$ rpki-client -vvf rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/323830343a313737383a383030303a3a2f33352d3335203d3e20323633313436.roa File: 323830343a313737383a383030303a3a2f33352d3335203d3e20323633313436.roa (raw, json) Hash identifier: fY5p2BbFJ/2TU1PvpTXPGo6BuD98LXsmVnhynjpzIqg= Subject key identifier: E9:C5:23:4F:91:01:C3:C5:F0:9D:D1:14:B5:F8:D1:F7:E1:39:8E:D5 Certificate issuer: /CN=E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493 Certificate serial: 22318EA63E4FDADCCF33E39CFC27A88C77E71656 Authority key identifier: E6:FA:E3:A7:A7:90:29:B5:F5:3F:2E:1A:94:0B:19:4F:E9:B3:F4:93 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer Subject info access: rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/323830343a313737383a383030303a3a2f33352d3335203d3e20323633313436.roa Signing time: Thu 06 Mar 2025 08:20:28 +0000 ROA not before: Thu 06 Mar 2025 08:15:28 +0000 ROA not after: Thu 05 Mar 2026 08:20:28 +0000 asID: 263146 IP address blocks: 2804:1778:8000::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.crl rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 08 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:31:8e:a6:3e:4f:da:dc:cf:33:e3:9c:fc:27:a8:8c:77:e7:16:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493 Validity Not Before: Mar 6 08:15:28 2025 GMT Not After : Mar 5 08:20:28 2026 GMT Subject: CN=E9C5234F9101C3C5F09DD114B5F8D1F7E1398ED5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fa:10:84:94:76:eb:cf:b4:76:36:5e:8e:a9: d9:6b:15:c5:56:a4:2e:bd:44:d3:9f:9c:2f:a3:26: 08:dd:49:c7:00:20:91:1d:6e:13:7e:92:5c:e1:6e: b8:0b:d2:5f:0d:99:ea:9b:c4:91:ad:0f:6c:b7:bf: 07:06:17:1b:d3:b8:87:22:d2:4c:98:75:02:46:31: 5c:51:77:8e:60:ab:04:e0:99:ca:53:4b:3f:f6:60: fd:16:71:3d:30:ac:d0:18:61:7c:3d:a7:64:b4:74: 23:92:66:9c:a0:6b:ad:c4:8e:3d:ab:1f:0f:c3:74: 8f:75:a6:1d:2c:54:6d:fd:fa:24:40:1b:2e:6a:cb: e6:f6:40:7f:44:b0:5d:1e:81:b5:9c:88:6b:37:0a: 78:bf:79:7a:9b:41:59:e0:49:03:91:6d:9a:16:80: be:61:5f:2e:aa:7b:8a:72:69:32:79:1f:20:14:f3: d1:88:c0:62:bf:12:90:a3:dd:f4:f3:fe:ea:05:5c: 6e:77:42:3c:7a:88:4a:20:6f:11:77:61:27:2c:04: c5:7f:de:08:e5:27:d6:22:e7:9c:c5:2b:e3:e0:7f: 9d:8f:44:96:0d:fd:79:38:88:cf:10:fc:ca:90:b9: 98:9b:74:5f:88:1d:56:c0:b1:94:cb:51:65:27:95: 63:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:C5:23:4F:91:01:C3:C5:F0:9D:D1:14:B5:F8:D1:F7:E1:39:8E:D5 X509v3 Authority Key Identifier: keyid:E6:FA:E3:A7:A7:90:29:B5:F5:3F:2E:1A:94:0B:19:4F:E9:B3:F4:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/323830343a313737383a383030303a3a2f33352d3335203d3e20323633313436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:1778:8000::/35 Signature