$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/323830343a363136343a613030303a3a2f33352d3335203d3e20323632343234.roa File: 323830343a363136343a613030303a3a2f33352d3335203d3e20323632343234.roa (raw, json) Hash identifier: C8zk1bsh88rTbqlj++uW4YXDxWkktiLryYnyq1Tt6gw= Subject key identifier: A3:95:BC:AF:70:56:DE:A6:21:32:34:55:A0:97:70:EC:F3:C1:E8:54 Certificate issuer: /CN=759EC53097E7248C408C3D1A6422DB85BB4470A3 Certificate serial: 28D000FBA7E82E49CF1F075EA05305D57686B125 Authority key identifier: 75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer Subject info access: rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/323830343a363136343a613030303a3a2f33352d3335203d3e20323632343234.roa Signing time: Wed 16 Apr 2025 14:25:42 +0000 ROA not before: Wed 16 Apr 2025 14:20:42 +0000 ROA not after: Wed 15 Apr 2026 14:25:42 +0000 asID: 262424 IP address blocks: 2804:6164:a000::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 23 Apr 2025 00:08:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:d0:00:fb:a7:e8:2e:49:cf:1f:07:5e:a0:53:05:d5:76:86:b1:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=759EC53097E7248C408C3D1A6422DB85BB4470A3 Validity Not Before: Apr 16 14:20:42 2025 GMT Not After : Apr 15 14:25:42 2026 GMT Subject: CN=A395BCAF7056DEA621323455A09770ECF3C1E854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:aa:64:13:1d:25:9d:a4:20:a5:38:74:79:75: 72:81:f0:69:d9:26:21:f6:b3:1b:80:b4:00:6a:e3: 01:be:43:41:39:62:93:6f:03:55:b8:11:97:4a:3e: 9b:82:02:0e:de:0b:37:95:90:97:b7:fc:29:fb:04: 91:f4:c5:89:bc:ac:a4:eb:d8:9b:f4:66:74:dd:1b: a3:8b:04:10:69:16:d5:53:60:5e:29:94:69:66:07: e4:52:20:8b:af:26:0d:9d:05:c8:32:80:c4:87:fa: 78:7f:5c:7c:5c:86:7d:0c:ab:20:38:a0:bb:ca:13: 6e:f8:e6:94:6f:43:10:6b:89:4f:95:61:2f:97:80: 81:3e:9e:30:5e:01:02:48:5d:e2:25:79:cf:b5:45: 28:17:f5:b4:66:b3:40:82:1d:d3:fd:96:7b:1b:36: 0b:a9:c3:00:05:a5:8b:8f:ee:b6:55:f1:ef:2d:9e: c9:19:73:6b:4a:b2:d9:43:8d:c9:69:77:a6:c0:1f: 8f:5c:11:cd:2e:32:44:1f:ea:af:9e:82:33:99:62: 20:89:f0:71:23:9e:90:19:f9:ee:2f:b2:7e:aa:d3: 87:3d:7d:50:f7:dc:6b:e4:5c:3a:5c:9c:cc:0f:00: c6:3c:5f:42:aa:6f:fe:eb:e3:80:b2:bf:45:9b:dc: 1d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:95:BC:AF:70:56:DE:A6:21:32:34:55:A0:97:70:EC:F3:C1:E8:54 X509v3 Authority Key Identifier: keyid:75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/323830343a363136343a613030303a3a2f33352d3335203d3e20323632343234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:6164:a000::/35 Signature Algorithm: sha256WithRSAEncryption 1d:a8:98:3a:c3:49:bd:a3:2d:b9:0b:44:e9:ab:fd:c3:90:2a: 