$ rpki-client -vvf rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a343030303a3a2f33342d3334203d3e20323734373236.roa File: 323830343a393261383a343030303a3a2f33342d3334203d3e20323734373236.roa (raw, json) Hash identifier: xtU8VzBLUuiWqmq6PQeA7hgzjQuTNJjHDnCjHoOvXwQ= Subject key identifier: BB:40:32:FA:DB:05:2C:62:46:B2:DF:7F:C1:FC:A9:8A:02:EC:52:D5 Certificate issuer: /CN=96B9E7D31E13ACC4D6EAEC4650F59669C90DE5E7 Certificate serial: 76167A77961754ED898C87311BAF96484EAA762C Authority key identifier: 96:B9:E7:D3:1E:13:AC:C4:D6:EA:EC:46:50:F5:96:69:C9:0D:E5:E7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96B9E7D31E13ACC4D6EAEC4650F59669C90DE5E7.cer Subject info access: rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a343030303a3a2f33342d3334203d3e20323734373236.roa Signing time: Tue 16 Sep 2025 13:06:43 +0000 ROA not before: Tue 16 Sep 2025 13:01:43 +0000 ROA not after: Tue 15 Sep 2026 13:06:43 +0000 asID: 274726 IP address blocks: 2804:92a8:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/96B9E7D31E13ACC4D6EAEC4650F59669C90DE5E7.crl rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/96B9E7D31E13ACC4D6EAEC4650F59669C90DE5E7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96B9E7D31E13ACC4D6EAEC4650F59669C90DE5E7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 22:30:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:16:7a:77:96:17:54:ed:89:8c:87:31:1b:af:96:48:4e:aa:76:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96B9E7D31E13ACC4D6EAEC4650F59669C90DE5E7 Validity Not Before: Sep 16 13:01:43 2025 GMT Not After : Sep 15 13:06:43 2026 GMT Subject: CN=BB4032FADB052C6246B2DF7FC1FCA98A02EC52D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:54:5a:35:82:f9:24:a0:cf:6f:7e:a2:f5:b4: af:a1:b4:fd:10:92:72:40:74:09:bd:19:99:9a:71: 0a:01:78:f6:a7:bd:1a:22:44:b5:79:57:23:0c:5c: 50:f9:43:08:a5:59:98:ad:a8:5b:ab:87:50:0f:fc: c1:99:40:fd:b7:21:cc:2c:90:e0:46:f2:85:db:08: 33:50:8e:86:08:41:ad:86:0b:e3:81:1d:65:d8:59: 60:ed:0a:59:22:f9:69:20:3d:d7:47:34:c0:cc:42: 27:c4:51:44:df:e9:54:7d:98:ad:65:95:db:e8:13: fa:b9:01:4a:96:ca:ef:30:81:5d:57:0a:ee:74:1c: ad:99:ad:ee:8d:8f:c8:cf:38:1e:be:90:c7:10:3b: 11:0a:5c:93:63:2a:2a:f6:68:e9:b6:8f:18:b6:45: 1b:63:ab:29:df:a0:aa:09:05:20:5d:21:da:ea:83: 25:27:08:9b:29:f4:b5:0a:0d:30:70:82:84:b5:3c: e5:a5:00:ca:2e:eb:4b:73:d0:86:4b:70:ff:14:8a: 79:fc:03:9f:eb:f9:70:60:0c:78:b9:ce:f7:ae:3f: a6:90:ba:e8:da:81:c2:af:d1:b5:89:eb:dd:ac:dc: 1b:c1:32:86:c1:35:79:9d:c0:5d:dd:f9:d8:c4:04: cb:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:40:32:FA:DB:05:2C:62:46:B2:DF:7F:C1:FC:A9:8A:02:EC:52:D5 X509v3 Authority Key Identifier: keyid:96:B9:E7:D3:1E:13:AC:C4:D6:EA:EC:46:50:F5:96:69:C9:0D:E5:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/96B9E7D31E13ACC4D6EAEC4650F59669C90DE5E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96B9E7D31E13ACC4D6EAEC4650F59669C90DE5E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a343030303a3a2f33342d3334203d3e20323734373236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:92a8:4000::/34 