$ rpki-client -vvf rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/323830343a323830303a383930303a3a2f34302d3430203d3e20323633393334.roa File: 323830343a323830303a383930303a3a2f34302d3430203d3e20323633393334.roa (raw, json) Hash identifier: 4Rp0d0Yjoqe7GtsnDZ2LaIXk5HDBJmIdklhIeB+wHXc= Subject key identifier: 9F:E2:AF:34:3B:74:9D:F1:9F:DE:E1:DD:11:C4:76:BD:B3:A4:C1:E7 Certificate issuer: /CN=40E949830CC8643940DE6930F8D9D7E92FFA9152 Certificate serial: 1A3A097C3DF9F0CA7648A17E288A41CC6CA7BB60 Authority key identifier: 40:E9:49:83:0C:C8:64:39:40:DE:69:30:F8:D9:D7:E9:2F:FA:91:52 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40E949830CC8643940DE6930F8D9D7E92FFA9152.cer Subject info access: rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/323830343a323830303a383930303a3a2f34302d3430203d3e20323633393334.roa Signing time: Wed 04 Jun 2025 15:46:51 +0000 ROA not before: Wed 04 Jun 2025 15:41:51 +0000 ROA not after: Wed 03 Jun 2026 15:46:51 +0000 asID: 263934 IP address blocks: 2804:2800:8900::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/40E949830CC8643940DE6930F8D9D7E92FFA9152.crl rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/40E949830CC8643940DE6930F8D9D7E92FFA9152.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40E949830CC8643940DE6930F8D9D7E92FFA9152.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 14 Jun 2025 01:32:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:3a:09:7c:3d:f9:f0:ca:76:48:a1:7e:28:8a:41:cc:6c:a7:bb:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40E949830CC8643940DE6930F8D9D7E92FFA9152 Validity Not Before: Jun 4 15:41:51 2025 GMT Not After : Jun 3 15:46:51 2026 GMT Subject: CN=9FE2AF343B749DF19FDEE1DD11C476BDB3A4C1E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:74:fc:21:72:6a:25:8c:4b:ca:f5:00:56:12: 20:69:ad:71:87:c5:30:6b:cc:f8:e1:e8:23:55:31: ce:4f:8b:55:cb:14:10:91:aa:60:49:4c:b3:6f:90: 17:10:6e:00:70:cf:d2:85:c1:ae:ce:90:5b:77:6c: a3:46:6d:bb:20:50:87:16:31:10:ea:be:8a:47:c5: e6:a4:29:55:13:5c:3f:88:79:3c:c1:64:d8:1c:ce: 7f:84:8e:ef:4a:00:2d:8f:2c:e5:4a:ed:4b:67:ca: 78:36:8d:0b:b3:3f:8f:f9:a1:22:fd:c9:a7:b9:a3: 36:44:af:8e:70:a2:9a:2a:f5:22:d5:5b:51:5f:ce: 68:db:61:49:de:5e:50:72:df:2d:f6:85:6d:e3:b6: e0:bc:02:89:1e:9e:e0:b7:f3:fc:65:0f:60:97:d9: 00:f1:ee:f3:69:c1:c1:d5:eb:49:65:c6:aa:63:14: 45:d4:a5:9d:42:12:c8:01:40:9c:18:5b:a5:e3:f5: f2:c7:c5:c4:a0:7c:2d:03:e0:32:63:74:68:d2:40: 1c:10:79:15:59:6d:01:cd:aa:87:5b:f9:45:22:9f: da:04:b0:1c:54:9c:92:fc:c5:d2:2d:25:ef:15:cd: a6:d0:56:44:cd:10:84:45:b6:fc:c5:38:c0:7e:ac: cf:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E2:AF:34:3B:74:9D:F1:9F:DE:E1:DD:11:C4:76:BD:B3:A4:C1:E7 X509v3 Authority Key Identifier: keyid:40:E9:49:83:0C:C8:64:39:40:DE:69:30:F8:D9:D7:E9:2F:FA:91:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/40E949830CC8643940DE6930F8D9D7E92FFA9152.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40E949830CC8643940DE6930F8D9D7E92FFA9152.