08:fe:ff:02:96:a2:91:cb:6b:f1:8f:5a:71:d2:ad:07:40:e3: 48:c6:76:30:69:8b:a5:f1:72:bb:fb:c9:00:89:75:85:05:4a: fe:ef:14:0e:24:97:1c:47:76:a0:bf:ff:df:96:3f:90:53:c9: 29:58:14:db:ce:f0:03:e2:03:ac:2e:35:77:94:76:24:dd:d0: 35:20:d9:b6:6c:89:21:8c:aa:00:b7:68:95:ca:c9:04:c0:64: 8c:c6:ea:d2:fa:e4:78:27:ea:f8:7d:9c:f0:3e:9a:92:78:1b: 72:24:44:e4:3c:f4:10:80:80:df:ac:fa:87:da:4d:e1:81:0b: 0d:f1:1e:fa:8d:f2:83:ed:27:bd:cc:c9:77:27:26:19:06:d4: eb:8d:fc:21:e0:9f:43:48:ef:5e:b6:27:39:93:47:c9:a5:0d: a5:b0:c1:48:ce:c4:94:ae:7f:1d:b8:0e:4d:f0:67:c3:27:60: c2:bd:c0:82:d8:e2:65:6e:85:a5:53:aa:d2:15:ae:04:42:f5: 1a:72:75:bc:86:6f:96:51:32:46:04:3a:66:0b:72:27:3b:bd: 69:0b:a9:38:0e:84:6b:c4:cb:10:8a:81:9f:33:2f:39:fe:b5: f0:74:c8:b3 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUKNAA+6foLknPHwdeoFMF1XaGsSUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzU5RUM1MzA5N0U3MjQ4QzQwOEMzRDFBNjQyMkRCODVC QjQ0NzBBMzAeFw0yNTA0MTYxNDIwNDJaFw0yNjA0MTUxNDI1NDJaMDMxMTAvBgNV BAMTKEEzOTVCQ0FGNzA1NkRFQTYyMTMyMzQ1NUEwOTc3MEVDRjNDMUU4NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdqmQTHSWdpCClOHR5dXKB8GnZ JiH2sxuAtABq4wG+Q0E5YpNvA1W4EZdKPpuCAg7eCzeVkJe3/Cn7BJH0xYm8rKTr 2Jv0ZnTdG6OLBBBpFtVTYF4plGlmB+RSIIuvJg2dBcgygMSH+nh/XHxchn0MqyA4 oLvKE2745pRvQxBriU+VYS+XgIE+njBeAQJIXeIlec+1RSgX9bRms0CCHdP9lnsb NgupwwAFpYuP7rZV8e8tnskZc2tKstlDjclpd6bAH49cEc0uMkQf6q+egjOZYiCJ 8HEjnpAZ+e4vsn6q04c9fVD33GvkXDpcnMwPAMY8X0Kqb/7r44Cyv0Wb3B0bAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUo5W8r3BW3qYhMjRVoJdw7PPB6FQwHwYDVR0j BBgwFoAUdZ7FMJfnJIxAjD0aZCLbhbtEcKMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNXV1RGtxS3hlUzR2YXlyUnhwVlBpZm9jbVpWVnhuVnlSVWpGYXVOVlJU QkIvMC83NTlFQzUzMDk3RTcyNDhDNDA4QzNEMUE2NDIyREI4NUJCNDQ3MEEzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc1OUVDNTMwOTdFNzI0OEM0 MDhDM0QxQTY0MjJEQjg1QkI0NDcwQTMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzV1dURrcUt4ZVM0dmF5clJ4cFZQaWZvY21aVlZ4blZ5UlVqRmF1TlZSVEJCLzAv MzIzODMwMzQzYTM2MzEzNjM0M2E2MTMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk M2UyMDMyMzYzMjM0MzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSgEYWSgMA0GCSqGSIb3DQEBCwUA A4IBAQAdqJg6w0m9oy25C0Tpq/3DkCoI/v8ClqKRy2vxj1px0q0HQONIxnYwaYul 8XK7+8kAiXWFBUr+7xQOJJccR3agv//flj+QU8kpWBTbzvAD4gOsLjV3lHYk3dA1 INm2bIkhjKoAt2iVyskEwGSMxurS+uR4J+r4fZzwPpqSeBtyJETkPPQQgIDfrPqH 2k3hgQsN8R76jfKD7Se9zMl3JyYZBtTrjfwh4J9DSO9etic5k0fJpQ2lsMFIzsSU rn8duA5N8GfDJ2DCvcCC2OJlboWlU6rSFa4EQvUacnW8hm+WUTJGBDpmC3InO71p C6k4DoRrxMsQioGfMy85/rXwdMiz -----END CERTIFICATE-----Generated at Tue Apr 22 12:07:20 2025 by rpki-client