$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a383a393a3a2f36342d3634203d3e203238323032.roa File: 323830343a3837633a383a393a3a2f36342d3634203d3e203238323032.roa (raw, json) Hash identifier: lD2Fba3ffc2KSZuURrtV8K8Oh4QGa802elnY222fSUE= Subject key identifier: 2E:CE:66:7D:AF:5B:C5:53:48:73:F6:A8:2C:F8:7F:65:2A:5F:DB:D1 Certificate issuer: /CN=BE867134DD576AA44DA77A1C5D714DB384FEC083 Certificate serial: 2A173D353BC816A4157408570E571AACDA885821 Authority key identifier: BE:86:71:34:DD:57:6A:A4:4D:A7:7A:1C:5D:71:4D:B3:84:FE:C0:83 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a383a393a3a2f36342d3634203d3e203238323032.roa Signing time: Mon 13 Jan 2025 13:32:19 +0000 ROA not before: Mon 13 Jan 2025 13:27:19 +0000 ROA not after: Mon 12 Jan 2026 13:32:19 +0000 asID: 28202 IP address blocks: 2804:87c:8:9::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/BE867134DD576AA44DA77A1C5D714DB384FEC083.crl rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/BE867134DD576AA44DA77A1C5D714DB384FEC083.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 22 Feb 2025 04:55:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:17:3d:35:3b:c8:16:a4:15:74:08:57:0e:57:1a:ac:da:88:58:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE867134DD576AA44DA77A1C5D714DB384FEC083 Validity Not Before: Jan 13 13:27:19 2025 GMT Not After : Jan 12 13:32:19 2026 GMT Subject: CN=2ECE667DAF5BC5534873F6A82CF87F652A5FDBD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f4:a8:cb:cf:bc:77:c1:bd:c8:46:ec:fd:38: 25:81:67:cd:d1:e2:f8:86:cd:c0:25:7c:c8:b7:92: dc:33:3d:44:1f:a0:06:a2:b0:9b:24:e5:2f:69:23: d9:b3:92:c7:5f:ef:68:d1:31:0a:85:f8:c1:91:63: d8:11:56:9a:91:f5:38:96:97:35:28:40:34:34:39: f6:16:4f:2a:c7:98:a9:11:84:6d:dc:b2:4a:1e:b8: 34:1d:ae:d2:92:3e:d0:19:3c:1c:67:4d:7f:47:a8: cb:da:0a:7a:a1:b3:ad:af:73:7b:d5:62:8e:84:71: a1:a9:f3:60:9a:4d:13:bd:4e:28:bf:13:2d:5b:81: 51:44:b7:6a:24:a8:2c:da:8f:19:e4:e1:63:b6:59: 3d:c4:88:d3:27:7c:7d:e5:a2:79:90:4f:8a:cd:32: 9c:fb:a6:c7:41:9e:f4:7d:12:57:dc:bf:35:38:0e: 64:a6:96:92:01:14:63:40:d8:e1:89:db:33:19:c0: cc:74:01:67:6a:d0:79:b4:8d:01:7c:32:60:8f:0c: 11:6e:1c:d8:1f:07:bc:eb:2a:84:a4:08:c7:e0:24: 34:d3:c5:17:8b:66:c1:f8:c3:f8:6f:76:ca:af:92: f4:76:69:f4:62:89:ad:84:9a:24:47:9f:d3:ec:d4: 6c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:CE:66:7D:AF:5B:C5:53:48:73:F6:A8:2C:F8:7F:65:2A:5F:DB:D1 X509v3 Authority Key Identifier: keyid:BE:86:71:34:DD:57:6A:A4:4D:A7:7A:1C:5D:71:4D:B3:84:FE:C0:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/BE867134DD576AA44DA77A1C5D714DB384FEC083.