$ rpki-client -vvf rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a383030303a3a2f33352d3335203d3e20323637393631.roa File: 323830343a353564633a383030303a3a2f33352d3335203d3e20323637393631.roa (raw, json) Hash identifier: 3Bfk3/7nA7HfRFI9MzYW48Dw87YiKG4ZvcsPu/xDXg8= Subject key identifier: CE:21:DD:69:90:8B:B4:60:85:8C:1B:1C:89:55:79:9D:A6:06:E4:28 Certificate issuer: /CN=5D6EE216A61DC7F3FE2995D319908D11F231A74F Certificate serial: 7C69D37D6C7B33B7F1B60C439951FA814372A71F Authority key identifier: 5D:6E:E2:16:A6:1D:C7:F3:FE:29:95:D3:19:90:8D:11:F2:31:A7:4F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D6EE216A61DC7F3FE2995D319908D11F231A74F.cer Subject info access: rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a383030303a3a2f33352d3335203d3e20323637393631.roa Signing time: Sat 25 Oct 2025 20:46:34 +0000 ROA not before: Sat 25 Oct 2025 20:41:34 +0000 ROA not after: Sat 24 Oct 2026 20:46:34 +0000 asID: 267961 IP address blocks: 2804:55dc:8000::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/5D6EE216A61DC7F3FE2995D319908D11F231A74F.crl rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/5D6EE216A61DC7F3FE2995D319908D11F231A74F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D6EE216A61DC7F3FE2995D319908D11F231A74F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 06:12:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:69:d3:7d:6c:7b:33:b7:f1:b6:0c:43:99:51:fa:81:43:72:a7:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D6EE216A61DC7F3FE2995D319908D11F231A74F Validity Not Before: Oct 25 20:41:34 2025 GMT Not After : Oct 24 20:46:34 2026 GMT Subject: CN=CE21DD69908BB460858C1B1C8955799DA606E428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:92:c3:eb:3d:ed:13:38:0a:35:c0:30:02:95: cc:cb:a1:9c:90:0a:94:d1:3b:50:a4:b9:02:07:9c: cd:ef:c4:66:e5:de:99:d2:f9:99:22:d8:8b:c7:a2: e4:ff:28:26:e9:7e:be:d5:a4:ec:29:42:24:35:f8: 20:ca:9d:97:38:10:22:b5:19:11:29:34:70:f6:21: db:b0:5a:41:b6:5b:f4:06:2a:3e:bc:00:f0:d2:fa: 7d:66:b4:c1:89:6d:49:f7:8a:ac:b4:5b:d2:0d:9f: 98:cc:93:ba:e0:95:dd:24:ba:02:94:da:21:41:37: cd:47:47:74:b1:c0:1b:12:e2:8f:c4:13:67:10:6b: b7:e1:98:dd:57:21:31:25:5e:12:13:15:55:ec:41: 56:7c:88:39:f4:e9:f0:02:51:34:ac:ad:70:94:d2: ee:90:f2:46:ae:ae:d8:6f:09:95:4c:d2:6a:d7:f0: a4:1b:b3:ad:0c:59:f5:b0:a0:3f:aa:ce:02:1f:23: 03:ad:51:96:cf:46:df:ba:f6:96:72:01:54:bc:c7: 2e:10:52:15:02:11:04:26:1a:a4:73:7e:00:e6:9c: 92:13:8f:ce:d1:38:09:bb:b0:ee:20:9b:c0:06:cc: ef:0b:82:d7:0f:8f:3d:79:0a:b2:a6:12:11:48:3e: d2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:21:DD:69:90:8B:B4:60:85:8C:1B:1C:89:55:79:9D:A6:06:E4:28 X509v3 Authority Key Identifier: keyid:5D:6E:E2:16:A6:1D:C7:F3:FE:29:95:D3:19:90:8D:11:F2:31:A7:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/5D6EE216A61DC7F3FE2995D319908D11F231A74F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D6EE216A61DC7F3FE2995D319908D11F231A74F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a383030303a3a2f33352d3335203d3e20323637393631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:55dc:8000::/35 