$ rpki-client -vvf rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/0/323830313a61343a3a2f33322d3335203d3e20323632373432.roa File: 323830313a61343a3a2f33322d3335203d3e20323632373432.roa (raw, json) Hash identifier: Z4q0MsswnF0naCPHOoZoQoStRbm1JFZNZQnj6nLd9zw= Subject key identifier: 70:B8:F4:C4:01:24:B2:5E:AA:ED:D9:C8:48:A2:C9:A3:91:20:17:49 Certificate issuer: /CN=BE89F6747B326E779CB3E94906319A8C0A0C1C81 Certificate serial: 49391AB76FC8B93D2376A04C10D401783A6BD8A9 Authority key identifier: BE:89:F6:74:7B:32:6E:77:9C:B3:E9:49:06:31:9A:8C:0A:0C:1C:81 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE89F6747B326E779CB3E94906319A8C0A0C1C81.cer Subject info access: rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/0/323830313a61343a3a2f33322d3335203d3e20323632373432.roa Signing time: Thu 03 Apr 2025 17:46:20 +0000 ROA not before: Thu 03 Apr 2025 17:41:20 +0000 ROA not after: Thu 02 Apr 2026 17:46:20 +0000 asID: 262742 IP address blocks: 2801:a4::/32 maxlen: 35 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/0/BE89F6747B326E779CB3E94906319A8C0A0C1C81.crl rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/0/BE89F6747B326E779CB3E94906319A8C0A0C1C81.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE89F6747B326E779CB3E94906319A8C0A0C1C81.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 16 Apr 2025 03:11:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:39:1a:b7:6f:c8:b9:3d:23:76:a0:4c:10:d4:01:78:3a:6b:d8:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE89F6747B326E779CB3E94906319A8C0A0C1C81 Validity Not Before: Apr 3 17:41:20 2025 GMT Not After : Apr 2 17:46:20 2026 GMT Subject: CN=70B8F4C40124B25EAAEDD9C848A2C9A391201749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:0f:d6:82:40:bb:f9:88:07:3d:37:6b:1e:a6: db:92:1b:6d:a9:16:fa:4b:da:c0:8d:7f:de:fb:17: 19:7c:96:f6:c1:f2:9c:04:f7:9f:78:fe:bb:98:df: c3:85:f1:92:7a:ca:0d:50:29:20:47:8c:cf:b6:8d: 1e:51:c6:61:b6:da:c6:09:cd:35:55:d8:69:c7:a2: 9e:82:44:af:53:28:d1:da:28:92:69:a0:06:ec:da: 6c:ac:f2:4f:9b:a7:bd:32:2b:3b:4d:cb:d3:6a:92: 1d:17:f0:2f:fd:3f:32:ad:3b:86:19:80:78:5a:75: be:ab:7f:76:04:70:c6:2b:ec:c8:82:a5:59:9e:85: 8b:b0:81:ab:a6:2c:4e:dd:3c:99:e2:22:96:eb:9e: a6:18:b0:6a:f2:8e:56:04:8d:87:c1:e9:29:ba:4b: 74:22:b1:9e:41:ca:13:b1:b6:12:96:d9:6b:a3:62: ef:f9:7c:56:9b:e0:17:ed:1b:4a:7a:5f:ff:35:ad: aa:30:b5:13:44:56:21:f7:dd:e0:53:23:eb:82:f7: f0:e3:19:f4:83:a7:f8:63:ce:db:88:f6:55:b1:72: 19:83:02:76:47:67:c2:b5:9e:8a:d2:d2:e5:66:c1: a5:61:72:34:0b:ba:5f:27:04:da:91:71:01:c8:11: 15:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:B8:F4:C4:01:24:B2:5E:AA:ED:D9:C8:48:A2:C9:A3:91:20:17:49 X509v3 Authority Key Identifier: keyid:BE:89:F6:74:7B:32:6E:77:9C:B3:E9:49:06:31:9A:8C:0A:0C:1C:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/0/BE89F6747B326E779CB3E94906319A8C0A0C1C81.