$ rpki-client -vvf rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/323830343a333732633a383030303a3a2f33342d3334203d3e20323636333934.roa File: 323830343a333732633a383030303a3a2f33342d3334203d3e20323636333934.roa (raw, json) Hash identifier: DO7t8qqnPOMb081Z5pUnHwondjUbpyk3mXzqeLj7v5w= Subject key identifier: A6:16:71:C8:E2:9E:55:2C:9F:27:15:5E:54:E6:C4:04:4C:B2:04:38 Certificate issuer: /CN=11B1E8E1007047F5F5019E6E48EAC9CDFDE9A805 Certificate serial: 3F7126B7AF4947E12E46B23EF89275EAE33C77B2 Authority key identifier: 11:B1:E8:E1:00:70:47:F5:F5:01:9E:6E:48:EA:C9:CD:FD:E9:A8:05 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11B1E8E1007047F5F5019E6E48EAC9CDFDE9A805.cer Subject info access: rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/323830343a333732633a383030303a3a2f33342d3334203d3e20323636333934.roa Signing time: Fri 11 Jul 2025 19:53:03 +0000 ROA not before: Fri 11 Jul 2025 19:48:03 +0000 ROA not after: Fri 10 Jul 2026 19:53:03 +0000 asID: 266394 IP address blocks: 2804:372c:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/11B1E8E1007047F5F5019E6E48EAC9CDFDE9A805.crl rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/11B1E8E1007047F5F5019E6E48EAC9CDFDE9A805.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11B1E8E1007047F5F5019E6E48EAC9CDFDE9A805.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 30 Jul 2025 00:48:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:71:26:b7:af:49:47:e1:2e:46:b2:3e:f8:92:75:ea:e3:3c:77:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11B1E8E1007047F5F5019E6E48EAC9CDFDE9A805 Validity Not Before: Jul 11 19:48:03 2025 GMT Not After : Jul 10 19:53:03 2026 GMT Subject: CN=A61671C8E29E552C9F27155E54E6C4044CB20438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9d:4d:8b:93:29:1f:53:09:38:8b:fc:ee:84: 0e:81:ee:dd:09:3e:ec:d3:8c:d7:bb:ac:1d:08:61: ff:a1:4a:51:44:ba:11:99:33:a6:30:a4:09:f3:11: 2c:ed:9c:61:01:80:bd:3a:c0:ca:48:51:11:7a:ee: 32:47:a5:d6:65:d2:e3:a4:38:35:9e:8a:d5:f2:ec: 2a:9d:7f:49:56:a0:71:be:bf:13:43:38:85:de:6c: 33:68:ec:91:65:b5:41:6c:55:ac:f2:01:07:96:74: 68:84:54:51:15:11:ac:9d:86:8d:07:a5:c8:ce:c7: 2b:73:50:7c:f2:1d:dd:a6:e4:f8:1f:8b:53:bf:2d: 14:18:22:cf:1b:f1:9b:77:d8:3b:d9:c9:75:07:79: 49:46:75:92:7a:98:28:d1:90:6a:0b:fa:ea:cc:0c: 15:d6:c9:95:59:f7:9c:70:95:66:71:9f:45:97:89: a7:44:97:af:19:59:d8:91:18:40:87:3a:98:3a:e7: 68:9b:16:eb:ef:1b:19:c0:30:0c:a2:ab:e2:89:ce: a3:b8:7b:91:24:ec:f5:23:d2:de:90:38:18:23:36: a0:f0:ba:47:6c:6a:ca:f3:de:30:80:ee:9c:6a:8e: c8:a6:0b:54:e8:4e:cb:d4:63:e3:8f:7a:48:13:ed: 46:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:16:71:C8:E2:9E:55:2C:9F:27:15:5E:54:E6:C4:04:4C:B2:04:38 X509v3 Authority Key Identifier: keyid:11:B1:E8:E1:00:70:47:F5:F5:01:9E:6E:48:EA:C9:CD:FD:E9:A8:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/11B1E8E1007047F5F5019E6E48EAC9CDFDE9A805.