$ rpki-client -vvf rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a383030303a3a2f33332d3333203d3e20323638313331.roa File: 323830343a353837383a383030303a3a2f33332d3333203d3e20323638313331.roa (raw, json) Hash identifier: p7Oa9YECuMMpX3lKf1BIHAgMsEdZxp1BAHLE2bpiWLI= Subject key identifier: 0E:AA:B1:96:B9:68:5E:82:D4:2F:9E:36:1F:8A:91:22:C9:83:DD:CC Certificate issuer: /CN=A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11 Certificate serial: 0B909F67E6F714B8D643DC1D0F6B07C5D2282AE2 Authority key identifier: A0:CD:D2:CF:58:9D:FC:4A:B4:82:AC:02:EC:05:EB:B5:C3:BE:5B:11 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer Subject info access: rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a383030303a3a2f33332d3333203d3e20323638313331.roa Signing time: Tue 03 Jun 2025 16:36:27 +0000 ROA not before: Tue 03 Jun 2025 16:31:27 +0000 ROA not after: Tue 02 Jun 2026 16:36:27 +0000 asID: 268131 IP address blocks: 2804:5878:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.crl rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 10 Jun 2025 22:51:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:90:9f:67:e6:f7:14:b8:d6:43:dc:1d:0f:6b:07:c5:d2:28:2a:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11 Validity Not Before: Jun 3 16:31:27 2025 GMT Not After : Jun 2 16:36:27 2026 GMT Subject: CN=0EAAB196B9685E82D42F9E361F8A9122C983DDCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:59:99:15:1c:f8:57:10:dd:81:e1:dc:c1:4e: fe:06:97:b7:4c:77:7d:0c:8c:63:0d:42:83:ac:ab: 4f:b5:a6:4b:02:50:ef:a9:ff:34:63:d7:6e:bc:18: c5:38:59:52:cf:27:43:b3:6d:93:9d:64:0c:89:d5: 03:31:cb:c4:39:8f:f4:39:01:9a:e9:94:87:67:96: 54:d3:55:ac:58:c9:e3:25:19:09:84:94:1d:63:27: 28:49:bc:29:2a:8a:8a:7f:4a:bb:c2:52:ee:a4:f0: cd:8e:8c:27:04:c5:c3:a7:cc:69:b7:36:a0:fc:06: 11:2b:b0:dc:90:fc:66:6e:10:cd:b5:5f:71:f0:59: f1:0e:f2:1f:6c:9c:08:49:cf:cf:df:cb:83:ff:bc: c9:01:12:5d:9c:3f:ab:bc:94:53:0f:b3:54:61:85: aa:94:ef:ad:45:58:9c:ef:8d:79:7f:4a:b0:fc:52: a4:9f:2a:a0:5e:eb:35:40:1d:15:0f:57:0e:1f:df: 01:bc:8f:7f:55:8f:c4:65:65:ef:bd:64:21:09:e9: 6d:5b:70:99:14:e2:2b:a8:70:c2:f9:13:47:68:0f: 81:c3:7f:73:f9:6e:0f:45:da:86:f3:b8:75:1c:cb: 3d:e4:42:94:72:db:de:ef:ed:0b:03:a8:ee:63:3a: 2f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:AA:B1:96:B9:68:5E:82:D4:2F:9E:36:1F:8A:91:22:C9:83:DD:CC X509v3 Authority Key Identifier: keyid:A0:CD:D2:CF:58:9D:FC:4A:B4:82:AC:02:EC:05:EB:B5:C3:BE:5B:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a383030303a3a2f33332d3333203d3e20323638313331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:5878:8000::/33 Signature Algorithm: sha256WithRSAEncryption 