$ rpki-client -vvf rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/323830343a353764633a383030303a3a2f33332d3333203d3e20323638303931.roa File: 323830343a353764633a383030303a3a2f33332d3333203d3e20323638303931.roa (raw, json) Hash identifier: qqu8GYvHENpe3cfHPZrbviRAd1peUW3PPy0ht7oVCPw= Subject key identifier: 7E:42:14:CC:AE:33:FD:DD:27:06:11:6F:FC:83:6F:9D:53:AA:CF:A4 Certificate issuer: /CN=3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF Certificate serial: 41BADA01F8AD7EE578D5ECB5943A6C3B290A1204 Authority key identifier: 3C:9F:72:B9:D4:E7:CA:7E:EF:4F:D6:EA:F0:70:32:0A:18:60:9E:FF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF.cer Subject info access: rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/323830343a353764633a383030303a3a2f33332d3333203d3e20323638303931.roa Signing time: Fri 14 Feb 2025 17:48:09 +0000 ROA not before: Fri 14 Feb 2025 17:43:09 +0000 ROA not after: Fri 13 Feb 2026 17:48:09 +0000 asID: 268091 IP address blocks: 2804:57dc:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF.crl rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 18 Feb 2025 20:16:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:ba:da:01:f8:ad:7e:e5:78:d5:ec:b5:94:3a:6c:3b:29:0a:12:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF Validity Not Before: Feb 14 17:43:09 2025 GMT Not After : Feb 13 17:48:09 2026 GMT Subject: CN=7E4214CCAE33FDDD2706116FFC836F9D53AACFA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e9:23:62:cb:f7:73:58:fd:42:d9:9e:df:56: 5c:09:fc:c2:eb:77:39:04:99:05:77:a4:5a:c7:c9: 60:16:0a:2e:69:9a:2a:e8:16:bb:b6:5d:41:49:80: 5c:c2:44:0b:17:1f:5c:3a:5e:38:21:3d:9d:48:0a: 92:a3:3d:8b:80:09:37:80:22:40:0e:b0:29:97:01: 83:9f:25:8f:9d:45:1d:37:f9:24:0e:98:51:f1:96: c1:92:9a:93:86:f7:0f:d2:9a:e3:9c:fc:aa:92:24: 2f:f7:2b:84:54:2e:19:89:3f:1d:ce:fb:66:bb:15: 22:ca:31:3b:c7:70:6a:3e:ad:e9:86:30:bd:4d:8f: d7:e8:dc:7e:0a:06:d7:5c:d6:72:ff:d5:32:c8:04: c1:e8:76:7e:9a:3c:d0:25:fd:b7:a8:c3:58:81:18: 6b:33:d4:d8:38:45:f4:86:89:1b:be:70:70:0c:70: 27:0b:85:9e:99:72:2a:ce:4f:a0:c0:76:a8:a3:5b: 87:03:1d:ce:63:d9:4d:bf:10:21:45:58:f8:6d:16: c1:87:58:06:52:06:c5:5b:0a:08:9f:e8:3a:ec:9a: 58:bc:4b:ac:2b:21:15:86:05:59:f6:5e:4f:0c:9f: c1:a4:52:1b:0d:37:34:9d:67:5a:f2:bd:5d:dd:5c: fb:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:42:14:CC:AE:33:FD:DD:27:06:11:6F:FC:83:6F:9D:53:AA:CF:A4 X509v3 Authority Key Identifier: keyid:3C:9F:72:B9:D4:E7:CA:7E:EF:4F:D6:EA:F0:70:32:0A:18:60:9E:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/323830343a353764633a383030303a3a2f33332d3333203d3e20323638303931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:57dc:8000::/33 Signature