$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a393a3a2f34382d3438203d3e203238323032.roa File: 323830343a3837633a393a3a2f34382d3438203d3e203238323032.roa (raw, json) Hash identifier: sFJLgr5nuCSSe/yjX5JZi82lGTyrMg6CuaWVf/vk10A= Subject key identifier: 73:84:7A:B7:39:C5:55:7D:09:3C:15:D0:5E:66:FD:48:20:59:67:F3 Certificate issuer: /CN=BE867134DD576AA44DA77A1C5D714DB384FEC083 Certificate serial: 4CFC9E723AB4BE4B265C6E49E17593ABD21FBCE4 Authority key identifier: BE:86:71:34:DD:57:6A:A4:4D:A7:7A:1C:5D:71:4D:B3:84:FE:C0:83 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a393a3a2f34382d3438203d3e203238323032.roa Signing time: Mon 13 Jan 2025 13:32:35 +0000 ROA not before: Mon 13 Jan 2025 13:27:35 +0000 ROA not after: Mon 12 Jan 2026 13:32:35 +0000 asID: 28202 IP address blocks: 2804:87c:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/BE867134DD576AA44DA77A1C5D714DB384FEC083.crl rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/BE867134DD576AA44DA77A1C5D714DB384FEC083.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 15 Apr 2025 16:08:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:fc:9e:72:3a:b4:be:4b:26:5c:6e:49:e1:75:93:ab:d2:1f:bc:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE867134DD576AA44DA77A1C5D714DB384FEC083 Validity Not Before: Jan 13 13:27:35 2025 GMT Not After : Jan 12 13:32:35 2026 GMT Subject: CN=73847AB739C5557D093C15D05E66FD48205967F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:cb:72:31:50:63:11:af:83:27:28:5c:24:78: 25:78:5d:59:02:ab:ee:65:a6:b9:a0:cf:77:3d:c9: ea:d4:cd:56:7b:4f:2d:ee:48:22:54:9f:f2:13:50: e1:34:f0:31:50:47:51:27:5f:ae:83:5b:e1:4b:d6: 9a:e3:24:ba:23:1a:a0:7e:54:f4:4e:79:71:bf:35: 68:2e:33:44:06:b1:82:12:49:4d:65:91:fa:31:6a: 3c:2f:35:eb:57:3e:5c:fd:a0:64:51:84:73:b3:65: 2d:d0:c2:8e:2e:d9:c1:72:2d:7b:26:36:0f:cc:b3: f9:34:df:40:6d:19:c9:d6:bd:a0:15:58:c1:2b:af: 7f:74:ef:54:be:49:90:22:27:26:a4:fe:77:be:a4: 1c:41:8c:d3:13:b2:d8:27:b5:28:37:f3:00:73:50: 58:80:30:40:7f:06:b7:81:10:09:d2:9d:76:0c:85: 69:45:27:9e:64:5d:e8:ed:e8:c1:81:97:f4:99:fb: 47:d2:48:72:3c:62:b4:ee:d0:7c:ea:71:1c:a8:94: 98:c6:b8:25:3c:7c:0d:2e:d5:c8:9b:9a:3d:dc:fb: 45:ff:6d:40:26:93:c8:d1:f4:13:4f:79:15:79:ce: 47:35:7f:48:51:0a:e2:9f:56:16:04:68:0b:86:95: c0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:84:7A:B7:39:C5:55:7D:09:3C:15:D0:5E:66:FD:48:20:59:67:F3 X509v3 Authority Key Identifier: keyid:BE:86:71:34:DD:57:6A:A4:4D:A7:7A:1C:5D:71:4D:B3:84:FE:C0:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/BE867134DD576AA44DA77A1C5D714DB384FEC083.