$ rpki-client -vvf rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/323830343a333933633a373730303a3a2f34302d3430203d3e20323636303230.roa File: 323830343a333933633a373730303a3a2f34302d3430203d3e20323636303230.roa (raw, json) Hash identifier: Y0tFHHqmOfumtLoGnSC4p2sgvFE3tgpxEY3YgdRQX4M= Subject key identifier: 0B:63:17:6F:0C:FB:29:E6:2E:A1:F3:FB:4A:0F:1C:B3:8C:32:AF:83 Certificate issuer: /CN=2BB312B3051F7EC4E3021CE21956D0A2A50F76EF Certificate serial: 6427B7D9AD1DDAD6D2BBF315C1FC7B8CAF694949 Authority key identifier: 2B:B3:12:B3:05:1F:7E:C4:E3:02:1C:E2:19:56:D0:A2:A5:0F:76:EF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.cer Subject info access: rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/323830343a333933633a373730303a3a2f34302d3430203d3e20323636303230.roa Signing time: Wed 08 Jan 2025 02:07:59 +0000 ROA not before: Wed 08 Jan 2025 02:02:59 +0000 ROA not after: Wed 07 Jan 2026 02:07:59 +0000 asID: 266020 IP address blocks: 2804:393c:7700::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.crl rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 00:36:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:27:b7:d9:ad:1d:da:d6:d2:bb:f3:15:c1:fc:7b:8c:af:69:49:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB312B3051F7EC4E3021CE21956D0A2A50F76EF Validity Not Before: Jan 8 02:02:59 2025 GMT Not After : Jan 7 02:07:59 2026 GMT Subject: CN=0B63176F0CFB29E62EA1F3FB4A0F1CB38C32AF83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:fb:64:cc:10:33:10:9e:b7:96:86:db:57:f5: a8:84:53:c7:1f:c2:81:aa:a9:1f:7c:39:aa:1e:c1: 01:d4:da:76:9d:ce:ae:21:7f:ce:92:16:58:d2:12: 7d:4f:f3:ac:a6:17:91:f0:ee:ea:05:a5:51:aa:34: cd:50:b5:45:ac:a5:00:2f:3d:ac:95:45:ea:73:bc: c0:67:7f:24:7f:46:d3:59:35:e3:c9:1f:60:23:dd: a4:f9:49:90:7c:49:16:91:74:92:15:a6:b2:dd:0b: dd:f3:9d:3b:57:1c:dd:6b:4e:ca:c5:68:12:00:88: be:4d:5a:80:36:99:41:a9:e6:32:40:bb:dd:7b:6d: f4:cc:dc:ce:40:03:33:23:5b:bb:ab:b0:01:0e:a9: d6:f5:2a:6d:e9:4c:5c:d9:2d:b7:fb:10:1e:5b:b3: d5:49:2e:5e:71:41:a6:f1:bc:5a:60:77:9d:a5:e5: 21:4f:3f:02:9c:39:4d:d0:bb:53:10:de:65:6d:37: f3:d0:a8:48:8f:38:24:ae:71:63:ac:d9:b6:c1:19: b8:a4:35:4a:93:f5:de:52:9a:a3:d7:45:c3:a9:48: a4:1a:15:42:6d:5b:c7:91:32:48:44:b6:2a:7c:de: b5:0e:9c:dd:94:ad:3a:17:ea:13:81:30:ed:2c:fa: e6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:63:17:6F:0C:FB:29:E6:2E:A1:F3:FB:4A:0F:1C:B3:8C:32:AF:83 X509v3 Authority Key Identifier: keyid:2B:B3:12:B3:05:1F:7E:C4:E3:02:1C:E2:19:56:D0:A2:A5:0F:76:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/323830343a333933633a373730303a3a2f34302d3430203d3e20323636303230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:393c:7700::/40 