5c:22:e4:b2:d7:3d:54:e3:fd:8f:6b:9a:17:2c:4c:68:30:80: 5b:96:23:97:a6:db:62:35:62:09:d1:e7:5b:ec:40:9f:b4:f5: ff:f9:01:9f:f1:2a:76:67:73:4b:ce:24:74:46:1e:cc:e0:f5: 93:b0:e7:c1:97:93:0f:64:f4:1f:33:1e:14:c7:7d:c1:f5:05: 25:14:1c:e5:1b:44:58:3f:d5:15:8b:9c:f5:00:c2:56:ce:1c: 73:f2:9e:19:5d:c9:b0:b6:8c:1c:16:65:0e:5a:65:98:35:9e: 2b:56:40:0f:82:64:88:e1:4d:31:b3:cf:c6:71:99:37:ae:19: 72:bb:ee:69:e6:cd:7b:a6:6c:dd:33:ad:28:e0:59:ca:78:08: 06:f0:0d:5e:0c:b8:ff:3a:df:69:fb:fc:89:28:6b:c6:9f:3b: 6d:68:4e:ab:12:3f:a9:31:dc:dd:ea:1e:5f:de:f3:12:eb:74: 5d:06:14:d2:23:19:ff:f0:b3:7b:72:62:30:5c:91:dc:c5:7e: ed:a3:3b:cd:e4:32:65:1a:de:31:02:39:cb:68:14:9a:a7:01: e3:2a:90:e9:fc:f5:5f:21:60:90:b1:d8:4f:8f:fe:2a:d7:14: 32:20:b8:11:4c:10:05:9e:7b:92:cc:7e:80:2e:64:7b:74:03: 28:c1:43:28 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUC5CfZ+b3FLjWQ9wdD2sHxdIoKuIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBDREQyQ0Y1ODlERkM0QUI0ODJBQzAyRUMwNUVCQjVD M0JFNUIxMTAeFw0yNTA2MDMxNjMxMjdaFw0yNjA2MDIxNjM2MjdaMDMxMTAvBgNV BAMTKDBFQUFCMTk2Qjk2ODVFODJENDJGOUUzNjFGOEE5MTIyQzk4M0REQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCWZkVHPhXEN2B4dzBTv4Gl7dM d30MjGMNQoOsq0+1pksCUO+p/zRj1268GMU4WVLPJ0OzbZOdZAyJ1QMxy8Q5j/Q5 AZrplIdnllTTVaxYyeMlGQmElB1jJyhJvCkqiop/SrvCUu6k8M2OjCcExcOnzGm3 NqD8BhErsNyQ/GZuEM21X3HwWfEO8h9snAhJz8/fy4P/vMkBEl2cP6u8lFMPs1Rh haqU761FWJzvjXl/SrD8UqSfKqBe6zVAHRUPVw4f3wG8j39Vj8RlZe+9ZCEJ6W1b cJkU4iuocML5E0doD4HDf3P5bg9F2obzuHUcyz3kQpRy297v7QsDqO5jOi+1AgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUDqqxlrloXoLUL542H4qRIsmD3cwwHwYDVR0j BBgwFoAUoM3Sz1id/Eq0gqwC7AXrtcO+WxEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN2JlN0VQNGVneEJWYmM5NkgzV3ZCMUdNU2V3azlUN0pZMnRXR1Vack5G QkcvMC9BMENERDJDRjU4OURGQzRBQjQ4MkFDMDJFQzA1RUJCNUMzQkU1QjExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EwQ0REMkNGNTg5REZDNEFC NDgyQUMwMkVDMDVFQkI1QzNCRTVCMTEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzdiZTdFUDRlZ3hCVmJjOTZIM1d2QjFHTVNld2s5VDdKWTJ0V0dVWnJORkJHLzAv MzIzODMwMzQzYTM1MzgzNzM4M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk M2UyMDMyMzYzODMxMzMzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEWHiAMA0GCSqGSIb3DQEBCwUA A4IBAQBcIuSy1z1U4/2Pa5oXLExoMIBbliOXpttiNWIJ0edb7ECftPX/+QGf8Sp2 Z3NLziR0Rh7M4PWTsOfBl5MPZPQfMx4Ux33B9QUlFBzlG0RYP9UVi5z1AMJWzhxz 8p4ZXcmwtowcFmUOWmWYNZ4rVkAPgmSI4U0xs8/GcZk3rhlyu+5p5s17pmzdM60o 4FnKeAgG8A1eDLj/Ot9p+/yJKGvGnzttaE6rEj+pMdzd6h5f3vMS63RdBhTSIxn/ 8LN7cmIwXJHcxX7tozvN5DJlGt4xAjnLaBSapwHjKpDp/PVfIWCQsdhPj/4q1xQy ILgRTBAFnnuSzH6ALmR7dAMowUMo -----END CERTIFICATE-----Generated at Tue Jun 10 02:21:15 2025 by rpki-client