$ rpki-client -vvf rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/323830343a343031633a343030303a3a2f33342d3334203d3e20323635393335.roa File: 323830343a343031633a343030303a3a2f33342d3334203d3e20323635393335.roa (raw, json) Hash identifier: l6zmL7tO2te1AxQ088ekWAopHM/61E2qHDs7rKjK1D0= Subject key identifier: DB:74:20:D4:14:50:CB:FA:7A:6E:99:0D:48:3D:3D:13:52:75:3D:18 Certificate issuer: /CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3 Certificate serial: 12A7E8DF97365207BA7408E1C2B7BFB02FECFFB2 Authority key identifier: 38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer Subject info access: rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/323830343a343031633a343030303a3a2f33342d3334203d3e20323635393335.roa Signing time: Thu 04 Apr 2024 07:21:08 +0000 ROA not before: Thu 04 Apr 2024 07:16:08 +0000 ROA not after: Thu 03 Apr 2025 07:21:08 +0000 asID: 265935 IP address blocks: 2804:401c:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 28 Sep 2024 22:36:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:a7:e8:df:97:36:52:07:ba:74:08:e1:c2:b7:bf:b0:2f:ec:ff:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3 Validity Not Before: Apr 4 07:16:08 2024 GMT Not After : Apr 3 07:21:08 2025 GMT Subject: CN=DB7420D41450CBFA7A6E990D483D3D1352753D18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f1:20:33:fe:b2:ab:90:c0:fc:7e:3b:37:7c: ca:cd:f0:54:2c:98:74:91:17:08:c0:fa:0a:57:83: 0a:86:7e:38:21:2c:ee:79:cf:b6:81:d8:38:19:62: e8:5e:0b:6e:53:26:b1:c8:4d:95:35:c1:62:2a:5e: f5:2c:3d:c3:c4:16:9b:a0:76:2f:90:58:13:94:c0: ab:f6:15:bc:3e:2b:5a:2b:08:73:d4:00:9a:2a:3d: 16:99:fa:19:0c:9d:68:4a:59:ef:40:20:31:6d:b0: be:75:0c:39:2e:dd:32:8f:f2:ce:f9:33:aa:fc:64: d2:6b:75:51:d6:fe:41:4c:e5:7b:f7:50:68:9c:eb: 96:b4:31:96:f8:4f:74:cf:2e:f8:e3:67:64:65:0d: f7:3f:66:06:10:ea:1e:6a:45:57:75:28:0d:63:3e: 4e:93:2b:35:e2:19:5e:28:78:95:3c:e5:a2:5c:9e: b0:0c:83:f9:3c:1c:2f:2d:7a:57:35:99:8c:94:c0: 95:bf:7a:34:8f:b9:70:3f:d2:b4:bd:11:b3:64:78: a6:36:15:66:b7:ea:83:ea:7c:ec:5f:55:80:22:39: 83:24:74:a0:09:9c:cf:59:21:07:b6:8c:a4:58:15: d6:b2:00:36:27:b7:f4:da:79:78:5e:f8:d0:f2:df: f2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:74:20:D4:14:50:CB:FA:7A:6E:99:0D:48:3D:3D:13:52:75:3D:18 X509v3 Authority Key Identifier: keyid:38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/323830343a343031633a343030303a3a2f33342d3334203d3e20323635393335.