Algorithm: sha256WithRSAEncryption 14:58:03:c4:41:cd:f9:28:e1:da:d2:a0:77:57:44:d2:ea:69: 44:bb:1a:42:d0:5b:ca:f2:bb:c1:c2:67:ee:a0:cf:a5:9b:7d: b2:b5:1e:91:cb:10:2a:32:bf:51:01:44:8a:d6:12:6c:be:ae: c1:bd:6f:4f:6d:75:c6:3a:28:79:ed:6e:1f:0f:74:e7:a8:3a: 3b:f3:56:a1:8c:10:c0:fa:84:90:ba:66:19:5c:fb:5b:6f:65: be:1c:46:05:d1:5b:dc:a5:89:95:6f:5f:3c:4a:47:3a:f9:ec: 72:ce:30:59:47:3a:b4:4a:16:c4:81:c4:53:6e:ce:39:d5:af: 41:32:62:73:19:38:be:92:c5:9c:61:95:2d:1e:f2:0f:24:4e: d3:47:71:7c:20:21:82:e2:88:d5:be:72:13:c3:16:e2:22:09: 79:31:46:fa:33:4e:8a:0e:60:a2:fa:66:bd:5b:3c:e1:7c:6c: e6:a4:c6:ca:f3:4c:a6:be:7c:c1:00:51:b7:b7:e2:ef:90:58: d9:09:89:58:44:b7:de:a1:c8:2a:01:19:fc:1c:b0:b6:06:e1: 56:fa:ac:ca:99:8d:68:b4:f9:54:5f:03:a1:22:4d:cc:45:bb: 29:68:41:22:79:0e:b5:fd:91:1c:c4:ba:b4:b8:b8:5b:d7:9b: 33:e8:7a:b2 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUIjGOpj5P2tzPM+Oc/CeojHfnFlYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTZGQUUzQTdBNzkwMjlCNUY1M0YyRTFBOTQwQjE5NEZF OUIzRjQ5MzAeFw0yNTAzMDYwODE1MjhaFw0yNjAzMDUwODIwMjhaMDMxMTAvBgNV BAMTKEU5QzUyMzRGOTEwMUMzQzVGMDlERDExNEI1RjhEMUY3RTEzOThFRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI+hCElHbrz7R2Nl6OqdlrFcVW pC69RNOfnC+jJgjdSccAIJEdbhN+klzhbrgL0l8NmeqbxJGtD2y3vwcGFxvTuIci 0kyYdQJGMVxRd45gqwTgmcpTSz/2YP0WcT0wrNAYYXw9p2S0dCOSZpyga63Ejj2r Hw/DdI91ph0sVG39+iRAGy5qy+b2QH9EsF0egbWciGs3Cni/eXqbQVngSQORbZoW gL5hXy6qe4pyaTJ5HyAU89GIwGK/EpCj3fTz/uoFXG53Qjx6iEogbxF3YScsBMV/ 3gjlJ9Yi55zFK+Pgf52PRJYN/Xk4iM8Q/MqQuZibdF+IHVbAsZTLUWUnlWMbAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQU6cUjT5EBw8XwndEUtfjR9+E5jtUwHwYDVR0j BBgwFoAU5vrjp6eQKbX1Py4alAsZT+mz9JMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN05SZFFOYURVYlQ3RDF0Z29TeFJuaEw5MVp5SzZFU1dHS1ZHU2huSHhX Z1AvMS9FNkZBRTNBN0E3OTAyOUI1RjUzRjJFMUE5NDBCMTk0RkU5QjNGNDkzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U2RkFFM0E3QTc5MDI5QjVG NTNGMkUxQTk0MEIxOTRGRTlCM0Y0OTMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzdOUmRRTmFEVWJUN0QxdGdvU3hSbmhMOTFaeUs2RVNXR0tWR1Nobkh4V2dQLzEv MzIzODMwMzQzYTMxMzczNzM4M2EzODMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk M2UyMDMyMzYzMzMxMzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSgEF3iAMA0GCSqGSIb3DQEBCwUA A4IBAQAUWAPEQc35KOHa0qB3V0TS6mlEuxpC0FvK8rvBwmfuoM+lm32ytR6RyxAq Mr9RAUSK1hJsvq7BvW9PbXXGOih57W4fD3TnqDo781ahjBDA+oSQumYZXPtbb2W+ HEYF0VvcpYmVb188Skc6+exyzjBZRzq0ShbEgcRTbs451a9BMmJzGTi+ksWcYZUt HvIPJE7TR3F8ICGC4ojVvnITwxbiIgl5MUb6M06KDmCi+ma9WzzhfGzmpMbK80ym vnzBAFG3t+LvkFjZCYlYRLfeocgqARn8HLC2BuFW+qzKmY1otPlUXwOhIk3MRbsp aEEieQ61/ZEcxLq0uLhb15sz6Hqy -----END CERTIFICATE-----Generated at Mon Apr 7 04:29:38 2025 by rpki-client