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a383a393a3a2f36342d3634203d3e203238323032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:87c:8:9::/64 Signature Algorithm: sha256WithRSAEncryption 56:02:15:07:56:78:18:e8:41:3a:81:8c:83:36:6f:8d:96:a8: 72:24:ab:ac:82:e0:6b:6a:e2:92:77:7b:b9:cb:60:dc:b1:4b: 4d:df:cb:49:56:11:b7:9e:27:30:0e:06:79:db:91:ba:cb:2d: 6d:38:02:6f:00:9c:c6:ec:99:a1:b0:cc:2b:e6:34:26:5a:75: 3a:67:ea:1b:2f:3b:98:15:d7:ba:f7:8c:63:70:1d:5c:8c:7b: 8c:f9:3a:a5:5a:2c:16:70:4c:0b:62:4c:4c:4f:e1:3a:8e:d4: 86:48:4a:51:27:8d:18:9e:5d:40:d1:ff:59:2f:2b:a7:f0:da: 2e:4d:54:a7:58:2c:bf:c3:67:d1:aa:4f:ae:8c:d5:ab:1e:f9: ce:62:85:9a:81:31:3c:38:3d:f0:8e:76:e5:11:ca:8c:6e:4c: 5b:f3:4f:8f:7f:bd:c4:27:52:97:c7:d3:d2:18:73:b6:a3:6e: 06:30:89:cf:66:58:4f:f3:10:24:25:fc:7d:48:8a:c7:71:2c: bb:97:28:0e:7a:2d:a5:99:3a:26:9d:73:37:0c:3d:0c:19:9f: d4:f7:fd:50:34:b1:14:4d:f6:d4:63:b8:59:8f:09:44:78:2f: cb:d6:44:21:69:6c:46:1f:a8:bc:a9:30:17:2c:b6:d7:43:c7: 8e:cf:eb:a3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIUKhc9NTvIFqQVdAhXDlcarNqIWCEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU4NjcxMzRERDU3NkFBNDREQTc3QTFDNUQ3MTREQjM4 NEZFQzA4MzAeFw0yNTAxMTMxMzI3MTlaFw0yNjAxMTIxMzMyMTlaMDMxMTAvBgNV BAMTKDJFQ0U2NjdEQUY1QkM1NTM0ODczRjZBODJDRjg3RjY1MkE1RkRCRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd9KjLz7x3wb3IRuz9OCWBZ83R 4viGzcAlfMi3ktwzPUQfoAaisJsk5S9pI9mzksdf72jRMQqF+MGRY9gRVpqR9TiW lzUoQDQ0OfYWTyrHmKkRhG3cskoeuDQdrtKSPtAZPBxnTX9HqMvaCnqhs62vc3vV Yo6EcaGp82CaTRO9Tii/Ey1bgVFEt2okqCzajxnk4WO2WT3EiNMnfH3lonmQT4rN Mpz7psdBnvR9ElfcvzU4DmSmlpIBFGNA2OGJ2zMZwMx0AWdq0Hm0jQF8MmCPDBFu HNgfB7zrKoSkCMfgJDTTxReLZsH4w/hvdsqvkvR2afRiia2EmiRHn9Ps1GwVAgMB AAGjggJYMIICVDAdBgNVHQ4EFgQULs5mfa9bxVNIc/aoLPh/ZSpf29EwHwYDVR0j BBgwFoAUvoZxNN1XaqRNp3ocXXFNs4T+wIMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGRQN05GMUJkM3ZBekdEY2o3dm1RVlc5ZmtyQVE3UHltUDl1eE04Qk1V V00vMC9CRTg2NzEzNERENTc2QUE0NERBNzdBMUM1RDcxNERCMzg0RkVDMDgzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JFODY3MTM0REQ1NzZBQTQ0 REE3N0ExQzVENzE0REIzODRGRUMwODMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzRkUDdORjFCZDN2QXpHRGNqN3ZtUVZXOWZrckFRN1B5bVA5dXhNOEJNVVdNLzAv MzIzODMwMzQzYTM4Mzc2MzNhMzgzYTM5M2EzYTJmMzYzNDJkMzYzNDIwM2QzZTIw MzIzODMyMzAzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAkBggrBgEF BQcBBwEB/wQVMBMwEQQCAAIwCwMJACgECHwACAAJMA0GCSqGSIb3DQEBCwUAA4IB AQBWAhUHVngY6EE6gYyDNm+NlqhyJKusguBrauKSd3u5y2DcsUtN38tJVhG3nicw DgZ525G6yy1tOAJvAJzG7JmhsMwr5jQmWnU6Z+obLzuYFde694xjcB1cjHuM+Tql WiwWcEwLYkxMT+E6jtSGSEpRJ40Ynl1A0f9ZLyun8NouTVSnWCy/w2fRqk+ujNWr HvnOYoWagTE8OD3wjnblEcqMbkxb80+Pf73EJ1KXx9PSGHO2o24GMInPZlhP8xAk Jfx9SIrHcSy7lygOei2lmTomnXM3DD0MGZ/U9/1QNLEUTfbUY7hZjwlEeC/L1kQh aWxGH6i8qTAXLLbXQ8eOz+uj -----END CERTIFICATE-----Generated at Fri Feb 21 11:11:48 2025 by rpki-client