$ rpki-client -vvf rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/323830343a336231383a343030303a3a2f33342d3334203d3e20323636313239.roa File: 323830343a336231383a343030303a3a2f33342d3334203d3e20323636313239.roa (raw, json) Hash identifier: cEmMZ9D8SeI0B9od0W9BtYW1YlULDsYZXCsqZUBMPxg= Subject key identifier: 68:6C:D9:60:BE:39:E6:47:89:15:4E:F9:6A:C9:61:27:55:26:73:85 Certificate issuer: /CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E Certificate serial: 3B0CDBBE8492AC6B7841B0958A5568728FF9DA4C Authority key identifier: 8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer Subject info access: rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/323830343a336231383a343030303a3a2f33342d3334203d3e20323636313239.roa Signing time: Wed 05 Mar 2025 19:00:16 +0000 ROA not before: Wed 05 Mar 2025 18:55:16 +0000 ROA not after: Wed 04 Mar 2026 19:00:16 +0000 asID: 266129 IP address blocks: 2804:3b18:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 11 Apr 2025 20:11:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:0c:db:be:84:92:ac:6b:78:41:b0:95:8a:55:68:72:8f:f9:da:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E Validity Not Before: Mar 5 18:55:16 2025 GMT Not After : Mar 4 19:00:16 2026 GMT Subject: CN=686CD960BE39E64789154EF96AC9612755267385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:39:d7:4d:42:92:47:63:37:13:c5:81:d7:f4: 00:79:50:ef:84:14:74:ea:f0:cb:95:71:5e:e9:f8: 65:32:2e:11:94:33:6d:1b:db:90:f5:4a:19:66:23: 74:f5:15:dc:4d:b6:d0:54:5a:59:6a:1f:cb:ba:e1: d8:da:7c:33:d8:5d:3e:93:be:2c:ea:ca:10:6c:37: b8:3e:54:da:7b:14:ba:62:05:ed:e9:f6:8d:f7:11: 65:27:f1:4e:12:d9:5a:9f:52:ef:c0:05:50:03:4c: c8:45:36:5a:5c:69:3a:65:c7:6d:3c:a3:e2:c8:4d: 44:5c:4f:40:88:3a:d5:4d:5f:d2:fb:67:58:11:40: bb:3a:87:bd:b9:97:26:fd:3f:9c:c5:1c:ac:36:a3: 43:3c:2c:b4:f5:39:46:89:ef:e1:2f:fb:88:2a:14: 7e:d7:28:0a:df:83:a0:87:1d:85:6a:76:36:16:af: 2c:52:d6:78:85:79:59:a6:33:ea:66:f3:1b:35:65: e8:2f:f8:77:dd:fc:d1:5a:b4:44:ef:d3:e2:91:7b: 2c:58:49:f5:de:7b:10:e4:05:0b:e2:4a:b8:80:0e: ea:54:04:c1:8f:36:58:41:14:d8:0f:71:fc:d3:00: 30:f0:be:76:f8:5c:4a:59:53:08:51:fb:f0:7a:89: 8a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:6C:D9:60:BE:39:E6:47:89:15:4E:F9:6A:C9:61:27:55:26:73:85 X509v3 Authority Key Identifier: keyid:8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/323830343a336231383a343030303a3a2f33342d3334203d3e20323636313239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:3b18:4000::/34 Signature Algorithm: sha256WithRSAEncryption 8e:0f:be:de:7b:19:eb:87:a2:c5:e7:11:27:9d:67:30:4e:78: 