$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a3a2f33322d3438203d3e20323633303236.roa File: 323830343a6132383a3a2f33322d3438203d3e20323633303236.roa (raw, json) Hash identifier: 6nFTNuG5EFWl6bFOpqqneFS6n/37QZ9k+qctY+fvJsM= Subject key identifier: 7A:D9:B5:5F:5A:84:D9:70:1E:60:0C:C3:F8:9D:24:BD:BC:DF:BE:6F Certificate issuer: /CN=41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68 Certificate serial: 2763F8E2844C53F8FA4C36993B6C330D7CE73EA9 Authority key identifier: 41:FD:33:29:BA:EE:7F:DE:9F:A6:AE:86:AE:40:25:B1:BF:AE:0A:68 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.cer Subject info access: rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a3a2f33322d3438203d3e20323633303236.roa Signing time: Mon 27 Oct 2025 14:50:52 +0000 ROA not before: Mon 27 Oct 2025 14:45:52 +0000 ROA not after: Mon 26 Oct 2026 14:50:52 +0000 asID: 263026 IP address blocks: 2804:a28::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.crl rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 16:46:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:63:f8:e2:84:4c:53:f8:fa:4c:36:99:3b:6c:33:0d:7c:e7:3e:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68 Validity Not Before: Oct 27 14:45:52 2025 GMT Not After : Oct 26 14:50:52 2026 GMT Subject: CN=7AD9B55F5A84D9701E600CC3F89D24BDBCDFBE6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a1:16:f4:76:0c:bd:15:74:ea:fd:87:f1:bf: ff:d5:cc:b9:3b:e8:0f:d8:9a:4e:5b:da:d1:8b:b5: 40:d8:29:92:ae:12:74:fe:10:1e:0c:13:e3:83:cd: 9f:53:b3:e0:54:b7:08:de:54:64:ca:3f:f1:b4:d0: de:68:f8:60:cf:ab:c5:71:1c:78:a4:41:3d:68:98: a6:d8:de:e4:3c:80:3a:8c:1c:05:df:27:86:a5:27: 4b:e8:84:36:09:44:33:cd:09:93:9d:84:e5:85:ef: 1b:e2:5d:cd:36:02:f7:3f:a1:f8:89:1a:72:87:bb: b7:74:21:9b:2b:2c:03:17:92:9a:25:33:2b:75:6a: 08:0f:16:87:d5:55:ae:8a:64:cd:da:a3:0b:32:50: d6:b6:d3:64:65:19:c1:db:75:76:cc:8f:7c:fd:6c: 30:72:3b:d2:66:bc:d6:d7:48:2f:b2:62:01:4d:bd: 7d:2e:a2:0d:23:c3:b7:76:3e:1c:cb:36:ea:a2:92: af:91:87:86:8b:29:26:b7:b8:0c:46:68:5c:53:0c: 45:00:68:26:5f:46:23:92:f2:8e:aa:43:8a:4e:cc: 15:2f:c5:48:eb:55:99:6e:64:9e:59:49:eb:83:49: 8f:a9:e7:fd:8a:2e:f2:45:50:2d:60:f5:f1:9b:ac: a0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:D9:B5:5F:5A:84:D9:70:1E:60:0C:C3:F8:9D:24:BD:BC:DF:BE:6F X509v3 Authority Key Identifier: keyid:41:FD:33:29:BA:EE:7F:DE:9F:A6:AE:86:AE:40:25:B1:BF:AE:0A:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a3a2f33322d3438203d3e20323633303236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:a28::/32 Signature Algorithm: sha256WithRSAEncryption 8e:45:09:c0:d6:83:7a:9c:d5:c3:0f:b9:56:0c:e2:a2:e6:40: 