$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a666630303a3a2f34302d3430203d3e20323635333933.roa File: 323830343a333336343a666630303a3a2f34302d3430203d3e20323635333933.roa (raw, json) Hash identifier: tgH6My1CkRYUdJGT2v7IxMu1Rb2TkttzGwudPQYo3jA= Subject key identifier: C5:7E:FF:AF:6D:C4:70:8D:8F:46:E3:17:1D:F1:44:F8:23:28:DA:12 Certificate issuer: /CN=A09E880C389D905D05A33FAE05CDA14AD03B4CE7 Certificate serial: 6B17CABEAFF8C58F046E98BFD009C14A4C415B60 Authority key identifier: A0:9E:88:0C:38:9D:90:5D:05:A3:3F:AE:05:CD:A1:4A:D0:3B:4C:E7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A09E880C389D905D05A33FAE05CDA14AD03B4CE7.cer Subject info access: rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a666630303a3a2f34302d3430203d3e20323635333933.roa Signing time: Tue 04 Mar 2025 06:47:13 +0000 ROA not before: Tue 04 Mar 2025 06:42:13 +0000 ROA not after: Tue 03 Mar 2026 06:47:13 +0000 asID: 265393 IP address blocks: 2804:3364:ff00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/A09E880C389D905D05A33FAE05CDA14AD03B4CE7.crl rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/A09E880C389D905D05A33FAE05CDA14AD03B4CE7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A09E880C389D905D05A33FAE05CDA14AD03B4CE7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 17 Apr 2025 17:24:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:17:ca:be:af:f8:c5:8f:04:6e:98:bf:d0:09:c1:4a:4c:41:5b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A09E880C389D905D05A33FAE05CDA14AD03B4CE7 Validity Not Before: Mar 4 06:42:13 2025 GMT Not After : Mar 3 06:47:13 2026 GMT Subject: CN=C57EFFAF6DC4708D8F46E3171DF144F82328DA12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5b:58:d3:8c:52:d0:7c:28:9f:2e:e0:3a:6a: 81:2b:85:1e:d7:38:59:1b:21:f2:f3:ec:10:e7:2e: 13:cb:d3:c4:73:2a:f4:b5:0b:25:e7:a1:4e:5f:05: d5:2b:89:75:27:37:d5:59:62:32:e5:20:86:6c:33: 00:fe:7c:4f:cf:99:ce:6c:b8:dd:4f:b0:1f:09:09: 66:99:90:c0:f6:1d:ff:d2:9a:fc:36:22:24:d7:5c: 21:28:18:05:52:84:ef:21:4c:36:6f:f4:ad:f8:85: 0d:c2:f5:2c:d2:5a:bf:3a:fc:6b:62:c9:3a:96:39: 47:d5:fd:03:e1:86:46:74:6a:00:1f:d9:5d:29:26: c9:6d:f0:fa:81:c0:97:0c:43:cf:03:3c:e9:3f:5c: 89:7c:dc:8d:85:86:ff:6a:f6:99:c8:21:f5:cb:d3: f4:26:87:bd:4e:5c:75:44:6a:44:5f:2b:01:46:ba: 2c:de:bf:7b:b1:ec:e6:1f:2e:a0:69:d1:9d:83:5a: 00:48:59:09:01:d5:33:d3:ce:0b:55:8d:4a:1e:ce: 1c:3e:8f:0b:01:5b:55:28:21:92:12:fd:db:d5:e5: 47:84:b5:de:61:ad:5e:80:e4:aa:55:cf:33:cb:b4: 60:ec:01:fa:4f:f1:bb:fb:35:af:e1:d0:a9:35:93: bb:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:7E:FF:AF:6D:C4:70:8D:8F:46:E3:17:1D:F1:44:F8:23:28:DA:12 X509v3 Authority Key Identifier: keyid:A0:9E:88:0C:38:9D:90:5D:05:A3:3F:AE:05:CD:A1:4A:D0:3B:4C:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/A09E880C389D905D05A33FAE05CDA14AD03B4CE7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A09E880C389D905D05A33FAE05CDA14AD03B4CE7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a666630303a3a2f34302d3430203d3e20323635333933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:3364:ff00::/40 