$ rpki-client -vvf rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/323830343a353565343a633030303a3a2f33342d3334203d3e20323637393633.roa File: 323830343a353565343a633030303a3a2f33342d3334203d3e20323637393633.roa (raw, json) Hash identifier: ExUs1D8u3UHNA/rLMGI3P7Ffx13BN5qOE3Ri54jT1Bk= Subject key identifier: ED:33:11:92:BE:A2:4F:51:F9:CE:EE:3A:CF:EF:5D:B6:8B:09:B4:7A Certificate issuer: /CN=2A35055EE84CCFF2F383364115A401FE8535EC74 Certificate serial: 189B22C59AAD7EB04DC0C7CB6288ABBBE0659334 Authority key identifier: 2A:35:05:5E:E8:4C:CF:F2:F3:83:36:41:15:A4:01:FE:85:35:EC:74 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A35055EE84CCFF2F383364115A401FE8535EC74.cer Subject info access: rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/323830343a353565343a633030303a3a2f33342d3334203d3e20323637393633.roa Signing time: Mon 03 Feb 2025 13:05:16 +0000 ROA not before: Mon 03 Feb 2025 13:00:16 +0000 ROA not after: Mon 02 Feb 2026 13:05:16 +0000 asID: 267963 IP address blocks: 2804:55e4:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/2A35055EE84CCFF2F383364115A401FE8535EC74.crl rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/2A35055EE84CCFF2F383364115A401FE8535EC74.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A35055EE84CCFF2F383364115A401FE8535EC74.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 04:10:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:9b:22:c5:9a:ad:7e:b0:4d:c0:c7:cb:62:88:ab:bb:e0:65:93:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A35055EE84CCFF2F383364115A401FE8535EC74 Validity Not Before: Feb 3 13:00:16 2025 GMT Not After : Feb 2 13:05:16 2026 GMT Subject: CN=ED331192BEA24F51F9CEEE3ACFEF5DB68B09B47A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:57:9c:b8:8f:bd:13:09:1e:2e:96:fb:7d:7e: 26:d0:e9:d5:e9:48:36:19:6c:62:0b:57:9e:0c:70: 44:de:86:20:5e:55:3c:55:dd:09:17:8e:56:84:9b: 0c:11:56:ed:0a:57:bc:e3:96:2b:91:dc:29:4e:f9: a5:fe:2f:b3:1a:5f:2e:10:1b:e2:89:c0:f2:17:9a: 81:b8:58:80:24:1e:6e:23:ab:d3:17:80:b7:67:28: 76:51:04:9f:03:e2:c2:5e:6d:fd:b9:20:bb:37:82: 5b:12:89:99:f0:0a:d3:60:45:00:07:cb:e4:36:3b: 33:c5:ca:2e:47:24:96:1d:ad:a3:4d:31:85:ae:3a: 42:70:ee:ac:dc:32:5c:15:77:c9:a8:33:f3:cb:85: ea:01:5c:93:8f:4e:84:23:e4:dd:5b:a4:31:09:8f: 60:98:ed:7c:e5:13:26:eb:40:5e:50:9e:7a:11:8d: c0:10:fe:b1:77:da:17:df:74:65:7a:cf:56:fc:30: 04:59:0c:54:dd:7e:a7:3c:59:89:3d:3f:31:06:26: 30:30:5b:d0:50:47:b2:fa:05:12:a5:82:87:41:5b: b5:86:5c:6a:37:01:df:f9:e7:d6:24:74:7e:df:30: 6d:72:bd:f3:cc:2d:aa:e2:c7:99:36:bb:c1:b2:3d: 08:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:33:11:92:BE:A2:4F:51:F9:CE:EE:3A:CF:EF:5D:B6:8B:09:B4:7A X509v3 Authority Key Identifier: keyid:2A:35:05:5E:E8:4C:CF:F2:F3:83:36:41:15:A4:01:FE:85:35:EC:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/2A35055EE84CCFF2F383364115A401FE8535EC74.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A35055EE84CCFF2F383364115A401FE8535EC74.