$ rpki-client -vvf rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/323830343a373636633a343030303a3a2f33342d3334203d3e20323731313131.roa File: 323830343a373636633a343030303a3a2f33342d3334203d3e20323731313131.roa (raw, json) Hash identifier: aPIIIvH/c9LF0yVeOq0NNSMlt5q01C0vZ8XqoflYfPk= Subject key identifier: 11:66:A5:CD:17:04:9E:75:6A:4C:A4:0D:FC:21:CA:36:66:80:14:7E Certificate issuer: /CN=AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0 Certificate serial: 10D1F04FBB71E43210E023A88CD33601A72397A0 Authority key identifier: AE:25:EE:F7:E6:EE:89:4C:19:7D:BD:78:37:CB:3C:05:DF:B9:E8:E0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.cer Subject info access: rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/323830343a373636633a343030303a3a2f33342d3334203d3e20323731313131.roa Signing time: Wed 10 Sep 2025 12:34:59 +0000 ROA not before: Wed 10 Sep 2025 12:29:59 +0000 ROA not after: Wed 09 Sep 2026 12:34:59 +0000 asID: 271111 IP address blocks: 2804:766c:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.crl rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 21:33:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:d1:f0:4f:bb:71:e4:32:10:e0:23:a8:8c:d3:36:01:a7:23:97:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0 Validity Not Before: Sep 10 12:29:59 2025 GMT Not After : Sep 9 12:34:59 2026 GMT Subject: CN=1166A5CD17049E756A4CA40DFC21CA366680147E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:97:0b:b4:14:d9:b7:ae:db:0d:fb:dc:5b:3f: e5:6c:0f:61:a4:26:b6:03:25:1b:55:b0:80:0c:68: 32:cd:7c:df:5c:2e:cd:91:85:0b:d2:c9:84:cb:11: 6e:37:ca:5b:81:26:a4:71:2e:7d:7d:ab:72:c3:7e: 34:54:ad:12:6d:07:6d:8f:3b:c3:68:50:79:5e:3c: 9c:3a:16:53:c7:7e:2f:ed:46:c2:a3:69:98:01:91: 79:bc:e8:91:f3:6a:84:31:fa:09:c8:47:8c:fa:a3: 15:5b:bd:bb:e1:cb:56:c8:20:0e:a8:5c:90:24:e7: de:77:b7:4b:d6:4a:8a:fa:ec:b9:ae:0b:51:d7:d1: 82:1b:96:5c:45:d4:5f:3f:4d:64:58:19:2f:b9:94: b8:a1:a7:10:33:f0:ab:2c:28:d5:f8:40:71:8b:e7: 30:4e:7e:67:a1:ac:a2:9f:9c:d9:ae:88:44:84:06: eb:ef:36:32:4d:5b:e4:2e:58:30:01:67:93:d4:e4: 44:44:63:52:c7:a2:14:c1:60:6d:8b:84:03:06:74: 03:c7:21:3d:dd:36:fd:a1:18:3a:6b:ee:40:fd:1f: 6c:bc:f2:c2:95:ec:96:42:61:70:fc:9f:9d:f3:ab: cb:ec:20:7b:af:fc:77:ba:d6:69:19:64:b4:06:fc: 7b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:66:A5:CD:17:04:9E:75:6A:4C:A4:0D:FC:21:CA:36:66:80:14:7E X509v3 Authority Key Identifier: keyid:AE:25:EE:F7:E6:EE:89:4C:19:7D:BD:78:37:CB:3C:05:DF:B9:E8:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/323830343a373636633a343030303a3a2f33342d3334203d3e20323731313131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:766c:4000::/34 Signature