Signature Algorithm: sha256WithRSAEncryption 69:b2:e1:aa:dd:6f:19:70:d3:a8:57:8e:a0:ed:16:cf:f2:86: cc:a9:0b:27:a6:e7:f8:69:11:ad:ce:11:f5:84:8c:38:95:01: 78:3b:7c:fc:1f:ee:bc:76:6c:ad:8d:43:65:e7:ec:71:77:5e: df:04:9d:4f:6f:91:42:51:6b:86:b7:76:a4:aa:83:29:1c:03: ad:b5:31:93:a5:58:ba:38:d6:e0:f6:5c:e9:b5:6b:d3:ce:ce: 3f:1d:d8:ea:db:de:04:5d:03:26:fc:72:b4:db:13:d9:ef:bb: 23:32:d5:e5:92:93:72:5c:3d:d5:17:d6:92:38:a6:31:32:0d: 67:0b:ef:14:63:db:fc:72:be:e3:eb:02:7c:97:ef:7b:bb:05: a1:57:7c:77:3b:34:89:57:9f:30:f9:85:6e:7e:c2:54:5a:56: b2:cd:f4:e9:58:b1:f5:1c:59:51:17:99:3b:62:cf:41:46:00: 4f:6c:ea:c2:9e:eb:96:5b:81:de:f6:84:59:a4:09:d7:05:fe: 0c:0c:d2:ac:45:e3:20:ca:92:e1:b3:59:4e:09:f8:7c:de:f1: 31:a2:6c:9e:d1:6d:76:5c:3d:64:8a:75:3c:72:ab:f3:c8:c9: 5b:97:5c:4b:e7:c9:4e:a9:2e:1c:8d:23:11:26:31:9f:67:53: 49:a7:ab:43 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUfGnTfWx7M7fxtgxDmVH6gUNypx8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQ2RUUyMTZBNjFEQzdGM0ZFMjk5NUQzMTk5MDhEMTFG MjMxQTc0RjAeFw0yNTEwMjUyMDQxMzRaFw0yNjEwMjQyMDQ2MzRaMDMxMTAvBgNV BAMTKENFMjFERDY5OTA4QkI0NjA4NThDMUIxQzg5NTU3OTlEQTYwNkU0MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDksPrPe0TOAo1wDAClczLoZyQ CpTRO1CkuQIHnM3vxGbl3pnS+Zki2IvHouT/KCbpfr7VpOwpQiQ1+CDKnZc4ECK1 GREpNHD2IduwWkG2W/QGKj68APDS+n1mtMGJbUn3iqy0W9INn5jMk7rgld0kugKU 2iFBN81HR3SxwBsS4o/EE2cQa7fhmN1XITElXhITFVXsQVZ8iDn06fACUTSsrXCU 0u6Q8kaurthvCZVM0mrX8KQbs60MWfWwoD+qzgIfIwOtUZbPRt+69pZyAVS8xy4Q UhUCEQQmGqRzfgDmnJITj87ROAm7sO4gm8AGzO8LgtcPjz15CrKmEhFIPtKVAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUziHdaZCLtGCFjBsciVV5naYG5CgwHwYDVR0j BBgwFoAUXW7iFqYdx/P+KZXTGZCNEfIxp08wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR2V1RnRIUUwzUTMxY0Jjbm9iRlZkcEN2WUdpQTZiMTRnQnh6V1hKWGR6 aFYvMC81RDZFRTIxNkE2MURDN0YzRkUyOTk1RDMxOTkwOEQxMUYyMzFBNzRGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVENkVFMjE2QTYxREM3RjNG RTI5OTVEMzE5OTA4RDExRjIzMUE3NEYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0dldUZ0SFFMM1EzMWNCY25vYkZWZHBDdllHaUE2YjE0Z0J4eldYSlhkemhWLzAv MzIzODMwMzQzYTM1MzU2NDYzM2EzODMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk M2UyMDMyMzYzNzM5MzYzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSgEVdyAMA0GCSqGSIb3DQEBCwUA A4IBAQBpsuGq3W8ZcNOoV46g7RbP8obMqQsnpuf4aRGtzhH1hIw4lQF4O3z8H+68 dmytjUNl5+xxd17fBJ1Pb5FCUWuGt3akqoMpHAOttTGTpVi6ONbg9lzptWvTzs4/ Hdjq294EXQMm/HK02xPZ77sjMtXlkpNyXD3VF9aSOKYxMg1nC+8UY9v8cr7j6wJ8 l+97uwWhV3x3OzSJV58w+YVufsJUWlayzfTpWLH1HFlRF5k7Ys9BRgBPbOrCnuuW W4He9oRZpAnXBf4MDNKsReMgypLhs1lOCfh83vExomye0W12XD1kinU8cqvzyMlb l1xL58lOqS4cjSMRJjGfZ1NJp6tD -----END CERTIFICATE-----Generated at Wed Nov 5 11:00:13 2025 by rpki-client