$ rpki-client -vvf rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/323830343a333237383a633030303a3a2f33342d3334203d3e20323635303830.roa File: 323830343a333237383a633030303a3a2f33342d3334203d3e20323635303830.roa (raw, json) Hash identifier: QAGx0Yj4jJ2xXyr2rLQE4GAUGzzvVbqpP4lyFevhLng= Subject key identifier: 75:BC:8E:B3:B6:7E:9E:76:43:13:75:4C:C6:B1:AE:54:2B:66:F2:92 Certificate issuer: /CN=BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E Certificate serial: 25B2274A221CE63EA787194CE5F1F39C6DC50E03 Authority key identifier: BD:3A:86:10:EB:89:85:A3:AA:9F:38:7E:DE:09:73:0A:AE:F0:6F:4E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.cer Subject info access: rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/323830343a333237383a633030303a3a2f33342d3334203d3e20323635303830.roa Signing time: Tue 04 Nov 2025 12:21:21 +0000 ROA not before: Tue 04 Nov 2025 12:16:21 +0000 ROA not after: Tue 03 Nov 2026 12:21:21 +0000 asID: 265080 IP address blocks: 2804:3278:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.crl rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 13:15:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:b2:27:4a:22:1c:e6:3e:a7:87:19:4c:e5:f1:f3:9c:6d:c5:0e:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E Validity Not Before: Nov 4 12:16:21 2025 GMT Not After : Nov 3 12:21:21 2026 GMT Subject: CN=75BC8EB3B67E9E764313754CC6B1AE542B66F292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:96:39:5f:f5:f3:63:50:27:f1:27:0d:fa:31: af:00:d1:c3:7e:b9:61:30:1a:ab:36:ab:b5:3e:24: ef:1f:c5:17:3d:9c:a5:b7:f3:59:cd:02:d6:43:66: 5a:7a:15:38:32:e1:f2:3d:7b:82:e8:e4:0d:cd:fb: f1:9e:34:ab:c3:c4:c3:71:cb:11:d3:17:f4:e7:44: a1:0e:b3:6f:b9:3b:bc:da:32:e1:aa:70:d0:8e:71: ef:c2:d7:fe:80:5b:e0:0a:c5:c5:a4:3b:93:82:78: b7:5d:9c:fc:10:0f:e4:49:62:3d:58:01:ea:17:e8: fe:f5:dc:25:94:56:d4:9f:6c:d6:b3:c2:ff:86:f2: c5:f7:ee:88:f2:5a:d4:61:06:25:3c:c1:f1:0a:f3: 33:62:80:22:b5:9d:41:9b:a5:da:6e:fe:5a:bd:db: 08:66:94:80:7c:96:64:4f:ab:d3:d6:0f:a9:b6:88: cb:9c:8b:2f:42:5f:d7:c9:8a:87:2e:46:42:46:67: 60:61:ea:44:50:53:a7:ed:53:3e:e3:c5:6a:a2:d8: 49:64:e4:67:f0:8e:5b:17:5c:7c:b3:0d:76:79:4a: 42:59:6a:f0:7d:27:8a:46:74:80:cd:c2:dc:61:37: 98:99:35:2e:e9:74:1f:1a:8a:30:83:5f:78:f4:75: 1c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:BC:8E:B3:B6:7E:9E:76:43:13:75:4C:C6:B1:AE:54:2B:66:F2:92 X509v3 Authority Key Identifier: keyid:BD:3A:86:10:EB:89:85:A3:AA:9F:38:7E:DE:09:73:0A:AE:F0:6F:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/323830343a333237383a633030303a3a2f33342d3334203d3e20323635303830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:3278:c000::/34 Signature