$ rpki-client -vvf rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/323830343a313034343a383030303a3a2f33332d3333203d3e20323633363237.roa File: 323830343a313034343a383030303a3a2f33332d3333203d3e20323633363237.roa (raw, json) Hash identifier: CsBH1e7SB1knlGRtZtsxaWrNZhZOlUA2khqZDI0V/LE= Subject key identifier: 9D:0C:C7:51:7D:5D:6F:03:32:49:2B:B7:75:2F:92:61:34:1F:A8:AA Certificate issuer: /CN=11A01506231611C87461442475B1401AD5DE38D2 Certificate serial: 42FA17786F45110A0ADF2D1FFA0C53DBE67D1490 Authority key identifier: 11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer Subject info access: rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/323830343a313034343a383030303a3a2f33332d3333203d3e20323633363237.roa Signing time: Tue 25 Mar 2025 20:13:31 +0000 ROA not before: Tue 25 Mar 2025 20:08:31 +0000 ROA not after: Tue 24 Mar 2026 20:13:31 +0000 asID: 263627 IP address blocks: 2804:1044:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Apr 2025 12:59:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:fa:17:78:6f:45:11:0a:0a:df:2d:1f:fa:0c:53:db:e6:7d:14:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11A01506231611C87461442475B1401AD5DE38D2 Validity Not Before: Mar 25 20:08:31 2025 GMT Not After : Mar 24 20:13:31 2026 GMT Subject: CN=9D0CC7517D5D6F0332492BB7752F9261341FA8AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c2:71:58:f5:14:05:a4:ed:44:a8:5c:65:cc: 95:16:67:43:46:72:e9:ce:82:d5:2b:68:f4:87:07: 57:69:51:eb:f8:9c:f8:84:ec:dd:6c:ab:86:59:8c: 89:05:2d:ab:b7:2b:da:69:1b:a0:46:89:a3:a8:7e: b7:5d:eb:1c:44:44:df:38:6c:f6:2d:18:a5:4a:41: 54:30:31:b3:96:d7:c8:23:2f:2d:1e:17:12:6d:2a: 25:10:7c:9e:63:a0:77:77:7d:11:1d:35:eb:98:62: 8b:d0:dd:5e:48:e8:37:d4:8b:ae:41:8a:c4:21:a3: 58:f8:e5:a7:41:d7:59:be:d1:e3:03:95:d5:ef:01: a1:65:7c:0a:33:31:0f:89:e1:51:1a:74:92:d7:19: 92:74:c9:ab:12:ae:4d:dd:ab:fe:11:1b:8e:45:4f: 81:f9:c1:31:ea:91:3f:28:ad:53:af:a8:72:b0:d7: df:58:6c:eb:b0:b9:73:48:ed:f9:58:33:54:b3:1a: cd:68:71:7e:12:93:30:ca:dc:c5:cc:8c:f8:fd:27: 7f:54:16:d1:5e:70:aa:3b:cb:0f:4d:99:6a:fa:70: 24:73:02:35:4c:09:50:63:ad:3a:34:ab:d3:c4:31: 7e:39:5b:bc:e7:8d:fe:08:9e:95:a1:2a:87:0b:14: 49:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:0C:C7:51:7D:5D:6F:03:32:49:2B:B7:75:2F:92:61:34:1F:A8:AA X509v3 Authority Key Identifier: keyid:11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/323830343a313034343a383030303a3a2f33332d3333203d3e20323633363237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:1044:8000::/33 Signature Algorithm: sha256WithRSAEncryption 31:1e:31:d8:1f:e0:5f:c8:1d:fe:53:8b:fe:40:ee:03:96:be: cf:73:fe:02:87:5b:64:ed:db:df:41:6b:2e:11:56:6f:01:f9: ac:dd:a4:d7:6f:c1:df:91:16:fc:78:ae:5a:54:b1:f8:06:24: 90:70:13:7c:b3:24:08:64:8b:a8:82:9c:ba:83:bc:11:af:bf: 75:c8:f6:10:dd:bb:c7:39:d3:b1:2c:50:ef:1a:a1:0f:d7:44: 04:6e:78:6c:47:66:03:5b:4d:3c:07:49:05:80:d1:b0:db:0a: 89:d2:50:5f:5a:c3:1f:0f:da:f3:91:36:be:7b:19:92:61:47: 18:fe:95:63:06:91:e4:3a:a7:44:37:82:cd:3e:f7:51:fa:14: 90:b3:09:d0:60:53:85:d0:7a:71:63:3e:4c:a8:c6:b0:84:19: 73:a4:a5:1a:09:f2:a5:7b:75:8d:2c:d4:e0:f8:6a:20:bf:15: be:58:29:06:0d:9c:a7:14:71:74:7b:cd:39:3f:2d:9b:f0:4a: fa:64:78:fb:15:fd:5b:33:0b:16:f9:e3:cf:a1:9d:e4:7b:ee: 5f:a0:63:8e:31:24:d8:6b:cd:09:62:ac:47:df:4d:c1:50:b7: b8:7d:d2:d4:97:65:92:b1:c9:f4:60:cb:29:60:af:11:18:96: 1a:7e:da:fc -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUQvoXeG9FEQoK3y0f+gxT2+Z9FJAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFBMDE1MDYyMzE2MTFDODc0NjE0NDI0NzVCMTQwMUFE NURFMzhEMjAeFw0yNTAzMjUyMDA4MzFaFw0yNjAzMjQyMDEzMzFaMDMxMTAvBgNV BAMTKDlEMENDNzUxN0Q1RDZGMDMzMjQ5MkJCNzc1MkY5MjYxMzQxRkE4QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCywnFY9RQFpO1EqFxlzJUWZ0NG cunOgtUraPSHB1dpUev4nPiE7N1sq4ZZjIkFLau3K9ppG6BGiaOofrdd6xxERN84 bPYtGKVKQVQwMbOW18gjLy0eFxJtKiUQfJ5joHd3fREdNeuYYovQ3V5I6DfUi65B isQho1j45adB11m+0eMDldXvAaFlfAozMQ+J4VEadJLXGZJ0yasSrk3dq/4RG45F T4H5wTHqkT8orVOvqHKw199YbOuwuXNI7flYM1SzGs1ocX4SkzDK3MXMjPj9J39U FtFecKo7yw9NmWr6cCRzAjVMCVBjrTo0q9PEMX45W7znjf4InpWhKocLFEktAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUnQzHUX1dbwMySSu3dS+SYTQfqKowHwYDVR0j BBgwFoAUEaAVBiMWEch0YUQkdbFAGtXeONIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM3lqR2FYcGpoUG5ERVhoUnE4aDhkUVQ4dTNxYnZDempTbVRWdjN4VEx6 V2kvMC8xMUEwMTUwNjIzMTYxMUM4NzQ2MTQ0MjQ3NUIxNDAxQUQ1REUzOEQyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzExQTAxNTA2MjMxNjExQzg3 NDYxNDQyNDc1QjE0MDFBRDVERTM4RDIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzN5akdhWHBqaFBuREVYaFJxOGg4ZFFUOHUzcWJ2Q3pqU21UVnYzeFRMeldpLzAv MzIzODMwMzQzYTMxMzAzNDM0M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk M2UyMDMyMzYzMzM2MzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEEESAMA0GCSqGSIb3DQEBCwUA A4IBAQAxHjHYH+BfyB3+U4v+QO4Dlr7Pc/4Ch1tk7dvfQWsuEVZvAfms3aTXb8Hf kRb8eK5aVLH4BiSQcBN8syQIZIuogpy6g7wRr791yPYQ3bvHOdOxLFDvGqEP10QE bnhsR2YDW008B0kFgNGw2wqJ0lBfWsMfD9rzkTa+exmSYUcY/pVjBpHkOqdEN4LN PvdR+hSQswnQYFOF0HpxYz5MqMawhBlzpKUaCfKle3WNLNTg+GogvxW+WCkGDZyn FHF0e805Py2b8Er6ZHj7Ff1bMwsW+ePPoZ3ke+5foGOOMSTYa80JYqxH303BULe4 fdLUl2WSscn0YMspYK8RGJYaftr8 -----END CERTIFICATE-----Generated at Mon Apr 7 04:57:27 2025 by rpki-client