$ rpki-client -vvf rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/323830343a313139343a663030633a3a2f34362d313238203d3e20323633343234.roa File: 323830343a313139343a663030633a3a2f34362d313238203d3e20323633343234.roa (raw, json) Hash identifier: S/TfzD8+cehRi1Bf5eZYqPEGX5B0ga7GgR8DQO89tqk= Subject key identifier: 26:29:89:95:BE:21:4C:9A:19:D6:2B:66:DC:F5:68:B6:5B:F9:9A:34 Certificate issuer: /CN=695A28FC133EB5408B9BA126D9FFE20884EDECD2 Certificate serial: 118F0D7C593BA71945E91179C912AA2CC6859C9E Authority key identifier: 69:5A:28:FC:13:3E:B5:40:8B:9B:A1:26:D9:FF:E2:08:84:ED:EC:D2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695A28FC133EB5408B9BA126D9FFE20884EDECD2.cer Subject info access: rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/323830343a313139343a663030633a3a2f34362d313238203d3e20323633343234.roa Signing time: Wed 26 Mar 2025 11:43:37 +0000 ROA not before: Wed 26 Mar 2025 11:38:37 +0000 ROA not after: Wed 25 Mar 2026 11:43:37 +0000 asID: 263424 IP address blocks: 2804:1194:f00c::/46 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.crl rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695A28FC133EB5408B9BA126D9FFE20884EDECD2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 19:42:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:8f:0d:7c:59:3b:a7:19:45:e9:11:79:c9:12:aa:2c:c6:85:9c:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=695A28FC133EB5408B9BA126D9FFE20884EDECD2 Validity Not Before: Mar 26 11:38:37 2025 GMT Not After : Mar 25 11:43:37 2026 GMT Subject: CN=26298995BE214C9A19D62B66DCF568B65BF99A34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:97:88:d8:ca:f7:49:8c:8e:ea:71:c4:ef:9e: d3:ae:01:6c:0c:f4:e6:79:69:83:8e:a6:37:a2:a5: c1:b7:1a:44:7d:c8:3e:6e:55:4c:2c:39:c9:c3:1b: df:8e:23:38:9e:84:3b:86:57:15:6b:ff:f1:85:23: d2:ab:54:65:bb:29:94:3e:96:24:ce:d6:2f:37:e7: 53:1d:a9:38:b3:4a:26:76:e6:08:65:88:1b:7f:e2: 0d:8c:8d:e5:11:93:70:c3:88:81:14:6f:9d:b0:4e: 05:27:71:4a:f8:24:a4:b4:14:d7:db:c2:73:7d:00: b3:59:32:47:1d:1d:dd:7a:fe:98:05:e0:22:b3:c8: bd:9f:60:d3:8f:31:32:69:e9:08:95:49:15:71:82: dd:22:ef:62:b4:cb:34:bb:63:c7:cd:9d:3e:2f:e9: 23:f5:c6:20:2b:6b:60:55:41:56:79:83:e8:fd:29: ff:ee:0f:2c:aa:c1:17:f5:06:a5:2c:6e:40:a9:b6: 3f:ce:3e:a7:6a:82:66:f5:47:b3:22:5d:7e:0f:8a: f9:f8:02:d5:46:b7:e3:7c:e2:74:f9:dc:73:d0:d8: eb:4c:aa:e7:f9:64:bf:df:9b:05:8e:1d:19:95:e4: 68:7b:1b:eb:c6:c7:85:58:3a:56:56:88:1e:36:e9: 67:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:29:89:95:BE:21:4C:9A:19:D6:2B:66:DC:F5:68:B6:5B:F9:9A:34 X509v3 Authority Key Identifier: keyid:69:5A:28:FC:13:3E:B5:40:8B:9B:A1:26:D9:FF:E2:08:84:ED:EC:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695A28FC133EB5408B9BA126D9FFE20884EDECD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/323830343a313139343a663030633a3a2f34362d313238203d3e20323633343234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:1194:f00c::/46 