$ rpki-client -vvf rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/323830343a313266633a333130303a3a2f34302d3430203d3e20323633353038.roa File: 323830343a313266633a333130303a3a2f34302d3430203d3e20323633353038.roa (raw, json) Hash identifier: NzbI+wuTB+WJxl1rXdvM/CXR+N6Sbf/PTfEnhKr2DZk= Subject key identifier: F5:C1:3D:64:2F:5C:7B:DE:79:44:D6:F1:85:40:D6:AF:48:03:09:B6 Certificate issuer: /CN=028CDE0E764AA87F51C83E2608B8562B72B4E204 Certificate serial: 643726D1FA66568D10CFF6529E17BC4A1205B1E1 Authority key identifier: 02:8C:DE:0E:76:4A:A8:7F:51:C8:3E:26:08:B8:56:2B:72:B4:E2:04 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer Subject info access: rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/323830343a313266633a333130303a3a2f34302d3430203d3e20323633353038.roa Signing time: Thu 27 Feb 2025 15:59:10 +0000 ROA not before: Thu 27 Feb 2025 15:54:10 +0000 ROA not after: Thu 26 Feb 2026 15:59:10 +0000 asID: 263508 IP address blocks: 2804:12fc:3100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.crl rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Apr 2025 20:21:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:37:26:d1:fa:66:56:8d:10:cf:f6:52:9e:17:bc:4a:12:05:b1:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=028CDE0E764AA87F51C83E2608B8562B72B4E204 Validity Not Before: Feb 27 15:54:10 2025 GMT Not After : Feb 26 15:59:10 2026 GMT Subject: CN=F5C13D642F5C7BDE7944D6F18540D6AF480309B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:8f:d3:fb:f8:0a:8f:9c:bb:c3:77:61:62:4d: c3:b6:52:72:d0:0e:0b:e5:56:62:8c:bf:ec:a1:54: 04:e2:e5:f5:51:6b:70:f6:f0:39:76:44:d6:88:9c: 82:68:ed:1a:95:df:60:63:de:cf:05:71:80:60:25: 97:fd:4a:d9:32:1b:12:28:2d:7d:95:a1:ad:0a:f8: e9:3b:bc:50:5e:9e:a3:46:a1:41:5a:f6:f6:f3:f4: ff:fb:93:2f:d2:7c:39:b4:8f:5c:81:70:3f:47:bb: 1d:c8:01:0c:be:4c:00:1f:83:41:5c:14:e8:cc:b1: a5:3c:e8:19:d0:c4:3b:26:cb:d9:8a:b0:bf:fe:1d: 2f:e3:91:f4:5b:ee:19:f2:e2:02:02:90:ae:a5:0c: 69:d5:fa:25:3d:c4:b4:61:e0:3c:5c:fc:a2:0c:ba: 2b:ca:fa:f5:12:ff:41:8e:79:c4:16:53:f6:69:bd: 7b:8f:c6:b2:51:75:f5:da:d7:d2:7b:39:40:38:de: c6:86:76:a4:c0:84:c1:5e:cb:22:ff:15:8d:80:b1: bb:60:3b:ac:e2:ea:78:27:1c:27:1c:f1:29:69:5c: 76:e1:d5:b6:19:46:63:50:52:d4:7a:0e:06:36:1e: ce:96:14:4d:72:a7:25:3a:57:8a:a9:6b:b8:02:91: 09:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:C1:3D:64:2F:5C:7B:DE:79:44:D6:F1:85:40:D6:AF:48:03:09:B6 X509v3 Authority Key Identifier: keyid:02:8C:DE:0E:76:4A:A8:7F:51:C8:3E:26:08:B8:56:2B:72:B4:E2:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/323830343a313266633a333130303a3a2f34302d3430203d3e20323633353038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:12fc:3100::/40 