$ rpki-client -vvf rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/323830343a3137303a343830303a3a2f34302d3430203d3e203238313331.roa File: 323830343a3137303a343830303a3a2f34302d3430203d3e203238313331.roa (raw, json) Hash identifier: F6mWoNxivsjy49EpdLR1loouYSZizuLjad8AnzE3j0o= Subject key identifier: 22:72:53:B0:62:84:A6:1E:59:59:AD:71:02:3B:22:3F:D8:6D:84:78 Certificate issuer: /CN=03981ED1B457034CCBAC00F384454B3A021E294E Certificate serial: 286C103EC7B69D1A316290838D0B1405B232874F Authority key identifier: 03:98:1E:D1:B4:57:03:4C:CB:AC:00:F3:84:45:4B:3A:02:1E:29:4E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer Subject info access: rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/323830343a3137303a343830303a3a2f34302d3430203d3e203238313331.roa Signing time: Thu 06 Mar 2025 03:55:53 +0000 ROA not before: Thu 06 Mar 2025 03:50:53 +0000 ROA not after: Thu 05 Mar 2026 03:55:53 +0000 asID: 28131 IP address blocks: 2804:170:4800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.crl rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 12 Apr 2025 10:42:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:6c:10:3e:c7:b6:9d:1a:31:62:90:83:8d:0b:14:05:b2:32:87:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03981ED1B457034CCBAC00F384454B3A021E294E Validity Not Before: Mar 6 03:50:53 2025 GMT Not After : Mar 5 03:55:53 2026 GMT Subject: CN=227253B06284A61E5959AD71023B223FD86D8478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:5c:80:8c:ca:2a:cf:31:b8:76:8d:9d:ce:72: 26:4b:f2:90:2c:7d:98:ba:90:a7:52:08:aa:98:fa: 9f:fa:c6:7d:84:2e:f5:10:d2:f4:d4:b2:3c:9b:47: ba:66:e8:40:a0:84:a5:01:a1:76:a5:16:36:0e:63: d4:4e:d1:53:9f:f9:4c:2d:c6:8c:70:1b:46:c6:42: d2:21:45:c1:94:10:a6:9f:50:da:ce:9e:01:1b:04: 67:73:c2:d1:da:0b:21:dd:93:44:9c:9e:9e:8f:13: 05:cb:bd:dc:a0:25:a8:8a:f3:38:06:2e:9b:ff:52: 4e:60:23:cf:dc:79:d4:57:00:ad:65:5f:8a:b3:50: 43:da:a6:e6:7c:a4:47:02:42:3d:f8:73:59:b2:8c: 79:4b:2d:e9:f8:60:66:a3:b0:21:92:6c:c7:06:99: b5:e6:a3:99:75:a7:94:37:b6:3c:d2:48:02:a0:c0: 16:fe:5e:0d:4d:52:b5:90:3a:0d:c6:98:63:93:40: fe:64:c1:43:56:c1:0a:42:19:af:fd:10:55:92:66: 62:d2:55:ee:b4:dc:bb:13:8e:2f:dd:82:76:71:bf: 86:75:53:8b:da:21:20:77:cc:bf:3b:ff:d0:e1:79: 5b:7f:56:c4:3d:40:d0:af:45:65:6e:4e:ab:4b:50: ac:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:72:53:B0:62:84:A6:1E:59:59:AD:71:02:3B:22:3F:D8:6D:84:78 X509v3 Authority Key Identifier: keyid:03:98:1E:D1:B4:57:03:4C:CB:AC:00:F3:84:45:4B:3A:02:1E:29:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/323830343a3137303a343830303a3a2f34302d3430203d3e203238313331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:170:4800::/40 Signature Algorithm: sha256WithRSAEncryption 42:34:bb:b6:57:c2:08:21:0d:b2:10:e8:63:6d:77:f6:32:92: 73:94:f7:ec:ba:a7:e7:9f:2c:78:9b:53:f5:09:ff:56:9f:3e: 67:d2:1b:32:ab:e4:38:5c:71:7e:26:c5:09:9f:1e:6b:3e:91: 4f:2d:82:6f:6c:33:28:d3:c8:fc:ab:f4:3a:63:16:a9:82:fa: b8:b6:e8:bf:e4:40:ea:aa:58:ed:c1:62:74:24:0c:fc:db:46: d9:dc:39:72:48:e5:be:38:43:58:6c:f7:43:05:13:e3:fe:61: 76:47:d9:33:c7:bb:5b:d7:1a:aa:73:6f:b6:64:78:bd:65:dc: 94:37:64:6c:81:ec:a3:63:de:dc:67:20:bb:62:86:62:0b:8c: 8d:51:d7:be:8a:e2:4d:23:a9:56:af:b1:c5:c8:96:99:bc:97: 9e:6f:30:de:0d:ae:38:4d:a6:69:3e:ab:8b:f7:88:b7:af:96: aa:bc:6c:55:4e:b7:de:2f:7e:1a:cd:15:6a:8c:13:b9:d2:e5: c3:fc:a8:00:73:42:42:f5:23:e2:49:53:25:97:fc:29:88:95: 92:f3:60:e9:ca:4e:bb:d7:4d:32:e2:dc:d4:5c:6e:31:4c:81: 40:ba:56:ef:61:95:62:6b:39:71:23:f3:81:cf:64:13:a0:a0: 29:2f:76:97 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgIUKGwQPse2nRoxYpCDjQsUBbIyh08wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM5ODFFRDFCNDU3MDM0Q0NCQUMwMEYzODQ0NTRCM0Ew MjFFMjk0RTAeFw0yNTAzMDYwMzUwNTNaFw0yNjAzMDUwMzU1NTNaMDMxMTAvBgNV BAMTKDIyNzI1M0IwNjI4NEE2MUU1OTU5QUQ3MTAyM0IyMjNGRDg2RDg0NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcXICMyirPMbh2jZ3OciZL8pAs fZi6kKdSCKqY+p/6xn2ELvUQ0vTUsjybR7pm6ECghKUBoXalFjYOY9RO0VOf+Uwt xoxwG0bGQtIhRcGUEKafUNrOngEbBGdzwtHaCyHdk0Scnp6PEwXLvdygJaiK8zgG Lpv/Uk5gI8/cedRXAK1lX4qzUEPapuZ8pEcCQj34c1myjHlLLen4YGajsCGSbMcG mbXmo5l1p5Q3tjzSSAKgwBb+Xg1NUrWQOg3GmGOTQP5kwUNWwQpCGa/9EFWSZmLS Ve603LsTji/dgnZxv4Z1U4vaISB3zL87/9DheVt/VsQ9QNCvRWVuTqtLUKyvAgMB AAGjggJXMIICUzAdBgNVHQ4EFgQUInJTsGKEph5ZWa1xAjsiP9hthHgwHwYDVR0j BBgwFoAUA5ge0bRXA0zLrADzhEVLOgIeKU4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNDJrRVF0OEdXR1laa1pKcktEZFpDNmdQemtOOUU4RnRjVGJEOTNnem1Q RFgvMS8wMzk4MUVEMUI0NTcwMzRDQ0JBQzAwRjM4NDQ1NEIzQTAyMUUyOTRFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzOTgxRUQxQjQ1NzAzNEND QkFDMDBGMzg0NDU0QjNBMDIxRTI5NEUuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzQya0VRdDhHV0dZWmtaSnJLRGRaQzZnUHprTjlFOEZ0Y1RiRDkzZ3ptUERYLzEv MzIzODMwMzQzYTMxMzczMDNhMzQzODMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl MjAzMjM4MzEzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG AQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKAQBcEgwDQYJKoZIhvcNAQELBQADggEB AEI0u7ZXwgghDbIQ6GNtd/YyknOU9+y6p+efLHibU/UJ/1afPmfSGzKr5DhccX4m xQmfHms+kU8tgm9sMyjTyPyr9DpjFqmC+ri26L/kQOqqWO3BYnQkDPzbRtncOXJI 5b44Q1hs90MFE+P+YXZH2TPHu1vXGqpzb7ZkeL1l3JQ3ZGyB7KNj3txnILtihmIL jI1R176K4k0jqVavscXIlpm8l55vMN4NrjhNpmk+q4v3iLevlqq8bFVOt94vfhrN FWqME7nS5cP8qABzQkL1I+JJUyWX/CmIlZLzYOnKTrvXTTLi3NRcbjFMgUC6Vu9h lWJrOXEj84HPZBOgoCkvdpc= -----END CERTIFICATE-----Generated at Fri Apr 11 13:50:07 2025 by rpki-client