Signature Algorithm: sha256WithRSAEncryption 7b:5f:53:bb:ff:9d:59:47:50:e0:3b:b5:ce:5e:30:ad:01:15: aa:b3:0e:61:02:55:a1:ae:1a:9f:fa:d9:ce:89:cc:75:56:43: e6:21:61:3b:b3:26:79:a1:4d:af:f3:89:a7:93:e0:71:e5:89: c4:4f:e6:5c:8e:0e:47:7f:7f:74:cf:43:37:37:1d:f8:64:5b: e6:d0:ca:fa:4a:b4:da:57:2e:44:2a:de:d5:61:87:db:5a:4e: 44:5e:b7:c3:65:1a:95:6f:b4:f5:eb:ae:07:70:3e:26:62:4c: 8d:ad:9d:14:8d:09:c1:1e:49:61:a0:40:09:8b:33:d6:4d:70: a4:ab:d4:5b:f1:59:6a:5e:0c:fc:2e:22:10:45:30:06:32:9a: a8:9b:a5:b8:ee:ff:69:c3:2f:e6:bc:dd:f8:47:cd:f9:15:fb: 92:63:cb:b7:51:3c:02:47:af:7a:65:81:9a:5d:46:c6:76:34: f8:8d:33:74:b1:9a:55:64:0b:b9:a7:bc:79:8c:40:c3:e9:8f: 9a:41:89:59:a5:5c:7d:6b:2d:ac:52:a9:ee:94:ad:a8:ee:75: 27:68:b0:0e:53:2e:9c:79:c2:3a:8c:d9:c1:0e:79:21:52:8c: 8a:c0:5e:11:2a:1a:9c:88:1b:55:e1:59:e0:8c:73:d1:63:5a: 5a:42:a3:c1 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUEY8NfFk7pxlF6RF5yRKqLMaFnJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk1QTI4RkMxMzNFQjU0MDhCOUJBMTI2RDlGRkUyMDg4 NEVERUNEMjAeFw0yNTAzMjYxMTM4MzdaFw0yNjAzMjUxMTQzMzdaMDMxMTAvBgNV BAMTKDI2Mjk4OTk1QkUyMTRDOUExOUQ2MkI2NkRDRjU2OEI2NUJGOTlBMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDll4jYyvdJjI7qccTvntOuAWwM 9OZ5aYOOpjeipcG3GkR9yD5uVUwsOcnDG9+OIziehDuGVxVr//GFI9KrVGW7KZQ+ liTO1i8351MdqTizSiZ25ghliBt/4g2MjeURk3DDiIEUb52wTgUncUr4JKS0FNfb wnN9ALNZMkcdHd16/pgF4CKzyL2fYNOPMTJp6QiVSRVxgt0i72K0yzS7Y8fNnT4v 6SP1xiAra2BVQVZ5g+j9Kf/uDyyqwRf1BqUsbkCptj/OPqdqgmb1R7MiXX4Pivn4 AtVGt+N84nT53HPQ2OtMquf5ZL/fmwWOHRmV5Gh7G+vGx4VYOlZWiB426WdnAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUJimJlb4hTJoZ1itm3PVotlv5mjQwHwYDVR0j BBgwFoAUaVoo/BM+tUCLm6Em2f/iCITt7NIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNUhFWVJMOHlrV3hBNWFNMnZqbjdqWTI1WHYzYnF2bXk5dGlnRkJOcVJr TjgvMi82OTVBMjhGQzEzM0VCNTQwOEI5QkExMjZEOUZGRTIwODg0RURFQ0QyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY5NUEyOEZDMTMzRUI1NDA4 QjlCQTEyNkQ5RkZFMjA4ODRFREVDRDIuY2VyMIG4BggrBgEFBQcBCwSBqzCBqDCB pQYIKwYBBQUHMAuGgZhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzVIRVlSTDh5a1d4QTVhTTJ2am43alkyNVh2M2Jxdm15OXRpZ0ZCTnFSa044LzIv MzIzODMwMzQzYTMxMzEzOTM0M2E2NjMwMzA2MzNhM2EyZjM0MzYyZDMxMzIzODIw M2QzZTIwMzIzNjMzMzQzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCKAQRlPAMMA0GCSqGSIb3DQEB CwUAA4IBAQB7X1O7/51ZR1DgO7XOXjCtARWqsw5hAlWhrhqf+tnOicx1VkPmIWE7 syZ5oU2v84mnk+Bx5YnET+Zcjg5Hf390z0M3Nx34ZFvm0Mr6SrTaVy5EKt7VYYfb Wk5EXrfDZRqVb7T1664HcD4mYkyNrZ0UjQnBHklhoEAJizPWTXCkq9Rb8VlqXgz8 LiIQRTAGMpqom6W47v9pwy/mvN34R835FfuSY8u3UTwCR696ZYGaXUbGdjT4jTN0 sZpVZAu5p7x5jEDD6Y+aQYlZpVx9ay2sUqnulK2o7nUnaLAOUy6cecI6jNnBDnkh UoyKwF4RKhqciBtV4VngjHPRY1paQqPB -----END CERTIFICATE-----Generated at Wed Apr 9 02:20:13 2025 by rpki-client