Algorithm: sha256WithRSAEncryption c0:cb:02:8d:f3:b5:04:cc:3b:74:73:48:ae:97:b9:6a:4a:6a: 5e:82:09:f2:77:9b:ca:97:cd:af:8b:8c:62:eb:9e:02:a0:54: 00:da:a9:fd:e2:69:dc:73:d3:cf:ad:51:df:50:9f:55:30:19: 4a:92:a8:4f:9d:84:98:14:61:37:6a:db:f2:65:70:30:a4:04: eb:65:23:cc:9a:0a:a5:3f:50:9c:77:b1:99:48:59:dd:fc:17: 23:11:70:eb:4e:e3:c8:a4:04:ff:76:04:5f:90:c7:b9:1e:97: d9:b1:67:ab:05:e0:d1:c1:66:fc:d1:2a:7e:05:e6:4d:56:08: f2:8f:66:f6:6d:3d:80:fb:17:20:f9:af:52:f4:04:14:86:f0: c2:3e:4a:52:12:41:46:f2:87:26:80:cf:64:9c:7b:ac:64:d2: 95:96:db:01:5e:d6:d1:fa:19:ca:eb:4a:46:98:70:5a:09:8d: 60:37:94:d0:70:85:38:f5:6c:c2:2d:7a:b7:d1:88:02:0c:12: f8:57:00:79:81:88:f8:e3:59:c7:da:38:59:a9:89:8b:d1:7b: ae:fc:e3:13:8d:27:51:46:30:01:9a:cc:67:4d:04:39:ca:b1: ad:0a:3c:3c:d8:b4:3a:b3:01:61:67:fd:4d:f1:84:17:15:1f: 02:3d:66:24 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUENHwT7tx5DIQ4COojNM2Aacjl6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUyNUVFRjdFNkVFODk0QzE5N0RCRDc4MzdDQjNDMDVE RkI5RThFMDAeFw0yNTA5MTAxMjI5NTlaFw0yNjA5MDkxMjM0NTlaMDMxMTAvBgNV BAMTKDExNjZBNUNEMTcwNDlFNzU2QTRDQTQwREZDMjFDQTM2NjY4MDE0N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDllwu0FNm3rtsN+9xbP+VsD2Gk JrYDJRtVsIAMaDLNfN9cLs2RhQvSyYTLEW43yluBJqRxLn19q3LDfjRUrRJtB22P O8NoUHlePJw6FlPHfi/tRsKjaZgBkXm86JHzaoQx+gnIR4z6oxVbvbvhy1bIIA6o XJAk5953t0vWSor67LmuC1HX0YIbllxF1F8/TWRYGS+5lLihpxAz8KssKNX4QHGL 5zBOfmehrKKfnNmuiESEBuvvNjJNW+QuWDABZ5PU5EREY1LHohTBYG2LhAMGdAPH IT3dNv2hGDpr7kD9H2y88sKV7JZCYXD8n53zq8vsIHuv/He61mkZZLQG/HuXAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUEWalzRcEnnVqTKQN/CHKNmaAFH4wHwYDVR0j BBgwFoAUriXu9+buiUwZfb14N8s8Bd+56OAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRkhrTGdjZ0JGVFdHU2NOYk0zb1NCNHRSakJVUm1xYUV5Y2lxRXlvRDJ5 NmIvMC9BRTI1RUVGN0U2RUU4OTRDMTk3REJENzgzN0NCM0MwNURGQjlFOEUwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FFMjVFRUY3RTZFRTg5NEMx OTdEQkQ3ODM3Q0IzQzA1REZCOUU4RTAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0ZIa0xnY2dCRlRXR1NjTmJNM29TQjR0UmpCVVJtcWFFeWNpcUV5b0QyeTZiLzAv MzIzODMwMzQzYTM3MzYzNjYzM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzczMTMxMzEzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEdmxAMA0GCSqGSIb3DQEBCwUA A4IBAQDAywKN87UEzDt0c0iul7lqSmpeggnyd5vKl82vi4xi654CoFQA2qn94mnc c9PPrVHfUJ9VMBlKkqhPnYSYFGE3atvyZXAwpATrZSPMmgqlP1Ccd7GZSFnd/Bcj EXDrTuPIpAT/dgRfkMe5HpfZsWerBeDRwWb80Sp+BeZNVgjyj2b2bT2A+xcg+a9S 9AQUhvDCPkpSEkFG8ocmgM9knHusZNKVltsBXtbR+hnK60pGmHBaCY1gN5TQcIU4 9WzCLXq30YgCDBL4VwB5gYj441nH2jhZqYmL0Xuu/OMTjSdRRjABmsxnTQQ5yrGt Cjw82LQ6swFhZ/1N8YQXFR8CPWYk -----END CERTIFICATE-----Generated at Wed Nov 5 09:47:52 2025 by rpki-client