$ rpki-client -vvf rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/323830343a313034343a633030303a3a2f33342d3334203d3e20323633363237.roa File: 323830343a313034343a633030303a3a2f33342d3334203d3e20323633363237.roa (raw, json) Hash identifier: WbRf00DedE5n3jTAjcUqI8/hgF3eVwWMCsVQSGC3buk= Subject key identifier: DB:89:02:A9:04:5A:2A:97:CC:E2:58:18:A0:F4:EF:A8:82:FF:CA:C6 Certificate issuer: /CN=11A01506231611C87461442475B1401AD5DE38D2 Certificate serial: 6A6CA7764FBF2FC2005A645B30D92F0E5563AB83 Authority key identifier: 11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer Subject info access: rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/323830343a313034343a633030303a3a2f33342d3334203d3e20323633363237.roa Signing time: Tue 25 Mar 2025 20:13:31 +0000 ROA not before: Tue 25 Mar 2025 20:08:31 +0000 ROA not after: Tue 24 Mar 2026 20:13:31 +0000 asID: 263627 IP address blocks: 2804:1044:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 08 Apr 2025 13:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:6c:a7:76:4f:bf:2f:c2:00:5a:64:5b:30:d9:2f:0e:55:63:ab:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11A01506231611C87461442475B1401AD5DE38D2 Validity Not Before: Mar 25 20:08:31 2025 GMT Not After : Mar 24 20:13:31 2026 GMT Subject: CN=DB8902A9045A2A97CCE25818A0F4EFA882FFCAC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1c:70:1d:b7:ac:d6:26:d0:45:69:bd:5a:95: 93:e6:f9:58:4c:8c:fb:18:55:cf:5c:2a:af:8c:7a: ae:92:b6:d4:24:84:af:1d:8d:71:bd:8c:0a:3f:95: 2c:24:a8:ab:de:a2:d5:eb:11:9e:96:7b:50:42:f1: ac:88:42:54:9b:ff:1a:13:5d:4e:e7:39:39:3a:34: 8d:17:c6:22:cf:21:a2:f1:c9:0b:c2:f3:b1:b6:89: 98:73:c7:eb:f2:c0:1f:d0:e2:dc:00:13:69:34:b2: 41:77:ad:f2:73:09:80:74:9a:9e:18:44:48:02:0d: b3:07:c6:21:f6:9d:19:77:cf:da:1c:c7:41:d6:b9: 41:00:2f:21:e9:3a:8f:05:11:d3:de:c8:5d:a6:cb: fd:c4:43:03:77:ac:b4:c1:04:0c:19:41:a0:fc:ca: 0d:0a:10:42:c1:3d:ff:d5:80:09:5a:77:a3:cf:ba: 64:87:36:2d:e4:dd:43:d0:a0:5c:fb:cc:6b:c0:46: 03:46:19:fe:4f:9e:fe:67:01:8d:f9:50:81:bc:1e: 2f:a9:92:20:f3:0b:bb:ab:aa:94:0d:70:81:2f:73: 3d:2f:d6:b1:27:eb:26:51:c8:a3:32:50:87:58:a3: 54:0f:c8:cc:0c:8a:7d:77:de:20:c1:97:66:5a:9d: 42:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:89:02:A9:04:5A:2A:97:CC:E2:58:18:A0:F4:EF:A8:82:FF:CA:C6 X509v3 Authority Key Identifier: keyid:11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/323830343a313034343a633030303a3a2f33342d3334203d3e20323633363237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:1044:c000::/34 Signature Algorithm: sha256WithRSAEncryption 38:ce:7e:fa:46:a3:b1:7e:d4:9b:5e:4e:13:2b:35:96:2b:c8: 