8c:c9:ff:57:b3:9e:c6:cf:c3:52:79:2d:8c:b4:5a:05:a8:27: a1:1c:92:5f:9b:e4:df:d9:46:52:97:99:00:f0:7b:32:de:a6: 89:e8:04:6b:09:a3:84:6f:e4:ed:d7:bb:60:40:a3:26:db:3a: 8a:6c:1b:73:1a:3c:9b:52:6d:55:c3:8e:f3:50:9a:0b:e6:7f: 7f:8b:a8:53:31:db:4c:d9:20:dd:1f:15:f6:3f:4d:10:ef:70: 87:12:21:ef:a0:8b:18:62:68:21:4b:d4:c8:19:72:c2:e8:0d: 8e:ab:32:78:4f:4b:23:3e:00:f3:fd:a7:ca:61:6f:cd:64:fc: 8a:19:b3:47:6f:bd:1c:07:d9:30:25:ad:ea:08:ad:c7:9c:07: 72:7d:14:a5:8f:ca:30:c8:4e:d5:8a:21:3e:ea:bf:8f:b2:6e: 5d:50:ed:c7:06:42:bb:4a:0d:65:31:29:8f:bf:2d:ff:72:a6: dd:d8:0d:3e:c0:50:fb:04:24:e3:85:8f:fc:1a:01:5a:41:be: 27:10:63:53:50:38:4b:87:54:23:37:53:1f:bb:3a:1f:9d:f5: 76:4a:20:f9:91:5b:b4:98:c8:f7:c7:df:d1:dc:d3:a1:78:37: 0f:87:40:26 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUOwzbvoSSrGt4QbCVilVoco/52kwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU4NEZGOTEyMUQ5MjU3Mzc2RDc3N0EwOTI1MzNEOENF REI5RUU5RTAeFw0yNTAzMDUxODU1MTZaFw0yNjAzMDQxOTAwMTZaMDMxMTAvBgNV BAMTKDY4NkNEOTYwQkUzOUU2NDc4OTE1NEVGOTZBQzk2MTI3NTUyNjczODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvOddNQpJHYzcTxYHX9AB5UO+E FHTq8MuVcV7p+GUyLhGUM20b25D1ShlmI3T1FdxNttBUWllqH8u64djafDPYXT6T vizqyhBsN7g+VNp7FLpiBe3p9o33EWUn8U4S2VqfUu/ABVADTMhFNlpcaTplx208 o+LITURcT0CIOtVNX9L7Z1gRQLs6h725lyb9P5zFHKw2o0M8LLT1OUaJ7+Ev+4gq FH7XKArfg6CHHYVqdjYWryxS1niFeVmmM+pm8xs1Zegv+Hfd/NFatETv0+KReyxY SfXeexDkBQviSriADupUBMGPNlhBFNgPcfzTADDwvnb4XEpZUwhR+/B6iYo7AgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUaGzZYL455keJFU75aslhJ1Umc4UwHwYDVR0j BBgwFoAUjoT/kSHZJXN213egklM9jO257p4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1lEelE1bmIxN3lwWko5dnJLYjcyMnlCWWV3a21LRGUyRXdZcVNqSmp3 dVcvMS84RTg0RkY5MTIxRDkyNTczNzZENzc3QTA5MjUzM0Q4Q0VEQjlFRTlFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFODRGRjkxMjFEOTI1NzM3 NkQ3NzdBMDkyNTMzRDhDRURCOUVFOUUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNZRHpRNW5iMTd5cFpKOXZyS2I3MjJ5Qllld2ttS0RlMkV3WXFTakpqd3VXLzEv MzIzODMwMzQzYTMzNjIzMTM4M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzYzNjMxMzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEOxhAMA0GCSqGSIb3DQEBCwUA A4IBAQCOD77eexnrh6LF5xEnnWcwTniMyf9Xs57Gz8NSeS2MtFoFqCehHJJfm+Tf 2UZSl5kA8Hsy3qaJ6ARrCaOEb+Tt17tgQKMm2zqKbBtzGjybUm1Vw47zUJoL5n9/ i6hTMdtM2SDdHxX2P00Q73CHEiHvoIsYYmghS9TIGXLC6A2OqzJ4T0sjPgDz/afK YW/NZPyKGbNHb70cB9kwJa3qCK3HnAdyfRSlj8owyE7ViiE+6r+Psm5dUO3HBkK7 Sg1lMSmPvy3/cqbd2A0+wFD7BCTjhY/8GgFaQb4nEGNTUDhLh1QjN1MfuzofnfV2 SiD5kVu0mMj3x9/R3NOheDcPh0Am -----END CERTIFICATE-----Generated at Fri Apr 11 11:26:45 2025 by rpki-client