$ rpki-client -vvf rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/323830343a313134383a3a2f33322d3438203d3e20323633363638.roa File: 323830343a313134383a3a2f33322d3438203d3e20323633363638.roa (raw, json) Hash identifier: xdHdjHLVcOu3wNmoYsUtHv/HX60zCuV6THDKgGvGDkE= Subject key identifier: 72:25:86:49:F5:AE:A4:16:D4:D2:F0:17:55:1A:6E:7A:C0:3D:74:3D Certificate issuer: /CN=3536DA9FA1CF7E312AAF7721ED15384E063AE2E2 Certificate serial: 41F2013DDA63AC533C49F73AE75A5B9C411B93E6 Authority key identifier: 35:36:DA:9F:A1:CF:7E:31:2A:AF:77:21:ED:15:38:4E:06:3A:E2:E2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.cer Subject info access: rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/323830343a313134383a3a2f33322d3438203d3e20323633363638.roa Signing time: Thu 06 Mar 2025 10:43:01 +0000 ROA not before: Thu 06 Mar 2025 10:38:01 +0000 ROA not after: Thu 05 Mar 2026 10:43:01 +0000 asID: 263668 IP address blocks: 2804:1148::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.crl rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 06 Apr 2025 21:27:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:f2:01:3d:da:63:ac:53:3c:49:f7:3a:e7:5a:5b:9c:41:1b:93:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3536DA9FA1CF7E312AAF7721ED15384E063AE2E2 Validity Not Before: Mar 6 10:38:01 2025 GMT Not After : Mar 5 10:43:01 2026 GMT Subject: CN=72258649F5AEA416D4D2F017551A6E7AC03D743D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:fd:8f:79:9e:02:69:2c:47:e3:e7:2f:35:2d: 2d:b1:75:d2:28:17:54:21:3e:0b:fc:7c:26:76:8b: 93:1f:97:c6:2e:62:a4:b3:f7:bc:6b:a7:86:60:6b: f9:67:b2:a0:1e:c6:b7:83:ec:55:8c:7e:3c:f2:e2: 5c:cc:1c:06:5d:c4:b9:75:a4:57:59:93:e0:35:3a: 55:5d:02:f0:cd:2f:f6:93:0c:79:cd:da:fd:7b:e8: a5:d3:cf:91:d5:9a:78:8e:b6:87:41:20:52:6a:54: 06:b2:ac:8c:6c:a1:0a:77:2d:e7:41:9d:4f:32:22: 0b:c4:8f:64:8c:ec:a8:5e:48:08:9c:5e:ff:27:27: fe:9c:7c:cf:4e:ab:88:ac:7b:72:da:f7:86:4e:48: c7:09:d7:c6:44:43:ee:82:33:53:e0:58:f7:d8:fb: 2d:8a:c3:e9:28:a3:7e:50:b3:4a:54:69:a5:27:b7: 30:26:0f:4d:2a:72:ab:c5:57:8b:55:a0:d1:60:52: 02:64:fb:2b:ae:b9:89:a9:b3:ce:ca:92:ea:93:1c: fa:16:e1:36:b4:09:5f:bf:16:ca:f8:99:20:a1:4e: bb:29:fc:1c:fc:04:9b:50:cb:0a:b1:75:44:4c:89: 55:cf:fd:ae:da:44:d1:86:71:71:56:c6:f7:75:ce: 44:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:25:86:49:F5:AE:A4:16:D4:D2:F0:17:55:1A:6E:7A:C0:3D:74:3D X509v3 Authority Key Identifier: keyid:35:36:DA:9F:A1:CF:7E:31:2A:AF:77:21:ED:15:38:4E:06:3A:E2:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/323830343a313134383a3a2f33322d3438203d3e20323633363638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:1148::/32 Signature