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE89F6747B326E779CB3E94906319A8C0A0C1C81.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/0/323830313a61343a3a2f33322d3335203d3e20323632373432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2801:a4::/32 Signature Algorithm: sha256WithRSAEncryption 9e:cc:98:cd:c3:14:89:e3:1f:9e:81:9d:fe:a6:b2:98:d7:b5: 1e:43:22:5a:d7:8c:b5:69:4f:3a:8e:ac:a7:83:61:35:88:ab: da:97:7b:15:fb:37:01:2c:77:6b:0c:0b:74:88:12:5f:42:ae: d7:ab:20:e1:20:c3:65:0a:61:32:55:4a:b4:44:fb:32:cb:cc: 08:c1:43:c3:7c:80:37:7d:92:ed:cc:ec:38:49:0f:21:6b:2a: 28:e0:99:07:2d:96:f9:26:fa:00:3e:95:ef:23:a9:e0:76:10: c4:b6:25:45:d7:2d:23:58:3d:92:57:84:cd:5b:ae:9a:a2:ae: 9e:0e:26:32:2a:5f:67:d6:dd:28:f2:79:f4:fe:37:5b:95:2f: 96:dd:10:4b:eb:bf:87:1c:c8:3c:d9:44:44:74:57:8e:d2:be: ee:f6:f9:73:fc:be:22:83:88:9b:f4:9d:23:65:0c:e7:5d:1c: 04:19:a3:21:76:66:7c:71:84:cb:a8:f1:af:cf:41:9e:69:b7: 7a:6f:87:89:9a:c0:fd:97:1f:14:82:67:d8:da:a8:f1:1d:b1: 5b:15:7e:dc:da:08:49:5b:32:41:68:75:e1:0a:3a:65:02:19: 1d:a9:e4:85:bc:72:ea:2c:71:ec:1a:7c:39:aa:ac:0f:ae:ec: 57:c1:c5:44 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgIUSTkat2/IuT0jdqBMENQBeDpr2KkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU4OUY2NzQ3QjMyNkU3NzlDQjNFOTQ5MDYzMTlBOEMw QTBDMUM4MTAeFw0yNTA0MDMxNzQxMjBaFw0yNjA0MDIxNzQ2MjBaMDMxMTAvBgNV BAMTKDcwQjhGNEM0MDEyNEIyNUVBQUVERDlDODQ4QTJDOUEzOTEyMDE3NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpD9aCQLv5iAc9N2septuSG22p FvpL2sCNf977Fxl8lvbB8pwE9594/ruY38OF8ZJ6yg1QKSBHjM+2jR5RxmG22sYJ zTVV2GnHop6CRK9TKNHaKJJpoAbs2mys8k+bp70yKztNy9Nqkh0X8C/9PzKtO4YZ gHhadb6rf3YEcMYr7MiCpVmehYuwgaumLE7dPJniIpbrnqYYsGryjlYEjYfB6Sm6 S3QisZ5ByhOxthKW2WujYu/5fFab4BftG0p6X/81raowtRNEViH33eBTI+uC9/Dj GfSDp/hjztuI9lWxchmDAnZHZ8K1norS0uVmwaVhcjQLul8nBNqRcQHIERWVAgMB AAGjggJMMIICSDAdBgNVHQ4EFgQUcLj0xAEksl6q7dnISKLJo5EgF0kwHwYDVR0j BBgwFoAUvon2dHsybnecs+lJBjGajAoMHIEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkdVSGRLYnpHVnM2Zm5Fcm5UMzVSOTcyWHRDNjNiaVhNSlEycmg2cUI5 RGgvMC9CRTg5RjY3NDdCMzI2RTc3OUNCM0U5NDkwNjMxOUE4QzBBMEMxQzgxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JFODlGNjc0N0IzMjZFNzc5 Q0IzRTk0OTA2MzE5QThDMEEwQzFDODEuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJHVUhkS2J6R1ZzNmZuRXJuVDM1Ujk3Mlh0QzYzYmlYTUpRMnJoNnFCOURoLzAv MzIzODMwMzEzYTYxMzQzYTNhMmYzMzMyMmQzMzM1MjAzZDNlMjAzMjM2MzIzNzM0 MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAoAQCkMA0GCSqGSIb3DQEBCwUAA4IBAQCezJjNwxSJ4x+e gZ3+prKY17UeQyJa14y1aU86jqyng2E1iKval3sV+zcBLHdrDAt0iBJfQq7XqyDh IMNlCmEyVUq0RPsyy8wIwUPDfIA3fZLtzOw4SQ8hayoo4JkHLZb5JvoAPpXvI6ng dhDEtiVF1y0jWD2SV4TNW66aoq6eDiYyKl9n1t0o8nn0/jdblS+W3RBL67+HHMg8 2UREdFeO0r7u9vlz/L4ig4ib9J0jZQznXRwEGaMhdmZ8cYTLqPGvz0Geabd6b4eJ msD9lx8UgmfY2qjxHbFbFX7c2ghJWzJBaHXhCjplAhkdqeSFvHLqLHHsGnw5qqwP ruxXwcVE -----END CERTIFICATE-----Generated at Tue Apr 15 08:25:28 2025 by rpki-client