$ rpki-client -vvf rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/323830343a363061303a633030303a3a2f33342d3438203d3e20323639313831.roa File: 323830343a363061303a633030303a3a2f33342d3438203d3e20323639313831.roa (raw, json) Hash identifier: aC08Xc+AWU2Gmn9FKnzrvxdKmO26eHCpZULre8VMh/I= Subject key identifier: 04:29:11:FE:73:85:A4:70:58:60:28:F5:F2:4C:9A:A8:7C:A1:DB:45 Certificate issuer: /CN=585B464DD14FF8DEED6908CBFA9AAE5AAA748C23 Certificate serial: 135667823C5B23C86331FEA7E4972C4ED0EA360B Authority key identifier: 58:5B:46:4D:D1:4F:F8:DE:ED:69:08:CB:FA:9A:AE:5A:AA:74:8C:23 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.cer Subject info access: rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/323830343a363061303a633030303a3a2f33342d3438203d3e20323639313831.roa Signing time: Thu 06 Mar 2025 08:52:17 +0000 ROA not before: Thu 06 Mar 2025 08:47:17 +0000 ROA not after: Thu 05 Mar 2026 08:52:17 +0000 asID: 269181 IP address blocks: 2804:60a0:c000::/34 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.crl rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 07:40:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:56:67:82:3c:5b:23:c8:63:31:fe:a7:e4:97:2c:4e:d0:ea:36:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=585B464DD14FF8DEED6908CBFA9AAE5AAA748C23 Validity Not Before: Mar 6 08:47:17 2025 GMT Not After : Mar 5 08:52:17 2026 GMT Subject: CN=042911FE7385A470586028F5F24C9AA87CA1DB45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:6a:87:84:76:70:86:6a:29:73:60:9e:8c:07: 51:ac:ca:a6:b6:06:ea:d8:15:41:a0:97:bc:08:d1: 27:1b:36:65:16:d9:49:c2:dd:fc:be:9b:20:38:14: 9f:61:b2:c5:4e:27:55:e5:5a:d1:03:5e:a4:ff:82: 1a:75:6d:42:80:1c:1e:3a:37:84:b4:f5:c6:8d:74: c4:d2:70:e4:d8:cb:cb:9a:58:0d:37:a2:50:4c:f1: 57:2e:d6:83:00:85:ae:da:e8:7f:fa:14:05:9d:0d: 97:00:fa:9c:55:d4:af:0e:9c:5b:4a:52:13:3a:68: d7:24:41:16:87:71:b7:39:1b:1d:d6:8a:94:e5:67: 45:43:79:6f:22:2a:c6:c7:25:d4:e1:e8:55:c8:ea: 6a:d2:82:28:41:e3:2f:da:db:b5:e4:a2:11:8b:a4: 77:26:e8:14:92:51:c4:2a:e4:1a:c3:8e:6c:bb:98: 05:60:15:78:b1:f1:42:f9:86:77:7d:94:99:17:c4: 63:30:bb:69:a2:b6:dc:34:85:58:ec:c3:a6:88:04: 07:d9:91:62:b6:e9:08:76:db:d0:4e:8c:ac:03:8b: 8f:5c:37:82:1c:4e:bc:0c:1c:21:33:05:4f:c5:12: 59:e1:0e:d2:d8:f0:70:43:af:1a:57:84:b7:7d:d4: c1:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:29:11:FE:73:85:A4:70:58:60:28:F5:F2:4C:9A:A8:7C:A1:DB:45 X509v3 Authority Key Identifier: keyid:58:5B:46:4D:D1:4F:F8:DE:ED:69:08:CB:FA:9A:AE:5A:AA:74:8C:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/323830343a363061303a633030303a3a2f33342d3438203d3e20323639313831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:60a0:c000::/34 