$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a383a313a3a2f36342d3634203d3e203238323032.roa File: 323830343a3837633a383a313a3a2f36342d3634203d3e203238323032.roa (raw, json) Hash identifier: qa2oezWOkdLFdDjH1RHi/Wwun1qfEYXvOXgNZ8TWvMw= Subject key identifier: 24:DC:39:2B:D5:5C:21:2D:07:60:30:27:34:9F:26:20:47:B1:6A:5A Certificate issuer: /CN=BE867134DD576AA44DA77A1C5D714DB384FEC083 Certificate serial: 0568C3053A2CC1EDE7DAC7229AC458C5D5CEA8CA Authority key identifier: BE:86:71:34:DD:57:6A:A4:4D:A7:7A:1C:5D:71:4D:B3:84:FE:C0:83 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a383a313a3a2f36342d3634203d3e203238323032.roa Signing time: Mon 13 Jan 2025 13:32:11 +0000 ROA not before: Mon 13 Jan 2025 13:27:11 +0000 ROA not after: Mon 12 Jan 2026 13:32:11 +0000 asID: 28202 IP address blocks: 2804:87c:8:1::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/BE867134DD576AA44DA77A1C5D714DB384FEC083.crl rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/BE867134DD576AA44DA77A1C5D714DB384FEC083.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 22 Feb 2025 04:55:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:68:c3:05:3a:2c:c1:ed:e7:da:c7:22:9a:c4:58:c5:d5:ce:a8:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE867134DD576AA44DA77A1C5D714DB384FEC083 Validity Not Before: Jan 13 13:27:11 2025 GMT Not After : Jan 12 13:32:11 2026 GMT Subject: CN=24DC392BD55C212D07603027349F262047B16A5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b8:b3:fe:9d:6f:1a:b2:c9:cf:4d:25:34:6d: a6:a2:57:66:d8:53:24:c2:87:02:65:56:7e:ac:d6: 2f:a1:e9:16:49:ee:ef:3e:4f:56:82:a3:78:b9:ad: a8:9a:8f:19:e0:16:fe:e7:45:77:39:95:34:e3:1d: 64:37:38:a3:83:78:b5:c7:a2:8c:e8:94:3f:ea:13: a6:c9:01:1a:9b:b8:fa:db:b3:9e:88:57:e7:b2:6b: c0:96:e4:9e:c0:90:d4:dc:82:11:26:74:bf:8f:d9: b9:54:ff:a8:ac:10:66:f1:2e:3d:c0:f6:cb:25:95: ac:35:c6:b8:43:70:3d:b7:2d:c7:e1:2d:58:f3:b2: 54:0d:f8:49:22:5d:8e:fa:f7:a9:68:4a:c1:ba:dd: f1:c6:15:4a:04:18:1d:67:aa:e6:34:cc:bb:48:e4: 52:18:6e:c0:0c:1e:24:ac:07:ea:61:56:ec:62:e7: 2e:54:9a:3b:f0:d0:6a:68:8e:aa:f1:9c:36:00:ee: 2a:a1:fb:2d:27:c7:ca:cf:f2:33:d8:55:1c:95:c7: f2:e1:ad:a0:90:7f:94:e3:d1:fc:76:66:3c:fd:7a: 1c:f3:30:a5:48:6a:db:39:ee:5e:21:4d:34:8a:77: e8:2d:54:6d:eb:e0:e2:73:9d:38:12:08:2d:5f:39: 62:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:DC:39:2B:D5:5C:21:2D:07:60:30:27:34:9F:26:20:47:B1:6A:5A X509v3 Authority Key Identifier: keyid:BE:86:71:34:DD:57:6A:A4:4D:A7:7A:1C:5D:71:4D:B3:84:FE:C0:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/BE867134DD576AA44DA77A1C5D714DB384FEC083.