$ rpki-client -vvf rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/323830343a363061633a383030303a3a2f33342d3334203d3e20323639313833.roa File: 323830343a363061633a383030303a3a2f33342d3334203d3e20323639313833.roa (raw, json) Hash identifier: n03JK7NeEJycrXjhrU/cZfh9J10nF2TzvL8vy7wfUIw= Subject key identifier: 3F:25:7E:0B:7D:57:2B:FF:A3:5B:58:D4:F1:E9:72:B3:7D:1C:73:40 Certificate issuer: /CN=95D5107C3F975DC279B2EE7748B02AB010470E6D Certificate serial: 756F0228A2B37CF184EE28BC56EFDB76BA9B646D Authority key identifier: 95:D5:10:7C:3F:97:5D:C2:79:B2:EE:77:48:B0:2A:B0:10:47:0E:6D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95D5107C3F975DC279B2EE7748B02AB010470E6D.cer Subject info access: rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/323830343a363061633a383030303a3a2f33342d3334203d3e20323639313833.roa Signing time: Fri 02 May 2025 18:19:35 +0000 ROA not before: Fri 02 May 2025 18:14:35 +0000 ROA not after: Fri 01 May 2026 18:19:35 +0000 asID: 269183 IP address blocks: 2804:60ac:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/95D5107C3F975DC279B2EE7748B02AB010470E6D.crl rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/95D5107C3F975DC279B2EE7748B02AB010470E6D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95D5107C3F975DC279B2EE7748B02AB010470E6D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 10 Jun 2025 04:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:6f:02:28:a2:b3:7c:f1:84:ee:28:bc:56:ef:db:76:ba:9b:64:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95D5107C3F975DC279B2EE7748B02AB010470E6D Validity Not Before: May 2 18:14:35 2025 GMT Not After : May 1 18:19:35 2026 GMT Subject: CN=3F257E0B7D572BFFA35B58D4F1E972B37D1C7340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:49:bf:80:64:2c:da:22:0c:1e:f1:71:dc:1d: 09:37:cb:e5:40:73:7a:2d:b9:a4:43:b0:51:40:f1: 35:91:4a:bd:d6:35:fe:c3:59:0f:6a:f5:db:60:50: 4c:e9:60:b9:a1:d3:1e:b1:85:1a:ef:35:d7:69:e3: 0f:49:86:0b:6e:17:c7:27:a6:65:00:2a:0f:10:77: 83:9f:19:ac:69:6f:9e:69:eb:37:a0:1c:8a:15:8c: 09:cb:97:94:60:db:52:b4:07:e4:d8:85:55:db:b4: f5:4a:4e:60:38:3f:f4:c3:4b:6f:db:57:96:90:f5: ea:f4:9e:be:46:1e:89:f3:10:53:46:a1:61:61:f4: af:d8:39:22:ec:c0:05:0c:b6:6b:50:3c:3a:84:6b: 34:17:f7:7e:d1:b3:27:71:1d:c3:e7:2b:a8:1d:77: 86:42:89:5a:0b:48:05:cf:db:2a:55:f9:0d:67:99: d2:52:fa:37:8b:be:4d:a5:76:f8:1c:d2:c8:46:64: f9:f0:bf:93:d3:30:c9:8f:2d:9d:61:6e:5d:42:f5: 7a:ba:e2:0b:c5:bb:07:06:dd:a0:db:63:ef:7e:1c: bb:2d:8a:58:0c:33:12:ff:95:87:8e:39:91:8f:d2: 32:65:63:7a:f8:3a:9c:de:3d:15:6c:c4:36:70:f1: 61:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:25:7E:0B:7D:57:2B:FF:A3:5B:58:D4:F1:E9:72:B3:7D:1C:73:40 X509v3 Authority Key Identifier: