$ rpki-client -vvf rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/323830343a336466343a653030303a3a2f33352d3335203d3e20323636353635.roa File: 323830343a336466343a653030303a3a2f33352d3335203d3e20323636353635.roa (raw, json) Hash identifier: cDl+awvuriQIuht2+Qfab8M6pL2Vc2uHe7C52FKdRuc= Subject key identifier: EC:AC:0D:E6:C9:F7:A0:F5:03:B5:53:76:06:40:9A:02:12:F3:CC:D9 Certificate issuer: /CN=8D2922D358225395ABA691BA6723BAA778294D49 Certificate serial: 5F09E2D69DB13F8EE842530CE1A5B99BF38A5C33 Authority key identifier: 8D:29:22:D3:58:22:53:95:AB:A6:91:BA:67:23:BA:A7:78:29:4D:49 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D2922D358225395ABA691BA6723BAA778294D49.cer Subject info access: rsync://rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/323830343a336466343a653030303a3a2f33352d3335203d3e20323636353635.roa Signing time: Sat 19 Jul 2025 02:12:45 +0000 ROA not before: Sat 19 Jul 2025 02:07:45 +0000 ROA not after: Sat 18 Jul 2026 02:12:45 +0000 asID: 266565 IP address blocks: 2804:3df4:e000::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/8D2922D358225395ABA691BA6723BAA778294D49.crl rsync://rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/8D2922D358225395ABA691BA6723BAA778294D49.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D2922D358225395ABA691BA6723BAA778294D49.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 26 Jul 2025 02:22:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:09:e2:d6:9d:b1:3f:8e:e8:42:53:0c:e1:a5:b9:9b:f3:8a:5c:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D2922D358225395ABA691BA6723BAA778294D49 Validity Not Before: Jul 19 02:07:45 2025 GMT Not After : Jul 18 02:12:45 2026 GMT Subject: CN=ECAC0DE6C9F7A0F503B5537606409A0212F3CCD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6a:b0:7b:75:c7:cb:c1:15:67:d4:4b:98:99: ca:3a:8b:57:13:fc:2a:56:83:ec:42:6f:54:fa:6f: 60:7e:e0:67:0a:c4:b7:af:67:c0:99:7c:69:6d:ff: 9e:f5:f3:91:50:c0:17:00:d3:c3:a9:91:70:c2:fb: 23:9c:23:e0:1a:fe:04:3f:7f:b7:9d:b3:2a:28:2c: 51:04:ff:ab:55:5c:15:b2:c6:e6:5d:7c:58:ac:03: 4e:12:d2:15:26:9e:2d:9f:e0:ad:60:7b:3f:f7:0c: 23:54:f2:2d:ad:20:b3:09:75:39:e7:a1:4e:2a:72: fb:03:89:b7:95:ab:b8:eb:aa:3b:55:d9:c4:fb:85: 55:35:1c:ea:a7:43:5c:9f:72:e9:b5:5f:2d:8f:a4: d0:f7:b7:3e:5e:29:51:d3:72:41:d1:fa:ae:72:18: aa:cc:07:b6:c6:6c:f0:e1:1a:e1:1a:de:d1:fc:c6: 52:92:80:06:f5:e8:47:f9:7c:12:e5:ab:55:a8:92: 07:34:02:b9:3e:93:12:d1:c2:25:9f:d0:8a:c3:35: 3c:96:37:f9:80:1b:b6:de:4e:18:d5:04:11:99:0c: f1:eb:fd:1c:c6:96:8d:5e:0b:5d:5d:25:8d:56:af: 67:e8:d7:41:bd:75:1a:ad:61:61:4e:7f:59:78:01: 62:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:AC:0D:E6:C9:F7:A0:F5:03:B5:53:76:06:40:9A:02:12:F3:CC:D9 X509v3 Authority Key Identifier: keyid:8D:29:22:D3:58:22:53:95:AB:A6:91:BA:67:23:BA:A7:78:29:4D:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/8D2922D358225395ABA691BA6723BAA778294D49.