$ rpki-client -vvf rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/323830343a346332303a3a2f33322d313238203d3e20323637333531.roa File: 323830343a346332303a3a2f33322d313238203d3e20323637333531.roa (raw, json) Hash identifier: W1O49PMqr2P1Au9QeX0m0ruAnr+36PpwFYR226BRaxs= Subject key identifier: 44:61:15:72:83:8C:D8:40:BB:C8:93:CF:88:2D:22:E9:7D:E6:EE:A8 Certificate issuer: /CN=A8E32061346766D7114C6CAB4579461BB6D40950 Certificate serial: 111B0D5054F2E8F6CFE4C5F5DE392A583288FC27 Authority key identifier: A8:E3:20:61:34:67:66:D7:11:4C:6C:AB:45:79:46:1B:B6:D4:09:50 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8E32061346766D7114C6CAB4579461BB6D40950.cer Subject info access: rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/323830343a346332303a3a2f33322d313238203d3e20323637333531.roa Signing time: Mon 21 Jul 2025 16:32:37 +0000 ROA not before: Mon 21 Jul 2025 16:27:37 +0000 ROA not after: Mon 20 Jul 2026 16:32:37 +0000 asID: 267351 IP address blocks: 2804:4c20::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/A8E32061346766D7114C6CAB4579461BB6D40950.crl rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/A8E32061346766D7114C6CAB4579461BB6D40950.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8E32061346766D7114C6CAB4579461BB6D40950.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 11 Aug 2025 20:16:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:1b:0d:50:54:f2:e8:f6:cf:e4:c5:f5:de:39:2a:58:32:88:fc:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8E32061346766D7114C6CAB4579461BB6D40950 Validity Not Before: Jul 21 16:27:37 2025 GMT Not After : Jul 20 16:32:37 2026 GMT Subject: CN=44611572838CD840BBC893CF882D22E97DE6EEA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:14:89:7e:be:46:1b:c8:c0:19:69:08:71:d4: 01:52:bc:8e:9b:ce:33:35:fb:75:30:3a:8b:20:17: 1b:4b:1b:01:2a:89:31:6c:7e:8a:79:c7:14:17:f3: 33:22:7f:b4:24:c8:1f:2f:a0:20:fa:16:0c:4d:82: 0c:a1:2b:bb:04:47:c0:c7:95:60:0c:56:3b:36:d2: 50:47:56:83:3f:9a:fa:85:ce:d0:56:51:92:46:01: d4:bc:22:45:0a:75:5b:42:d3:3d:4c:ef:c5:ab:25: a2:52:ec:39:b9:91:4b:27:8d:22:01:f2:fb:e1:3d: 66:3d:ad:3b:f0:89:34:8b:d9:b8:9e:b4:79:7d:1d: f3:35:28:a8:69:c4:1a:d3:26:af:90:ee:ba:2b:1f: e7:8d:30:59:a9:99:93:4c:8c:35:24:85:63:b8:c7: b1:9c:4b:cc:15:b5:8e:b8:36:f1:b9:3c:3c:d7:f3: 55:00:c2:52:f1:b4:e4:9f:3a:18:71:ef:f8:37:58: 81:b5:9f:27:bd:3e:96:3c:05:20:9c:03:f8:a0:4a: 9e:4c:66:97:47:c4:73:02:66:3c:bc:3c:c2:e7:3b: 8f:54:56:f2:91:24:1d:8c:15:8b:6f:87:d6:cf:c4: 61:58:34:f5:34:0d:ff:e7:06:b1:41:0c:d5:07:a4: 52:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:61:15:72:83:8C:D8:40:BB:C8:93:CF:88:2D:22:E9:7D:E6:EE:A8 X509v3 Authority Key Identifier: keyid:A8:E3:20:61:34:67:66:D7:11:4C:6C:AB:45:79:46:1B:B6:D4:09:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/A8E32061346766D7114C6CAB4579461BB6D40950.