$ rpki-client -vvf rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/323830343a376334303a3230303a3a2f34302d3430203d3e20323731343834.roa File: 323830343a376334303a3230303a3a2f34302d3430203d3e20323731343834.roa (raw, json) Hash identifier: aQuzLEeWFxfp36SqhKnPWN0pPXjsiYDj1Ey8BwUF9RA= Subject key identifier: 6B:F2:E9:2E:D9:C4:BE:29:B5:A3:F1:CB:44:6A:FC:A2:23:D8:C6:01 Certificate issuer: /CN=3B5BBCE7F8F28C41BFC307B8430A56A16C67E800 Certificate serial: 10C01FED8C3C8B6D9E924DFB7099526DF1E489A2 Authority key identifier: 3B:5B:BC:E7:F8:F2:8C:41:BF:C3:07:B8:43:0A:56:A1:6C:67:E8:00 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5BBCE7F8F28C41BFC307B8430A56A16C67E800.cer Subject info access: rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/323830343a376334303a3230303a3a2f34302d3430203d3e20323731343834.roa Signing time: Thu 13 Mar 2025 15:10:46 +0000 ROA not before: Thu 13 Mar 2025 15:05:46 +0000 ROA not after: Thu 12 Mar 2026 15:10:46 +0000 asID: 271484 IP address blocks: 2804:7c40:200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3B5BBCE7F8F28C41BFC307B8430A56A16C67E800.crl rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3B5BBCE7F8F28C41BFC307B8430A56A16C67E800.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5BBCE7F8F28C41BFC307B8430A56A16C67E800.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 12 Apr 2025 12:32:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:c0:1f:ed:8c:3c:8b:6d:9e:92:4d:fb:70:99:52:6d:f1:e4:89:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B5BBCE7F8F28C41BFC307B8430A56A16C67E800 Validity Not Before: Mar 13 15:05:46 2025 GMT Not After : Mar 12 15:10:46 2026 GMT Subject: CN=6BF2E92ED9C4BE29B5A3F1CB446AFCA223D8C601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:db:c0:3a:45:9c:7a:d3:cd:7c:ea:cf:ef:ff: 00:b9:72:a2:c0:e9:c7:37:19:13:cc:71:03:ec:b5: b3:63:04:95:0e:a1:39:0e:2a:c8:d5:ab:7a:30:2f: d5:58:54:c3:65:cb:34:97:c6:63:4f:87:a6:94:37: 0b:79:07:55:b5:d6:b3:09:93:55:97:50:d0:d1:72: f5:6e:28:82:ed:d2:9e:39:ab:75:c7:a9:9e:b1:b6: 79:73:f7:20:83:5e:4b:31:b4:5d:82:38:49:3a:66: d6:ae:d6:be:a0:34:cf:d4:97:a6:ce:27:b1:12:db: 42:53:b1:98:5c:86:f2:fa:02:74:1b:d2:4d:92:0a: 35:22:f1:4c:70:be:35:f9:36:cd:b3:58:f8:d9:b7: 70:be:bb:76:37:bd:44:9e:72:d3:d9:4d:6f:95:dd: 09:17:41:d5:f2:14:35:01:5b:76:7c:66:74:bd:df: e4:d8:85:96:34:ba:fd:06:9b:c6:41:87:3e:f6:55: a5:ca:61:b9:24:75:1c:d5:4d:30:81:82:fb:86:b2: 0c:12:76:71:3a:61:07:81:1f:7c:0b:3c:5a:b9:5e: 37:23:59:74:39:2c:60:ed:4b:d2:f3:cc:a4:9b:c4: c5:1b:8c:25:4e:66:24:94:3a:e0:2b:7d:ec:1d:4a: 8d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:F2:E9:2E:D9:C4:BE:29:B5:A3:F1:CB:44:6A:FC:A2:23:D8:C6:01 X509v3 Authority Key Identifier: keyid:3B:5B:BC:E7:F8:F2:8C:41:BF:C3:07:B8:43:0A:56:A1:6C:67:E8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3B5BBCE7F8F28C41BFC307B8430A56A16C67E800.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5BBCE7F8F28C41BFC307B8430A56A16C67E800.