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a383a313a3a2f36342d3634203d3e203238323032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:87c:8:1::/64 Signature Algorithm: sha256WithRSAEncryption 97:42:04:a9:bc:ac:c7:cd:b0:b9:06:dc:da:2b:4a:71:52:4f: f3:bc:00:94:33:cc:1e:80:b9:03:de:c1:57:45:26:c7:7b:2f: 4d:97:89:5a:47:ba:e6:c6:8d:34:9f:13:46:eb:db:06:b0:78: 61:05:2f:c5:2f:a4:ae:a8:16:da:44:3b:55:a5:d2:b9:70:26: 93:7d:8e:d5:ea:a5:6e:be:79:99:39:fd:2f:71:cd:89:78:3a: 29:b7:23:08:ce:56:a9:3a:f3:15:ff:4b:40:3b:8f:37:4c:e2: ea:34:29:53:21:d4:14:76:ca:2d:c2:32:d4:38:b2:a9:c3:69: 96:1a:c3:5a:42:e4:fe:38:13:a7:8d:60:ea:04:09:f5:61:9c: 96:5b:32:c7:c5:cc:b9:c1:2e:db:12:a7:ce:76:69:2c:71:42: bf:2a:85:5d:0a:84:fa:fd:2a:a7:f5:20:8f:46:12:96:ae:48: 84:01:b4:2f:2f:ab:3a:7a:8d:e1:fb:68:db:92:58:65:1b:26: c8:59:f4:c6:c7:38:ed:4a:1e:78:72:88:e0:73:be:94:6c:72: 09:b8:52:58:0a:23:d1:fe:fb:96:b3:6f:5e:ff:8c:6e:1c:b2: 7f:67:8a:11:be:8c:4e:a4:3e:b9:ac:70:1c:87:3c:aa:24:42: 36:cd:a3:d5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIUBWjDBToswe3n2scimsRYxdXOqMowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU4NjcxMzRERDU3NkFBNDREQTc3QTFDNUQ3MTREQjM4 NEZFQzA4MzAeFw0yNTAxMTMxMzI3MTFaFw0yNjAxMTIxMzMyMTFaMDMxMTAvBgNV BAMTKDI0REMzOTJCRDU1QzIxMkQwNzYwMzAyNzM0OUYyNjIwNDdCMTZBNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDuLP+nW8assnPTSU0baaiV2bY UyTChwJlVn6s1i+h6RZJ7u8+T1aCo3i5raiajxngFv7nRXc5lTTjHWQ3OKODeLXH oozolD/qE6bJARqbuPrbs56IV+eya8CW5J7AkNTcghEmdL+P2blU/6isEGbxLj3A 9ssllaw1xrhDcD23LcfhLVjzslQN+EkiXY7696loSsG63fHGFUoEGB1nquY0zLtI 5FIYbsAMHiSsB+phVuxi5y5Umjvw0GpojqrxnDYA7iqh+y0nx8rP8jPYVRyVx/Lh raCQf5Tj0fx2Zjz9ehzzMKVIats57l4hTTSKd+gtVG3r4OJznTgSCC1fOWK1AgMB AAGjggJYMIICVDAdBgNVHQ4EFgQUJNw5K9VcIS0HYDAnNJ8mIEexalowHwYDVR0j BBgwFoAUvoZxNN1XaqRNp3ocXXFNs4T+wIMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGRQN05GMUJkM3ZBekdEY2o3dm1RVlc5ZmtyQVE3UHltUDl1eE04Qk1V V00vMC9CRTg2NzEzNERENTc2QUE0NERBNzdBMUM1RDcxNERCMzg0RkVDMDgzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JFODY3MTM0REQ1NzZBQTQ0 REE3N0ExQzVENzE0REIzODRGRUMwODMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzRkUDdORjFCZDN2QXpHRGNqN3ZtUVZXOWZrckFRN1B5bVA5dXhNOEJNVVdNLzAv MzIzODMwMzQzYTM4Mzc2MzNhMzgzYTMxM2EzYTJmMzYzNDJkMzYzNDIwM2QzZTIw MzIzODMyMzAzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAkBggrBgEF BQcBBwEB/wQVMBMwEQQCAAIwCwMJACgECHwACAABMA0GCSqGSIb3DQEBCwUAA4IB AQCXQgSpvKzHzbC5BtzaK0pxUk/zvACUM8wegLkD3sFXRSbHey9Nl4laR7rmxo00 nxNG69sGsHhhBS/FL6SuqBbaRDtVpdK5cCaTfY7V6qVuvnmZOf0vcc2JeDoptyMI zlapOvMV/0tAO483TOLqNClTIdQUdsotwjLUOLKpw2mWGsNaQuT+OBOnjWDqBAn1 YZyWWzLHxcy5wS7bEqfOdmkscUK/KoVdCoT6/Sqn9SCPRhKWrkiEAbQvL6s6eo3h +2jbklhlGybIWfTGxzjtSh54cojgc76UbHIJuFJYCiPR/vuWs29e/4xuHLJ/Z4oR voxOpD65rHAchzyqJEI2zaPV -----END CERTIFICATE-----Generated at Fri Feb 21 12:58:46 2025 by rpki-client