$ rpki-client -vvf rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/323830343a333237383a343030303a3a2f34382d3438203d3e20323635303830.roa File: 323830343a333237383a343030303a3a2f34382d3438203d3e20323635303830.roa (raw, json) Hash identifier: pQdsswWDxVePBoPmNKpkVs2XaQl3ZUuXa6gWuMdedDU= Subject key identifier: C4:CF:C7:77:1C:E7:12:69:9B:73:94:B1:6C:5B:AA:3E:3B:A2:71:8F Certificate issuer: /CN=BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E Certificate serial: 16EF78BCA62547F8D0CBB88A6583D953E9D14BF4 Authority key identifier: BD:3A:86:10:EB:89:85:A3:AA:9F:38:7E:DE:09:73:0A:AE:F0:6F:4E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.cer Subject info access: rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/323830343a333237383a343030303a3a2f34382d3438203d3e20323635303830.roa Signing time: Tue 04 Nov 2025 12:21:23 +0000 ROA not before: Tue 04 Nov 2025 12:16:23 +0000 ROA not after: Tue 03 Nov 2026 12:21:23 +0000 asID: 265080 IP address blocks: 2804:3278:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.crl rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 13:15:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:ef:78:bc:a6:25:47:f8:d0:cb:b8:8a:65:83:d9:53:e9:d1:4b:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E Validity Not Before: Nov 4 12:16:23 2025 GMT Not After : Nov 3 12:21:23 2026 GMT Subject: CN=C4CFC7771CE712699B7394B16C5BAA3E3BA2718F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:65:35:36:c8:ef:7c:6c:40:d6:e0:67:90:37: 99:56:9c:2c:13:0d:b6:06:0d:d3:dd:91:0f:2a:21: d5:fe:05:fb:98:a6:8d:09:6a:d0:e0:f4:6c:4a:a2: db:49:54:aa:90:52:b5:eb:c9:54:a7:02:66:a9:00: a3:3e:b1:90:ca:7a:de:10:c6:0e:ee:28:1e:6c:2b: c1:00:52:66:47:bc:1b:70:17:e3:11:75:62:75:93: e8:2b:16:7a:02:f0:b6:f0:bb:9c:82:14:2e:66:6e: d5:54:6c:73:15:9b:97:9f:2a:fb:49:7c:05:82:7c: 7b:6d:8f:95:d2:9f:41:df:a8:c8:4f:3d:6e:57:86: 8a:6d:ee:75:b7:a1:46:f3:a7:57:75:2f:9e:52:0c: fb:38:75:51:24:17:47:ab:20:3c:c2:16:0f:5f:fc: 31:e6:89:a7:13:a4:2d:9b:0f:db:d8:4b:42:cb:7d: 66:09:23:b5:31:e6:be:cc:33:92:13:a7:95:be:61: 65:48:5b:6a:b4:ad:35:84:e5:56:b7:97:3d:0a:72: de:d7:6f:53:93:d6:33:36:0c:3d:7d:f6:9d:4f:8b: 57:9a:cf:06:c3:d9:ab:36:2f:30:b3:ef:30:b1:e1: e0:40:86:2f:5d:84:eb:e5:ef:0a:a8:85:45:32:06: 1c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:CF:C7:77:1C:E7:12:69:9B:73:94:B1:6C:5B:AA:3E:3B:A2:71:8F X509v3 Authority Key Identifier: keyid:BD:3A:86:10:EB:89:85:A3:AA:9F:38:7E:DE:09:73:0A:AE:F0:6F:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/323830343a333237383a343030303a3a2f34382d3438203d3e20323635303830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:3278:4000::/48 Signature