$ rpki-client -vvf rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/323830343a373238633a3a2f33322d3332203d3e20323730383630.roa File: 323830343a373238633a3a2f33322d3332203d3e20323730383630.roa (raw, json) Hash identifier: is1ce/85QOT7NztHS8d8OT2MR60xfEDAWq9FgKQpdCU= Subject key identifier: 56:0C:09:AE:69:2C:8B:25:CA:76:55:47:64:EA:D1:92:76:97:35:82 Certificate issuer: /CN=91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0 Certificate serial: 786AE1D20EFD8412F6D3FB23AB1DCBE22F04F700 Authority key identifier: 91:CB:0D:46:F3:8A:17:C0:F3:AB:C4:9D:94:96:AF:CB:60:EC:C5:C0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.cer Subject info access: rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/323830343a373238633a3a2f33322d3332203d3e20323730383630.roa Signing time: Sat 04 Jan 2025 12:28:07 +0000 ROA not before: Sat 04 Jan 2025 12:23:07 +0000 ROA not after: Sat 03 Jan 2026 12:28:07 +0000 asID: 270860 IP address blocks: 2804:728c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.crl rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 21 Apr 2025 20:46:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:6a:e1:d2:0e:fd:84:12:f6:d3:fb:23:ab:1d:cb:e2:2f:04:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0 Validity Not Before: Jan 4 12:23:07 2025 GMT Not After : Jan 3 12:28:07 2026 GMT Subject: CN=560C09AE692C8B25CA76554764EAD19276973582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:05:28:d6:9b:2e:d1:ab:00:2e:17:4a:55:88: 08:0a:45:58:5a:1b:8a:f7:8a:36:b7:b0:b1:fc:07: f0:b4:d8:4d:19:4a:08:eb:40:73:cb:91:90:18:56: e9:e3:49:97:ff:f0:28:72:16:50:55:64:ff:e4:fe: d4:23:86:43:16:b2:e3:4f:ad:0d:85:19:b5:80:ba: a5:9d:44:df:a9:97:0a:a7:16:de:a6:6c:0f:65:23: 16:c0:a2:d2:77:42:52:50:cb:b4:c1:39:5c:19:2c: b9:5c:2a:6a:02:9b:99:d5:8a:f1:32:e6:20:b5:53: 2a:0e:94:ad:79:bd:de:d2:77:a3:eb:3f:9e:70:bc: cf:16:35:ff:d5:bf:6f:32:2c:9c:68:fc:ef:a3:f9: 18:2f:1b:6a:5a:35:1a:c1:61:7f:18:93:c9:a3:a4: 9a:c2:32:e6:cc:67:c0:66:6a:36:03:81:0c:d8:0b: 8c:62:d4:94:45:52:0e:aa:f1:a0:8d:f6:22:b0:21: ea:ea:ea:12:df:cb:e3:47:e5:aa:f4:65:67:82:ba: e0:0d:81:12:ba:01:77:ea:b3:7a:f4:db:11:5e:ea: 22:30:a0:77:76:21:b5:03:b7:6e:ae:4b:01:07:16: bd:0a:95:ea:1e:c8:d7:72:b8:1f:5c:3b:ab:69:40: c7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:0C:09:AE:69:2C:8B:25:CA:76:55:47:64:EA:D1:92:76:97:35:82 X509v3 Authority Key Identifier: keyid:91:CB:0D:46:F3:8A:17:C0:F3:AB:C4:9D:94:96:AF:CB:60:EC:C5:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/323830343a373238633a3a2f33322d3332203d3e20323730383630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:728c::/32 Signature Algorithm: sha256WithRSAEncryption 40:26:de:5b:9a:fb:e8:ee:e6:f6:45:54:e0:3b:d1:5d:00:23: db:09:f0:0d:de:0c:06:df:c5:64:f1:9a:a1:fa:0e:a2:53:ad: 21:6a:5b:6f:ca:8f:42:43:60:0a:24:03:6d:6f:f1:32:0a:f6: 98:6a:be:24:74:86:6a:b5:cf:cd:41:d8:43:ff:62:c1:84:bf: c9:e0:93:c4:f4:d6:e8:f4:01:d2:74:ec:fb:fe:5a:f2:6f:66: ab:cb:00:3a:07:f8:1d:bf:58:a5:a2:83:56:06:1b:3a:ba:03: 3f:a2:3b:74:75:de:e2:49:9f:d4:13:7e:08:c4:b5:30:14:50: 10:b7:d3:0f:47:34:09:00:6c:14:fe:6c:2e:95:c7:11:d2:75: 16:b8:bd:37:70:0f:c6:84:3e:35:bb:3a:ef:2d:4b:bb:26:1c: ab:98:26:16:58:76:fa:f4:fb:99:37:2c:69:32:88:ce:5d:c3: 93:7f:8e:f8:4d:ed:70:34:da:95:95:59:fd:ef:a3:ba:08:72: f5:8c:9c:d1:61:56:55:19:a0:39:a7:0d:a6:3a:b8:77:6f:1e: 85:34:b3:98:df:44:95:f5:cc:56:4c:61:41:5b:9e:56:ea:15: 34:01:3a:fa:cc:4a:2d:06:9c:0c:32:9e:6e:11:cc:cd:6a:82: aa:da:91:7a -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUeGrh0g79hBL20/sjqx3L4i8E9wAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFDQjBENDZGMzhBMTdDMEYzQUJDNDlEOTQ5NkFGQ0I2 MEVDQzVDMDAeFw0yNTAxMDQxMjIzMDdaFw0yNjAxMDMxMjI4MDdaMDMxMTAvBgNV BAMTKDU2MEMwOUFFNjkyQzhCMjVDQTc2NTU0NzY0RUFEMTkyNzY5NzM1ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxBSjWmy7RqwAuF0pViAgKRVha G4r3ija3sLH8B/C02E0ZSgjrQHPLkZAYVunjSZf/8ChyFlBVZP/k/tQjhkMWsuNP rQ2FGbWAuqWdRN+plwqnFt6mbA9lIxbAotJ3QlJQy7TBOVwZLLlcKmoCm5nVivEy 5iC1UyoOlK15vd7Sd6PrP55wvM8WNf/Vv28yLJxo/O+j+RgvG2paNRrBYX8Yk8mj pJrCMubMZ8BmajYDgQzYC4xi1JRFUg6q8aCN9iKwIerq6hLfy+NH5ar0ZWeCuuAN gRK6AXfqs3r02xFe6iIwoHd2IbUDt26uSwEHFr0KleoeyNdyuB9cO6tpQMdHAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUVgwJrmksiyXKdlVHZOrRknaXNYIwHwYDVR0j BBgwFoAUkcsNRvOKF8Dzq8SdlJavy2DsxcAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2JOSjJLanJQaWplYXRiUHdGclExeWlQZXEyUkN3NnY5VEVpbnRXZ0hO QkwvMC85MUNCMEQ0NkYzOEExN0MwRjNBQkM0OUQ5NDk2QUZDQjYwRUNDNUMwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxQ0IwRDQ2RjM4QTE3QzBG M0FCQzQ5RDk0OTZBRkNCNjBFQ0M1QzAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNiTkoyS2pyUGlqZWF0YlB3RnJRMXlpUGVxMlJDdzZ2OVRFaW50V2dITkJMLzAv MzIzODMwMzQzYTM3MzIzODYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMw MzgzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKARyjDANBgkqhkiG9w0BAQsFAAOCAQEAQCbeW5r7 6O7m9kVU4DvRXQAj2wnwDd4MBt/FZPGaofoOolOtIWpbb8qPQkNgCiQDbW/xMgr2 mGq+JHSGarXPzUHYQ/9iwYS/yeCTxPTW6PQB0nTs+/5a8m9mq8sAOgf4Hb9YpaKD VgYbOroDP6I7dHXe4kmf1BN+CMS1MBRQELfTD0c0CQBsFP5sLpXHEdJ1Fri9N3AP xoQ+Nbs67y1LuyYcq5gmFlh2+vT7mTcsaTKIzl3Dk3+O+E3tcDTalZVZ/e+jughy 9Yyc0WFWVRmgOacNpjq4d28ehTSzmN9ElfXMVkxhQVueVuoVNAE6+sxKLQacDDKe bhHMzWqCqtqReg== -----END CERTIFICATE-----Generated at Sun Apr 20 22:45:15 2025 by rpki-client