Signature Algorithm: sha256WithRSAEncryption 5a:ff:b8:04:e5:87:4a:73:72:40:0d:b9:82:5a:fc:91:d7:28: 74:1a:ec:be:77:18:7c:d4:66:83:b1:08:08:c6:68:bf:cd:6a: 9d:0d:f3:e3:84:dd:95:28:53:c6:af:e9:07:c1:13:68:99:9a: 8b:6d:af:b0:5b:2c:40:5f:b0:00:63:30:80:33:78:0a:24:8c: 60:15:0e:f6:b7:48:d6:a7:15:2d:54:d7:49:4f:33:b5:08:ad: 67:8b:e3:cc:b5:cd:43:dd:e4:8f:fc:7e:30:82:4c:fa:a7:2e: 4d:80:f8:41:58:a8:ab:fe:60:1d:1c:a8:d1:53:30:eb:0a:27: b3:5c:c8:21:8e:0b:c7:83:66:ab:2f:39:56:e7:ec:95:6a:5b: a1:2c:ed:a5:f6:ad:59:bd:31:6f:55:63:a1:c4:15:4a:79:c2: 89:b5:62:4c:2a:58:6f:1a:7a:37:57:6c:88:b8:67:43:3d:a7: ff:74:30:ed:cf:cd:7d:b5:7c:da:70:87:12:7c:21:0c:14:2f: 2c:83:d9:6b:a5:5b:89:0a:d1:be:7e:88:61:7e:e4:a9:7e:c5: 40:fa:d7:6a:b4:35:e7:8a:e6:40:55:33:33:82:90:e2:37:20: 98:fb:7b:fa:e6:3c:d2:ee:ae:73:f3:a1:76:5a:09:34:39:a7: f9:5c:d5:ec -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUZDcm0fpmVo0Qz/ZSnhe8ShIFseEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI4Q0RFMEU3NjRBQTg3RjUxQzgzRTI2MDhCODU2MkI3 MkI0RTIwNDAeFw0yNTAyMjcxNTU0MTBaFw0yNjAyMjYxNTU5MTBaMDMxMTAvBgNV BAMTKEY1QzEzRDY0MkY1QzdCREU3OTQ0RDZGMTg1NDBENkFGNDgwMzA5QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjj9P7+AqPnLvDd2FiTcO2UnLQ DgvlVmKMv+yhVATi5fVRa3D28Dl2RNaInIJo7RqV32Bj3s8FcYBgJZf9StkyGxIo LX2Voa0K+Ok7vFBenqNGoUFa9vbz9P/7ky/SfDm0j1yBcD9Hux3IAQy+TAAfg0Fc FOjMsaU86BnQxDsmy9mKsL/+HS/jkfRb7hny4gICkK6lDGnV+iU9xLRh4Dxc/KIM uivK+vUS/0GOecQWU/ZpvXuPxrJRdfXa19J7OUA43saGdqTAhMFeyyL/FY2Asbtg O6zi6ngnHCcc8SlpXHbh1bYZRmNQUtR6DgY2Hs6WFE1ypyU6V4qpa7gCkQmrAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQU9cE9ZC9ce955RNbxhUDWr0gDCbYwHwYDVR0j BBgwFoAUAozeDnZKqH9RyD4mCLhWK3K04gQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN3p0UG43emNTOURlSHlraVhQRGVSYThNNk1FWjZQM3gyNXRzWnlWRDVD Vm4vMC8wMjhDREUwRTc2NEFBODdGNTFDODNFMjYwOEI4NTYyQjcyQjRFMjA0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAyOENERTBFNzY0QUE4N0Y1 MUM4M0UyNjA4Qjg1NjJCNzJCNEUyMDQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzd6dFBuN3pjUzlEZUh5a2lYUERlUmE4TTZNRVo2UDN4MjV0c1p5VkQ1Q1ZuLzAv MzIzODMwMzQzYTMxMzI2NjYzM2EzMzMxMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk M2UyMDMyMzYzMzM1MzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEEvwxMA0GCSqGSIb3DQEBCwUA A4IBAQBa/7gE5YdKc3JADbmCWvyR1yh0Guy+dxh81GaDsQgIxmi/zWqdDfPjhN2V KFPGr+kHwRNomZqLba+wWyxAX7AAYzCAM3gKJIxgFQ72t0jWpxUtVNdJTzO1CK1n i+PMtc1D3eSP/H4wgkz6py5NgPhBWKir/mAdHKjRUzDrCiezXMghjgvHg2arLzlW 5+yValuhLO2l9q1ZvTFvVWOhxBVKecKJtWJMKlhvGno3V2yIuGdDPaf/dDDtz819 tXzacIcSfCEMFC8sg9lrpVuJCtG+fohhfuSpfsVA+tdqtDXniuZAVTMzgpDiNyCY +3v65jzS7q5z86F2Wgk0Oaf5XNXs -----END CERTIFICATE-----Generated at Tue Apr 22 03:50:16 2025 by rpki-client