$ rpki-client -vvf rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/323830343a3666383a633365383a3a2f34382d3438203d3e203532383438.roa File: 323830343a3666383a633365383a3a2f34382d3438203d3e203532383438.roa (raw, json) Hash identifier: g+kDGTXDx32jeHWBRz886fdCkrH4EgBpA9ppSeKKh58= Subject key identifier: D1:B3:57:55:5C:56:15:91:D2:62:BF:AA:83:21:C7:E1:A0:41:1B:0F Certificate issuer: /CN=99143CBAF11D170944D719FD796009BC38F9F201 Certificate serial: 7E25D89E6C0CC5D96C7CA1F07920D0014E1AB681 Authority key identifier: 99:14:3C:BA:F1:1D:17:09:44:D7:19:FD:79:60:09:BC:38:F9:F2:01 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99143CBAF11D170944D719FD796009BC38F9F201.cer Subject info access: rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/323830343a3666383a633365383a3a2f34382d3438203d3e203532383438.roa Signing time: Fri 21 Feb 2025 13:31:57 +0000 ROA not before: Fri 21 Feb 2025 13:26:57 +0000 ROA not after: Fri 20 Feb 2026 13:31:57 +0000 asID: 52848 IP address blocks: 2804:6f8:c3e8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/99143CBAF11D170944D719FD796009BC38F9F201.crl rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/99143CBAF11D170944D719FD796009BC38F9F201.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99143CBAF11D170944D719FD796009BC38F9F201.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 16:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:25:d8:9e:6c:0c:c5:d9:6c:7c:a1:f0:79:20:d0:01:4e:1a:b6:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99143CBAF11D170944D719FD796009BC38F9F201 Validity Not Before: Feb 21 13:26:57 2025 GMT Not After : Feb 20 13:31:57 2026 GMT Subject: CN=D1B357555C561591D262BFAA8321C7E1A0411B0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4c:1d:5e:d4:c2:b0:0d:cd:61:8a:23:f5:ab: b1:10:35:b9:7b:d6:46:3f:26:b2:63:4a:85:5c:89: 2c:08:6b:e6:ba:22:17:72:0e:35:c0:78:f7:76:7b: 27:16:c6:13:80:2b:63:96:07:e8:f3:14:ca:72:7b: db:73:33:e6:e8:a6:82:ef:b0:e3:5d:30:99:81:27: 8b:c6:1c:74:9d:ec:f2:e9:cf:a3:04:50:7a:8c:01: 34:29:33:fc:1e:02:db:f5:ce:c2:24:37:fb:9c:32: 33:ea:5f:17:d9:99:d8:a7:3d:c6:a5:88:c5:a4:23: 38:d8:d1:7e:94:5f:09:57:75:6b:06:bb:0c:21:d8: 3f:90:df:98:6a:d1:58:b6:73:85:58:7c:a3:17:21: 3f:63:1b:74:6a:b0:ae:ad:a7:ec:4e:74:dd:55:ce: aa:a2:65:94:94:0b:01:ca:e5:cb:6a:81:c8:a6:82: 99:03:84:f1:a3:ad:24:d2:49:e6:33:ea:61:19:23: db:86:af:16:46:5c:f8:72:56:50:d2:88:01:6f:5f: 08:dd:fe:a0:6c:f7:28:f5:89:ca:15:cf:ae:e8:64: 38:df:25:b4:53:07:fc:fb:fb:5f:d7:85:46:9d:b7: c1:8f:15:cc:d8:0e:44:9d:71:f1:42:aa:95:b3:a0: 3d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B3:57:55:5C:56:15:91:D2:62:BF:AA:83:21:C7:E1:A0:41:1B:0F X509v3 Authority Key Identifier: keyid:99:14:3C:BA:F1:1D:17:09:44:D7:19:FD:79:60:09:BC:38:F9:F2:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/99143CBAF11D170944D719FD796009BC38F9F201.