Algorithm: sha256WithRSAEncryption 5e:d7:a6:a1:06:c1:7f:c4:be:15:9b:c2:d1:68:01:74:4c:de: 51:36:0b:c4:18:b5:f8:e9:9b:7e:c9:4a:59:66:f6:89:e9:46: dc:90:91:51:5a:fa:2c:f6:d4:a8:b0:7a:cf:bf:80:c8:fb:ea: fc:8f:5e:d7:ab:88:75:34:6d:dc:3d:9a:9c:61:b7:eb:c2:35: a3:5d:58:a8:7f:d3:b9:d2:c5:c9:93:85:52:26:97:0d:a3:c9: 4e:76:15:b0:50:d4:1d:52:85:32:ed:a0:f6:44:dd:29:a7:bb: d8:1d:60:1b:74:0c:3d:50:ca:c2:ab:c1:23:e0:f6:c8:02:8e: e1:27:ee:d8:b6:21:d4:4d:d2:2d:c5:d4:55:77:aa:8c:69:d5: 94:d0:82:55:88:ec:b4:69:f2:ae:86:c5:62:3b:f8:cc:48:38: 20:63:cd:47:7e:b5:40:3d:60:37:9b:2d:30:8e:7c:1a:af:9a: 4e:b5:cf:ca:bd:3e:f3:c2:65:67:27:c1:49:11:77:0a:8e:8c: ed:78:94:13:56:3b:15:bd:bf:a4:0e:94:81:27:5b:10:5b:98: 95:d8:91:45:ce:1a:48:c4:91:86:8b:79:cd:60:92:52:4c:b8: 0c:24:b9:53:21:88:3b:0e:7a:90:89:54:03:a6:bb:64:ae:57: 27:d3:8c:66 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUJbInSiIc5j6nhxlM5fHznG3FDgMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQzQTg2MTBFQjg5ODVBM0FBOUYzODdFREUwOTczMEFB RUYwNkY0RTAeFw0yNTExMDQxMjE2MjFaFw0yNjExMDMxMjIxMjFaMDMxMTAvBgNV BAMTKDc1QkM4RUIzQjY3RTlFNzY0MzEzNzU0Q0M2QjFBRTU0MkI2NkYyOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ljlf9fNjUCfxJw36Ma8A0cN+ uWEwGqs2q7U+JO8fxRc9nKW381nNAtZDZlp6FTgy4fI9e4Lo5A3N+/GeNKvDxMNx yxHTF/TnRKEOs2+5O7zaMuGqcNCOce/C1/6AW+AKxcWkO5OCeLddnPwQD+RJYj1Y AeoX6P713CWUVtSfbNazwv+G8sX37ojyWtRhBiU8wfEK8zNigCK1nUGbpdpu/lq9 2whmlIB8lmRPq9PWD6m2iMuciy9CX9fJiocuRkJGZ2Bh6kRQU6ftUz7jxWqi2Elk 5GfwjlsXXHyzDXZ5SkJZavB9J4pGdIDNwtxhN5iZNS7pdB8aijCDX3j0dRzXAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUdbyOs7Z+nnZDE3VMxrGuVCtm8pIwHwYDVR0j BBgwFoAUvTqGEOuJhaOqnzh+3glzCq7wb04wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRkZYa0xrYUtYSGVyWExwZlVBc283MzZyUUVlbnFNcGl2NlFlaEZ3bVUx dlcvMC9CRDNBODYxMEVCODk4NUEzQUE5RjM4N0VERTA5NzMwQUFFRjA2RjRFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JEM0E4NjEwRUI4OTg1QTNB QTlGMzg3RURFMDk3MzBBQUVGMDZGNEUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0ZGWGtMa2FLWEhlclhMcGZVQXNvNzM2clFFZW5xTXBpdjZRZWhGd21VMXZXLzAv MzIzODMwMzQzYTMzMzIzNzM4M2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzYzNTMwMzgzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEMnjAMA0GCSqGSIb3DQEBCwUA A4IBAQBe16ahBsF/xL4Vm8LRaAF0TN5RNgvEGLX46Zt+yUpZZvaJ6UbckJFRWvos 9tSosHrPv4DI++r8j17Xq4h1NG3cPZqcYbfrwjWjXViof9O50sXJk4VSJpcNo8lO dhWwUNQdUoUy7aD2RN0pp7vYHWAbdAw9UMrCq8Ej4PbIAo7hJ+7YtiHUTdItxdRV d6qMadWU0IJViOy0afKuhsViO/jMSDggY81HfrVAPWA3my0wjnwar5pOtc/KvT7z wmVnJ8FJEXcKjozteJQTVjsVvb+kDpSBJ1sQW5iV2JFFzhpIxJGGi3nNYJJSTLgM JLlTIYg7DnqQiVQDprtkrlcn04xm -----END CERTIFICATE-----Generated at Wed Nov 5 08:28:16 2025 by rpki-client