8efNFQ qzvdnRQ0+zvqJCrq9oW8yvQjKzdsThLr/ofxN0eZi994FlJ91OA1tctAXrgAJ13G ZpAWeKvvzXrCELcHe7a9ZOmHU4G81Q== -----END CERTIFICATE-----Generated at Wed Nov 5 21:15:21 2025 by rpki-client