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99143CBAF11D170944D719FD796009BC38F9F201.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/323830343a3666383a633365383a3a2f34382d3438203d3e203532383438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:6f8:c3e8::/48 Signature Algorithm: sha256WithRSAEncryption 92:a1:89:55:41:2e:c8:65:90:f8:69:93:4c:a0:14:e4:d8:0e: 35:ef:b4:fc:88:78:46:d6:5a:c8:c4:7a:4e:eb:92:87:c3:d4: 02:a6:d1:fb:e0:68:c5:05:4a:b2:9a:41:f2:39:7a:f3:18:35: ba:ac:21:82:e4:14:14:15:dd:a8:7d:2c:b6:f5:86:3f:1d:b0: e6:dc:1a:db:5a:eb:6c:df:98:57:77:f8:85:37:8f:ec:11:44: ae:2e:ff:5b:7c:0c:08:38:1a:73:19:3e:e2:5f:68:4f:29:4c: e7:5c:ae:77:b7:94:f5:09:9d:9c:1a:ba:98:88:31:8d:42:8f: 01:2f:53:65:be:72:44:59:77:34:4e:28:3d:c3:e5:33:55:79: 2b:2f:ec:9c:a7:07:36:96:63:04:1e:ec:a6:e7:3f:8b:0d:76: 98:65:60:22:d0:9b:e3:a5:c2:74:19:34:3f:c9:e3:d1:7a:2b: 3e:16:57:b9:cd:df:33:19:b7:1d:de:97:69:b9:24:2a:bd:cc: a0:f9:07:09:64:ea:41:6d:e1:02:ea:e9:7a:7a:05:ae:75:9a: fe:7f:36:60:75:9f:4e:a4:78:8e:ed:5f:af:f6:de:a0:e6:44: 62:53:6d:be:ac:39:f5:7c:83:69:59:3c:8c:1b:66:be:1a:85: ea:c0:6c:b9 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIUfiXYnmwMxdlsfKHweSDQAU4atoEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTkxNDNDQkFGMTFEMTcwOTQ0RDcxOUZENzk2MDA5QkMz OEY5RjIwMTAeFw0yNTAyMjExMzI2NTdaFw0yNjAyMjAxMzMxNTdaMDMxMTAvBgNV BAMTKEQxQjM1NzU1NUM1NjE1OTFEMjYyQkZBQTgzMjFDN0UxQTA0MTFCMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsTB1e1MKwDc1hiiP1q7EQNbl7 1kY/JrJjSoVciSwIa+a6IhdyDjXAePd2eycWxhOAK2OWB+jzFMpye9tzM+bopoLv sONdMJmBJ4vGHHSd7PLpz6MEUHqMATQpM/weAtv1zsIkN/ucMjPqXxfZmdinPcal iMWkIzjY0X6UXwlXdWsGuwwh2D+Q35hq0Vi2c4VYfKMXIT9jG3RqsK6tp+xOdN1V zqqiZZSUCwHK5ctqgcimgpkDhPGjrSTSSeYz6mEZI9uGrxZGXPhyVlDSiAFvXwjd /qBs9yj1icoVz67oZDjfJbRTB/z7+1/XhUadt8GPFczYDkSdcfFCqpWzoD3DAgMB AAGjggJYMIICVDAdBgNVHQ4EFgQU0bNXVVxWFZHSYr+qgyHH4aBBGw8wHwYDVR0j BBgwFoAUmRQ8uvEdFwlE1xn9eWAJvDj58gEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0N4eGQ4REJOTnREYXZMajRhbkZ2Q2U3aUwzNHRoQVpoOUFBdmF3aFRT RGQvMC85OTE0M0NCQUYxMUQxNzA5NDRENzE5RkQ3OTYwMDlCQzM4RjlGMjAxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5MTQzQ0JBRjExRDE3MDk0 NEQ3MTlGRDc5NjAwOUJDMzhGOUYyMDEuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNDeHhkOERCTk50RGF2TGo0YW5GdkNlN2lMMzR0aEFaaDlBQXZhd2hUU0RkLzAv MzIzODMwMzQzYTM2NjYzODNhNjMzMzY1MzgzYTNhMmYzNDM4MmQzNDM4MjAzZDNl MjAzNTMyMzgzNDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAQG+MPoMA0GCSqGSIb3DQEBCwUAA4IB AQCSoYlVQS7IZZD4aZNMoBTk2A4177T8iHhG1lrIxHpO65KHw9QCptH74GjFBUqy mkHyOXrzGDW6rCGC5BQUFd2ofSy29YY/HbDm3BrbWuts35hXd/iFN4/sEUSuLv9b fAwIOBpzGT7iX2hPKUznXK53t5T1CZ2cGrqYiDGNQo8BL1NlvnJEWXc0Tig9w+Uz VXkrL+ycpwc2lmMEHuym5z+LDXaYZWAi0JvjpcJ0GTQ/yePReis+Fle5zd8zGbcd 3pdpuSQqvcyg+QcJZOpBbeEC6ul6egWudZr+fzZgdZ9OpHiO7V+v9t6g5kRiU22+ rDn1fINpWTyMG2a+GoXqwGy5 -----END CERTIFICATE-----Generated at Tue Apr 8 21:13:34 2025 by rpki-client