$ rpki-client -vvf rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a383030633a3a2f34382d3438203d3e20323634393936.roa File: 323830343a333132343a383030633a3a2f34382d3438203d3e20323634393936.roa (raw, json) Hash identifier: 00dSCUfZB0ZODIZKobtwszZ1jIqIifxgHkA6ENkKfjU= Subject key identifier: B3:C1:C5:48:B3:68:E6:C0:14:2D:95:C1:D2:49:91:76:6A:3F:07:F0 Certificate issuer: /CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69 Certificate serial: 2AEE558E257AEB1D4D8FA65BA34651245CAE5A0B Authority key identifier: 2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer Subject info access: rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a383030633a3a2f34382d3438203d3e20323634393936.roa Signing time: Wed 09 Jul 2025 15:42:11 +0000 ROA not before: Wed 09 Jul 2025 15:37:11 +0000 ROA not after: Wed 08 Jul 2026 15:42:11 +0000 asID: 264996 IP address blocks: 2804:3124:800c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 26 Jul 2025 14:32:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:ee:55:8e:25:7a:eb:1d:4d:8f:a6:5b:a3:46:51:24:5c:ae:5a:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69 Validity Not Before: Jul 9 15:37:11 2025 GMT Not After : Jul 8 15:42:11 2026 GMT Subject: CN=B3C1C548B368E6C0142D95C1D24991766A3F07F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9b:6d:7d:10:fa:bb:c4:11:ff:80:75:97:ac: 08:6f:72:2c:68:10:f2:ae:e7:c0:2a:9e:a7:4a:23: e6:50:3f:35:0b:25:7e:0c:43:14:6e:62:07:e9:90: e0:3a:1b:bc:52:43:83:35:9a:f7:cc:02:a5:03:27: 64:e8:ca:63:61:fe:3a:1e:07:c9:4b:bb:58:c0:b5: 59:fe:bf:04:e8:99:61:ee:36:c2:98:dd:68:fd:f9: 1e:47:f5:3d:94:20:76:0a:2e:06:cd:01:96:a1:8e: 3c:f8:02:33:eb:3b:d7:26:73:c0:a9:87:f5:e6:a4: 96:6d:e5:c6:38:b2:1f:30:1e:f5:8f:ce:68:a8:a0: 5d:7c:29:e4:00:6d:5c:4b:da:b8:82:ee:43:66:72: 7a:8a:03:0c:0d:41:10:84:e7:e6:e4:58:23:36:cf: 00:2a:a3:57:61:ba:3d:82:cc:dc:46:56:58:b1:6b: 05:4f:a8:ed:00:04:91:9f:66:b1:ea:b7:21:14:9c: a3:5b:2b:78:2d:c5:b1:34:41:9c:99:8b:8c:96:1a: e9:0d:2f:0a:8f:c2:ce:f5:1e:73:9b:6f:8b:b0:88: 78:9a:a6:88:e5:5e:44:c8:4f:65:27:26:72:52:a9: 6d:16:b8:3b:0d:2c:a3:55:cf:00:d6:f7:ce:e5:38: 89:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:C1:C5:48:B3:68:E6:C0:14:2D:95:C1:D2:49:91:76:6A:3F:07:F0 X509v3 Authority Key Identifier: keyid:2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a383030633a3a2f34382d3438203d3e20323634393936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:3124:800c::/48 Signature Algorithm: sha256WithRSAEncryption ac:f5:d8:df:7e:1f:3b:57:ec:b9:1b:c7:60:fd:3d:f1:86:7c: 