Algorithm: sha256WithRSAEncryption 54:d5:15:70:4b:04:d8:e7:eb:97:67:78:e5:6b:bc:31:66:eb: a4:8a:8e:2d:69:3b:7f:b0:5e:f2:d7:f3:1e:ee:01:14:68:9d: a8:4c:1d:f0:b4:e6:74:2f:84:7a:64:89:fe:ba:5e:b9:ba:29: ba:7a:2f:0a:b0:5b:32:34:59:c4:22:ba:8b:4f:e6:2a:6e:f3: 69:fa:25:fb:30:98:f0:b6:ce:e8:81:f6:b0:cc:8b:a1:e3:65: 89:fe:0a:0e:83:39:2c:c7:60:cf:cf:48:11:3f:62:fc:cc:ac: ef:f2:8e:4b:cf:e3:fe:73:db:d6:95:4b:b5:3f:83:13:1e:95: fa:ab:df:7e:c3:a3:6a:78:33:e5:50:b5:aa:3c:22:bd:32:99: 48:84:bd:f9:e2:f9:cf:82:1b:f3:80:62:79:3c:8c:52:bc:7e: aa:42:c4:87:85:21:b3:5e:1a:d7:9b:cf:39:77:7a:6f:30:bf: 96:6c:65:db:6e:a4:ca:89:b1:af:98:86:dc:7d:4c:bf:93:42: 92:90:2a:d7:02:20:88:a6:77:1c:1b:9f:ff:d7:d8:d7:99:6f: 2d:4b:40:fa:9e:65:4f:99:14:be:6b:f1:36:3a:4e:11:f4:f7: a3:30:8d:b3:bc:1e:fb:36:13:8a:60:0a:f0:45:3b:e0:7e:9e: a5:53:00:92 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUQfIBPdpjrFM8Sfc651pbnEEbk+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUzNkRBOUZBMUNGN0UzMTJBQUY3NzIxRUQxNTM4NEUw NjNBRTJFMjAeFw0yNTAzMDYxMDM4MDFaFw0yNjAzMDUxMDQzMDFaMDMxMTAvBgNV BAMTKDcyMjU4NjQ5RjVBRUE0MTZENEQyRjAxNzU1MUE2RTdBQzAzRDc0M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS/Y95ngJpLEfj5y81LS2xddIo F1QhPgv8fCZ2i5Mfl8YuYqSz97xrp4Zga/lnsqAexreD7FWMfjzy4lzMHAZdxLl1 pFdZk+A1OlVdAvDNL/aTDHnN2v176KXTz5HVmniOtodBIFJqVAayrIxsoQp3LedB nU8yIgvEj2SM7KheSAicXv8nJ/6cfM9Oq4ise3La94ZOSMcJ18ZEQ+6CM1PgWPfY +y2Kw+koo35Qs0pUaaUntzAmD00qcqvFV4tVoNFgUgJk+yuuuYmps87KkuqTHPoW 4Ta0CV+/Fsr4mSChTrsp/Bz8BJtQywqxdURMiVXP/a7aRNGGcXFWxvd1zkSbAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUciWGSfWupBbU0vAXVRpuesA9dD0wHwYDVR0j BBgwFoAUNTban6HPfjEqr3ch7RU4TgY64uIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0g5UUN4MkhBem1VZ240WHk3aW5uZERtMmZETHl1RUhtcW53NzRSdXdE aDgvMS8zNTM2REE5RkExQ0Y3RTMxMkFBRjc3MjFFRDE1Mzg0RTA2M0FFMkUyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM1MzZEQTlGQTFDRjdFMzEy QUFGNzcyMUVEMTUzODRFMDYzQUUyRTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNIOVFDeDJIQXptVWduNFh5N2lubmREbTJmREx5dUVIbXFudzc0UnV3RGg4LzEv MzIzODMwMzQzYTMxMzEzNDM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjMz MzYzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKAQRSDANBgkqhkiG9w0BAQsFAAOCAQEAVNUVcEsE 2Ofrl2d45Wu8MWbrpIqOLWk7f7Be8tfzHu4BFGidqEwd8LTmdC+EemSJ/rpeubop unovCrBbMjRZxCK6i0/mKm7zafol+zCY8LbO6IH2sMyLoeNlif4KDoM5LMdgz89I ET9i/Mys7/KOS8/j/nPb1pVLtT+DEx6V+qvffsOjangz5VC1qjwivTKZSIS9+eL5 z4Ib84BieTyMUrx+qkLEh4Uhs14a15vPOXd6bzC/lmxl226kyomxr5iG3H1Mv5NC kpAq1wIgiKZ3HBuf/9fY15lvLUtA+p5lT5kUvmvxNjpOEfT3ozCNs7we+zYTimAK 8EU74H6epVMAkg== -----END CERTIFICATE-----Generated at Sat Apr 5 23:48:46 2025 by rpki-client