$ rpki-client -vvf rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/323830343a3937383a3a2f33322d313238203d3e20323633303837.roa File: 323830343a3937383a3a2f33322d313238203d3e20323633303837.roa (raw, json) Hash identifier: G/FFJ7H4y3UmSNdQvjTb1QYjVB9bKR8OycW7xU2KFuI= Subject key identifier: 67:4E:2D:D2:5A:94:C9:66:1F:CE:95:2D:6D:F7:7D:1E:66:9E:3B:99 Certificate issuer: /CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94 Certificate serial: 4DD65AE365E9E2C688921D45A71F4C806B553825 Authority key identifier: 2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer Subject info access: rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/323830343a3937383a3a2f33322d313238203d3e20323633303837.roa Signing time: Thu 09 Oct 2025 14:32:38 +0000 ROA not before: Thu 09 Oct 2025 14:27:38 +0000 ROA not after: Thu 08 Oct 2026 14:32:38 +0000 asID: 263087 IP address blocks: 2804:978::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 01:24:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:d6:5a:e3:65:e9:e2:c6:88:92:1d:45:a7:1f:4c:80:6b:55:38:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94 Validity Not Before: Oct 9 14:27:38 2025 GMT Not After : Oct 8 14:32:38 2026 GMT Subject: CN=674E2DD25A94C9661FCE952D6DF77D1E669E3B99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d4:af:37:82:be:7b:38:56:3e:9b:36:b3:a4: 23:95:58:f8:58:76:c9:fb:be:e5:b5:91:c9:2c:f8: 8a:46:b2:a8:de:0d:00:5e:a0:b7:5c:d6:24:62:12: 50:e3:60:d2:5a:11:72:c3:52:8c:79:21:ff:b9:89: 78:f8:b5:e0:23:ce:49:1b:3f:da:20:00:0c:aa:81: c8:43:a0:ab:c9:1d:1f:98:e0:86:15:f9:cc:2b:75: 6a:77:70:4f:bc:d7:69:6c:9d:e2:c1:79:fa:a2:c5: d7:50:c9:05:5a:d5:35:3e:80:3c:e0:34:5b:e2:d8: 95:d7:10:72:da:47:a3:93:d8:89:4b:e7:c3:68:e5: 30:65:8a:75:33:ae:2c:f8:8f:e8:2b:a2:20:82:6e: 01:b6:a6:e6:bc:c0:3a:87:67:4d:79:9e:b7:4b:aa: 23:94:39:14:c6:57:a2:be:bd:f4:3a:c3:82:aa:31: 0a:fb:68:cb:28:12:e9:e8:3f:ed:28:19:61:51:93: 86:9a:0c:a3:95:3e:59:fd:7b:3c:10:42:5c:60:08: ac:41:f4:d3:e1:7b:28:aa:3f:e3:b0:27:59:33:81: 53:29:09:76:fd:36:dd:8f:d7:66:d1:f7:9e:72:41: 3f:49:c8:d2:7f:be:3d:03:2a:23:e7:c3:d0:19:4b: 26:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:4E:2D:D2:5A:94:C9:66:1F:CE:95:2D:6D:F7:7D:1E:66:9E:3B:99 X509v3 Authority Key Identifier: keyid:2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/323830343a3937383a3a2f33322d313238203d3e20323633303837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:978::/32 Signature Algorithm: sha256WithRSAEncryption 4b:ac:57:f9:ef:c1:5d:35:ac:53:19:90:34:3f:78:7e:00:80: f2:94:56:10:55:4d:6d:46:84:c6:fb:c8:82:c4:1c:d0:aa:be: 5c:94:c7:1d:c1:a2:aa:7d:1e:ca:c7:74:68:dd:dd:5e:03:88: 4a:70:83:aa:ce:2f:58:25:df:be:d2:a4:bd:a7:24:ec:d7:d1: e0:c8:bf:48:dc:45:be:de:72:e2:9a:b2:4d:34:e4:1e:ad:05: 04:98:44:54:c7:73:20:d5:b8:9b:f2:f4:d1:9d:6c:34:71:a1: 35:4c:38:23:7c:b3:af:da:0d:da:1e:47:36:c0:4f:35:86:e4: 44:b3:32:4e:87:cc:44:db:39:4f:78:5a:67:a9:4c:c7:1e:06: 5e:9d:5c:f2:f6:8e:c3:13:08:f8:5a:5c:f9:ab:dc:6f:b1:66: 5a:03:ab:55:c9:a5:75:c9:a8:4e:8c:f0:46:ae:12:29:08:74: 40:1e:f2:91:e9:ae:b7:64:c4:f7:ec:a8:01:e9:d6:8a:5d:42: b2:cc:11:e8:6c:06:66:0f:2f:dc:b9:6b:6a:ef:98:8e:50:7f: 2a:59:c7:29:a8:2a:ba:54:a4:cb:2d:ba:b3:ec:d9:f3:83:0a: ca:f8:30:c3:ea:41:91:8f:04:30:5f:df:10:40:59:79:45:86: d9:55:9a:3a -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUTdZa42Xp4saIkh1Fpx9MgGtVOCUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQwRDE0OEJERjJFRDRGQkRCRUI4MERCMUVCMzc3RUFB MzY0M0Y5NDAeFw0yNTEwMDkxNDI3MzhaFw0yNjEwMDgxNDMyMzhaMDMxMTAvBgNV BAMTKDY3NEUyREQyNUE5NEM5NjYxRkNFOTUyRDZERjc3RDFFNjY5RTNCOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI1K83gr57OFY+mzazpCOVWPhY dsn7vuW1kcks+IpGsqjeDQBeoLdc1iRiElDjYNJaEXLDUox5If+5iXj4teAjzkkb P9ogAAyqgchDoKvJHR+Y4IYV+cwrdWp3cE+812lsneLBefqixddQyQVa1TU+gDzg NFvi2JXXEHLaR6OT2IlL58No5TBlinUzriz4j+groiCCbgG2pua8wDqHZ015nrdL qiOUORTGV6K+vfQ6w4KqMQr7aMsoEunoP+0oGWFRk4aaDKOVPln9ezwQQlxgCKxB 9NPheyiqP+OwJ1kzgVMpCXb9Nt2P12bR955yQT9JyNJ/vj0DKiPnw9AZSybJAgMB AAGjggJNMIICSTAdBgNVHQ4EFgQUZ04t0lqUyWYfzpUtbfd9HmaeO5kwHwYDVR0j BBgwFoAULQ0Ui98u1Pvb64DbHrN36qNkP5QwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9LRmU5RkczYXhIWm81R2VIRjNmRkZibVdDMTU3dTVuY1RXZGM2WUFxVm1C LzAvMkQwRDE0OEJERjJFRDRGQkRCRUI4MERCMUVCMzc3RUFBMzY0M0Y5NC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yRDBEMTQ4QkRGMkVENEZCREJF QjgwREIxRUIzNzdFQUEzNjQzRjk0LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9L RmU5RkczYXhIWm81R2VIRjNmRkZibVdDMTU3dTVuY1RXZGM2WUFxVm1CLzAvMzIz ODMwMzQzYTM5MzczODNhM2EyZjMzMzIyZDMxMzIzODIwM2QzZTIwMzIzNjMzMzAz ODM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/ BBEwDzANBAIAAjAHAwUAKAQJeDANBgkqhkiG9w0BAQsFAAOCAQEAS6xX+e/BXTWs UxmQND94fgCA8pRWEFVNbUaExvvIgsQc0Kq+XJTHHcGiqn0eysd0aN3dXgOISnCD qs4vWCXfvtKkvack7NfR4Mi/SNxFvt5y4pqyTTTkHq0FBJhEVMdzINW4m/L00Z1s NHGhNUw4I3yzr9oN2h5HNsBPNYbkRLMyTofMRNs5T3haZ6lMxx4GXp1c8vaOwxMI +Fpc+avcb7FmWgOrVcmldcmoTozwRq4SKQh0QB7ykemut2TE9+yoAenWil1CsswR 6GwGZg8v3Llrau+YjlB/KlnHKagqulSkyy26s+zZ84MKyvgww+pBkY8EMF/fEEBZ eUWG2VWaOg== -----END CERTIFICATE-----Generated at Wed Nov 5 05:10:54 2025 by rpki-client