Algorithm: sha256WithRSAEncryption c2:f7:7c:de:e8:68:e9:52:e4:29:2a:2f:b8:55:d3:9d:56:7f: 2f:0d:ff:1b:12:27:45:9a:67:9b:40:c7:29:1f:d7:c2:15:a0: 5f:9e:e0:83:ca:f4:5e:06:30:c4:db:de:25:8c:a5:e5:7d:a7: bf:ac:07:c7:ff:46:d0:ae:8f:1c:cf:35:fe:1d:ef:f3:fd:68: 4f:50:8d:a7:bb:c6:bc:27:08:fa:ad:84:fb:5a:66:bf:9f:6a: 8e:a8:61:9c:54:d7:fe:fe:a5:94:2f:2a:48:c3:6a:2b:35:55: fc:08:e0:bc:8b:80:cc:60:cb:d4:0a:04:b0:b9:aa:54:e7:d8: 99:ed:a5:0d:42:63:5b:f9:b8:39:a0:6c:25:af:e4:1f:a8:5b: 87:e2:ca:0f:ea:f6:bc:5b:77:61:44:93:79:6e:f4:e4:9f:0a: 29:bb:4c:a2:7e:d8:ed:1b:de:b4:44:a4:2c:47:79:3f:57:c8: de:ce:0b:ab:76:3b:00:39:65:96:72:b9:1d:3b:2c:e5:99:05: 36:00:cb:66:c6:7b:d6:f3:6d:58:d9:9a:9e:a2:3b:a4:e2:65: ad:98:06:b6:1e:a2:1f:f8:4c:c3:db:90:62:8c:a9:9f:75:33: 75:8e:2d:15:f0:d7:c4:47:3b:36:68:7c:b3:46:d4:1e:1f:bb: b8:0e:22:0b -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUQbraAfitfuV41ey1lDpsOykKEgQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M5RjcyQjlENEU3Q0E3RUVGNEZENkVBRjA3MDMyMEEx ODYwOUVGRjAeFw0yNTAyMTQxNzQzMDlaFw0yNjAyMTMxNzQ4MDlaMDMxMTAvBgNV BAMTKDdFNDIxNENDQUUzM0ZEREQyNzA2MTE2RkZDODM2RjlENTNBQUNGQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi6SNiy/dzWP1C2Z7fVlwJ/MLr dzkEmQV3pFrHyWAWCi5pmiroFru2XUFJgFzCRAsXH1w6XjghPZ1ICpKjPYuACTeA IkAOsCmXAYOfJY+dRR03+SQOmFHxlsGSmpOG9w/SmuOc/KqSJC/3K4RULhmJPx3O +2a7FSLKMTvHcGo+remGML1Nj9fo3H4KBtdc1nL/1TLIBMHodn6aPNAl/beow1iB GGsz1Ng4RfSGiRu+cHAMcCcLhZ6ZcirOT6DAdqijW4cDHc5j2U2/ECFFWPhtFsGH WAZSBsVbCgif6Drsmli8S6wrIRWGBVn2Xk8Mn8GkUhsNNzSdZ1ryvV3dXPvPAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUfkIUzK4z/d0nBhFv/INvnVOqz6QwHwYDVR0j BBgwFoAUPJ9yudTnyn7vT9bq8HAyChhgnv8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN2E4S1ROYVJMZlMxZ1I5eDQ5cHV1Ymt0OXpuZk1OaHVlS2gyVmVXSzVn RTgvMC8zQzlGNzJCOUQ0RTdDQTdFRUY0RkQ2RUFGMDcwMzIwQTE4NjA5RUZGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDOUY3MkI5RDRFN0NBN0VF RjRGRDZFQUYwNzAzMjBBMTg2MDlFRkYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzdhOEtUTmFSTGZTMWdSOXg0OXB1dWJrdDl6bmZNTmh1ZUtoMlZlV0s1Z0U4LzAv MzIzODMwMzQzYTM1Mzc2NDYzM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk M2UyMDMyMzYzODMwMzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEV9yAMA0GCSqGSIb3DQEBCwUA A4IBAQDC93ze6GjpUuQpKi+4VdOdVn8vDf8bEidFmmebQMcpH9fCFaBfnuCDyvRe BjDE294ljKXlfae/rAfH/0bQro8czzX+He/z/WhPUI2nu8a8Jwj6rYT7Wma/n2qO qGGcVNf+/qWULypIw2orNVX8COC8i4DMYMvUCgSwuapU59iZ7aUNQmNb+bg5oGwl r+QfqFuH4soP6va8W3dhRJN5bvTknwopu0yiftjtG960RKQsR3k/V8jezgurdjsA OWWWcrkdOyzlmQU2AMtmxnvW821Y2Zqeojuk4mWtmAa2HqIf+EzD25BijKmfdTN1 ji0V8NfERzs2aHyzRtQeH7u4DiIL -----END CERTIFICATE-----Generated at Tue Feb 18 13:48:04 2025 by rpki-client