$ rpki-client -vvf rpki-repo.registro.br/repo/7EJTSaEBKbeJZZSx1Mq7XSCJK15LrYdgYMAFPMgnLBG9/0/323830343a366130343a383030303a3a2f33332d3333203d3e20323730333036.roa File: 323830343a366130343a383030303a3a2f33332d3333203d3e20323730333036.roa (raw, json) Hash identifier: iXQkvFgqF1Bx0S+K3QFwNg+SCmN244MkkDNKDlfD4WI= Subject key identifier: 31:EF:36:A2:BC:DE:F3:C5:A9:2B:A6:D9:AA:70:D4:49:98:0F:B8:68 Certificate issuer: /CN=FDF472925FFF60FC8F7D3F64157CDC51AC3DEF28 Certificate serial: 3795E7EE77C29BCB1FBAB206D37161BEF44D80A5 Authority key identifier: FD:F4:72:92:5F:FF:60:FC:8F:7D:3F:64:15:7C:DC:51:AC:3D:EF:28 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDF472925FFF60FC8F7D3F64157CDC51AC3DEF28.cer Subject info access: rsync://rpki-repo.registro.br/repo/7EJTSaEBKbeJZZSx1Mq7XSCJK15LrYdgYMAFPMgnLBG9/0/323830343a366130343a383030303a3a2f33332d3333203d3e20323730333036.roa Signing time: Thu 23 Jan 2025 13:57:00 +0000 ROA not before: Thu 23 Jan 2025 13:52:00 +0000 ROA not after: Thu 22 Jan 2026 13:57:00 +0000 asID: 270306 IP address blocks: 2804:6a04:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7EJTSaEBKbeJZZSx1Mq7XSCJK15LrYdgYMAFPMgnLBG9/0/FDF472925FFF60FC8F7D3F64157CDC51AC3DEF28.crl rsync://rpki-repo.registro.br/repo/7EJTSaEBKbeJZZSx1Mq7XSCJK15LrYdgYMAFPMgnLBG9/0/FDF472925FFF60FC8F7D3F64157CDC51AC3DEF28.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDF472925FFF60FC8F7D3F64157CDC51AC3DEF28.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 06 Apr 2025 18:41:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:95:e7:ee:77:c2:9b:cb:1f:ba:b2:06:d3:71:61:be:f4:4d:80:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FDF472925FFF60FC8F7D3F64157CDC51AC3DEF28 Validity Not Before: Jan 23 13:52:00 2025 GMT Not After : Jan 22 13:57:00 2026 GMT Subject: CN=31EF36A2BCDEF3C5A92BA6D9AA70D449980FB868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:91:e6:85:d2:0a:c4:14:98:5a:cf:62:e7:92: f6:9c:04:bd:51:0c:9d:cd:0a:6e:50:9a:8c:71:85: cb:23:b1:61:81:de:dc:23:73:d1:e5:9e:33:ab:f3: 17:a0:ff:4c:94:4c:fe:20:1c:a6:99:7d:d5:9b:d3: 34:b1:6b:e3:1b:97:b8:1d:b7:97:e2:c6:c7:b9:f3: 07:c3:fb:f6:e2:be:bb:0d:68:d6:7f:9e:3d:3f:22: 9c:1e:b7:43:7a:3e:bf:58:9d:1d:a4:48:e6:de:3a: cb:9d:93:a3:1a:b9:b2:10:3b:93:25:9b:8a:55:b1: 83:c0:7b:6e:61:41:11:be:4f:fe:ea:02:cb:26:c0: a1:f7:88:f4:a5:fd:58:3e:53:06:36:4e:61:2b:7a: db:c7:56:f9:ec:ad:e6:fd:f4:d2:ae:c5:33:97:67: 27:47:60:f6:4a:e0:32:16:73:d1:7b:44:2a:57:dc: 02:ca:cd:20:5b:9a:d0:24:5f:45:b0:f8:a9:29:50: cb:e6:07:88:e4:41:29:9b:90:04:45:7e:17:7c:2b: 57:fa:c5:d6:20:97:6e:94:b0:e2:71:3e:31:d8:13: f2:d2:42:14:85:28:c1:c4:d6:c4:52:6e:51:7f:f8: c0:64:98:14:76:10:c5:e0:d6:b6:95:02:7a:6c:4b: b5:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:EF:36:A2:BC:DE:F3:C5:A9:2B:A6:D9:AA:70:D4:49:98:0F:B8:68 X509v3 Authority Key Identifier: keyid:FD:F4:72:92:5F:FF:60:FC:8F:7D:3F:64:15:7C:DC:51:AC:3D:EF:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7EJTSaEBKbeJZZSx1Mq7XSCJK15LrYdgYMAFPMgnLBG9/0/FDF472925FFF60FC8F7D3F64157CDC51AC3DEF28.