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D2922D358225395ABA691BA6723BAA778294D49.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/323830343a336466343a653030303a3a2f33352d3335203d3e20323636353635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:3df4:e000::/35 Signature Algorithm: sha256WithRSAEncryption aa:ed:3c:33:eb:ee:3d:54:39:3a:4e:a8:6b:f3:93:09:ad:23: c5:f4:79:26:2f:07:03:44:3a:02:41:cf:d4:02:b3:57:9a:14: 2a:03:76:fd:9c:a3:52:ea:e5:83:49:d5:cc:77:63:42:68:6b: c2:c1:72:60:81:f7:fb:0b:cd:46:95:19:e5:37:0f:c1:07:0c: 3a:dd:39:a5:67:e6:c8:a1:68:09:44:3d:56:8a:39:c2:0a:a9: e8:5b:49:d8:b9:07:42:34:34:3c:fa:d5:9c:dd:a1:3f:e5:c3: a1:c8:ec:33:f1:7f:d1:f0:cd:74:9a:f4:34:68:b1:b0:16:1f: 57:49:82:ec:05:c5:af:a2:dc:b8:d2:1f:72:26:a2:f3:0d:f8: 9c:88:b3:52:1e:5b:0d:b6:ff:05:d2:c5:a0:2a:03:2f:c3:23: a4:a1:ca:e2:ad:04:1f:86:40:f4:d0:2c:fa:63:e2:9f:78:57: 8c:e3:93:ab:0d:f2:a0:42:a9:9e:60:7f:9f:3d:97:0a:d1:45: 86:cb:c2:59:96:1d:4c:73:24:49:fa:c8:69:04:11:7c:42:7e: c6:3b:5b:18:92:0c:af:53:9e:6e:47:b9:04:01:ed:cf:b0:f8: b5:d5:68:f3:f3:47:f5:44:e9:f1:be:05:f3:77:c5:73:eb:e5: 72:f4:5d:da -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUXwni1p2xP47oQlMM4aW5m/OKXDMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQyOTIyRDM1ODIyNTM5NUFCQTY5MUJBNjcyM0JBQTc3 ODI5NEQ0OTAeFw0yNTA3MTkwMjA3NDVaFw0yNjA3MTgwMjEyNDVaMDMxMTAvBgNV BAMTKEVDQUMwREU2QzlGN0EwRjUwM0I1NTM3NjA2NDA5QTAyMTJGM0NDRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIarB7dcfLwRVn1EuYmco6i1cT /CpWg+xCb1T6b2B+4GcKxLevZ8CZfGlt/57185FQwBcA08OpkXDC+yOcI+Aa/gQ/ f7edsyooLFEE/6tVXBWyxuZdfFisA04S0hUmni2f4K1gez/3DCNU8i2tILMJdTnn oU4qcvsDibeVq7jrqjtV2cT7hVU1HOqnQ1yfcum1Xy2PpND3tz5eKVHTckHR+q5y GKrMB7bGbPDhGuEa3tH8xlKSgAb16Ef5fBLlq1Wokgc0Ark+kxLRwiWf0IrDNTyW N/mAG7beThjVBBGZDPHr/RzGlo1eC11dJY1Wr2fo10G9dRqtYWFOf1l4AWJfAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQU7KwN5sn3oPUDtVN2BkCaAhLzzNkwHwYDVR0j BBgwFoAUjSki01giU5WrppG6ZyO6p3gpTUkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR2Vib2VicnpqUDl6RXl6emhEcHRrcjNENWc4ZWtMY01wN0trdGVudGpz MmMvMC84RDI5MjJEMzU4MjI1Mzk1QUJBNjkxQkE2NzIzQkFBNzc4Mjk0RDQ5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhEMjkyMkQzNTgyMjUzOTVB QkE2OTFCQTY3MjNCQUE3NzgyOTRENDkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0dlYm9lYnJ6alA5ekV5enpoRHB0a3IzRDVnOGVrTGNNcDdLa3RlbnRqczJjLzAv MzIzODMwMzQzYTMzNjQ2NjM0M2E2NTMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk M2UyMDMyMzYzNjM1MzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSgEPfTgMA0GCSqGSIb3DQEBCwUA A4IBAQCq7Twz6+49VDk6Tqhr85MJrSPF9HkmLwcDRDoCQc/UArNXmhQqA3b9nKNS 6uWDSdXMd2NCaGvCwXJggff7C81GlRnlNw/BBww63TmlZ+bIoWgJRD1WijnCCqno W0nYuQdCNDQ8+tWc3aE/5cOhyOwz8X/R8M10mvQ0aLGwFh9XSYLsBcWvoty40h9y JqLzDficiLNSHlsNtv8F0sWgKgMvwyOkocrirQQfhkD00Cz6Y+KfeFeM45OrDfKg QqmeYH+fPZcK0UWGy8JZlh1McyRJ+shpBBF8Qn7GO1sYkgyvU55uR7kEAe3PsPi1 1Wjz80f1ROnxvgXzd8Vz6+Vy9F3a -----END CERTIFICATE-----Generated at Fri Jul 25 12:52:53 2025 by rpki-client