0d:4f:ff:06:f2:67:4b:64:ad:e2:ee:c8:d0:aa:50:51:dc:81: b4:8b:d0:30:98:8c:58:2a:b5:d9:8f:0f:d9:ea:ba:2c:d6:c4: bb:63:16:dd:d2:ae:a2:a1:67:8c:1e:c8:6c:26:01:a9:a0:40: 3b:6c:dc:f0:b8:0a:f0:f6:69:44:75:23:2a:e6:42:a9:49:c6: a7:c6:d4:31:2f:ff:2d:1d:8f:a9:da:bf:27:bb:24:64:f1:7f: f6:86:e4:5a:6c:0c:7a:f0:b5:f5:ee:ef:42:76:69:ec:f1:13: fa:6d:32:b6:d0:f6:5d:cc:13:b4:a0:15:83:12:48:cb:8a:b7: 61:96:7c:60:c8:ed:30:1c:57:13:bb:f9:72:b9:4e:9a:65:9b: 42:f8:d1:83:55:36:8c:4f:3b:d1:c5:32:99:5f:fc:47:42:a5: 0d:2d:7b:d6:14:55:db:28:50:d8:ed:4f:96:8c:b0:21:d1:27: 5c:3e:8e:8d:28:43:29:ec:24:e4:61:87:a8:1b:ae:87:fb:d2: e6:aa:49:3d:bd:1f:ae:41:f5:0f:46:44:60:06:a7:8a:b4:8f: 86:c2:db:aa:c0:a4:24:66:06:a8:93:6a:2b:c8:dd:c2:21:31: 68:0d:1e:4e -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUJ2P44oRMU/j6TDaZO2wzDXznPqkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFGRDMzMjlCQUVFN0ZERTlGQTZBRTg2QUU0MDI1QjFC RkFFMEE2ODAeFw0yNTEwMjcxNDQ1NTJaFw0yNjEwMjYxNDUwNTJaMDMxMTAvBgNV BAMTKDdBRDlCNTVGNUE4NEQ5NzAxRTYwMENDM0Y4OUQyNEJEQkNERkJFNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHoRb0dgy9FXTq/Yfxv//VzLk7 6A/Ymk5b2tGLtUDYKZKuEnT+EB4ME+ODzZ9Ts+BUtwjeVGTKP/G00N5o+GDPq8Vx HHikQT1omKbY3uQ8gDqMHAXfJ4alJ0vohDYJRDPNCZOdhOWF7xviXc02Avc/ofiJ GnKHu7d0IZsrLAMXkpolMyt1aggPFofVVa6KZM3aowsyUNa202RlGcHbdXbMj3z9 bDByO9JmvNbXSC+yYgFNvX0uog0jw7d2PhzLNuqikq+Rh4aLKSa3uAxGaFxTDEUA aCZfRiOS8o6qQ4pOzBUvxUjrVZluZJ5ZSeuDSY+p5/2KLvJFUC1g9fGbrKC9AgMB AAGjggJLMIICRzAdBgNVHQ4EFgQUetm1X1qE2XAeYAzD+J0kvbzfvm8wHwYDVR0j BBgwFoAUQf0zKbruf96fpq6GrkAlsb+uCmgwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby94WHBzQWd2cDY5dEttcDNQNUJFOVlkaWR1QXoyZEJOOEVXYW4xdFZBQ2Jj LzAvNDFGRDMzMjlCQUVFN0ZERTlGQTZBRTg2QUU0MDI1QjFCRkFFMEE2OC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS80MUZEMzMyOUJBRUU3RkRFOUZB NkFFODZBRTQwMjVCMUJGQUUwQTY4LmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYG CCsGAQUFBzALhoGJcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby94 WHBzQWd2cDY5dEttcDNQNUJFOVlkaWR1QXoyZEJOOEVXYW4xdFZBQ2JjLzAvMzIz ODMwMzQzYTYxMzIzODNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzMzMwMzIz Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR MA8wDQQCAAIwBwMFACgECigwDQYJKoZIhvcNAQELBQADggEBAI5FCcDWg3qc1cMP uVYM4qLmQA1P/wbyZ0tkreLuyNCqUFHcgbSL0DCYjFgqtdmPD9nquizWxLtjFt3S rqKhZ4weyGwmAamgQDts3PC4CvD2aUR1IyrmQqlJxqfG1DEv/y0dj6navye7JGTx f/aG5FpsDHrwtfXu70J2aezxE/ptMrbQ9l3ME7SgFYMSSMuKt2GWfGDI7TAcVxO7 +XK5Tpplm0L40YNVNoxPO9HFMplf/EdCpQ0te9YUVdsoUNjtT5aMsCHRJ1w+jo0o QynsJORhh6gbrof70uaqST29H65B9Q9GRGAGp4q0j4bC26rApCRmBqiTaivI3cIh MWgNHk4= -----END CERTIFICATE-----Generated at Wed Nov 5 16:46:11 2025 by rpki-client