$ rpki-client -vvf rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a633030303a3a2f33342d3334203d3e20323638313331.roa File: 323830343a353837383a633030303a3a2f33342d3334203d3e20323638313331.roa (raw, json) Hash identifier: 1JBlkGMIGxMWY7LQTFqU4rMW/3V4sS50t4cD7k2sodI= Subject key identifier: F8:BD:6D:9C:16:AE:2C:AF:A9:D9:F9:96:B0:AC:6B:33:C8:86:15:5B Certificate issuer: /CN=A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11 Certificate serial: 67F183329E3A872E50036B7BF74A5C24DC630E4A Authority key identifier: A0:CD:D2:CF:58:9D:FC:4A:B4:82:AC:02:EC:05:EB:B5:C3:BE:5B:11 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer Subject info access: rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a633030303a3a2f33342d3334203d3e20323638313331.roa Signing time: Tue 03 Jun 2025 16:36:26 +0000 ROA not before: Tue 03 Jun 2025 16:31:26 +0000 ROA not after: Tue 02 Jun 2026 16:36:26 +0000 asID: 268131 IP address blocks: 2804:5878:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.crl rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 13 Jun 2025 21:22:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:f1:83:32:9e:3a:87:2e:50:03:6b:7b:f7:4a:5c:24:dc:63:0e:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11 Validity Not Before: Jun 3 16:31:26 2025 GMT Not After : Jun 2 16:36:26 2026 GMT Subject: CN=F8BD6D9C16AE2CAFA9D9F996B0AC6B33C886155B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fc:64:3b:52:4b:4b:3d:5d:7e:71:61:e9:21: ec:a4:0f:c2:b3:b4:64:53:ed:96:1b:4a:20:a4:44: fc:07:1d:09:3f:7a:a7:38:20:88:5d:02:9f:d0:fe: b9:25:78:b1:09:b6:67:be:c9:56:d0:4f:dd:4c:85: 02:c7:2f:1d:26:4b:15:f6:f3:73:5b:5f:04:4d:d6: ca:77:a3:e7:1b:e9:4e:d2:8e:ae:13:ad:ca:bd:ca: 5c:ac:cc:68:32:37:87:7d:ba:46:e5:4f:3a:26:79: 9e:9a:f2:b8:51:6f:d9:da:ae:75:72:71:5c:02:86: e5:f4:b2:82:37:c2:b5:c4:14:00:14:37:ed:57:d0: f6:5b:8b:9a:4d:51:ed:c8:89:00:f1:29:ea:71:e7: 8c:ec:25:4f:c1:24:9a:e3:9e:54:f9:1b:9a:0c:20: e5:b1:3b:71:5e:10:e3:bc:34:80:79:87:7a:9e:01: e4:23:9a:91:43:ed:8c:fe:27:dc:aa:7d:f6:e3:83: 77:d7:98:9c:2d:36:c1:ce:75:9e:cc:27:d5:74:1f: c4:7e:56:eb:14:b7:da:53:48:71:c4:13:7d:da:55: b0:fa:79:ee:01:13:fd:8d:79:e0:3b:51:ca:82:ca: fd:40:91:60:a2:6c:d8:07:f6:bb:1e:5c:47:a6:1d: 18:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:BD:6D:9C:16:AE:2C:AF:A9:D9:F9:96:B0:AC:6B:33:C8:86:15:5B X509v3 Authority Key Identifier: keyid:A0:CD:D2:CF:58:9D:FC:4A:B4:82:AC:02:EC:05:EB:B5:C3:BE:5B:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a633030303a3a2f33342d3334203d3e20323638313331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:5878:c000::/34 Signature Algorithm: sha256WithRSAEncryption 