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:401c:4000::/34 Signature Algorithm: sha256WithRSAEncryption 52:3d:9f:3f:f6:9e:42:83:7d:44:21:f2:f1:ca:ba:4b:5c:71: ac:25:92:f0:3f:12:af:eb:ec:47:2d:e1:27:06:b8:04:84:96: d6:cc:56:de:af:79:36:fb:bf:3e:99:44:6b:99:ce:e6:75:b9: 75:3b:33:ed:2a:f6:39:f5:ec:37:8e:fb:e0:75:f7:73:1f:6e: 16:d3:42:74:86:fa:9c:00:fb:f6:94:70:8e:f6:be:e6:1a:20: 88:25:44:d3:52:0c:ea:77:fb:1b:e1:ab:8b:51:26:d6:c6:3f: 84:e9:d1:c3:d2:7f:e1:d8:ca:bc:c8:30:af:fe:f0:5d:06:5c: a8:61:6b:92:09:46:33:9d:26:32:08:93:93:ae:70:80:e4:b9: 5d:e5:f6:c0:5c:2b:bc:ff:37:8f:ce:2e:9c:69:76:67:6e:18: 0b:d7:af:04:a4:27:8f:0c:ce:ab:e3:cb:a4:f0:e7:16:75:d1: f0:52:b4:59:9e:7e:0d:a6:93:e3:61:70:b2:2f:37:7c:b8:15: 24:c5:52:c4:1f:47:53:13:9a:af:b4:74:91:10:f9:28:fa:81: 68:d3:b5:4d:ce:fe:a2:ca:5b:42:87:fd:f7:c1:0d:c9:08:6d: e9:50:4e:eb:b0:7f:d7:b2:70:2b:d9:53:52:89:97:3b:03:f0: 6b:60:7f:ec -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUEqfo35c2Uge6dAjhwre/sC/s/7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhGM0JFQUM1NzVENkI2N0JGMkYyODYzMjhDNjgwQzQ0 NjdGNUJEMzAeFw0yNDA0MDQwNzE2MDhaFw0yNTA0MDMwNzIxMDhaMDMxMTAvBgNV BAMTKERCNzQyMEQ0MTQ1MENCRkE3QTZFOTkwRDQ4M0QzRDEzNTI3NTNEMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv8SAz/rKrkMD8fjs3fMrN8FQs mHSRFwjA+gpXgwqGfjghLO55z7aB2DgZYuheC25TJrHITZU1wWIqXvUsPcPEFpug di+QWBOUwKv2Fbw+K1orCHPUAJoqPRaZ+hkMnWhKWe9AIDFtsL51DDku3TKP8s75 M6r8ZNJrdVHW/kFM5Xv3UGic65a0MZb4T3TPLvjjZ2RlDfc/ZgYQ6h5qRVd1KA1j Pk6TKzXiGV4oeJU85aJcnrAMg/k8HC8telc1mYyUwJW/ejSPuXA/0rS9EbNkeKY2 FWa36oPqfOxfVYAiOYMkdKAJnM9ZIQe2jKRYFdayADYnt/TaeXhe+NDy3/L1AgMB AAGjggJbMIICVzAdBgNVHQ4EFgQU23Qg1BRQy/p6bpkNSD09E1J1PRgwHwYDVR0j BBgwFoAUOPO+rFdda2e/LyhjKMaAxEZ/W9MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2I3YmVad0xiVGpUQjNHUFJ0Qmh6TVJ6V3hFbllNQllHVk1BdHNFendQ NmovMS8zOEYzQkVBQzU3NUQ2QjY3QkYyRjI4NjMyOEM2ODBDNDQ2N0Y1QkQzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM4RjNCRUFDNTc1RDZCNjdC RjJGMjg2MzI4QzY4MEM0NDY3RjVCRDMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNiN2JlWndMYlRqVEIzR1BSdEJoek1Seld4RW5ZTUJZR1ZNQXRzRXp3UDZqLzEv MzIzODMwMzQzYTM0MzAzMTYzM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzYzNTM5MzMzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEQBxAMA0GCSqGSIb3DQEBCwUA A4IBAQBSPZ8/9p5Cg31EIfLxyrpLXHGsJZLwPxKv6+xHLeEnBrgEhJbWzFber3k2 +78+mURrmc7mdbl1OzPtKvY59ew3jvvgdfdzH24W00J0hvqcAPv2lHCO9r7mGiCI JUTTUgzqd/sb4auLUSbWxj+E6dHD0n/h2Mq8yDCv/vBdBlyoYWuSCUYznSYyCJOT rnCA5Lld5fbAXCu8/zePzi6caXZnbhgL168EpCePDM6r48uk8OcWddHwUrRZnn4N ppPjYXCyLzd8uBUkxVLEH0dTE5qvtHSREPko+oFo07VNzv6iyltCh/33wQ3JCG3p UE7rsH/XsnAr2VNSiZc7A/BrYH/s -----END CERTIFICATE-----Generated at Fri Sep 27 21:10:59 2024 by rpki-client on console-ams.rpki-client.org