07:b9:18:b4:ae:2f:a1:f8:7b:29:76:04:fd:3a:9b:c9:68:89: 02:95:12:ea:3f:9d:8c:d8:fe:38:32:19:ab:cb:d1:f0:15:31: 45:ed:64:c7:c5:8c:d0:2a:02:2f:f4:7e:8e:fa:ed:bb:d2:e0: e8:1f:1e:bc:c0:e2:b9:cd:12:66:a1:bc:50:41:ef:d9:ab:de: dd:34:f6:a1:f3:e4:bf:9d:86:a9:13:99:48:19:53:05:2d:8a: ca:a3:be:c6:7b:57:25:03:ee:47:57:22:ff:6c:55:83:f4:c9: 8c:5b:cd:67:a9:e9:ea:1d:af:84:15:f0:22:52:2a:7c:64:c5: e7:a9:49:c5:f2:1d:01:dd:a2:87:d9:21:17:37:40:ca:9b:90: 5f:b9:85:1a:38:0f:77:ee:e5:0e:aa:e8:b1:db:1d:99:21:ee: c4:4e:be:81:3b:9a:e1:cc:8f:15:a3:8a:76:21:d9:dc:77:14: 5c:50:7d:b9:b7:05:78:c1:2d:c3:8f:00:c4:8b:85:16:e7:d7: 5d:6e:19:3c:b1:d1:ae:21:cc:79:55:e6:ff:ec:22:07:36:70: 9c:d8:e2:6d:85:97:3f:5b:cd:4a:bb:d7:65:07:02:5c:8f:e6: b5:cc:3a:37 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIUKu5VjiV66x1Nj6Zbo0ZRJFyuWgswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYzRjEyRTk0NDcxOUYyNEE4RDFBNEIzQzc5ODBGNzBB NkQ5OUQ2OTAeFw0yNTA3MDkxNTM3MTFaFw0yNjA3MDgxNTQyMTFaMDMxMTAvBgNV BAMTKEIzQzFDNTQ4QjM2OEU2QzAxNDJEOTVDMUQyNDk5MTc2NkEzRjA3RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDm219EPq7xBH/gHWXrAhvcixo EPKu58AqnqdKI+ZQPzULJX4MQxRuYgfpkOA6G7xSQ4M1mvfMAqUDJ2ToymNh/joe B8lLu1jAtVn+vwTomWHuNsKY3Wj9+R5H9T2UIHYKLgbNAZahjjz4AjPrO9cmc8Cp h/XmpJZt5cY4sh8wHvWPzmiooF18KeQAbVxL2riC7kNmcnqKAwwNQRCE5+bkWCM2 zwAqo1dhuj2CzNxGVlixawVPqO0ABJGfZrHqtyEUnKNbK3gtxbE0QZyZi4yWGukN LwqPws71HnObb4uwiHiapojlXkTIT2UnJnJSqW0WuDsNLKNVzwDW987lOInzAgMB AAGjggJcMIICWDAdBgNVHQ4EFgQUs8HFSLNo5sAULZXB0kmRdmo/B/AwHwYDVR0j BBgwFoAULz8S6URxnySo0aSzx5gPcKbZnWkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM3N2am9lSEdwUlJ0TGU4c0d5Wk5HTGRUd1V5aURkY1J3bmliYmp5OFI5 ZXQvMS8yRjNGMTJFOTQ0NzE5RjI0QThEMUE0QjNDNzk4MEY3MEE2RDk5RDY5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGM0YxMkU5NDQ3MTlGMjRB OEQxQTRCM0M3OTgwRjcwQTZEOTlENjkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNzdmpvZUhHcFJSdExlOHNHeVpOR0xkVHdVeWlEZGNSd25pYmJqeThSOWV0LzEv MzIzODMwMzQzYTMzMzEzMjM0M2EzODMwMzA2MzNhM2EyZjM0MzgyZDM0MzgyMDNk M2UyMDMyMzYzNDM5MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEMSSADDANBgkqhkiG9w0BAQsF AAOCAQEArPXY334fO1fsuRvHYP098YZ8B7kYtK4vofh7KXYE/TqbyWiJApUS6j+d jNj+ODIZq8vR8BUxRe1kx8WM0CoCL/R+jvrtu9Lg6B8evMDiuc0SZqG8UEHv2ave 3TT2ofPkv52GqROZSBlTBS2KyqO+xntXJQPuR1ci/2xVg/TJjFvNZ6np6h2vhBXw IlIqfGTF56lJxfIdAd2ih9khFzdAypuQX7mFGjgPd+7lDqrosdsdmSHuxE6+gTua 4cyPFaOKdiHZ3HcUXFB9ubcFeMEtw48AxIuFFufXXW4ZPLHRriHMeVXm/+wiBzZw nNjibYWXP1vNSrvXZQcCXI/mtcw6Nw== -----END CERTIFICATE-----Generated at Sat Jul 26 00:13:29 2025 by rpki-client