$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/323830343a3863383a3a2f33352d3335203d3e20323632333933.roa File: 323830343a3863383a3a2f33352d3335203d3e20323632333933.roa (raw, json) Hash identifier: dmo5cPb/7pRc/a4nNJ6ApKn00n6/OXjgMuWweoiEMJE= Subject key identifier: 6A:37:A0:B1:85:05:AA:D6:27:09:45:C9:B7:40:15:B6:CC:0D:3A:A1 Certificate issuer: /CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5 Certificate serial: 0ACE5E94A5BC7C151ACB7074A710FBB2C79128EB Authority key identifier: C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer Subject info access: rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/323830343a3863383a3a2f33352d3335203d3e20323632333933.roa Signing time: Sun 06 Apr 2025 22:08:52 +0000 ROA not before: Sun 06 Apr 2025 22:03:52 +0000 ROA not after: Sun 05 Apr 2026 22:08:52 +0000 asID: 262393 IP address blocks: 2804:8c8::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Apr 2025 23:14:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:ce:5e:94:a5:bc:7c:15:1a:cb:70:74:a7:10:fb:b2:c7:91:28:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5 Validity Not Before: Apr 6 22:03:52 2025 GMT Not After : Apr 5 22:08:52 2026 GMT Subject: CN=6A37A0B18505AAD6270945C9B74015B6CC0D3AA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3d:37:37:e9:75:c8:db:40:2c:c4:05:63:d9: 7d:f2:63:93:04:e1:7c:11:df:b0:39:43:07:ed:83: 9b:d8:f1:ad:f7:f6:33:a4:79:03:90:b9:c8:3a:c0: ce:b1:b9:11:1b:cc:ef:dc:a5:d6:61:f0:d4:f7:7f: e1:a6:86:da:74:5d:c6:1d:89:b5:d5:1b:6a:ca:51: 5a:c2:50:65:22:6e:f4:a1:5a:f7:6a:ce:f5:37:c3: b3:6a:6d:8e:c4:82:57:a0:38:23:1d:9e:5c:18:c4: 88:58:03:e1:56:94:1e:9b:91:f5:88:32:cd:9e:e9: cf:76:22:f1:83:fe:9f:9e:fd:32:65:93:8d:49:1b: cc:60:d5:99:9e:df:0a:d7:03:dc:ea:47:86:4f:d3: de:e8:00:30:0c:cd:40:bd:c7:71:46:83:06:a1:d4: 1c:79:68:87:a1:c4:be:c1:57:a9:ad:80:91:70:54: d4:a2:47:0b:9f:e3:68:0a:c1:ca:76:40:c9:72:cc: 0a:0c:5d:a8:3a:49:e7:40:0c:5f:4e:bc:c7:f9:cf: 1b:c0:c0:cc:fd:1a:6f:c1:a2:d3:8f:83:78:b7:77: 99:d4:7e:81:1f:e3:8e:52:d9:ac:26:1e:ff:ff:db: db:f1:55:61:bd:fa:54:c2:1f:ff:65:aa:ef:60:04: f3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:37:A0:B1:85:05:AA:D6:27:09:45:C9:B7:40:15:B6:CC:0D:3A:A1 X509v3 Authority Key Identifier: keyid:C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/323830343a3863383a3a2f33352d3335203d3e20323632333933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8c8::/35 Signature Algorithm: sha256WithRSAEncryption 6f:98:35:4d:f3:92:43:cc:2c:81:24:1e:5e:8f:50:3e:02:09: 63:03:b3:57:12:88:a9:d7:d2:54:6f:4c:9a:96:45:81:9e:43: d6:49:a1:1d:02:8e:3b:49:47:f7:57:9d:19:ee:ab:cf:1d:8a: 41:84:e7:78:2c:10:a1:37:f7:e2:77:33:a9:34:c7:62:09:a5: b6:e2:a8:b9:99:05:91:9a:91:15:68:d1:ce:ad:d4:e6:9f:78: 2f:2d:a2:03:6d:01:84:83:0b:ad:14:68:e4:ae:35:ca:6f:6f: 99:3d:35:6c:51:b5:9f:7c:91:5a:2d:27:dc:15:f8:ab:b8:a3: 58:d2:44:d0:14:87:c9:4e:c3:cb:24:27:d5:60:90:e9:9c:10: a5:7d:e8:21:aa:f5:c6:57:b0:c6:f8:c8:f3:5c:a1:09:12:a1: 9e:9d:68:aa:91:8a:5d:ce:c8:9b:1e:7b:6e:00:63:b1:28:a1: f3:ab:62:67:01:cc:49:5f:35:24:66:2d:a2:ed:b1:6c:70:7b: 53:aa:8c:44:92:6f:33:ce:5b:8e:24:ef:93:b1:e7:93:e6:ce: 95:69:c2:1f:78:d8:05:ee:e8:d2:72:4b:f2:7c:51:60:95:9b: 5d:11:1d:16:78:33:53:cc:88:26:71:23:b0:44:74:3a:17:b1: 7a:b8:17:11 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUCs5elKW8fBUay3B0pxD7sseRKOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhCQjFGM0M3QjEwNjc3Njk3RDM2NzU4NjFGNThFQzVF NEM0QjFFNTAeFw0yNTA0MDYyMjAzNTJaFw0yNjA0MDUyMjA4NTJaMDMxMTAvBgNV BAMTKDZBMzdBMEIxODUwNUFBRDYyNzA5NDVDOUI3NDAxNUI2Q0MwRDNBQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1PTc36XXI20AsxAVj2X3yY5ME 4XwR37A5Qwftg5vY8a339jOkeQOQucg6wM6xuREbzO/cpdZh8NT3f+Gmhtp0XcYd ibXVG2rKUVrCUGUibvShWvdqzvU3w7NqbY7EglegOCMdnlwYxIhYA+FWlB6bkfWI Ms2e6c92IvGD/p+e/TJlk41JG8xg1Zme3wrXA9zqR4ZP097oADAMzUC9x3FGgwah 1Bx5aIehxL7BV6mtgJFwVNSiRwuf42gKwcp2QMlyzAoMXag6SedADF9OvMf5zxvA wMz9Gm/BotOPg3i3d5nUfoEf445S2awmHv//29vxVWG9+lTCH/9lqu9gBPN/AgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUajegsYUFqtYnCUXJt0AVtswNOqEwHwYDVR0j BBgwFoAUyLsfPHsQZ3aX02dYYfWOxeTEseUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMk1UdTh5aEZMcm9HTkdDcVZrUzJpVDlhOGhONHFTeTlZZHM0NXJhZkFL VTYvMS9DOEJCMUYzQzdCMTA2Nzc2OTdEMzY3NTg2MUY1OEVDNUU0QzRCMUU1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M4QkIxRjNDN0IxMDY3NzY5 N0QzNjc1ODYxRjU4RUM1RTRDNEIxRTUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJNVHU4eWhGTHJvR05HQ3FWa1MyaVQ5YThoTjRxU3k5WWRzNDVyYWZBS1U2LzEv MzIzODMwMzQzYTM4NjMzODNhM2EyZjMzMzUyZDMzMzUyMDNkM2UyMDMyMzYzMjMz MzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB /wQSMBAwDgQCAAIwCAMGBSgECMgAMA0GCSqGSIb3DQEBCwUAA4IBAQBvmDVN85JD zCyBJB5ej1A+AgljA7NXEoip19JUb0yalkWBnkPWSaEdAo47SUf3V50Z7qvPHYpB hOd4LBChN/fidzOpNMdiCaW24qi5mQWRmpEVaNHOrdTmn3gvLaIDbQGEgwutFGjk rjXKb2+ZPTVsUbWffJFaLSfcFfiruKNY0kTQFIfJTsPLJCfVYJDpnBClfeghqvXG V7DG+MjzXKEJEqGenWiqkYpdzsibHntuAGOxKKHzq2JnAcxJXzUkZi2i7bFscHtT qoxEkm8zzluOJO+TseeT5s6VacIfeNgF7ujSckvyfFFglZtdER0WeDNTzIgmcSOw RHQ6F7F6uBcR -----END CERTIFICATE-----Generated at Tue Apr 22 11:41:43 2025 by rpki-client