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8E32061346766D7114C6CAB4579461BB6D40950.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/323830343a346332303a3a2f33322d313238203d3e20323637333531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:4c20::/32 Signature Algorithm: sha256WithRSAEncryption 72:df:13:2d:41:53:ef:e1:16:c7:5a:ee:1e:04:10:f6:69:0c: bb:7d:6c:1a:7e:45:32:98:2e:73:ef:fc:ca:e9:24:b3:4a:d3: 37:1c:bd:8d:7f:3c:0e:4f:82:e6:16:f2:49:78:b0:b4:cc:b3: 6e:2a:8d:54:8c:1f:40:f3:59:8d:5f:62:d9:11:8d:41:70:d2: f5:c8:5f:7c:05:8c:4d:5b:8e:39:e3:da:47:71:f8:a2:fd:b6: 2d:ae:5e:2b:e4:d1:8d:e0:50:0f:d8:ad:63:87:61:c9:f0:81: 8e:00:31:54:02:8c:17:17:b3:70:95:ff:6d:47:f1:50:27:85: ed:25:58:6a:a9:a7:d9:ce:25:16:a0:fc:db:d0:0a:8c:80:70: 75:ad:66:b7:01:4f:1b:d3:70:32:c7:77:ff:03:b1:fe:42:15: 54:78:85:4c:22:3b:b9:3f:c8:c3:dc:24:be:0f:e4:c0:8c:63: c2:cd:95:ba:1f:cf:7c:ee:70:c5:97:06:f8:26:cc:ea:76:9c: ae:92:ef:53:62:16:47:88:aa:7e:67:1b:7a:c4:ac:91:90:1d: 2e:ff:00:80:ef:72:ac:7c:e5:31:b8:4b:c7:79:1c:2d:ff:f2: d0:25:13:60:f4:fd:02:70:65:d3:c7:de:0e:fc:df:25:77:d8: b5:2e:94:55 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUERsNUFTy6PbP5MX13jkqWDKI/CcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThFMzIwNjEzNDY3NjZENzExNEM2Q0FCNDU3OTQ2MUJC NkQ0MDk1MDAeFw0yNTA3MjExNjI3MzdaFw0yNjA3MjAxNjMyMzdaMDMxMTAvBgNV BAMTKDQ0NjExNTcyODM4Q0Q4NDBCQkM4OTNDRjg4MkQyMkU5N0RFNkVFQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFFIl+vkYbyMAZaQhx1AFSvI6b zjM1+3UwOosgFxtLGwEqiTFsfop5xxQX8zMif7QkyB8voCD6FgxNggyhK7sER8DH lWAMVjs20lBHVoM/mvqFztBWUZJGAdS8IkUKdVtC0z1M78WrJaJS7Dm5kUsnjSIB 8vvhPWY9rTvwiTSL2bietHl9HfM1KKhpxBrTJq+Q7rorH+eNMFmpmZNMjDUkhWO4 x7GcS8wVtY64NvG5PDzX81UAwlLxtOSfOhhx7/g3WIG1nye9PpY8BSCcA/igSp5M ZpdHxHMCZjy8PMLnO49UVvKRJB2MFYtvh9bPxGFYNPU0Df/nBrFBDNUHpFJ9AgMB AAGjggJSMIICTjAdBgNVHQ4EFgQURGEVcoOM2EC7yJPPiC0i6X3m7qgwHwYDVR0j BBgwFoAUqOMgYTRnZtcRTGyrRXlGG7bUCVAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRzVOaWZ0c1VidXAxdVRZOGpqa3NBUWdVclB6MTFjbmhTM0U4NzVjVWhF dUQvMC9BOEUzMjA2MTM0Njc2NkQ3MTE0QzZDQUI0NTc5NDYxQkI2RDQwOTUwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E4RTMyMDYxMzQ2NzY2RDcx MTRDNkNBQjQ1Nzk0NjFCQjZENDA5NTAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0c1TmlmdHNVYnVwMXVUWThqamtzQVFnVXJQejExY25oUzNFODc1Y1VoRXVELzAv MzIzODMwMzQzYTM0NjMzMjMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2 MzczMzM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAoBEwgMA0GCSqGSIb3DQEBCwUAA4IBAQBy3xMt QVPv4RbHWu4eBBD2aQy7fWwafkUymC5z7/zK6SSzStM3HL2NfzwOT4LmFvJJeLC0 zLNuKo1UjB9A81mNX2LZEY1BcNL1yF98BYxNW44549pHcfii/bYtrl4r5NGN4FAP 2K1jh2HJ8IGOADFUAowXF7Nwlf9tR/FQJ4XtJVhqqafZziUWoPzb0AqMgHB1rWa3 AU8b03Ayx3f/A7H+QhVUeIVMIju5P8jD3CS+D+TAjGPCzZW6H8987nDFlwb4Jszq dpyuku9TYhZHiKp+Zxt6xKyRkB0u/wCA73KsfOUxuEvHeRwt//LQJRNg9P0CcGXT x94O/N8ld9i1LpRV -----END CERTIFICATE-----Generated at Mon Aug 11 12:51:50 2025 by rpki-client