Algorithm: sha256WithRSAEncryption 41:a0:7a:22:a1:c4:c7:01:8d:b4:54:d2:6b:ab:8e:78:fe:72: 25:8c:1a:65:91:cc:3f:e8:f8:f8:2d:01:fa:69:2a:c3:3d:10: af:6c:fc:52:f0:ec:96:45:fa:31:13:43:4d:7f:91:e2:ee:2d: e4:12:e5:da:ca:00:58:2b:c4:4d:a7:94:55:07:a1:75:ab:9a: 0d:4d:3a:d7:d6:32:70:a2:94:e2:89:84:da:2a:21:76:07:d7: 64:84:f4:57:b4:b2:e2:01:28:48:e6:1a:6e:7f:97:19:8e:5d: 0e:a9:98:33:b1:ae:e9:1e:45:9f:cb:e1:f2:a8:ac:8a:00:bf: 9a:4b:5f:e1:df:f2:b7:69:67:e8:25:f9:dc:d8:11:e4:8e:be: e3:16:aa:fe:b3:ef:e7:d0:07:7d:7a:e9:04:b0:c9:ba:e9:97: e8:f1:f2:1d:0d:cd:22:f7:dd:14:44:81:81:a6:be:86:aa:d0: b2:17:5e:d8:f0:2f:bb:f1:f3:e6:45:5a:93:1f:af:dd:49:45: c0:99:5c:5b:a5:f3:07:4b:d3:47:77:9f:56:49:3b:51:10:91: 98:33:4e:57:01:1e:34:0a:34:08:4e:68:ac:81:36:28:46:68: 0d:b7:8e:7c:99:77:8c:eb:1c:a3:02:1c:63:f6:e9:bf:12:c2: 95:d7:12:84 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIUFu94vKYlR/jQy7iKZYPZU+nRS/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQzQTg2MTBFQjg5ODVBM0FBOUYzODdFREUwOTczMEFB RUYwNkY0RTAeFw0yNTExMDQxMjE2MjNaFw0yNjExMDMxMjIxMjNaMDMxMTAvBgNV BAMTKEM0Q0ZDNzc3MUNFNzEyNjk5QjczOTRCMTZDNUJBQTNFM0JBMjcxOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4ZTU2yO98bEDW4GeQN5lWnCwT DbYGDdPdkQ8qIdX+BfuYpo0JatDg9GxKottJVKqQUrXryVSnAmapAKM+sZDKet4Q xg7uKB5sK8EAUmZHvBtwF+MRdWJ1k+grFnoC8Lbwu5yCFC5mbtVUbHMVm5efKvtJ fAWCfHttj5XSn0HfqMhPPW5Xhopt7nW3oUbzp1d1L55SDPs4dVEkF0erIDzCFg9f /DHmiacTpC2bD9vYS0LLfWYJI7Ux5r7MM5ITp5W+YWVIW2q0rTWE5Va3lz0Kct7X b1OT1jM2DD199p1Pi1eazwbD2as2LzCz7zCx4eBAhi9dhOvl7wqohUUyBhzFAgMB AAGjggJcMIICWDAdBgNVHQ4EFgQUxM/HdxznEmmbc5SxbFuqPjuicY8wHwYDVR0j BBgwFoAUvTqGEOuJhaOqnzh+3glzCq7wb04wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRkZYa0xrYUtYSGVyWExwZlVBc283MzZyUUVlbnFNcGl2NlFlaEZ3bVUx dlcvMC9CRDNBODYxMEVCODk4NUEzQUE5RjM4N0VERTA5NzMwQUFFRjA2RjRFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JEM0E4NjEwRUI4OTg1QTNB QTlGMzg3RURFMDk3MzBBQUVGMDZGNEUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0ZGWGtMa2FLWEhlclhMcGZVQXNvNzM2clFFZW5xTXBpdjZRZWhGd21VMXZXLzAv MzIzODMwMzQzYTMzMzIzNzM4M2EzNDMwMzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNk M2UyMDMyMzYzNTMwMzgzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEMnhAADANBgkqhkiG9w0BAQsF AAOCAQEAQaB6IqHExwGNtFTSa6uOeP5yJYwaZZHMP+j4+C0B+mkqwz0Qr2z8UvDs lkX6MRNDTX+R4u4t5BLl2soAWCvETaeUVQehdauaDU0619YycKKU4omE2iohdgfX ZIT0V7Sy4gEoSOYabn+XGY5dDqmYM7Gu6R5Fn8vh8qisigC/mktf4d/yt2ln6CX5 3NgR5I6+4xaq/rPv59AHfXrpBLDJuumX6PHyHQ3NIvfdFESBgaa+hqrQshde2PAv u/Hz5kVakx+v3UlFwJlcW6XzB0vTR3efVkk7URCRmDNOVwEeNAo0CE5orIE2KEZo DbeOfJl3jOscowIcY/bpvxLCldcShA== -----END CERTIFICATE-----Generated at Wed Nov 5 08:15:32 2025 by rpki-client