$ rpki-client -vvf rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/323830343a336264303a3a2f33322d3332203d3e20323636313732.roa File: 323830343a336264303a3a2f33322d3332203d3e20323636313732.roa (raw, json) Hash identifier: ARQtTGJn8ecRrryzPLbTrDMNnVh5iFR4d/qAnKHlnZ8= Subject key identifier: 7A:53:74:E8:21:D4:15:84:78:01:95:6D:7F:64:D6:D0:5F:20:61:91 Certificate issuer: /CN=DD0CBBA83E82BACB16521E6328443385F92099E0 Certificate serial: 481B8F00441EAF1754BB243C073AFEF6BD0FA469 Authority key identifier: DD:0C:BB:A8:3E:82:BA:CB:16:52:1E:63:28:44:33:85:F9:20:99:E0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0CBBA83E82BACB16521E6328443385F92099E0.cer Subject info access: rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/323830343a336264303a3a2f33322d3332203d3e20323636313732.roa Signing time: Mon 17 Feb 2025 19:32:51 +0000 ROA not before: Mon 17 Feb 2025 19:27:51 +0000 ROA not after: Mon 16 Feb 2026 19:32:51 +0000 asID: 266172 IP address blocks: 2804:3bd0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/DD0CBBA83E82BACB16521E6328443385F92099E0.crl rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/DD0CBBA83E82BACB16521E6328443385F92099E0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0CBBA83E82BACB16521E6328443385F92099E0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 06 Apr 2025 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:1b:8f:00:44:1e:af:17:54:bb:24:3c:07:3a:fe:f6:bd:0f:a4:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD0CBBA83E82BACB16521E6328443385F92099E0 Validity Not Before: Feb 17 19:27:51 2025 GMT Not After : Feb 16 19:32:51 2026 GMT Subject: CN=7A5374E821D415847801956D7F64D6D05F206191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e4:cf:f5:82:4e:0a:aa:06:72:4c:d8:42:25: bf:a6:3b:04:f2:70:44:a6:f1:d7:c2:5e:25:29:60: f1:7d:eb:70:f6:37:71:f6:ca:37:fd:f9:25:ee:dd: 06:37:04:4e:1a:1f:1c:a2:94:bc:18:89:18:8f:7e: ff:0c:ea:6e:c1:dc:f7:f3:5c:44:97:46:da:71:1b: de:13:da:2f:5d:d2:a6:bc:a4:44:77:2e:42:22:be: a9:d0:33:22:29:d2:43:30:14:49:e4:a7:84:48:34: 57:38:80:05:d4:ca:c4:6a:95:17:45:15:17:35:e3: 5c:cd:60:9a:63:08:33:47:cd:08:78:09:42:72:23: 02:1b:e1:3b:2a:d6:58:95:b8:de:25:cf:4e:66:90: 95:62:1f:09:ea:b6:4d:2a:eb:0d:a3:5c:1e:f8:7a: d7:a7:df:76:a8:ed:45:0c:c9:f3:00:80:53:6a:29: 21:08:64:d9:8b:9f:eb:f4:7b:79:da:1c:3a:39:1a: 7e:49:4f:b7:37:89:01:2f:7c:4d:72:b5:06:5d:55: de:32:a5:c5:a3:6a:92:9d:06:14:0e:5d:b9:57:40: a5:b0:10:ee:04:c2:a3:99:8c:8d:0a:cc:e0:10:37: 57:c1:ce:42:76:88:62:3e:e2:d0:09:70:c2:47:19: 2d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:53:74:E8:21:D4:15:84:78:01:95:6D:7F:64:D6:D0:5F:20:61:91 X509v3 Authority Key Identifier: keyid:DD:0C:BB:A8:3E:82:BA:CB:16:52:1E:63:28:44:33:85:F9:20:99:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/DD0CBBA83E82BACB16521E6328443385F92099E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0CBBA83E82BACB16521E6328443385F92099E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/323830343a336264303a3a2f33322d3332203d3e20323636313732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:3bd0::/32 