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/323830343a323830303a383930303a3a2f34302d3430203d3e20323633393334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:2800:8900::/40 Signature Algorithm: sha256WithRSAEncryption c9:2a:15:92:97:da:91:a9:e0:3a:e8:4d:5d:5f:c9:89:bf:6d: b2:e6:8a:81:42:bd:54:c9:4f:17:30:03:bc:3c:86:f4:dc:36: 63:7c:0e:bf:1d:0d:5f:23:41:d7:81:3d:be:b6:f4:79:37:85: 28:65:8e:c8:cd:c6:97:32:cf:b6:3d:ff:da:41:dd:1d:d8:5f: d4:18:79:13:73:59:b5:e3:aa:44:6e:c7:37:60:0d:21:fe:2a: f7:5b:ac:28:57:a8:50:ed:a9:f1:18:10:c5:f4:68:c1:4b:a1: 8e:6b:1a:27:79:ee:f7:6a:fe:fb:7f:ff:8d:ab:c5:52:45:d3: 20:38:1a:6a:0f:c5:1f:80:53:6c:25:79:d2:b2:b7:0c:2f:df: d0:35:f0:76:0b:ac:ad:15:c4:f3:39:86:35:a6:5c:5b:cb:40: a9:ee:54:c7:1c:a5:a4:f7:ce:1d:89:b7:00:5e:fb:43:73:0f: 49:d9:f9:fd:be:d8:4b:02:6b:fb:59:19:68:2e:54:75:eb:b8: 70:a2:a9:f9:03:48:2f:39:d3:9c:9a:b8:09:08:c4:57:91:99: 28:f9:23:ea:41:5e:b1:75:89:13:13:4c:ee:99:72:d0:ea:9d: 28:0d:96:3c:9e:54:10:62:7c:62:f3:30:6a:a9:69:79:1a:d8: e9:bd:57:da -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUGjoJfD358Mp2SKF+KIpBzGynu2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBFOTQ5ODMwQ0M4NjQzOTQwREU2OTMwRjhEOUQ3RTky RkZBOTE1MjAeFw0yNTA2MDQxNTQxNTFaFw0yNjA2MDMxNTQ2NTFaMDMxMTAvBgNV BAMTKDlGRTJBRjM0M0I3NDlERjE5RkRFRTFERDExQzQ3NkJEQjNBNEMxRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSdPwhcmoljEvK9QBWEiBprXGH xTBrzPjh6CNVMc5Pi1XLFBCRqmBJTLNvkBcQbgBwz9KFwa7OkFt3bKNGbbsgUIcW MRDqvopHxeakKVUTXD+IeTzBZNgczn+Eju9KAC2PLOVK7Utnyng2jQuzP4/5oSL9 yae5ozZEr45wopoq9SLVW1FfzmjbYUneXlBy3y32hW3jtuC8AokenuC38/xlD2CX 2QDx7vNpwcHV60llxqpjFEXUpZ1CEsgBQJwYW6Xj9fLHxcSgfC0D4DJjdGjSQBwQ eRVZbQHNqodb+UUin9oEsBxUnJL8xdItJe8VzabQVkTNEIRFtvzFOMB+rM9tAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUn+KvNDt0nfGf3uHdEcR2vbOkwecwHwYDVR0j BBgwFoAUQOlJgwzIZDlA3mkw+NnX6S/6kVIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNkU1a25DUWFpbnFkanJlazFIYVR6R3RxTk1adTFwakNDaTRac3ZUMnY2 cDQvMC80MEU5NDk4MzBDQzg2NDM5NDBERTY5MzBGOEQ5RDdFOTJGRkE5MTUyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwRTk0OTgzMENDODY0Mzk0 MERFNjkzMEY4RDlEN0U5MkZGQTkxNTIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzZFNWtuQ1FhaW5xZGpyZWsxSGFUekd0cU5NWnUxcGpDQ2k0WnN2VDJ2NnA0LzAv MzIzODMwMzQzYTMyMzgzMDMwM2EzODM5MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk M2UyMDMyMzYzMzM5MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEKACJMA0GCSqGSIb3DQEBCwUA A4IBAQDJKhWSl9qRqeA66E1dX8mJv22y5oqBQr1UyU8XMAO8PIb03DZjfA6/HQ1f I0HXgT2+tvR5N4UoZY7IzcaXMs+2Pf/aQd0d2F/UGHkTc1m146pEbsc3YA0h/ir3 W6woV6hQ7anxGBDF9GjBS6GOaxonee73av77f/+Nq8VSRdMgOBpqD8UfgFNsJXnS srcML9/QNfB2C6ytFcTzOYY1plxby0Cp7lTHHKWk984dibcAXvtDcw9J2fn9vthL Amv7WRloLlR167hwoqn5A0gvOdOcmrgJCMRXkZko+SPqQV6xdYkTE0zumXLQ6p0o DZY8nlQQYnxi8zBqqWl5GtjpvVfa -----END CERTIFICATE-----Generated at Fri Jun 13 10:21:12 2025 by rpki-client