$ rpki-client -vvf rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/323830343a313139343a663030383a3a2f34362d313238203d3e20323632313832.roa File: 323830343a313139343a663030383a3a2f34362d313238203d3e20323632313832.roa (raw, json) Hash identifier: JciEQ4YolP6xzeZ7Sw7P+CaBKjfg8gDWYA0YGnrZpRI= Subject key identifier: 6B:FC:53:56:D3:D9:0E:F9:32:9B:9A:38:56:DD:E8:44:20:2C:68:A4 Certificate issuer: /CN=695A28FC133EB5408B9BA126D9FFE20884EDECD2 Certificate serial: 4E618D7FBCB8F35372C67546C0E3B8FE7C633B92 Authority key identifier: 69:5A:28:FC:13:3E:B5:40:8B:9B:A1:26:D9:FF:E2:08:84:ED:EC:D2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695A28FC133EB5408B9BA126D9FFE20884EDECD2.cer Subject info access: rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/323830343a313139343a663030383a3a2f34362d313238203d3e20323632313832.roa Signing time: Wed 26 Mar 2025 11:43:43 +0000 ROA not before: Wed 26 Mar 2025 11:38:43 +0000 ROA not after: Wed 25 Mar 2026 11:43:43 +0000 asID: 262182 IP address blocks: 2804:1194:f008::/46 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.crl rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695A28FC133EB5408B9BA126D9FFE20884EDECD2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 06 Apr 2025 19:16:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:61:8d:7f:bc:b8:f3:53:72:c6:75:46:c0:e3:b8:fe:7c:63:3b:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=695A28FC133EB5408B9BA126D9FFE20884EDECD2 Validity Not Before: Mar 26 11:38:43 2025 GMT Not After : Mar 25 11:43:43 2026 GMT Subject: CN=6BFC5356D3D90EF9329B9A3856DDE844202C68A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:14:fe:ff:b4:6a:87:6c:cf:08:32:0d:d3:c2: 2c:5a:bd:29:c4:ba:fb:2b:4a:22:45:66:62:cb:41: 81:20:1f:40:ca:16:0a:3e:a0:e9:d0:a9:2b:d0:e9: 55:ff:fb:4f:d1:83:e5:0c:f7:78:e1:60:4a:95:bd: c4:3e:20:81:8c:20:ef:16:6c:e6:b5:9a:f4:0a:64: 63:69:9f:34:55:96:2f:8c:e0:cb:3f:58:44:f8:31: e8:1f:0f:11:cc:82:c9:07:82:e7:ad:8a:2e:b6:f4: d0:22:32:46:4c:32:01:9a:c6:4b:be:9a:50:92:ba: 50:30:b4:16:c8:c7:6e:61:48:63:5c:7b:51:32:42: 07:53:f7:7a:2a:d2:63:3d:f4:14:fe:67:ec:85:f5: 49:cf:5b:be:e6:9d:ef:4c:e6:38:0e:d8:28:45:af: 0e:aa:bc:14:18:90:f4:3a:8a:96:c0:1f:5f:5b:18: 49:3f:90:94:c7:91:13:b9:55:bf:37:c3:32:a6:30: f4:e9:33:ab:57:85:d0:c9:c8:1d:fc:7c:1d:9b:88: ce:c7:22:ae:92:8b:76:4d:7d:24:22:6b:fb:23:ac: 10:5a:3d:fd:2a:3b:2d:51:59:de:33:da:23:72:8f: 44:0c:3d:2b:22:58:9a:7b:d0:a7:a1:6b:8c:5b:e9: 5d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:FC:53:56:D3:D9:0E:F9:32:9B:9A:38:56:DD:E8:44:20:2C:68:A4 X509v3 Authority Key Identifier: keyid:69:5A:28:FC:13:3E:B5:40:8B:9B:A1:26:D9:FF:E2:08:84:ED:EC:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695A28FC133EB5408B9BA126D9FFE20884EDECD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/323830343a313139343a663030383a3a2f34362d313238203d3e20323632313832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:1194:f008::/46 