Signature Algorithm: sha256WithRSAEncryption 10:8d:e1:d3:5d:c6:b2:29:85:8a:af:44:e6:87:7f:f2:98:35: 4e:cd:38:be:0e:08:dc:17:37:39:65:5c:3d:69:f9:45:6e:8d: a2:61:d8:7c:15:74:d6:41:bc:63:0f:30:88:53:a3:fd:49:cb: c7:f0:5c:7d:5b:43:c0:e3:17:a6:6f:2d:7a:41:bf:20:e2:4e: f3:f5:1c:33:0c:79:97:b8:13:ae:eb:9f:69:52:62:1c:bc:c9: 79:b5:2f:20:77:92:cf:fa:d3:7f:d9:92:69:b0:e2:9d:0e:bb: 9c:b0:85:a0:1e:88:2e:14:cc:10:ff:ba:c8:f4:18:1c:38:cd: 73:11:a0:7d:e9:d0:b3:2d:8f:88:fb:8c:f0:6f:2e:b9:a1:60: 3c:b7:75:98:9b:bb:9e:00:44:9a:a2:cc:8c:32:03:a6:5a:82: a8:22:14:0b:25:2d:93:46:01:d2:bb:b5:d2:95:f6:6f:16:16: 6f:25:98:70:8e:07:f5:2f:b7:bf:04:4a:7f:79:0b:8e:7d:ea: 75:b2:82:d5:f5:47:c6:f9:96:4f:22:31:14:f0:68:70:61:98: e3:7c:1b:b4:16:64:22:4e:68:4e:52:67:76:d3:ef:d6:05:fc: 59:bd:59:c6:cf:03:67:30:e2:97:a9:95:6d:ab:9e:d9:93:43: 6f:01:57:70 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUSBuPAEQerxdUuyQ8Bzr+9r0PpGkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQwQ0JCQTgzRTgyQkFDQjE2NTIxRTYzMjg0NDMzODVG OTIwOTlFMDAeFw0yNTAyMTcxOTI3NTFaFw0yNjAyMTYxOTMyNTFaMDMxMTAvBgNV BAMTKDdBNTM3NEU4MjFENDE1ODQ3ODAxOTU2RDdGNjRENkQwNUYyMDYxOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf5M/1gk4KqgZyTNhCJb+mOwTy cESm8dfCXiUpYPF963D2N3H2yjf9+SXu3QY3BE4aHxyilLwYiRiPfv8M6m7B3Pfz XESXRtpxG94T2i9d0qa8pER3LkIivqnQMyIp0kMwFEnkp4RINFc4gAXUysRqlRdF FRc141zNYJpjCDNHzQh4CUJyIwIb4Tsq1liVuN4lz05mkJViHwnqtk0q6w2jXB74 eten33ao7UUMyfMAgFNqKSEIZNmLn+v0e3naHDo5Gn5JT7c3iQEvfE1ytQZdVd4y pcWjapKdBhQOXblXQKWwEO4EwqOZjI0KzOAQN1fBzkJ2iGI+4tAJcMJHGS2bAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUelN06CHUFYR4AZVtf2TW0F8gYZEwHwYDVR0j BBgwFoAU3Qy7qD6CussWUh5jKEQzhfkgmeAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM05MS3ZVY1J4Z1NHNWl1alVSd1hndGJnUHdpcmY1OTNmeERqOHl4eXM4 cDcvMC9ERDBDQkJBODNFODJCQUNCMTY1MjFFNjMyODQ0MzM4NUY5MjA5OUUwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0REMENCQkE4M0U4MkJBQ0Ix NjUyMUU2MzI4NDQzMzg1RjkyMDk5RTAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNOTEt2VWNSeGdTRzVpdWpVUndYZ3RiZ1B3aXJmNTkzZnhEajh5eHlzOHA3LzAv MzIzODMwMzQzYTMzNjI2NDMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM2 MzEzNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKAQ70DANBgkqhkiG9w0BAQsFAAOCAQEAEI3h013G simFiq9E5od/8pg1Ts04vg4I3Bc3OWVcPWn5RW6NomHYfBV01kG8Yw8wiFOj/UnL x/BcfVtDwOMXpm8tekG/IOJO8/UcMwx5l7gTruufaVJiHLzJebUvIHeSz/rTf9mS abDinQ67nLCFoB6ILhTMEP+6yPQYHDjNcxGgfenQsy2PiPuM8G8uuaFgPLd1mJu7 ngBEmqLMjDIDplqCqCIUCyUtk0YB0ru10pX2bxYWbyWYcI4H9S+3vwRKf3kLjn3q dbKC1fVHxvmWTyIxFPBocGGY43wbtBZkIk5oTlJndtPv1gX8Wb1Zxs8DZzDil6mV baue2ZNDbwFXcA== -----END CERTIFICATE-----Generated at Sat Apr 5 19:52:59 2025 by rpki-client