$ rpki-client -vvf rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/323830343a6461303a383130303a3a2f34302d3430203d3e203238353837.roa File: 323830343a6461303a383130303a3a2f34302d3430203d3e203238353837.roa (raw, json) Hash identifier: USiPGTJ0OicJtk6OQrEept0nleSUhg4joVyE+GO8SdI= Subject key identifier: 69:46:08:25:D6:41:11:7C:B8:69:C1:35:6D:1A:ED:61:C9:01:1A:26 Certificate issuer: /CN=B865B5C95FA0F73EB96D28D27ACF52E0D5EBF568 Certificate serial: 09569CA4567D035FE4CDD70A635ADBB3DA8A6834 Authority key identifier: B8:65:B5:C9:5F:A0:F7:3E:B9:6D:28:D2:7A:CF:52:E0:D5:EB:F5:68 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B865B5C95FA0F73EB96D28D27ACF52E0D5EBF568.cer Subject info access: rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/323830343a6461303a383130303a3a2f34302d3430203d3e203238353837.roa Signing time: Tue 18 Mar 2025 12:33:58 +0000 ROA not before: Tue 18 Mar 2025 12:28:58 +0000 ROA not after: Tue 17 Mar 2026 12:33:58 +0000 asID: 28587 IP address blocks: 2804:da0:8100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/B865B5C95FA0F73EB96D28D27ACF52E0D5EBF568.crl rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/B865B5C95FA0F73EB96D28D27ACF52E0D5EBF568.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B865B5C95FA0F73EB96D28D27ACF52E0D5EBF568.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 08 Apr 2025 15:17:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:56:9c:a4:56:7d:03:5f:e4:cd:d7:0a:63:5a:db:b3:da:8a:68:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B865B5C95FA0F73EB96D28D27ACF52E0D5EBF568 Validity Not Before: Mar 18 12:28:58 2025 GMT Not After : Mar 17 12:33:58 2026 GMT Subject: CN=69460825D641117CB869C1356D1AED61C9011A26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d1:97:c1:e0:3f:8a:01:a5:e8:1e:28:5e:8a: 07:bc:12:63:53:34:25:ad:13:42:f8:92:a2:69:6f: c3:2a:8c:96:25:d5:09:88:47:ac:26:bc:ab:1d:57: f3:6f:89:a9:83:7c:85:e9:4c:d1:b7:27:cb:b9:6f: 14:a8:51:ec:4b:a6:6d:b7:a6:00:42:1d:26:8e:77: cf:29:64:d3:93:45:9b:48:bf:33:4d:c6:04:70:cd: 0d:27:0a:41:18:d6:ae:51:aa:ef:d1:76:f4:1f:29: e5:92:d1:32:1c:7d:b1:00:0d:82:cc:4a:3a:36:92: 95:ae:14:f4:d3:35:c5:58:54:82:c2:8c:90:c8:df: 0e:56:1c:0d:75:9b:e5:28:aa:88:72:09:18:82:34: bb:cc:ef:e9:5d:ac:e7:08:e1:a8:f7:38:17:05:69: ab:74:8f:64:91:17:79:65:6f:cc:d7:eb:7b:da:cb: a1:a4:8d:67:64:2a:b5:53:00:b3:d3:1d:3e:d0:f5: d8:49:28:84:48:94:81:6a:83:98:bf:ea:1c:bf:d4: 13:a3:ab:ac:24:c6:40:c3:3e:c4:35:62:d1:6b:7b: 7d:a0:a6:94:8d:15:4d:ad:e5:b6:c6:cc:f5:7e:2a: cc:43:ef:d2:d7:dc:b7:f2:45:25:fb:91:00:01:84: 18:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:46:08:25:D6:41:11:7C:B8:69:C1:35:6D:1A:ED:61:C9:01:1A:26 X509v3 Authority Key Identifier: keyid:B8:65:B5:C9:5F:A0:F7:3E:B9:6D:28:D2:7A:CF:52:E0:D5:EB:F5:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/B865B5C95FA0F73EB96D28D27ACF52E0D5EBF568.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B865B5C95FA0F73EB96D28D27ACF52E0D5EBF568.