$ rpki-client -vvf rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/323830343a363935633a3a2f33322d3430203d3e20323730323635.roa File: 323830343a363935633a3a2f33322d3430203d3e20323730323635.roa (raw, json) Hash identifier: lQqpK1vkx7VblPYNnZVbUtlSZVBFVAArQR2nix6HIgg= Subject key identifier: 5B:B4:99:06:64:96:AE:5C:39:A6:3D:E2:46:1E:F8:B3:C7:93:29:B0 Certificate issuer: /CN=43897DFF118E56C31A35958D9EA818504B130E11 Certificate serial: 08C5E41E4D8EC45C295CBC7CA5DD9DFBD702221F Authority key identifier: 43:89:7D:FF:11:8E:56:C3:1A:35:95:8D:9E:A8:18:50:4B:13:0E:11 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43897DFF118E56C31A35958D9EA818504B130E11.cer Subject info access: rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/323830343a363935633a3a2f33322d3430203d3e20323730323635.roa Signing time: Sat 27 Apr 2024 03:41:01 +0000 ROA not before: Sat 27 Apr 2024 03:36:01 +0000 ROA not after: Sat 26 Apr 2025 03:41:01 +0000 asID: 270265 IP address blocks: 2804:695c::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.crl rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43897DFF118E56C31A35958D9EA818504B130E11.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 18 Feb 2025 17:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:c5:e4:1e:4d:8e:c4:5c:29:5c:bc:7c:a5:dd:9d:fb:d7:02:22:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43897DFF118E56C31A35958D9EA818504B130E11 Validity Not Before: Apr 27 03:36:01 2024 GMT Not After : Apr 26 03:41:01 2025 GMT Subject: CN=5BB499066496AE5C39A63DE2461EF8B3C79329B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9b:38:fd:96:e3:b1:42:29:a2:09:53:87:b9: fb:9c:cd:e6:61:bc:18:41:c5:e6:0d:17:b8:66:ed: 69:ff:23:54:88:c8:d5:23:80:df:7a:ad:c3:c0:40: 7b:1e:e2:91:b4:48:70:2a:87:73:67:a2:c3:fe:c8: 45:2c:79:f9:90:8b:c0:9e:ec:31:63:7b:61:8c:27: 39:72:0c:c3:48:1a:07:f3:22:ce:0f:f7:12:0f:e9: 4d:d5:3f:a4:04:4c:7f:21:82:ad:f9:15:5c:84:28: 51:86:60:7c:9c:2d:03:cc:e1:87:06:c1:d7:03:11: 07:5b:71:fc:d5:c0:a6:2e:fe:5b:7d:09:e4:a6:8f: 03:61:44:64:42:04:3e:94:a0:82:77:44:02:26:c0: 1f:11:c1:08:75:62:86:c0:7d:b4:2b:2c:b3:3c:b5: 12:6b:a7:e8:f4:69:fe:08:b1:33:4a:1e:14:c5:e3: c7:2a:df:8a:a6:0e:06:55:ba:01:01:2f:15:95:d7: b7:c1:4b:38:31:d8:8b:25:fd:50:48:e0:d7:f1:f2: a5:10:51:4f:8d:76:f2:02:3d:76:b4:6a:c6:43:e5: 44:d0:85:b3:95:b8:8a:48:45:2d:79:1a:20:57:b1: 9d:61:4f:c6:fb:b1:6b:2d:53:1f:90:2a:ae:ea:21: 50:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:B4:99:06:64:96:AE:5C:39:A6:3D:E2:46:1E:F8:B3:C7:93:29:B0 X509v3 Authority Key Identifier: keyid:43:89:7D:FF:11:8E:56:C3:1A:35:95:8D:9E:A8:18:50:4B:13:0E:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43897DFF118E56C31A35958D9EA818504B130E11.