Signature Algorithm: sha256WithRSAEncryption 83:fa:7c:43:2e:77:c3:d3:a9:0d:95:9f:29:a5:f6:5f:67:28: 2e:b6:90:f6:99:78:c4:d4:64:04:53:af:c6:c0:7c:a5:68:ee: 5b:c7:52:6c:08:95:70:ee:1f:6e:ab:77:78:d2:c4:d2:dc:8c: 70:fd:0d:9d:af:cc:ef:03:a4:3f:ba:11:1b:b8:9c:59:a1:8e: 79:32:89:d6:cd:ee:ff:59:06:63:55:c2:84:c4:52:11:6c:47: 86:91:8a:1c:fa:47:95:ee:4f:bf:f7:0d:8d:8a:93:46:bd:ea: 7e:80:e7:20:c6:64:f9:e4:41:94:6f:cb:27:9d:18:f8:3b:fe: 3e:ed:c3:40:57:db:b8:d9:c7:f7:3d:04:92:e1:06:a9:58:81: 88:50:b7:ff:82:c6:93:02:0c:d3:f8:06:5b:57:ec:ad:53:f5: be:63:27:a8:96:e9:74:d9:71:2d:f0:67:a8:ce:6c:bb:8b:e9: cf:58:f2:90:04:b9:0d:63:9a:d1:78:80:37:50:80:8f:30:0e: 60:35:17:dc:c0:01:80:46:b3:88:c0:cc:db:a3:94:47:52:2c: 5b:ea:0f:7c:34:c2:d3:01:23:1d:f2:2d:3c:a1:01:8f:5c:a2: a4:d2:71:83:19:e9:11:ce:f9:cb:ed:56:c6:69:99:ef:86:e7: 1f:51:39:cb -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUdhZ6d5YXVO2JjIcxG6+WSE6qdiwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZCOUU3RDMxRTEzQUNDNEQ2RUFFQzQ2NTBGNTk2NjlD OTBERTVFNzAeFw0yNTA5MTYxMzAxNDNaFw0yNjA5MTUxMzA2NDNaMDMxMTAvBgNV BAMTKEJCNDAzMkZBREIwNTJDNjI0NkIyREY3RkMxRkNBOThBMDJFQzUyRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeVFo1gvkkoM9vfqL1tK+htP0Q knJAdAm9GZmacQoBePanvRoiRLV5VyMMXFD5QwilWZitqFurh1AP/MGZQP23Icws kOBG8oXbCDNQjoYIQa2GC+OBHWXYWWDtClki+WkgPddHNMDMQifEUUTf6VR9mK1l ldvoE/q5AUqWyu8wgV1XCu50HK2Zre6Nj8jPOB6+kMcQOxEKXJNjKir2aOm2jxi2 RRtjqynfoKoJBSBdIdrqgyUnCJsp9LUKDTBwgoS1POWlAMou60tz0IZLcP8Uinn8 A5/r+XBgDHi5zveuP6aQuujagcKv0bWJ692s3BvBMobBNXmdwF3d+djEBMvdAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUu0Ay+tsFLGJGst9/wfypigLsUtUwHwYDVR0j BBgwFoAUlrnn0x4TrMTW6uxGUPWWackN5ecwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRHNMbnR3b2tva3cyb3hHcFh5WW9IeDNpYnRtbURTUkhFeHhWdFRLNlFx ODEvMC85NkI5RTdEMzFFMTNBQ0M0RDZFQUVDNDY1MEY1OTY2OUM5MERFNUU3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk2QjlFN0QzMUUxM0FDQzRE NkVBRUM0NjUwRjU5NjY5QzkwREU1RTcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0RzTG50d29rb2t3Mm94R3BYeVlvSHgzaWJ0bW1EU1JIRXh4VnRUSzZRcTgxLzAv MzIzODMwMzQzYTM5MzI2MTM4M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzczNDM3MzIzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEkqhAMA0GCSqGSIb3DQEBCwUA A4IBAQCD+nxDLnfD06kNlZ8ppfZfZygutpD2mXjE1GQEU6/GwHylaO5bx1JsCJVw 7h9uq3d40sTS3Ixw/Q2dr8zvA6Q/uhEbuJxZoY55MonWze7/WQZjVcKExFIRbEeG kYoc+keV7k+/9w2NipNGvep+gOcgxmT55EGUb8snnRj4O/4+7cNAV9u42cf3PQSS 4QapWIGIULf/gsaTAgzT+AZbV+ytU/W+Yyeolul02XEt8Geozmy7i+nPWPKQBLkN Y5rReIA3UICPMA5gNRfcwAGARrOIwMzbo5RHUixb6g98NMLTASMd8i08oQGPXKKk 0nGDGekRzvnL7VbGaZnvhucfUTnL -----END CERTIFICATE-----Generated at Wed Nov 5 05:24:21 2025 by rpki-client