Signature Algorithm: sha256WithRSAEncryption 35:db:b8:e2:c5:ba:ec:46:f6:d1:c3:3c:f5:77:77:5e:de:77: b7:2e:c0:88:04:ce:23:a8:8d:db:e6:ab:f0:de:3b:0c:fd:8c: 19:33:cd:e5:34:51:06:7c:a9:a7:6d:af:65:37:49:9f:0f:0d: 0f:a7:3d:b4:5d:fc:00:ce:41:c4:0a:76:a2:7b:d8:e2:f9:74: 63:37:98:39:f1:df:af:63:df:f7:68:00:4e:82:60:25:2e:90: af:eb:eb:cc:4f:0e:79:8a:ac:64:1f:b1:3f:08:78:f1:37:cb: 1b:df:45:e9:28:8d:ee:4f:b1:ff:28:87:53:9d:6e:32:d9:93: e3:79:a8:94:a5:cd:eb:16:b4:21:e6:33:8d:8f:0f:87:1e:aa: d6:7f:de:c1:c5:1e:63:bd:87:15:ae:03:ad:8c:18:f9:6a:fa: ad:2a:9c:08:24:4f:a7:4b:60:2c:5a:36:24:ba:18:55:0a:da: 3d:0e:b5:ae:ab:e8:ed:3b:4f:fc:f9:ee:49:f2:95:22:7c:ee: 13:e3:51:b0:cc:96:6e:e3:00:51:a5:19:bd:28:6e:43:c5:16: bd:8d:83:7b:a2:83:be:0f:e3:2b:2b:a2:38:d5:83:03:07:97: 50:18:e3:d1:92:e6:3d:d7:fa:94:36:3f:1f:49:dc:71:f0:39: 83:9a:10:6e -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUaxfKvq/4xY8Ebpi/0AnBSkxBW2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA5RTg4MEMzODlEOTA1RDA1QTMzRkFFMDVDREExNEFE MDNCNENFNzAeFw0yNTAzMDQwNjQyMTNaFw0yNjAzMDMwNjQ3MTNaMDMxMTAvBgNV BAMTKEM1N0VGRkFGNkRDNDcwOEQ4RjQ2RTMxNzFERjE0NEY4MjMyOERBMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdW1jTjFLQfCifLuA6aoErhR7X OFkbIfLz7BDnLhPL08RzKvS1CyXnoU5fBdUriXUnN9VZYjLlIIZsMwD+fE/Pmc5s uN1PsB8JCWaZkMD2Hf/Smvw2IiTXXCEoGAVShO8hTDZv9K34hQ3C9SzSWr86/Gti yTqWOUfV/QPhhkZ0agAf2V0pJslt8PqBwJcMQ88DPOk/XIl83I2Fhv9q9pnIIfXL 0/Qmh71OXHVEakRfKwFGuizev3ux7OYfLqBp0Z2DWgBIWQkB1TPTzgtVjUoezhw+ jwsBW1UoIZIS/dvV5UeEtd5hrV6A5KpVzzPLtGDsAfpP8bv7Na/h0Kk1k7u9AgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUxX7/r23EcI2PRuMXHfFE+CMo2hIwHwYDVR0j BBgwFoAUoJ6IDDidkF0Foz+uBc2hStA7TOcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN1ZodjVjNFpFaGFmOEFMWkFOdVJ0cEdqcmpZNW4zZEU0VDJ4dms2Z3Zx ckwvMC9BMDlFODgwQzM4OUQ5MDVEMDVBMzNGQUUwNUNEQTE0QUQwM0I0Q0U3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EwOUU4ODBDMzg5RDkwNUQw NUEzM0ZBRTA1Q0RBMTRBRDAzQjRDRTcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzdWaHY1YzRaRWhhZjhBTFpBTnVSdHBHanJqWTVuM2RFNFQyeHZrNmd2cXJMLzAv MzIzODMwMzQzYTMzMzMzNjM0M2E2NjY2MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk M2UyMDMyMzYzNTMzMzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEM2T/MA0GCSqGSIb3DQEBCwUA A4IBAQA127jixbrsRvbRwzz1d3de3ne3LsCIBM4jqI3b5qvw3jsM/YwZM83lNFEG fKmnba9lN0mfDw0Ppz20XfwAzkHECnaie9ji+XRjN5g58d+vY9/3aABOgmAlLpCv 6+vMTw55iqxkH7E/CHjxN8sb30XpKI3uT7H/KIdTnW4y2ZPjeaiUpc3rFrQh5jON jw+HHqrWf97BxR5jvYcVrgOtjBj5avqtKpwIJE+nS2AsWjYkuhhVCto9DrWuq+jt O0/8+e5J8pUifO4T41GwzJZu4wBRpRm9KG5DxRa9jYN7ooO+D+MrK6I41YMDB5dQ GOPRkuY91/qUNj8fSdxx8DmDmhBu -----END CERTIFICATE-----Generated at Wed Apr 16 18:09:52 2025 by rpki-client