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/323830343a353565343a633030303a3a2f33342d3334203d3e20323637393633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:55e4:c000::/34 Signature Algorithm: sha256WithRSAEncryption a4:6e:43:39:f6:e9:29:b7:18:38:6a:7d:c0:e4:d6:ba:ce:db: f5:c4:84:4f:a2:54:b6:e3:8b:ec:57:e1:64:7e:26:60:fc:cf: af:8d:2a:90:f8:9d:69:c9:81:2c:c0:ff:dd:ca:ff:d2:84:3b: 68:d9:32:12:f1:dd:c2:e9:a5:1e:a3:8b:9a:67:b9:4a:e3:18: 4b:f6:ee:e9:ce:72:06:84:48:76:27:7c:8d:23:80:ea:64:0f: c3:ec:8b:00:95:ac:ca:16:bf:15:5c:af:63:8f:b1:88:10:41: 3b:51:68:2c:72:ce:29:e4:60:21:ff:3f:6e:93:63:f9:31:09: ed:88:6a:be:86:8f:b9:7a:ae:d3:c4:2c:af:5a:16:01:16:a4: dd:31:2b:2b:60:c9:78:f4:ea:62:80:31:29:79:94:8f:dc:a9: 0b:36:33:6f:60:b4:21:07:8b:2e:8f:18:68:cb:8b:51:46:28: 7f:97:e3:a1:bd:92:c3:84:1e:c2:03:46:bc:72:60:d9:f2:47: c8:38:45:08:b0:ef:dd:b0:87:1b:19:16:a2:c8:a1:09:4d:80: 27:f0:ba:47:6c:a1:45:c0:dc:5f:6a:ff:3c:0a:49:2e:b2:bf: 92:dc:42:e6:3f:f7:ad:dd:10:5e:d1:cc:73:6c:3e:fd:09:9c: 8f:d6:23:e4 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUGJsixZqtfrBNwMfLYoiru+BlkzQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEzNTA1NUVFODRDQ0ZGMkYzODMzNjQxMTVBNDAxRkU4 NTM1RUM3NDAeFw0yNTAyMDMxMzAwMTZaFw0yNjAyMDIxMzA1MTZaMDMxMTAvBgNV BAMTKEVEMzMxMTkyQkVBMjRGNTFGOUNFRUUzQUNGRUY1REI2OEIwOUI0N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPV5y4j70TCR4ulvt9fibQ6dXp SDYZbGILV54McETehiBeVTxV3QkXjlaEmwwRVu0KV7zjliuR3ClO+aX+L7MaXy4Q G+KJwPIXmoG4WIAkHm4jq9MXgLdnKHZRBJ8D4sJebf25ILs3glsSiZnwCtNgRQAH y+Q2OzPFyi5HJJYdraNNMYWuOkJw7qzcMlwVd8moM/PLheoBXJOPToQj5N1bpDEJ j2CY7XzlEybrQF5QnnoRjcAQ/rF32hffdGV6z1b8MARZDFTdfqc8WYk9PzEGJjAw W9BQR7L6BRKlgodBW7WGXGo3Ad/559YkdH7fMG1yvfPMLarix5k2u8GyPQgZAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQU7TMRkr6iT1H5zu46z+9dtosJtHowHwYDVR0j BBgwFoAUKjUFXuhMz/LzgzZBFaQB/oU17HQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRzRFOVpHNDd6V1FqanpCRDlCaXFWSFRza0tpMnpSV3R3MTN5Q0VDR0Vx ZXQvMC8yQTM1MDU1RUU4NENDRkYyRjM4MzM2NDExNUE0MDFGRTg1MzVFQzc0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBMzUwNTVFRTg0Q0NGRjJG MzgzMzY0MTE1QTQwMUZFODUzNUVDNzQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0c0RTlaRzQ3eldRamp6QkQ5QmlxVkhUc2tLaTJ6Uld0dzEzeUNFQ0dFcWV0LzAv MzIzODMwMzQzYTM1MzU2NTM0M2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzYzNzM5MzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEVeTAMA0GCSqGSIb3DQEBCwUA A4IBAQCkbkM59ukptxg4an3A5Na6ztv1xIRPolS244vsV+FkfiZg/M+vjSqQ+J1p yYEswP/dyv/ShDto2TIS8d3C6aUeo4uaZ7lK4xhL9u7pznIGhEh2J3yNI4DqZA/D 7IsAlazKFr8VXK9jj7GIEEE7UWgscs4p5GAh/z9uk2P5MQntiGq+ho+5eq7TxCyv WhYBFqTdMSsrYMl49OpigDEpeZSP3KkLNjNvYLQhB4sujxhoy4tRRih/l+OhvZLD hB7CA0a8cmDZ8kfIOEUIsO/dsIcbGRaiyKEJTYAn8LpHbKFFwNxfav88Ckkusr+S 3ELmP/et3RBe0cxzbD79CZyP1iPk -----END CERTIFICATE-----Generated at Wed Nov 5 17:56:17 2025 by rpki-client