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/323830343a6461303a383130303a3a2f34302d3430203d3e203238353837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:da0:8100::/40 Signature Algorithm: sha256WithRSAEncryption 2f:98:11:01:cb:34:8e:5b:bb:37:e5:89:a1:ad:02:03:98:31: e3:3f:7f:05:c2:28:bb:6d:96:87:9c:7c:58:43:f8:b9:36:18: 17:3b:a1:9b:0f:f0:48:47:7e:3e:e5:55:df:f2:27:ce:c1:12: 19:3c:a0:01:d2:77:03:3c:b5:54:9c:78:ab:06:a8:d7:70:25: d8:b4:5b:38:08:e8:f0:68:e6:bb:d8:5b:f0:d9:83:32:91:1a: a5:a2:86:1c:b5:85:4e:c2:25:c1:31:30:16:61:ef:93:4e:0c: a8:1e:3d:bb:6a:18:1f:ba:30:52:53:80:87:bf:35:1b:e3:54: 57:23:9a:0f:af:78:25:8d:a7:23:bc:d3:cb:f7:ed:1f:34:5b: ee:8b:de:4b:b6:09:e4:16:53:10:d0:90:c0:f9:fa:f9:78:ba: ba:cd:6d:48:3e:47:98:9e:73:45:5d:53:0c:6c:03:96:69:b9: 07:c2:c1:26:a4:2c:45:68:f6:fd:11:c5:8a:cb:ec:f7:81:0b: 94:5b:5a:3f:d8:53:24:86:3e:e6:f6:a1:02:75:ff:f7:39:6f: eb:d2:b0:67:14:44:d2:6f:d2:aa:4e:59:b3:fb:50:87:4c:0f: 45:3a:b1:9f:47:04:ec:a1:30:80:01:00:ef:1f:95:fa:d8:b3: 1a:c6:b0:bc -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgIUCVacpFZ9A1/kzdcKY1rbs9qKaDQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg2NUI1Qzk1RkEwRjczRUI5NkQyOEQyN0FDRjUyRTBE NUVCRjU2ODAeFw0yNTAzMTgxMjI4NThaFw0yNjAzMTcxMjMzNThaMDMxMTAvBgNV BAMTKDY5NDYwODI1RDY0MTExN0NCODY5QzEzNTZEMUFFRDYxQzkwMTFBMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA0ZfB4D+KAaXoHiheige8EmNT NCWtE0L4kqJpb8MqjJYl1QmIR6wmvKsdV/NviamDfIXpTNG3J8u5bxSoUexLpm23 pgBCHSaOd88pZNOTRZtIvzNNxgRwzQ0nCkEY1q5Rqu/RdvQfKeWS0TIcfbEADYLM Sjo2kpWuFPTTNcVYVILCjJDI3w5WHA11m+UoqohyCRiCNLvM7+ldrOcI4aj3OBcF aat0j2SRF3llb8zX63vay6GkjWdkKrVTALPTHT7Q9dhJKIRIlIFqg5i/6hy/1BOj q6wkxkDDPsQ1YtFre32gppSNFU2t5bbGzPV+KsxD79LX3LfyRSX7kQABhBi3AgMB AAGjggJXMIICUzAdBgNVHQ4EFgQUaUYIJdZBEXy4acE1bRrtYckBGiYwHwYDVR0j BBgwFoAUuGW1yV+g9z65bSjSes9S4NXr9WgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN0cySkZlcFhjMzlodXFQY3RkOHlxMVJrZHdlcHVYNXBGQlpGVFlHOXhT MjUvMC9CODY1QjVDOTVGQTBGNzNFQjk2RDI4RDI3QUNGNTJFMEQ1RUJGNTY4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4NjVCNUM5NUZBMEY3M0VC OTZEMjhEMjdBQ0Y1MkUwRDVFQkY1NjguY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzdHMkpGZXBYYzM5aHVxUGN0ZDh5cTFSa2R3ZXB1WDVwRkJaRlRZRzl4UzI1LzAv MzIzODMwMzQzYTY0NjEzMDNhMzgzMTMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl MjAzMjM4MzUzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG AQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKAQNoIEwDQYJKoZIhvcNAQELBQADggEB AC+YEQHLNI5buzfliaGtAgOYMeM/fwXCKLttloecfFhD+Lk2GBc7oZsP8EhHfj7l Vd/yJ87BEhk8oAHSdwM8tVSceKsGqNdwJdi0WzgI6PBo5rvYW/DZgzKRGqWihhy1 hU7CJcExMBZh75NODKgePbtqGB+6MFJTgIe/NRvjVFcjmg+veCWNpyO808v37R80 W+6L3ku2CeQWUxDQkMD5+vl4urrNbUg+R5iec0VdUwxsA5ZpuQfCwSakLEVo9v0R xYrL7PeBC5RbWj/YUySGPub2oQJ1//c5b+vSsGcURNJv0qpOWbP7UIdMD0U6sZ9H BOyhMIABAO8flfrYsxrGsLw= -----END CERTIFICATE-----Generated at Mon Apr 7 18:18:29 2025 by rpki-client