81:f3:a5:5e:d4:81:2b:b3:e2:4d:0f:86:de:07:23:e3:0f:40: 64:be:7d:8a:79:c7:e5:41:91:aa:5a:b4:5a:83:8e:f6:11:49: a7:ea:56:b9:fc:e3:9b:92:32:7c:89:90:5a:01:6a:27:42:4f: db:27:9a:0a:d4:87:5a:e3:7d:20:fa:1a:1c:4b:93:52:68:ed: 0a:f9:e4:cd:94:4d:c5:37:b6:8d:95:2c:e5:66:a4:6c:61:a0: fa:07:8a:8a:40:61:12:d8:fc:cd:d0:8b:b2:61:2f:ea:e2:44: 10:df:7c:bf:0c:1e:7e:5a:4c:bc:69:10:42:98:e6:21:26:55: 13:7a:dd:4c:a5:38:a7:cb:ed:b9:f5:33:f4:99:fb:ac:1b:87: 15:b7:63:6a:77:f7:37:60:78:3c:32:d5:a6:b3:d4:46:52:a6: a1:0d:44:3f:cf:80:06:11:1f:e9:eb:89:3e:2a:3c:67:12:52: 44:19:59:b7:e9:01:93:78:72:23:52:c5:48:99:b2:7e:6b:fd: 3b:36:66:49:b6:fc:75:a2:f7:13:0e:70:6b:3c:d1:39:bd:75: e0:1a:0a:a4:e3:2c:15:83:ac:04:17:36:db:e7:83:33:3c:aa: 31:c0:80:93:33:b9:56:24:ea:96:4f:71:f1:9d:69:fc:97:8d: 99:a3:fe:00 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUZ/GDMp46hy5QA2t790pcJNxjDkowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBDREQyQ0Y1ODlERkM0QUI0ODJBQzAyRUMwNUVCQjVD M0JFNUIxMTAeFw0yNTA2MDMxNjMxMjZaFw0yNjA2MDIxNjM2MjZaMDMxMTAvBgNV BAMTKEY4QkQ2RDlDMTZBRTJDQUZBOUQ5Rjk5NkIwQUM2QjMzQzg4NjE1NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR/GQ7UktLPV1+cWHpIeykD8Kz tGRT7ZYbSiCkRPwHHQk/eqc4IIhdAp/Q/rkleLEJtme+yVbQT91MhQLHLx0mSxX2 83NbXwRN1sp3o+cb6U7Sjq4Trcq9ylyszGgyN4d9ukblTzomeZ6a8rhRb9narnVy cVwChuX0soI3wrXEFAAUN+1X0PZbi5pNUe3IiQDxKepx54zsJU/BJJrjnlT5G5oM IOWxO3FeEOO8NIB5h3qeAeQjmpFD7Yz+J9yqffbjg3fXmJwtNsHOdZ7MJ9V0H8R+ VusUt9pTSHHEE33aVbD6ee4BE/2NeeA7UcqCyv1AkWCibNgH9rseXEemHRghAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQU+L1tnBauLK+p2fmWsKxrM8iGFVswHwYDVR0j BBgwFoAUoM3Sz1id/Eq0gqwC7AXrtcO+WxEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN2JlN0VQNGVneEJWYmM5NkgzV3ZCMUdNU2V3azlUN0pZMnRXR1Vack5G QkcvMC9BMENERDJDRjU4OURGQzRBQjQ4MkFDMDJFQzA1RUJCNUMzQkU1QjExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EwQ0REMkNGNTg5REZDNEFC NDgyQUMwMkVDMDVFQkI1QzNCRTVCMTEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzdiZTdFUDRlZ3hCVmJjOTZIM1d2QjFHTVNld2s5VDdKWTJ0V0dVWnJORkJHLzAv MzIzODMwMzQzYTM1MzgzNzM4M2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzYzODMxMzMzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEWHjAMA0GCSqGSIb3DQEBCwUA A4IBAQCB86Ve1IErs+JND4beByPjD0Bkvn2KecflQZGqWrRag472EUmn6la5/OOb kjJ8iZBaAWonQk/bJ5oK1Ida430g+hocS5NSaO0K+eTNlE3FN7aNlSzlZqRsYaD6 B4qKQGES2PzN0IuyYS/q4kQQ33y/DB5+Wky8aRBCmOYhJlUTet1MpTiny+259TP0 mfusG4cVt2Nqd/c3YHg8MtWms9RGUqahDUQ/z4AGER/p64k+KjxnElJEGVm36QGT eHIjUsVImbJ+a/07NmZJtvx1ovcTDnBrPNE5vXXgGgqk4ywVg6wEFzbb54MzPKox wICTM7lWJOqWT3HxnWn8l42Zo/4A -----END CERTIFICATE-----Generated at Fri Jun 13 08:18:23 2025 by rpki-client