$ rpki-client -vvf rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/323830343a333237383a383030303a3a2f33342d3334203d3e20323635303830.roa File: 323830343a333237383a383030303a3a2f33342d3334203d3e20323635303830.roa (raw, json) Hash identifier: WrF8hQYEh/sGsppfpPesov8ngoxD0nE/e0IKlgdOawQ= Subject key identifier: DB:77:B5:84:11:EC:17:44:75:B5:F5:A0:7C:7F:0F:C3:E2:10:80:7D Certificate issuer: /CN=BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E Certificate serial: 0A5A240FBEE268ABE668BDA79B939B832FDDAE2C Authority key identifier: BD:3A:86:10:EB:89:85:A3:AA:9F:38:7E:DE:09:73:0A:AE:F0:6F:4E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.cer Subject info access: rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/323830343a333237383a383030303a3a2f33342d3334203d3e20323635303830.roa Signing time: Tue 04 Nov 2025 12:21:21 +0000 ROA not before: Tue 04 Nov 2025 12:16:21 +0000 ROA not after: Tue 03 Nov 2026 12:21:21 +0000 asID: 265080 IP address blocks: 2804:3278:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.crl rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 13:15:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:5a:24:0f:be:e2:68:ab:e6:68:bd:a7:9b:93:9b:83:2f:dd:ae:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E Validity Not Before: Nov 4 12:16:21 2025 GMT Not After : Nov 3 12:21:21 2026 GMT Subject: CN=DB77B58411EC174475B5F5A07C7F0FC3E210807D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:71:de:5a:3d:ba:3c:b1:f3:1a:ba:be:5f:e7: 18:5c:8c:59:e7:70:be:90:74:0c:6f:d6:a8:56:ca: d6:c8:ae:fc:20:6e:65:8b:83:d5:f3:ad:81:e4:5f: 86:6f:ab:28:e6:3a:1d:49:6d:6b:17:31:30:c8:57: e4:70:a4:47:27:78:53:c9:bd:7e:52:69:aa:d6:e6: f4:2d:33:a1:80:87:38:5c:8b:ad:3f:0d:4f:a5:48: 46:58:ae:2f:ec:20:7b:f2:2b:3e:a4:77:f9:4a:c2: 37:8c:d7:5a:bc:ec:37:3a:96:c0:12:7d:d1:aa:23: 06:08:42:b1:a4:cb:2b:01:07:fb:bd:93:c8:4a:1e: 8e:3a:36:6e:0b:99:d2:aa:a7:a4:38:ae:f9:47:4a: 08:15:f8:d9:72:60:47:80:cc:e8:7f:21:3a:99:f8: f7:91:4e:da:7a:ac:33:91:0b:d2:7c:51:09:93:fe: 28:24:7c:b8:a0:be:65:70:a3:6f:42:01:fd:59:7e: e6:54:94:cc:df:55:bc:c6:c3:39:09:35:18:54:53: 2e:14:98:07:ea:59:d4:66:b6:62:bb:32:ad:f9:ab: ca:c8:e5:17:02:2d:de:d6:90:64:34:45:38:c3:2d: 92:0d:1b:5f:5c:b0:1d:e7:62:93:3f:0c:dd:31:e4: d4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:77:B5:84:11:EC:17:44:75:B5:F5:A0:7C:7F:0F:C3:E2:10:80:7D X509v3 Authority Key Identifier: keyid:BD:3A:86:10:EB:89:85:A3:AA:9F:38:7E:DE:09:73:0A:AE:F0:6F:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/323830343a333237383a383030303a3a2f33342d3334203d3e20323635303830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:3278:8000::/34 Signature