$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/323830343a386161343a623030303a3a2f33372d3438203d3e20323733363833.roa File: 323830343a386161343a623030303a3a2f33372d3438203d3e20323733363833.roa (raw, json) Hash identifier: AaKWX35ZvIdEQ2iBqmArrd2eHeV4YKGBMaEJ5GPq7ds= Subject key identifier: 3E:BD:5E:87:5C:75:73:9C:6E:EA:FD:85:CC:4F:03:83:08:AB:76:80 Certificate issuer: /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5 Certificate serial: 4CCA70870591A8633B7A398F55FBCD728C7DEB3F Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer Subject info access: rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/323830343a386161343a623030303a3a2f33372d3438203d3e20323733363833.roa Signing time: Mon 03 Nov 2025 18:16:55 +0000 ROA not before: Mon 03 Nov 2025 18:11:55 +0000 ROA not after: Mon 02 Nov 2026 18:16:55 +0000 asID: 273683 IP address blocks: 2804:8aa4:b000::/37 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 09:14:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:ca:70:87:05:91:a8:63:3b:7a:39:8f:55:fb:cd:72:8c:7d:eb:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5 Validity Not Before: Nov 3 18:11:55 2025 GMT Not After : Nov 2 18:16:55 2026 GMT Subject: CN=3EBD5E875C75739C6EEAFD85CC4F038308AB7680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d3:66:d7:0e:7e:cc:39:f2:0a:58:ab:77:5c: c1:60:2a:c0:c6:d8:80:b5:29:b7:62:fc:0f:50:f4: 9d:37:b8:39:12:94:53:aa:87:af:66:9a:b7:5f:c0: e3:9a:fb:99:0d:d0:35:4f:87:d4:02:13:0d:30:24: c9:b1:01:44:14:c3:da:84:b0:a6:f1:c4:ec:5e:96: 88:34:23:b8:ba:57:98:a3:f8:6d:57:0a:93:19:06: d9:2a:24:0f:a7:8f:7a:56:e0:e8:27:c9:be:b2:18: bb:00:c9:6c:19:d3:1b:3c:95:a1:0c:31:d5:64:33: a9:92:4d:91:aa:52:4e:be:14:a2:be:94:1a:60:c8: 71:dd:0b:43:3f:80:e1:4b:da:9b:d4:4b:da:2e:24: ec:21:4d:5c:06:5e:07:99:a2:f3:cd:93:4c:62:bc: 2b:76:06:6c:19:35:44:0e:bc:21:9f:87:fa:4d:eb: 02:88:f1:f5:0a:e5:14:db:22:31:57:08:f6:5e:b6: 4a:59:0b:ee:4a:32:23:05:2d:4c:0f:72:90:32:b8: 51:24:03:39:c4:4f:67:d4:c0:31:84:9d:cb:a3:da: ef:ae:fe:bc:5f:7f:2d:a9:be:f9:0d:a1:3b:88:03: 62:67:5a:c0:16:62:a5:de:2e:08:fc:d5:f7:f5:bd: b2:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:BD:5E:87:5C:75:73:9C:6E:EA:FD:85:CC:4F:03:83:08:AB:76:80 X509v3 Authority Key Identifier: keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/323830343a386161343a623030303a3a2f33372d3438203d3e20323733363833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8aa4:b000::/37 Signature Algorithm: sha256WithRSAEncryption b0:f1:fc:c2:53:b1:ec:ed:17:95:05:2b:24:99:c6:73:a7:24: 16:4e:f7:d8:f3:72:b2:04:c9:44:08:39:7b:3b:64:1e:cc:09: b9:a9:13:d8:27:78:27:d1:ff:78:e1:93:42:39:3b:db:cb:6d: 63:a2:5b:2a:ac:0f:9f:49:6b:a7:45:fc:a9:45:0c:51:98:6e: 6b:95:7c:ac:e0:5e:f6:0a:76:1c:0a:b6:a0:8f:3a:c3:bd:81: d6:6c:1b:7f:a1:3a:ad:d8:ca:65:de:85:aa:43:f0:fb:b4:57: 57:8b:14:14:27:cc:f8:b8:61:5d:1a:9a:28:13:45:17:7d:83: 29:58:6f:3b:1b:06:f8:2e:1e:7e:93:24:8a:89:d4:1c:e4:96: ec:20:cd:5c:b1:96:ed:39:a4:c0:26:7e:2f:fa:b3:94:1b:aa: f9:97:80:77:2b:2c:af:52:c6:94:b9:38:fd:6d:47:41:4a:e2: 2d:51:bf:c5:77:83:03:89:74:04:c0:09:b1:b3:38:46:b7:52: 52:e6:d5:d8:12:1c:47:e0:9b:23:23:fc:cb:51:e5:e9:82:53: 0b:b2:05:f1:77:a6:d1:b4:08:00:27:d3:63:ea:f1:a9:de:aa: 98:2b:0f:e0:fd:39:fb:5d:b4:56:b9:e9:88:78:44:94:fe:cb: b1:70:e5:5d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIUTMpwhwWRqGM7ejmPVfvNcox96z8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY2Q0IyQzQ5QzMyNDVGOENDMzNBMThGMDhBMTBDRjlC MzYzQUNCNTAeFw0yNTExMDMxODExNTVaFw0yNjExMDIxODE2NTVaMDMxMTAvBgNV BAMTKDNFQkQ1RTg3NUM3NTczOUM2RUVBRkQ4NUNDNEYwMzgzMDhBQjc2ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn02bXDn7MOfIKWKt3XMFgKsDG 2IC1Kbdi/A9Q9J03uDkSlFOqh69mmrdfwOOa+5kN0DVPh9QCEw0wJMmxAUQUw9qE sKbxxOxelog0I7i6V5ij+G1XCpMZBtkqJA+nj3pW4Ognyb6yGLsAyWwZ0xs8laEM MdVkM6mSTZGqUk6+FKK+lBpgyHHdC0M/gOFL2pvUS9ouJOwhTVwGXgeZovPNk0xi vCt2BmwZNUQOvCGfh/pN6wKI8fUK5RTbIjFXCPZetkpZC+5KMiMFLUwPcpAyuFEk AznET2fUwDGEncuj2u+u/rxffy2pvvkNoTuIA2JnWsAWYqXeLgj81ff1vbIjAgMB AAGjggJYMIICVDAdBgNVHQ4EFgQUPr1eh1x1c5xu6v2FzE8DgwirdoAwHwYDVR0j BBgwFoAU72yyxJwyRfjMM6GPCKEM+bNjrLUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9FbmRIc3hRSnpWcE5ickNjOGdiNGJNYjRFSEJXQUZWbXBkRG9vbUpRTm5V LzAvRUY2Q0IyQzQ5QzMyNDVGOENDMzNBMThGMDhBMTBDRjlCMzYzQUNCNS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FRjZDQjJDNDlDMzI0NUY4Q0Mz M0ExOEYwOEExMENGOUIzNjNBQ0I1LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIG CCsGAQUFBzALhoGVcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9F bmRIc3hRSnpWcE5ickNjOGdiNGJNYjRFSEJXQUZWbXBkRG9vbUpRTm5VLzAvMzIz ODMwMzQzYTM4NjE2MTM0M2E2MjMwMzAzMDNhM2EyZjMzMzcyZDM0MzgyMDNkM2Uy MDMyMzczMzM2MzgzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAygEiqSwMA0GCSqGSIb3DQEBCwUAA4IB AQCw8fzCU7Hs7ReVBSskmcZzpyQWTvfY83KyBMlECDl7O2QezAm5qRPYJ3gn0f94 4ZNCOTvby21jolsqrA+fSWunRfypRQxRmG5rlXys4F72CnYcCragjzrDvYHWbBt/ oTqt2Mpl3oWqQ/D7tFdXixQUJ8z4uGFdGpooE0UXfYMpWG87Gwb4Lh5+kySKidQc 5JbsIM1csZbtOaTAJn4v+rOUG6r5l4B3KyyvUsaUuTj9bUdBSuItUb/Fd4MDiXQE wAmxszhGt1JS5tXYEhxH4JsjI/zLUeXpglMLsgXxd6bRtAgAJ9Nj6vGp3qqYKw/g /Tn7XbRWuemIeESU/suxcOVd -----END CERTIFICATE-----Generated at Wed Nov 5 21:55:16 2025 by rpki-client