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDF472925FFF60FC8F7D3F64157CDC51AC3DEF28.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7EJTSaEBKbeJZZSx1Mq7XSCJK15LrYdgYMAFPMgnLBG9/0/323830343a366130343a383030303a3a2f33332d3333203d3e20323730333036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:6a04:8000::/33 Signature Algorithm: sha256WithRSAEncryption 16:1b:ad:76:d8:f5:7e:83:2a:2a:4e:d2:c4:6f:6d:f0:07:f1: 53:d9:d2:bd:67:1f:5d:fa:f3:f7:5d:dd:10:9a:83:38:d5:06: 09:63:60:73:c0:d1:d6:cc:2f:0e:ff:f4:67:9a:8b:0e:ff:8d: 4a:7b:85:08:1d:5e:45:b4:71:7f:8a:5a:6f:70:20:bb:57:d1: a7:78:4d:e9:c3:e2:77:2d:5f:8c:55:11:9c:0b:31:8e:43:cf: 64:9a:83:61:d7:74:06:f3:ef:2a:58:19:e2:1a:a1:0d:c8:be: 14:78:f2:84:63:9a:61:55:36:6c:4f:3b:09:43:d6:81:88:28: f9:4b:81:22:4a:ce:8e:c5:52:56:68:d6:32:34:16:90:45:04: 72:4a:66:7f:3c:26:39:e2:a8:62:0e:8e:13:69:1d:7d:92:02: 6e:2c:81:0b:34:69:4b:78:48:f5:e8:87:28:ba:15:4f:00:58: 30:d9:f0:82:be:c4:d3:f2:27:66:0f:cb:92:b6:3c:a0:8c:c6: 58:98:6e:8d:2c:c3:cd:36:43:6b:7e:64:fa:98:2f:10:ab:c4: e6:c5:62:28:2c:f6:24:e1:3c:2b:87:7e:50:c8:63:3b:75:f6: ea:32:ae:ea:38:fc:ed:a8:f8:b7:8d:dd:9a:f0:83:75:34:55: 79:63:a2:d1 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUN5Xn7nfCm8sfurIG03FhvvRNgKUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkRGNDcyOTI1RkZGNjBGQzhGN0QzRjY0MTU3Q0RDNTFB QzNERUYyODAeFw0yNTAxMjMxMzUyMDBaFw0yNjAxMjIxMzU3MDBaMDMxMTAvBgNV BAMTKDMxRUYzNkEyQkNERUYzQzVBOTJCQTZEOUFBNzBENDQ5OTgwRkI4NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5keaF0grEFJhaz2LnkvacBL1R DJ3NCm5QmoxxhcsjsWGB3twjc9HlnjOr8xeg/0yUTP4gHKaZfdWb0zSxa+Mbl7gd t5fixse58wfD+/bivrsNaNZ/nj0/Ipwet0N6Pr9YnR2kSObeOsudk6MaubIQO5Ml m4pVsYPAe25hQRG+T/7qAssmwKH3iPSl/Vg+UwY2TmEretvHVvnsreb99NKuxTOX ZydHYPZK4DIWc9F7RCpX3ALKzSBbmtAkX0Ww+KkpUMvmB4jkQSmbkARFfhd8K1f6 xdYgl26UsOJxPjHYE/LSQhSFKMHE1sRSblF/+MBkmBR2EMXg1raVAnpsS7U3AgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUMe82orze88WpK6bZqnDUSZgPuGgwHwYDVR0j BBgwFoAU/fRykl//YPyPfT9kFXzcUaw97ygwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN0VKVFNhRUJLYmVKWlpTeDFNcTdYU0NKSzE1THJZZGdZTUFGUE1nbkxC RzkvMC9GREY0NzI5MjVGRkY2MEZDOEY3RDNGNjQxNTdDREM1MUFDM0RFRjI4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZERjQ3MjkyNUZGRjYwRkM4 RjdEM0Y2NDE1N0NEQzUxQUMzREVGMjguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzdFSlRTYUVCS2JlSlpaU3gxTXE3WFNDSksxNUxyWWRnWU1BRlBNZ25MQkc5LzAv MzIzODMwMzQzYTM2NjEzMDM0M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk M2UyMDMyMzczMDMzMzAzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEagSAMA0GCSqGSIb3DQEBCwUA A4IBAQAWG6122PV+gyoqTtLEb23wB/FT2dK9Zx9d+vP3Xd0QmoM41QYJY2BzwNHW zC8O//RnmosO/41Ke4UIHV5FtHF/ilpvcCC7V9GneE3pw+J3LV+MVRGcCzGOQ89k moNh13QG8+8qWBniGqENyL4UePKEY5phVTZsTzsJQ9aBiCj5S4EiSs6OxVJWaNYy NBaQRQRySmZ/PCY54qhiDo4TaR19kgJuLIELNGlLeEj16IcouhVPAFgw2fCCvsTT 8idmD8uStjygjMZYmG6NLMPNNkNrfmT6mC8Qq8TmxWIoLPYk4Twrh35QyGM7dfbq Mq7qOPztqPi3jd2a8IN1NFV5Y6LR -----END CERTIFICATE-----Generated at Sat Apr 5 21:56:19 2025 by rpki-client