Signature Algorithm: sha256WithRSAEncryption 4f:a3:b2:3b:39:a5:4b:4a:f2:9d:15:64:94:17:25:9b:8f:56: 81:76:d9:b8:71:e1:89:16:04:8d:d1:7c:59:c7:28:cf:5e:ba: 22:eb:5c:7d:14:d9:5a:a5:6c:d7:d2:66:f7:73:5b:49:a0:f6: 25:b3:64:c7:1e:a7:14:22:bd:29:12:cb:61:a0:35:59:8c:57: 95:7f:91:5e:50:64:8a:17:c6:d2:a0:3e:0b:32:df:69:91:4b: 5b:bf:ab:9d:39:79:88:9f:08:01:5a:5b:a9:df:48:57:32:f4: f6:92:dc:cf:69:fc:ff:8b:8e:a4:5a:d5:05:b0:ae:28:32:e9: 1d:15:a0:71:41:91:35:e1:79:1a:3d:0e:8f:bc:8e:55:91:af: c3:aa:6e:3b:b0:03:47:42:61:b9:a7:a5:10:5f:52:50:f8:c0: 35:78:8d:b1:74:09:fc:51:6f:e7:9a:c7:de:c8:5e:40:33:5d: c1:d7:e4:ab:93:8a:d5:a2:47:6a:36:d8:a1:a1:1a:97:1f:a1: 3f:8f:d4:8e:47:a7:d9:66:a7:3b:2b:e6:bb:02:25:d1:6f:f2: a1:2c:72:a9:64:c6:bc:5e:68:0d:d9:a2:46:2e:a5:f8:a1:6c: 3e:85:6d:a6:22:9e:95:5c:56:66:2e:25:7c:92:ac:d1:ce:ad: 85:45:4b:03 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUZCe32a0d2tbSu/MVwfx7jK9pSUkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJCMzEyQjMwNTFGN0VDNEUzMDIxQ0UyMTk1NkQwQTJB NTBGNzZFRjAeFw0yNTAxMDgwMjAyNTlaFw0yNjAxMDcwMjA3NTlaMDMxMTAvBgNV BAMTKDBCNjMxNzZGMENGQjI5RTYyRUExRjNGQjRBMEYxQ0IzOEMzMkFGODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW+2TMEDMQnreWhttX9aiEU8cf woGqqR98OaoewQHU2nadzq4hf86SFljSEn1P86ymF5Hw7uoFpVGqNM1QtUWspQAv PayVRepzvMBnfyR/RtNZNePJH2Aj3aT5SZB8SRaRdJIVprLdC93znTtXHN1rTsrF aBIAiL5NWoA2mUGp5jJAu917bfTM3M5AAzMjW7ursAEOqdb1Km3pTFzZLbf7EB5b s9VJLl5xQabxvFpgd52l5SFPPwKcOU3Qu1MQ3mVtN/PQqEiPOCSucWOs2bbBGbik NUqT9d5SmqPXRcOpSKQaFUJtW8eRMkhEtip83rUOnN2UrToX6hOBMO0s+uZLAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUC2MXbwz7KeYuofP7Sg8cs4wyr4MwHwYDVR0j BBgwFoAUK7MSswUffsTjAhziGVbQoqUPdu8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0FUeXFEdXBkcXA2Vzd3VUhkM3o0SFBIUWdyNlZTSGVoWllkdFRWckVB RU4vMC8yQkIzMTJCMzA1MUY3RUM0RTMwMjFDRTIxOTU2RDBBMkE1MEY3NkVGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCQjMxMkIzMDUxRjdFQzRF MzAyMUNFMjE5NTZEMEEyQTUwRjc2RUYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNBVHlxRHVwZHFwNlc3d1VIZDN6NEhQSFFncjZWU0hlaFpZZHRUVnJFQUVOLzAv MzIzODMwMzQzYTMzMzkzMzYzM2EzNzM3MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk M2UyMDMyMzYzNjMwMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEOTx3MA0GCSqGSIb3DQEBCwUA A4IBAQBPo7I7OaVLSvKdFWSUFyWbj1aBdtm4ceGJFgSN0XxZxyjPXroi61x9FNla pWzX0mb3c1tJoPYls2THHqcUIr0pEsthoDVZjFeVf5FeUGSKF8bSoD4LMt9pkUtb v6udOXmInwgBWlup30hXMvT2ktzPafz/i46kWtUFsK4oMukdFaBxQZE14XkaPQ6P vI5Vka/Dqm47sANHQmG5p6UQX1JQ+MA1eI2xdAn8UW/nmsfeyF5AM13B1+Srk4rV okdqNtihoRqXH6E/j9SOR6fZZqc7K+a7AiXRb/KhLHKpZMa8XmgN2aJGLqX4oWw+ hW2mIp6VXFZmLiV8kqzRzq2FRUsD -----END CERTIFICATE-----Generated at Wed Apr 9 10:45:01 2025 by rpki-client