Signature Algorithm: sha256WithRSAEncryption 70:cb:bb:ea:f3:66:0f:7d:06:da:a5:0b:12:3b:76:30:a0:ce: 80:b5:73:44:52:dc:1d:19:4d:b0:cf:56:f1:bd:b4:ef:58:ca: 77:61:61:2d:5b:d3:ab:7c:a1:e6:8f:51:69:6e:2f:df:0e:f3: 3a:42:e0:3d:12:db:10:2c:de:49:1e:47:a1:9d:ed:a2:77:3f: 06:e5:5a:34:37:ba:78:91:cd:58:1c:28:0c:40:59:5c:05:82: 99:0a:d8:fd:d4:7e:b4:9e:97:fe:8e:7c:be:68:e8:aa:56:40: ed:82:a3:dc:0b:b2:b9:1f:d3:ed:f5:66:4e:55:4d:5a:9b:30: 42:32:e5:a4:af:38:85:3b:fb:1b:ad:b6:9b:ce:98:ec:dc:ac: 40:ba:e2:ab:e9:9c:83:69:27:9a:97:79:ea:9c:42:c2:61:12: ce:3e:6e:26:47:2c:a4:b0:4b:7d:fa:f9:64:0f:73:29:c5:62: 27:d8:14:b0:19:45:eb:89:da:17:a0:cc:86:c3:44:9f:a4:e5: 60:da:e8:4f:cf:8c:eb:1b:59:a3:c9:b5:8a:4e:0e:c0:4e:1a: 3a:79:5e:86:a3:56:30:1c:5d:c0:90:b0:71:8e:2e:95:01:bc: c7:c3:ca:eb:b8:bd:b6:a6:85:e6:75:c6:11:2a:df:05:fc:3f: 4d:6d:7f:c2 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUE1ZngjxbI8hjMf6n5JcsTtDqNgswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg1QjQ2NEREMTRGRjhERUVENjkwOENCRkE5QUFFNUFB QTc0OEMyMzAeFw0yNTAzMDYwODQ3MTdaFw0yNjAzMDUwODUyMTdaMDMxMTAvBgNV BAMTKDA0MjkxMUZFNzM4NUE0NzA1ODYwMjhGNUYyNEM5QUE4N0NBMURCNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUaoeEdnCGailzYJ6MB1Gsyqa2 BurYFUGgl7wI0ScbNmUW2UnC3fy+myA4FJ9hssVOJ1XlWtEDXqT/ghp1bUKAHB46 N4S09caNdMTScOTYy8uaWA03olBM8Vcu1oMAha7a6H/6FAWdDZcA+pxV1K8OnFtK UhM6aNckQRaHcbc5Gx3WipTlZ0VDeW8iKsbHJdTh6FXI6mrSgihB4y/a27XkohGL pHcm6BSSUcQq5BrDjmy7mAVgFXix8UL5hnd9lJkXxGMwu2mittw0hVjsw6aIBAfZ kWK26Qh229BOjKwDi49cN4IcTrwMHCEzBU/FElnhDtLY8HBDrxpXhLd91MEHAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUBCkR/nOFpHBYYCj18kyaqHyh20UwHwYDVR0j BBgwFoAUWFtGTdFP+N7taQjL+pquWqp0jCMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSG5iQ1cybnVLVzl2bldWVVFzYkxnRGNER3NpTUE1eHVQN3VDaW85WDk3 WXIvMS81ODVCNDY0REQxNEZGOERFRUQ2OTA4Q0JGQTlBQUU1QUFBNzQ4QzIzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU4NUI0NjRERDE0RkY4REVF RDY5MDhDQkZBOUFBRTVBQUE3NDhDMjMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0huYkNXMm51S1c5dm5XVlVRc2JMZ0RjREdzaU1BNXh1UDd1Q2lvOVg5N1lyLzEv MzIzODMwMzQzYTM2MzA2MTMwM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDM0MzgyMDNk M2UyMDMyMzYzOTMxMzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEYKDAMA0GCSqGSIb3DQEBCwUA A4IBAQBwy7vq82YPfQbapQsSO3YwoM6AtXNEUtwdGU2wz1bxvbTvWMp3YWEtW9Or fKHmj1Fpbi/fDvM6QuA9EtsQLN5JHkehne2idz8G5Vo0N7p4kc1YHCgMQFlcBYKZ Ctj91H60npf+jny+aOiqVkDtgqPcC7K5H9Pt9WZOVU1amzBCMuWkrziFO/sbrbab zpjs3KxAuuKr6ZyDaSeal3nqnELCYRLOPm4mRyyksEt9+vlkD3MpxWIn2BSwGUXr idoXoMyGw0SfpOVg2uhPz4zrG1mjybWKTg7ATho6eV6Go1YwHF3AkLBxji6VAbzH w8rruL22poXmdcYRKt8F/D9NbX/C -----END CERTIFICATE-----Generated at Wed Nov 5 10:25:26 2025 by rpki-client