Signature Algorithm: sha256WithRSAEncryption 5c:61:99:a0:88:91:b2:ad:5a:d3:49:fa:c0:14:f6:4f:3e:33: 1a:00:ac:3a:56:fd:f2:9c:76:8e:8f:65:4d:9b:8e:64:f9:97: ce:17:fe:ec:4f:45:46:20:51:40:86:ff:22:23:42:3a:a8:b1: 9c:0d:ba:8c:ec:21:59:14:96:bc:78:d6:90:a0:a1:c1:54:e6: ae:1b:1e:d5:f2:5a:ec:5b:36:7a:9e:c1:1f:73:66:fd:56:2c: e0:10:f4:a4:f9:16:3b:0f:23:1c:db:5e:f2:6c:6e:a4:cf:d3: 51:ca:b6:1a:9f:96:ea:15:99:d1:27:f8:5b:57:62:61:68:05: 02:58:65:15:a4:25:2d:b6:a5:1a:de:5f:6c:41:b7:7c:36:8e: e9:75:ff:4d:31:5b:6b:ac:a6:3e:51:9d:28:f2:a8:f6:90:41: db:f7:95:2b:ed:a0:85:58:03:2b:9c:9d:99:77:bc:ed:7d:4e: a8:cc:51:d9:e4:be:20:38:ab:77:3b:dc:1e:a3:a9:76:a9:22: 2c:26:61:86:c4:06:bd:c0:4f:5b:7a:f8:3f:64:c7:df:73:ff: e9:43:0e:f4:97:3d:6a:6e:a1:33:13:41:ba:63:06:20:64:54: 27:d2:2f:13:e4:05:6e:b6:b3:fb:2c:85:4c:77:5b:e8:09:fc: 4d:57:59:7c -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUTmGNf7y481NyxnVGwOO4/nxjO5IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk1QTI4RkMxMzNFQjU0MDhCOUJBMTI2RDlGRkUyMDg4 NEVERUNEMjAeFw0yNTAzMjYxMTM4NDNaFw0yNjAzMjUxMTQzNDNaMDMxMTAvBgNV BAMTKDZCRkM1MzU2RDNEOTBFRjkzMjlCOUEzODU2RERFODQ0MjAyQzY4QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBFP7/tGqHbM8IMg3TwixavSnE uvsrSiJFZmLLQYEgH0DKFgo+oOnQqSvQ6VX/+0/Rg+UM93jhYEqVvcQ+IIGMIO8W bOa1mvQKZGNpnzRVli+M4Ms/WET4MegfDxHMgskHguetii629NAiMkZMMgGaxku+ mlCSulAwtBbIx25hSGNce1EyQgdT93oq0mM99BT+Z+yF9UnPW77mne9M5jgO2ChF rw6qvBQYkPQ6ipbAH19bGEk/kJTHkRO5Vb83wzKmMPTpM6tXhdDJyB38fB2biM7H Iq6Si3ZNfSQia/sjrBBaPf0qOy1RWd4z2iNyj0QMPSsiWJp70Keha4xb6V2zAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUa/xTVtPZDvkym5o4Vt3oRCAsaKQwHwYDVR0j BBgwFoAUaVoo/BM+tUCLm6Em2f/iCITt7NIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNUhFWVJMOHlrV3hBNWFNMnZqbjdqWTI1WHYzYnF2bXk5dGlnRkJOcVJr TjgvMi82OTVBMjhGQzEzM0VCNTQwOEI5QkExMjZEOUZGRTIwODg0RURFQ0QyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY5NUEyOEZDMTMzRUI1NDA4 QjlCQTEyNkQ5RkZFMjA4ODRFREVDRDIuY2VyMIG4BggrBgEFBQcBCwSBqzCBqDCB pQYIKwYBBQUHMAuGgZhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzVIRVlSTDh5a1d4QTVhTTJ2am43alkyNVh2M2Jxdm15OXRpZ0ZCTnFSa044LzIv MzIzODMwMzQzYTMxMzEzOTM0M2E2NjMwMzAzODNhM2EyZjM0MzYyZDMxMzIzODIw M2QzZTIwMzIzNjMyMzEzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCKAQRlPAIMA0GCSqGSIb3DQEB CwUAA4IBAQBcYZmgiJGyrVrTSfrAFPZPPjMaAKw6Vv3ynHaOj2VNm45k+ZfOF/7s T0VGIFFAhv8iI0I6qLGcDbqM7CFZFJa8eNaQoKHBVOauGx7V8lrsWzZ6nsEfc2b9 VizgEPSk+RY7DyMc217ybG6kz9NRyrYan5bqFZnRJ/hbV2JhaAUCWGUVpCUttqUa 3l9sQbd8No7pdf9NMVtrrKY+UZ0o8qj2kEHb95Ur7aCFWAMrnJ2Zd7ztfU6ozFHZ 5L4gOKt3O9weo6l2qSIsJmGGxAa9wE9bevg/ZMffc//pQw70lz1qbqEzE0G6YwYg ZFQn0i8T5AVutrP7LIVMd1voCfxNV1l8 -----END CERTIFICATE-----Generated at Sun Apr 6 02:56:23 2025 by rpki-client