Algorithm: sha256WithRSAEncryption b1:40:8a:09:14:d5:54:32:24:01:f7:80:73:89:ed:07:d7:50: fe:c9:49:10:73:10:a4:9c:a5:83:98:54:34:18:98:20:e2:26: 4e:4f:be:a9:7d:02:68:f5:2a:1c:9a:0b:b4:32:52:40:5d:bb: 99:7e:ac:88:d4:49:57:62:21:10:92:90:af:89:a7:60:13:9b: bc:5c:2f:49:c8:98:99:6b:5f:d6:e6:8c:44:33:8b:fb:d0:0d: f5:60:d9:ab:ed:e9:2e:2d:af:5e:d1:05:f4:60:45:6f:43:28: cf:6b:e4:3b:84:6f:95:27:26:97:bc:46:7f:7f:c6:f9:30:3b: ca:e3:f0:61:01:7b:e1:83:10:be:8b:07:3f:1a:f0:8f:2f:42: 91:52:98:d1:45:5c:3c:27:bb:e3:3d:82:ef:8a:ea:8d:31:6b: 20:c4:94:05:44:80:72:cc:f9:2c:dc:8f:58:94:a5:dd:95:ec: b1:06:bf:44:c5:ee:d2:a9:56:ce:4e:c3:5c:1b:90:5d:23:0e: c6:38:f3:c8:31:55:24:9a:1f:b3:42:e5:e5:47:e2:8f:64:b9: 87:90:b6:a4:8d:29:42:85:5f:42:3a:9a:a1:b6:3a:bb:fa:7b: cf:21:c2:8c:0c:50:8d:3f:8a:4f:20:d9:07:2f:57:5d:cc:42: 10:f0:17:8c -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUClokD77iaKvmaL2nm5Obgy/driwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQzQTg2MTBFQjg5ODVBM0FBOUYzODdFREUwOTczMEFB RUYwNkY0RTAeFw0yNTExMDQxMjE2MjFaFw0yNjExMDMxMjIxMjFaMDMxMTAvBgNV BAMTKERCNzdCNTg0MTFFQzE3NDQ3NUI1RjVBMDdDN0YwRkMzRTIxMDgwN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNcd5aPbo8sfMaur5f5xhcjFnn cL6QdAxv1qhWytbIrvwgbmWLg9XzrYHkX4ZvqyjmOh1JbWsXMTDIV+RwpEcneFPJ vX5SaarW5vQtM6GAhzhci60/DU+lSEZYri/sIHvyKz6kd/lKwjeM11q87Dc6lsAS fdGqIwYIQrGkyysBB/u9k8hKHo46Nm4LmdKqp6Q4rvlHSggV+NlyYEeAzOh/ITqZ +PeRTtp6rDORC9J8UQmT/igkfLigvmVwo29CAf1ZfuZUlMzfVbzGwzkJNRhUUy4U mAfqWdRmtmK7Mq35q8rI5RcCLd7WkGQ0RTjDLZING19csB3nYpM/DN0x5NQVAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQU23e1hBHsF0R1tfWgfH8Pw+IQgH0wHwYDVR0j BBgwFoAUvTqGEOuJhaOqnzh+3glzCq7wb04wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRkZYa0xrYUtYSGVyWExwZlVBc283MzZyUUVlbnFNcGl2NlFlaEZ3bVUx dlcvMC9CRDNBODYxMEVCODk4NUEzQUE5RjM4N0VERTA5NzMwQUFFRjA2RjRFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JEM0E4NjEwRUI4OTg1QTNB QTlGMzg3RURFMDk3MzBBQUVGMDZGNEUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0ZGWGtMa2FLWEhlclhMcGZVQXNvNzM2clFFZW5xTXBpdjZRZWhGd21VMXZXLzAv MzIzODMwMzQzYTMzMzIzNzM4M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzYzNTMwMzgzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEMniAMA0GCSqGSIb3DQEBCwUA A4IBAQCxQIoJFNVUMiQB94Bzie0H11D+yUkQcxCknKWDmFQ0GJgg4iZOT76pfQJo 9Socmgu0MlJAXbuZfqyI1ElXYiEQkpCviadgE5u8XC9JyJiZa1/W5oxEM4v70A31 YNmr7ekuLa9e0QX0YEVvQyjPa+Q7hG+VJyaXvEZ/f8b5MDvK4/BhAXvhgxC+iwc/ GvCPL0KRUpjRRVw8J7vjPYLviuqNMWsgxJQFRIByzPks3I9YlKXdleyxBr9Exe7S qVbOTsNcG5BdIw7GOPPIMVUkmh+zQuXlR+KPZLmHkLakjSlChV9COpqhtjq7+nvP IcKMDFCNP4pPINkHL1ddzEIQ8BeM -----END CERTIFICATE-----Generated at Wed Nov 5 11:56:22 2025 by rpki-client