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11B1E8E1007047F5F5019E6E48EAC9CDFDE9A805.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/323830343a333732633a383030303a3a2f33342d3334203d3e20323636333934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:372c:8000::/34 Signature Algorithm: sha256WithRSAEncryption 29:a6:ff:74:bf:44:a8:00:b9:73:a2:11:c4:bf:04:b3:a8:57: e1:02:13:14:21:f5:41:e3:b9:94:0a:57:4e:cb:17:75:68:19: 85:85:54:98:d1:ad:f2:08:37:20:59:d4:ec:c0:38:04:40:56: 40:e2:b8:b7:e1:80:d9:69:07:0a:34:15:c5:4c:e7:68:7e:83: 11:97:73:a8:15:be:52:0e:ec:a4:8e:04:d4:65:9a:72:88:a0: 5b:ba:2e:97:43:23:12:ad:5a:ba:bb:60:6a:1d:73:d0:a3:0c: 7a:87:fd:72:31:31:44:4f:11:e5:15:c0:c2:5d:f6:ea:1d:bd: 53:51:cd:b3:d1:d4:11:69:54:a8:b5:a1:06:ab:b8:11:52:97: 5d:01:5e:24:c6:92:5c:cc:88:a8:91:b1:e2:93:eb:9a:fb:11: 01:fa:57:bb:af:62:f8:d9:36:55:13:ae:d9:fe:ee:f8:0f:31: 91:c9:ba:ec:8e:40:95:de:4c:14:3b:1d:35:b6:23:14:5d:f2: 44:53:38:ed:29:08:d3:31:53:84:3b:61:09:cf:fd:53:91:15: c4:f6:58:5d:17:04:ed:87:12:af:bd:cf:90:f2:2e:fd:90:5f: 56:99:c5:f3:60:0d:a2:3f:b5:11:2f:72:bc:16:64:c0:59:ee: e8:f9:aa:bd -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUP3Emt69JR+EuRrI++JJ16uM8d7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFCMUU4RTEwMDcwNDdGNUY1MDE5RTZFNDhFQUM5Q0RG REU5QTgwNTAeFw0yNTA3MTExOTQ4MDNaFw0yNjA3MTAxOTUzMDNaMDMxMTAvBgNV BAMTKEE2MTY3MUM4RTI5RTU1MkM5RjI3MTU1RTU0RTZDNDA0NENCMjA0MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEnU2LkykfUwk4i/zuhA6B7t0J PuzTjNe7rB0IYf+hSlFEuhGZM6YwpAnzESztnGEBgL06wMpIURF67jJHpdZl0uOk ODWeitXy7Cqdf0lWoHG+vxNDOIXebDNo7JFltUFsVazyAQeWdGiEVFEVEaydho0H pcjOxytzUHzyHd2m5Pgfi1O/LRQYIs8b8Zt32DvZyXUHeUlGdZJ6mCjRkGoL+urM DBXWyZVZ95xwlWZxn0WXiadEl68ZWdiRGECHOpg652ibFuvvGxnAMAyiq+KJzqO4 e5Ek7PUj0t6QOBgjNqDwukdsasrz3jCA7pxqjsimC1ToTsvUY+OPekgT7UbhAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUphZxyOKeVSyfJxVeVObEBEyyBDgwHwYDVR0j BBgwFoAUEbHo4QBwR/X1AZ5uSOrJzf3pqAUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkRmdTRrYTE2NU5ZbVNVMTdYaXgzVGFWRldxbjM4WWJ1dGN4REFQWkNM QWYvMC8xMUIxRThFMTAwNzA0N0Y1RjUwMTlFNkU0OEVBQzlDREZERTlBODA1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzExQjFFOEUxMDA3MDQ3RjVG NTAxOUU2RTQ4RUFDOUNERkRFOUE4MDUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJEZnU0a2ExNjVOWW1TVTE3WGl4M1RhVkZXcW4zOFlidXRjeERBUFpDTEFmLzAv MzIzODMwMzQzYTMzMzczMjYzM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzYzNjMzMzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigENyyAMA0GCSqGSIb3DQEBCwUA A4IBAQAppv90v0SoALlzohHEvwSzqFfhAhMUIfVB47mUCldOyxd1aBmFhVSY0a3y CDcgWdTswDgEQFZA4ri34YDZaQcKNBXFTOdofoMRl3OoFb5SDuykjgTUZZpyiKBb ui6XQyMSrVq6u2BqHXPQowx6h/1yMTFETxHlFcDCXfbqHb1TUc2z0dQRaVSotaEG q7gRUpddAV4kxpJczIiokbHik+ua+xEB+le7r2L42TZVE67Z/u74DzGRybrsjkCV 3kwUOx01tiMUXfJEUzjtKQjTMVOEO2EJz/1TkRXE9lhdFwTthxKvvc+Q8i79kF9W mcXzYA2iP7URL3K8FmTAWe7o+aq9 -----END CERTIFICATE-----Generated at Tue Jul 29 02:06:17 2025 by rpki-client