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a393a3a2f34382d3438203d3e203238323032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:87c:9::/48 Signature Algorithm: sha256WithRSAEncryption 33:ba:16:de:56:c0:2f:33:be:c2:2a:fe:8c:73:67:8d:03:eb: 20:34:e4:40:0b:93:85:f6:fd:90:f3:ea:8f:35:7f:f2:7d:78: 81:61:8b:9d:e2:f3:f8:c5:f5:7d:e0:c6:fa:c3:dc:63:bb:3e: 27:4a:18:6b:67:bf:7d:a5:80:dd:97:31:a6:96:c8:5e:9b:e5: 1a:78:eb:fb:9f:80:ef:10:f0:bb:f4:c2:76:50:ec:2a:c5:ff: f8:55:e3:1e:f4:05:b6:a9:75:00:80:a9:6f:b3:c2:3f:3c:fe: 7b:0b:f1:b4:02:64:da:09:93:5f:6b:b8:a2:1f:bf:a3:ce:d3: ae:9f:7b:31:99:b6:fc:54:fe:28:56:d7:e6:c3:5b:e8:e4:5f: 6d:d6:a0:f8:b0:e9:fb:13:d4:f8:50:1f:8a:49:4d:67:9e:6d: 7a:df:19:6c:8a:7e:d0:17:d1:33:10:3b:1a:6f:96:d6:d0:64: 0b:08:e1:2f:ed:b1:bc:93:b7:85:dd:af:31:bc:e6:b8:cb:ea: de:71:16:11:57:29:46:e5:e7:06:65:8d:71:3f:3e:0e:11:f2: 21:48:25:98:4e:ad:12:f9:9f:a1:89:71:f3:cb:46:6c:e9:08: 08:c2:fa:9c:ed:8b:9a:4a:33:2a:92:ee:56:d9:45:5e:47:db: 89:6a:4e:46 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUTPyecjq0vksmXG5J4XWTq9IfvOQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU4NjcxMzRERDU3NkFBNDREQTc3QTFDNUQ3MTREQjM4 NEZFQzA4MzAeFw0yNTAxMTMxMzI3MzVaFw0yNjAxMTIxMzMyMzVaMDMxMTAvBgNV BAMTKDczODQ3QUI3MzlDNTU1N0QwOTNDMTVEMDVFNjZGRDQ4MjA1OTY3RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDay3IxUGMRr4MnKFwkeCV4XVkC q+5lprmgz3c9yerUzVZ7Ty3uSCJUn/ITUOE08DFQR1EnX66DW+FL1prjJLojGqB+ VPROeXG/NWguM0QGsYISSU1lkfoxajwvNetXPlz9oGRRhHOzZS3Qwo4u2cFyLXsm Ng/Ms/k030BtGcnWvaAVWMErr39071S+SZAiJyak/ne+pBxBjNMTstgntSg38wBz UFiAMEB/BreBEAnSnXYMhWlFJ55kXejt6MGBl/SZ+0fSSHI8YrTu0HzqcRyolJjG uCU8fA0u1cibmj3c+0X/bUAmk8jR9BNPeRV5zkc1f0hRCuKfVhYEaAuGlcAnAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUc4R6tznFVX0JPBXQXmb9SCBZZ/MwHwYDVR0j BBgwFoAUvoZxNN1XaqRNp3ocXXFNs4T+wIMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGRQN05GMUJkM3ZBekdEY2o3dm1RVlc5ZmtyQVE3UHltUDl1eE04Qk1V V00vMC9CRTg2NzEzNERENTc2QUE0NERBNzdBMUM1RDcxNERCMzg0RkVDMDgzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JFODY3MTM0REQ1NzZBQTQ0 REE3N0ExQzVENzE0REIzODRGRUMwODMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzRkUDdORjFCZDN2QXpHRGNqN3ZtUVZXOWZrckFRN1B5bVA5dXhNOEJNVVdNLzAv MzIzODMwMzQzYTM4Mzc2MzNhMzkzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM4 MzIzMDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH AQH/BBMwETAPBAIAAjAJAwcAKAQIfAAJMA0GCSqGSIb3DQEBCwUAA4IBAQAzuhbe VsAvM77CKv6Mc2eNA+sgNORAC5OF9v2Q8+qPNX/yfXiBYYud4vP4xfV94Mb6w9xj uz4nShhrZ799pYDdlzGmlshem+UaeOv7n4DvEPC79MJ2UOwqxf/4VeMe9AW2qXUA gKlvs8I/PP57C/G0AmTaCZNfa7iiH7+jztOun3sxmbb8VP4oVtfmw1vo5F9t1qD4 sOn7E9T4UB+KSU1nnm163xlsin7QF9EzEDsab5bW0GQLCOEv7bG8k7eF3a8xvOa4 y+recRYRVylG5ecGZY1xPz4OEfIhSCWYTq0S+Z+hiXHzy0Zs6QgIwvqc7YuaSjMq ku5W2UVeR9uJak5G -----END CERTIFICATE-----Generated at Mon Apr 14 18:00:05 2025 by rpki-client