45:74:62:17:49:0f:bb:35:27:b0:59:eb:de:71:a5:df:f5:fd: 7f:1a:59:a9:a2:b2:03:d4:9d:29:67:44:b4:95:6e:8d:8c:4e: ca:eb:7f:6e:57:52:23:15:87:f5:05:ab:82:da:a8:6f:1d:12: e9:75:99:5e:e8:59:20:c4:a3:38:24:c4:78:ac:ec:a7:f8:e1: 8d:d2:cf:54:58:31:35:f5:42:36:cf:49:dd:bb:4f:d7:63:0b: 85:d8:63:ab:2e:e7:23:05:f6:36:ce:66:06:1c:7d:28:80:e4: 9a:67:e3:f0:42:cc:c2:ad:83:9a:d7:df:e1:0d:19:e3:07:3e: 13:f0:03:33:b7:fb:33:26:d7:7d:66:a3:8c:83:5d:9c:f6:95: 4b:88:9a:0e:2f:dd:70:8b:d8:e9:f7:47:18:6d:3b:03:ea:96: f7:bc:a3:f0:db:8b:28:43:63:37:b2:4b:46:20:db:6b:ef:08: 48:96:39:c4:9a:f1:8f:50:bd:32:45:82:a9:2c:a9:b0:6b:99: 4b:35:5e:dc:dc:15:a5:cb:14:ef:7f:ff:92:f7:0f:2f:d9:64: 43:a4:41:47:09:17:f6:54:a0:c1:38:02:5d:2b:f6:4c:75:4d: 5b:54:fc:8d -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUamyndk+/L8IAWmRbMNkvDlVjq4MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFBMDE1MDYyMzE2MTFDODc0NjE0NDI0NzVCMTQwMUFE NURFMzhEMjAeFw0yNTAzMjUyMDA4MzFaFw0yNjAzMjQyMDEzMzFaMDMxMTAvBgNV BAMTKERCODkwMkE5MDQ1QTJBOTdDQ0UyNTgxOEEwRjRFRkE4ODJGRkNBQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzHHAdt6zWJtBFab1alZPm+VhM jPsYVc9cKq+Meq6SttQkhK8djXG9jAo/lSwkqKveotXrEZ6We1BC8ayIQlSb/xoT XU7nOTk6NI0XxiLPIaLxyQvC87G2iZhzx+vywB/Q4twAE2k0skF3rfJzCYB0mp4Y REgCDbMHxiH2nRl3z9ocx0HWuUEALyHpOo8FEdPeyF2my/3EQwN3rLTBBAwZQaD8 yg0KEELBPf/VgAlad6PPumSHNi3k3UPQoFz7zGvARgNGGf5Pnv5nAY35UIG8Hi+p kiDzC7urqpQNcIEvcz0v1rEn6yZRyKMyUIdYo1QPyMwMin133iDBl2ZanUKhAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQU24kCqQRaKpfM4lgYoPTvqIL/ysYwHwYDVR0j BBgwFoAUEaAVBiMWEch0YUQkdbFAGtXeONIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM3lqR2FYcGpoUG5ERVhoUnE4aDhkUVQ4dTNxYnZDempTbVRWdjN4VEx6 V2kvMC8xMUEwMTUwNjIzMTYxMUM4NzQ2MTQ0MjQ3NUIxNDAxQUQ1REUzOEQyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzExQTAxNTA2MjMxNjExQzg3 NDYxNDQyNDc1QjE0MDFBRDVERTM4RDIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzN5akdhWHBqaFBuREVYaFJxOGg4ZFFUOHUzcWJ2Q3pqU21UVnYzeFRMeldpLzAv MzIzODMwMzQzYTMxMzAzNDM0M2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzYzMzM2MzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEEETAMA0GCSqGSIb3DQEBCwUA A4IBAQA4zn76RqOxftSbXk4TKzWWK8hFdGIXSQ+7NSewWevecaXf9f1/GlmporID 1J0pZ0S0lW6NjE7K639uV1IjFYf1BauC2qhvHRLpdZle6FkgxKM4JMR4rOyn+OGN 0s9UWDE19UI2z0ndu0/XYwuF2GOrLucjBfY2zmYGHH0ogOSaZ+PwQszCrYOa19/h DRnjBz4T8AMzt/szJtd9ZqOMg12c9pVLiJoOL91wi9jp90cYbTsD6pb3vKPw24so Q2M3sktGINtr7whIljnEmvGPUL0yRYKpLKmwa5lLNV7c3BWlyxTvf/+S9w8v2WRD pEFHCRf2VKDBOAJdK/ZMdU1bVPyN -----END CERTIFICATE-----Generated at Mon Apr 7 17:08:01 2025 by rpki-client