$ rpki-client -vvf rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/323830343a353231383a3a2f33322d3335203d3e20323638343934.roa File: 323830343a353231383a3a2f33322d3335203d3e20323638343934.roa (raw, json) Hash identifier: gmytMNlxeH3j9hJIGBJLZdvIvhQMZEwJGXACmpzXzXk= Subject key identifier: 25:63:4F:D1:73:44:75:5A:48:9F:61:9A:5B:39:84:4C:77:47:4B:CE Certificate issuer: /CN=67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B Certificate serial: 0EACC297442105E7E23B4CAD88EDE91B16071E66 Authority key identifier: 67:21:0E:55:22:F5:15:3F:DA:7A:73:E4:EE:2B:30:0B:C0:CC:9A:0B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.cer Subject info access: rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/323830343a353231383a3a2f33322d3335203d3e20323638343934.roa Signing time: Wed 05 Mar 2025 19:00:06 +0000 ROA not before: Wed 05 Mar 2025 18:55:06 +0000 ROA not after: Wed 04 Mar 2026 19:00:06 +0000 asID: 268494 IP address blocks: 2804:5218::/32 maxlen: 35 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.crl rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Apr 2025 13:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:ac:c2:97:44:21:05:e7:e2:3b:4c:ad:88:ed:e9:1b:16:07:1e:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B Validity Not Before: Mar 5 18:55:06 2025 GMT Not After : Mar 4 19:00:06 2026 GMT Subject: CN=3082010A0282010100B94B0FCA6E25A1E9D022C05B9E7795BBD11747763BB919D746DD5E86962AA0A4D6C43BA03A8655B629161A1E030188A822EBD9253ABABE564A6EDF71ACE45CF44623349B695E7830165A77F0742AC4FCA5F36F7851EEA72F2051BFE83779D6B3C82A1CC536347816DBD9BDD04D27FB424CDE9FC04A9C79376E450D2FD1689872CA1354568BE9C6D28971EBDE3E288F30E7EFAA14D20E4033ABDB93A08165398DF007F2ED639821900F407FB52EF5AC6C61354BA9FE0F7E6F49C084081CFAD1A5CD5B929A5D9910E817EEAD9B25A3B7E2957759D96510D75165842E6705F3903E7E10C992DB543F1374EF350A2603FE01F08AB40F84EC03B6A992C79362AF186B0203010001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4b:0f:ca:6e:25:a1:e9:d0:22:c0:5b:9e:77: 95:bb:d1:17:47:76:3b:b9:19:d7:46:dd:5e:86:96: 2a:a0:a4:d6:c4:3b:a0:3a:86:55:b6:29:16:1a:1e: 03:01:88:a8:22:eb:d9:25:3a:ba:be:56:4a:6e:df: 71:ac:e4:5c:f4:46:23:34:9b:69:5e:78:30:16:5a: 77:f0:74:2a:c4:fc:a5:f3:6f:78:51:ee:a7:2f:20: 51:bf:e8:37:79:d6:b3:c8:2a:1c:c5:36:34:78:16: db:d9:bd:d0:4d:27:fb:42:4c:de:9f:c0:4a:9c:79: 37:6e:45:0d:2f:d1:68:98:72:ca:13:54:56:8b:e9: c6:d2:89:71:eb:de:3e:28:8f:30:e7:ef:aa:14:d2: 0e:40:33:ab:db:93:a0:81:65:39:8d:f0:07:f2:ed: 63:98:21:90:0f:40:7f:b5:2e:f5:ac:6c:61:35:4b: a9:fe:0f:7e:6f:49:c0:84:08:1c:fa:d1:a5:cd:5b: 92:9a:5d:99:10:e8:17:ee:ad:9b:25:a3:b7:e2:95: 77:59:d9:65:10:d7:51:65:84:2e:67:05:f3:90:3e: 7e:10:c9:92:db:54:3f:13:74:ef:35:0a:26:03:fe: 01:f0:8a:b4:0f:84:ec:03:b6:a9:92:c7:93:62:af: 18:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:63:4F:D1:73:44:75:5A:48:9F:61:9A:5B:39:84:4C:77:47:4B:CE X509v3 Authority Key Identifier: keyid:67:21:0E:55:22:F5:15:3F:DA:7A:73:E4:EE:2B:30:0B:C0:CC:9A:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/323830343a353231383a3a2f33322d3335203d3e20323638343934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:5218::/32 Signature Algorithm: sha256WithRSAEncryption 37:b9:b6:83:5d:c1:7b:8b:e9:ed:52:3d:cc:3d:e1:a5:eb:b7: ee:81:7f:6a:b8:f8:96:02:db:d5:14:28:c7:ee:09:dc:31:5c: 82:00:c7:2a:70:98:e1:3a:9e:50:96:21:f8:e1:3f:f4:b6:7d: f7:b1:d2:81:3f:54:ec:76:59:b9:34:3c:74:03:a0:47:ec:67: 4a:50:94:0b:9e:a7:12:90:ee:21:40:5d:5f:2e:6b:b5:71:45: 27:96:68:f4:2b:0e:73:cd:92:8d:01:87:1c:df:5a:b5:79:67: 28:65:1e:bc:e9:9e:cd:13:06:0c:24:24:20:c7:d7:17:b8:51: a9:34:1f:6a:40:7a:87:f0:85:7e:5b:e6:96:c5:f4:ca:11:f2: 4d:c9:1d:87:0d:b9:9e:87:7c:f5:f3:b0:3e:71:df:ec:93:de: 41:bc:ea:e5:b1:9c:70:eb:6b:a2:fe:97:b3:8a:3e:8d:87:46: 76:7b:26:49:1b:cd:9d:62:4f:9e:19:ba:c8:73:59:2b:18:9c: ad:10:58:b8:3c:3d:10:a4:37:fd:bb:62:04:43:de:cf:55:ca: 37:76:2f:4d:78:6b:52:a8:98:55:02:74:f4:90:5c:93:8b:95: 31:c3:d9:18:b8:21:f1:78:5c:66:83:fa:82:a7:c7:0b:01:87: d8:03:05:3a -----BEGIN CERTIFICATE----- MIIHQjCCBiqgAwIBAgIUDqzCl0QhBefiO0ytiO3pGxYHHmYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjcyMTBFNTUyMkY1MTUzRkRBN0E3M0U0RUUyQjMwMEJD MENDOUEwQjAeFw0yNTAzMDUxODU1MDZaFw0yNjAzMDQxOTAwMDZaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjk0QjBGQ0E2RTI1QTFFOUQw MjJDMDVCOUU3Nzk1QkJEMTE3NDc3NjNCQjkxOUQ3NDZERDVFODY5NjJBQTBBNEQ2 QzQzQkEwM0E4NjU1QjYyOTE2MUExRTAzMDE4OEE4MjJFQkQ5MjUzQUJBQkU1NjRB NkVERjcxQUNFNDVDRjQ0NjIzMzQ5QjY5NUU3ODMwMTY1QTc3RjA3NDJBQzRGQ0E1 RjM2Rjc4NTFFRUE3MkYyMDUxQkZFODM3NzlENkIzQzgyQTFDQzUzNjM0NzgxNkRC RDlCREQwNEQyN0ZCNDI0Q0RFOUZDMDRBOUM3OTM3NkU0NTBEMkZEMTY4OTg3MkNB MTM1NDU2OEJFOUM2RDI4OTcxRUJERTNFMjg4RjMwRTdFRkFBMTREMjBFNDAzM0FC REI5M0EwODE2NTM5OERGMDA3RjJFRDYzOTgyMTkwMEY0MDdGQjUyRUY1QUM2QzYx MzU0QkE5RkUwRjdFNkY0OUMwODQwODFDRkFEMUE1Q0Q1QjkyOUE1RDk5MTBFODE3 RUVBRDlCMjVBM0I3RTI5NTc3NTlEOTY1MTBENzUxNjU4NDJFNjcwNUYzOTAzRTdF MTBDOTkyREI1NDNGMTM3NEVGMzUwQTI2MDNGRTAxRjA4QUI0MEY4NEVDMDNCNkE5 OTJDNzkzNjJBRjE4NkIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAuUsPym4loenQIsBbnneVu9EXR3Y7uRnXRt1ehpYqoKTWxDugOoZV tikWGh4DAYioIuvZJTq6vlZKbt9xrORc9EYjNJtpXngwFlp38HQqxPyl8294Ue6n LyBRv+g3edazyCocxTY0eBbb2b3QTSf7Qkzen8BKnHk3bkUNL9FomHLKE1RWi+nG 0olx694+KI8w5++qFNIOQDOr25OggWU5jfAH8u1jmCGQD0B/tS71rGxhNUup/g9+ b0nAhAgc+tGlzVuSml2ZEOgX7q2bJaO34pV3WdllENdRZYQuZwXzkD5+EMmS21Q/ E3TvNQomA/4B8Iq0D4TsA7apkseTYq8YawIDAQABo4ICUDCCAkwwHQYDVR0OBBYE FCVjT9FzRHVaSJ9hmls5hEx3R0vOMB8GA1UdIwQYMBaAFGchDlUi9RU/2npz5O4r MAvAzJoLMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzI4UnhOYnZLREVTUkdO RDlmbk1wVlFFMmtwN1FUYXc1QWVVSE1nZVFEOVQ2LzEvNjcyMTBFNTUyMkY1MTUz RkRBN0E3M0U0RUUyQjMwMEJDMENDOUEwQi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p Y2JyX3JlcG8vMS82NzIxMEU1NTIyRjUxNTNGREE3QTczRTRFRTJCMzAwQkMwQ0M5 QTBCLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6 Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8yOFJ4TmJ2S0RFU1JHTkQ5Zm5N cFZRRTJrcDdRVGF3NUFlVUhNZ2VRRDlUNi8xLzMyMzgzMDM0M2EzNTMyMzEzODNh M2EyZjMzMzIyZDMzMzUyMDNkM2UyMDMyMzYzODM0MzkzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE UhgwDQYJKoZIhvcNAQELBQADggEBADe5toNdwXuL6e1SPcw94aXrt+6Bf2q4+JYC 29UUKMfuCdwxXIIAxypwmOE6nlCWIfjhP/S2ffex0oE/VOx2Wbk0PHQDoEfsZ0pQ lAuepxKQ7iFAXV8ua7VxRSeWaPQrDnPNko0BhxzfWrV5ZyhlHrzpns0TBgwkJCDH 1xe4Uak0H2pAeofwhX5b5pbF9MoR8k3JHYcNuZ6HfPXzsD5x3+yT3kG86uWxnHDr a6L+l7OKPo2HRnZ7JkkbzZ1iT54ZushzWSsYnK0QWLg8PRCkN/27YgRD3s9Vyjd2 L014a1KomFUCdPSQXJOLlTHD2Ri4IfF4XGaD+oKnxwsBh9gDBTo= -----END CERTIFICATE-----Generated at Mon Apr 21 20:44:25 2025 by rpki-client