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/323830343a363935633a3a2f33322d3430203d3e20323730323635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:695c::/32 Signature Algorithm: sha256WithRSAEncryption 51:a4:00:f9:48:d6:f7:49:c4:d1:96:7a:9a:49:9e:a9:a9:9f: f8:db:00:6b:cc:39:13:6a:2e:6b:9d:c9:a5:3b:f4:d2:89:5e: a5:9c:4c:0a:a3:7a:fc:3b:15:f6:a3:cd:47:22:18:08:7c:d2: 20:f7:54:5c:a1:36:4b:bf:53:8b:52:37:57:f7:10:d9:60:e8: 92:f2:07:a6:43:61:5c:14:1b:79:9d:8a:a2:2d:6b:61:17:78: 91:e2:29:b8:0f:89:80:86:33:37:cb:51:5b:c3:ee:72:1a:14: 7f:bd:a1:fc:da:e7:78:e6:13:e9:d4:81:c4:b9:7b:91:09:f2: e2:99:35:76:ed:90:2f:0c:56:5f:be:7c:df:d2:4c:a6:f8:28: 42:49:67:a9:79:9f:cd:21:d4:ba:7a:65:fe:8b:b1:ca:25:18: 41:6e:a0:d2:b7:a8:ed:33:1d:9a:46:5f:ba:f3:b3:b2:1f:c9: 79:ff:aa:cc:32:d3:1b:fd:af:43:1f:da:2b:70:93:e1:7c:63: e1:38:5f:7e:14:6b:cc:a2:b9:03:78:45:25:cd:de:30:e5:ab: 72:97:c8:85:79:ae:8d:bd:d5:8b:3b:35:a9:8d:87:f4:eb:c7: f7:5e:4e:1e:4b:94:69:da:54:47:2c:a8:4c:21:ba:ca:53:7c: 2f:1e:0c:2d -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUCMXkHk2OxFwpXLx8pd2d+9cCIh8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDM4OTdERkYxMThFNTZDMzFBMzU5NThEOUVBODE4NTA0 QjEzMEUxMTAeFw0yNDA0MjcwMzM2MDFaFw0yNTA0MjYwMzQxMDFaMDMxMTAvBgNV BAMTKDVCQjQ5OTA2NjQ5NkFFNUMzOUE2M0RFMjQ2MUVGOEIzQzc5MzI5QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSmzj9luOxQimiCVOHufuczeZh vBhBxeYNF7hm7Wn/I1SIyNUjgN96rcPAQHse4pG0SHAqh3NnosP+yEUsefmQi8Ce 7DFje2GMJzlyDMNIGgfzIs4P9xIP6U3VP6QETH8hgq35FVyEKFGGYHycLQPM4YcG wdcDEQdbcfzVwKYu/lt9CeSmjwNhRGRCBD6UoIJ3RAImwB8RwQh1YobAfbQrLLM8 tRJrp+j0af4IsTNKHhTF48cq34qmDgZVugEBLxWV17fBSzgx2Isl/VBI4Nfx8qUQ UU+NdvICPXa0asZD5UTQhbOVuIpIRS15GiBXsZ1hT8b7sWstUx+QKq7qIVAXAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUW7SZBmSWrlw5pj3iRh74s8eTKbAwHwYDVR0j BBgwFoAUQ4l9/xGOVsMaNZWNnqgYUEsTDhEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMzlSM0NWdEVxZUdRRkRLM1I3QjVIZVZMajRhSFRxUXRVTTVyOFNWb2tp ZTIvMC80Mzg5N0RGRjExOEU1NkMzMUEzNTk1OEQ5RUE4MTg1MDRCMTMwRTExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzODk3REZGMTE4RTU2QzMx QTM1OTU4RDlFQTgxODUwNEIxMzBFMTEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzM5UjNDVnRFcWVHUUZESzNSN0I1SGVWTGo0YUhUcVF0VU01cjhTVm9raWUyLzAv MzIzODMwMzQzYTM2MzkzNTYzM2EzYTJmMzMzMjJkMzQzMDIwM2QzZTIwMzIzNzMw MzIzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKARpXDANBgkqhkiG9w0BAQsFAAOCAQEAUaQA+UjW 90nE0ZZ6mkmeqamf+NsAa8w5E2oua53JpTv00olepZxMCqN6/DsV9qPNRyIYCHzS IPdUXKE2S79Ti1I3V/cQ2WDokvIHpkNhXBQbeZ2Koi1rYRd4keIpuA+JgIYzN8tR W8PuchoUf72h/NrneOYT6dSBxLl7kQny4pk1du2QLwxWX75839JMpvgoQklnqXmf zSHUunpl/ouxyiUYQW6g0reo7TMdmkZfuvOzsh/Jef+qzDLTG/2vQx/aK3CT4Xxj 4ThffhRrzKK5A3hFJc3eMOWrcpfIhXmujb3Vizs1qY2H9OvH915OHkuUadpURyyo TCG6ylN8Lx4MLQ== -----END CERTIFICATE-----Generated at Tue Feb 18 13:24:24 2025 by rpki-client