keyid:95:D5:10:7C:3F:97:5D:C2:79:B2:EE:77:48:B0:2A:B0:10:47:0E:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/95D5107C3F975DC279B2EE7748B02AB010470E6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95D5107C3F975DC279B2EE7748B02AB010470E6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/323830343a363061633a383030303a3a2f33342d3334203d3e20323639313833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:60ac:8000::/34 Signature Algorithm: sha256WithRSAEncryption 0a:b4:ea:60:e2:7a:71:a1:1e:8e:71:15:0f:d3:b2:11:b5:cb: 38:1d:88:4e:cf:6e:90:b8:c3:23:97:3e:12:a7:1f:c2:b9:52: 56:95:d0:15:c5:05:6d:78:7f:3c:a4:f4:5d:9e:ac:28:e3:21: 90:c1:eb:99:fc:11:c1:3c:af:51:e2:bb:1b:ca:58:3f:6d:9b: 3a:91:02:8c:5e:a3:c9:70:5a:54:ef:bb:c3:a2:82:95:9f:a9: 09:08:7a:32:e6:83:e1:69:24:8f:31:23:ba:4c:44:0c:16:7d: 5f:fd:05:1a:01:be:dd:df:40:f7:9f:b1:8b:b3:06:85:ac:98: 5d:f7:3d:b0:ba:68:95:9a:df:04:0c:9a:c9:b7:61:1a:e3:33: 6d:ce:3a:57:c0:49:eb:81:f7:a5:d7:f9:1d:3a:fd:04:24:8d: 9a:c0:5c:31:f2:9b:e5:71:4b:66:4d:44:5f:28:5c:16:93:72: 69:b7:f0:e9:f4:0a:f9:1a:0e:8d:98:15:f7:26:60:60:87:a9: af:c9:ff:b3:0a:52:88:a4:be:34:8f:a7:43:af:22:94:25:3b: 99:48:3b:1c:ad:5b:20:96:36:6f:84:0c:e8:da:9d:7b:70:58: 8d:7d:ab:91:4f:4e:a8:6f:d0:8a:19:4b:b1:68:ed:38:7d:d4: 83:7c:d1:80 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUdW8CKKKzfPGE7ii8Vu/bdrqbZG0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVENTEwN0MzRjk3NURDMjc5QjJFRTc3NDhCMDJBQjAx MDQ3MEU2RDAeFw0yNTA1MDIxODE0MzVaFw0yNjA1MDExODE5MzVaMDMxMTAvBgNV BAMTKDNGMjU3RTBCN0Q1NzJCRkZBMzVCNThENEYxRTk3MkIzN0QxQzczNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaSb+AZCzaIgwe8XHcHQk3y+VA c3otuaRDsFFA8TWRSr3WNf7DWQ9q9dtgUEzpYLmh0x6xhRrvNddp4w9JhgtuF8cn pmUAKg8Qd4OfGaxpb55p6zegHIoVjAnLl5Rg21K0B+TYhVXbtPVKTmA4P/TDS2/b V5aQ9er0nr5GHonzEFNGoWFh9K/YOSLswAUMtmtQPDqEazQX937RsydxHcPnK6gd d4ZCiVoLSAXP2ypV+Q1nmdJS+jeLvk2ldvgc0shGZPnwv5PTMMmPLZ1hbl1C9Xq6 4gvFuwcG3aDbY+9+HLstilgMMxL/lYeOOZGP0jJlY3r4OpzePRVsxDZw8WENAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUPyV+C31XK/+jW1jU8elys30cc0AwHwYDVR0j BBgwFoAUldUQfD+XXcJ5su53SLAqsBBHDm0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN3NKUDZxMUtUTFZZdG0zNFVHY3J4RlNSd1Z6a3lxVzdFZXNOdmVZSEVi RGIvMC85NUQ1MTA3QzNGOTc1REMyNzlCMkVFNzc0OEIwMkFCMDEwNDcwRTZELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk1RDUxMDdDM0Y5NzVEQzI3 OUIyRUU3NzQ4QjAyQUIwMTA0NzBFNkQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzdzSlA2cTFLVExWWXRtMzRVR2NyeEZTUndWemt5cVc3RWVzTnZlWUhFYkRiLzAv MzIzODMwMzQzYTM2MzA2MTYzM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzYzOTMxMzgzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEYKyAMA0GCSqGSIb3DQEBCwUA A4IBAQAKtOpg4npxoR6OcRUP07IRtcs4HYhOz26QuMMjlz4Spx/CuVJWldAVxQVt eH88pPRdnqwo4yGQweuZ/BHBPK9R4rsbylg/bZs6kQKMXqPJcFpU77vDooKVn6kJ CHoy5oPhaSSPMSO6TEQMFn1f/QUaAb7d30D3n7GLswaFrJhd9z2wumiVmt8EDJrJ t2Ea4zNtzjpXwEnrgfel1/kdOv0EJI2awFwx8pvlcUtmTURfKFwWk3Jpt/Dp9Ar5 Gg6NmBX3JmBgh6mvyf+zClKIpL40j6dDryKUJTuZSDscrVsgljZvhAzo2p17cFiN fauRT06ob9CKGUuxaO04fdSDfNGA -----END CERTIFICATE-----Generated at Mon Jun 9 12:00:17 2025 by rpki-client