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/323830343a376334303a3230303a3a2f34302d3430203d3e20323731343834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:7c40:200::/40 Signature Algorithm: sha256WithRSAEncryption 65:41:4f:b4:9e:0d:46:4b:48:47:9d:83:91:43:25:4d:7f:65: 9a:5c:2e:24:c0:4e:73:5b:f7:72:09:3a:5c:e8:d5:ce:50:ac: 9f:26:45:d1:ad:bf:37:54:d9:79:bc:ea:02:da:b4:83:0a:e2: 67:d4:9f:02:4a:0a:91:c7:91:35:9a:bd:83:df:c3:fe:ee:69: f7:ea:d7:9a:27:c8:f8:9a:de:a1:4d:87:8f:49:63:5c:ff:6d: 13:d7:a7:4c:d0:c4:de:22:b3:44:49:35:5a:bc:2b:cf:f4:c3: 23:9f:09:dc:df:fe:be:b7:ad:61:04:9a:02:2c:65:2d:67:ce: a5:eb:e0:ed:25:7b:96:8f:96:c5:12:4e:f0:f0:96:e1:cf:8c: 24:e7:c9:60:96:5e:1c:69:30:fb:d8:e1:53:69:88:05:fa:81: 8d:16:13:48:9c:72:b0:85:0f:86:45:19:54:9f:31:fc:04:af: 8f:df:d1:ff:ad:3b:08:d6:5a:1e:ea:58:a2:e8:9e:55:d6:40: 1b:48:17:d1:5f:a5:44:57:18:8f:84:2f:16:6a:13:5e:c4:10: 26:ff:d6:16:c1:02:83:d7:76:cb:9f:9a:29:e9:10:84:49:3f: f9:2c:30:b7:4c:11:d2:28:c7:b5:1f:69:ae:ef:44:ce:4c:3e: 89:ef:d8:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEMAf7Yw8i22ekk37cJlSbfHkiaIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I1QkJDRTdGOEYyOEM0MUJGQzMwN0I4NDMwQTU2QTE2 QzY3RTgwMDAeFw0yNTAzMTMxNTA1NDZaFw0yNjAzMTIxNTEwNDZaMDMxMTAvBgNV BAMTKDZCRjJFOTJFRDlDNEJFMjlCNUEzRjFDQjQ0NkFGQ0EyMjNEOEM2MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI28A6RZx608186s/v/wC5cqLA 6cc3GRPMcQPstbNjBJUOoTkOKsjVq3owL9VYVMNlyzSXxmNPh6aUNwt5B1W11rMJ k1WXUNDRcvVuKILt0p45q3XHqZ6xtnlz9yCDXksxtF2COEk6Ztau1r6gNM/Ul6bO J7ES20JTsZhchvL6AnQb0k2SCjUi8UxwvjX5Ns2zWPjZt3C+u3Y3vUSectPZTW+V 3QkXQdXyFDUBW3Z8ZnS93+TYhZY0uv0Gm8ZBhz72VaXKYbkkdRzVTTCBgvuGsgwS dnE6YQeBH3wLPFq5XjcjWXQ5LGDtS9LzzKSbxMUbjCVOZiSUOuArfewdSo3xAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUa/LpLtnEvim1o/HLRGr8oiPYxgEwHwYDVR0j BBgwFoAUO1u85/jyjEG/wwe4QwpWoWxn6AAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNFZyUGRDckJwdURwZnFVeWlKYkYyaWpSdmp0Y0tQclhVa1RWN3lMdmdv azQvMC8zQjVCQkNFN0Y4RjI4QzQxQkZDMzA3Qjg0MzBBNTZBMTZDNjdFODAwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNCNUJCQ0U3RjhGMjhDNDFC RkMzMDdCODQzMEE1NkExNkM2N0U4MDAuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzRWclBkQ3JCcHVEcGZxVXlpSmJGMmlqUnZqdGNLUHJYVWtUVjd5THZnb2s0LzAv MzIzODMwMzQzYTM3NjMzNDMwM2EzMjMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl MjAzMjM3MzEzNDM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBHxAAjANBgkqhkiG9w0BAQsFAAOC AQEAZUFPtJ4NRktIR52DkUMlTX9lmlwuJMBOc1v3cgk6XOjVzlCsnyZF0a2/N1TZ ebzqAtq0gwriZ9SfAkoKkceRNZq9g9/D/u5p9+rXmifI+JreoU2Hj0ljXP9tE9en TNDE3iKzREk1Wrwrz/TDI58J3N/+vretYQSaAixlLWfOpevg7SV7lo+WxRJO8PCW 4c+MJOfJYJZeHGkw+9jhU2mIBfqBjRYTSJxysIUPhkUZVJ8x/ASvj9/R/607CNZa HupYouieVdZAG0gX0V+lRFcYj4QvFmoTXsQQJv/WFsECg9d2y5+aKekQhEk/+Sww t0wR0ijHtR9pru9Ezkw+ie/YIg== -----END CERTIFICATE-----Generated at Fri Apr 11 15:13:23 2025 by rpki-client