$ rpki-client -vvf rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/323830343a313638383a383030303a3a2f33352d3335203d3e20323633323930.roa File: 323830343a313638383a383030303a3a2f33352d3335203d3e20323633323930.roa (raw, json) Hash identifier: ITBCdKvrtcl0MMQdnLjKzp5k0tgVJKhpOqPLPTIbcyo= Subject key identifier: B7:6F:BF:6B:D5:DC:48:9A:A6:4A:B7:93:68:53:C5:03:88:17:1B:D3 Certificate issuer: /CN=665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7 Certificate serial: 64821DAF88055D59D62F1EAE169021B6741AB643 Authority key identifier: 66:53:61:CB:3A:CA:41:97:B4:AC:FD:25:7E:CF:EA:3E:0D:21:C9:B7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7.cer Subject info access: rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/323830343a313638383a383030303a3a2f33352d3335203d3e20323633323930.roa Signing time: Tue 03 Jun 2025 13:54:14 +0000 ROA not before: Tue 03 Jun 2025 13:49:14 +0000 ROA not after: Tue 02 Jun 2026 13:54:14 +0000 asID: 263290 IP address blocks: 2804:1688:8000::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7.crl rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 14 Jun 2025 21:09:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:82:1d:af:88:05:5d:59:d6:2f:1e:ae:16:90:21:b6:74:1a:b6:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7 Validity Not Before: Jun 3 13:49:14 2025 GMT Not After : Jun 2 13:54:14 2026 GMT Subject: CN=B76FBF6BD5DC489AA64AB7936853C50388171BD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a5:a6:17:a1:87:04:94:6e:f6:ed:fa:dc:6a: 8d:13:84:00:7b:17:a3:fc:e6:7e:86:6a:35:b4:25: 78:35:e9:ed:b9:79:cf:7a:e3:55:8b:fa:45:db:ee: 7a:72:36:6d:72:c0:a9:ac:41:c2:10:2b:87:3a:1e: fa:82:e5:a6:80:d0:a8:af:56:64:ea:a0:b3:55:5e: 6c:a4:55:8f:74:d0:14:40:0e:01:fd:97:b8:f1:91: a2:64:27:fd:03:e4:41:d0:94:2c:6b:2a:6c:3e:b4: 7e:86:9d:4d:94:a8:85:a6:f2:07:7f:0d:0a:b1:bd: 39:34:8b:1e:cf:09:7b:01:07:c2:55:7d:ac:b4:84: 82:e7:b4:0a:41:80:40:e1:e4:8a:28:75:73:f3:97: 00:49:96:51:54:a5:da:45:13:ad:99:eb:a9:f7:9d: f3:f2:35:87:c6:06:9f:98:b1:2e:a9:d5:a6:d8:91: 29:73:9d:3c:4a:1e:0f:da:d3:fb:4b:54:47:ca:fa: 14:a1:4f:48:14:c3:fb:36:eb:0d:22:97:6d:85:b3: 09:05:22:01:ae:2b:43:5c:cb:bd:7b:c0:4a:97:86: d0:68:f2:51:28:16:d0:9a:ff:b3:a5:d6:ce:6c:7d: 30:19:19:20:47:20:97:00:68:d5:d4:40:45:f9:e9: 4a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:6F:BF:6B:D5:DC:48:9A:A6:4A:B7:93:68:53:C5:03:88:17:1B:D3 X509v3 Authority Key Identifier: keyid:66:53:61:CB:3A:CA:41:97:B4:AC:FD:25:7E:CF:EA:3E:0D:21:C9:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/323830343a313638383a383030303a3a2f33352d3335203d3e20323633323930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:1688:8000::/35 Signature Algorithm: sha256WithRSAEncryption 52:9f:73:b0:34:88:89:80:d4:9f:df:e1:f7:81:3b:bd:87:33: 4b:51:f9:43:13:aa:0c:4a:f9:cc:2e:bd:da:2c:cb:cb:67:e0: dd:5e:a6:23:af:20:bf:90:10:13:0d:32:ca:af:2d:e7:3c:f8: bc:91:e1:14:19:af:a0:1a:11:61:24:59:a6:17:32:e9:29:02: 62:0c:88:ce:96:de:46:0a:aa:31:6a:b1:4d:c8:03:99:e3:f3: e7:1c:24:c9:89:d3:d4:14:07:ea:8f:b3:91:31:1c:5a:fd:d0: 68:ed:b5:e3:9a:a3:b7:25:07:34:9a:72:67:e5:ef:9f:fd:ef: e9:90:15:87:98:66:90:14:59:ba:56:fa:06:ef:50:2c:65:04: d5:c6:cd:ed:fc:39:b5:ee:fc:7a:15:77:8a:8c:ce:b3:6c:59: e5:82:7f:69:17:a3:a0:8c:6d:50:25:a0:e4:ea:f9:5c:97:e9: b6:e5:00:69:de:73:22:1d:a0:0b:23:16:ef:a2:38:29:69:66: cb:b4:de:b8:67:c7:54:f4:11:3f:05:68:54:b0:f8:7d:94:c6: c8:54:5b:66:92:72:c2:32:76:fb:a1:7b:9a:91:9b:00:91:b6: 0d:58:bb:71:02:45:25:a0:59:f0:fd:2b:34:92:c9:f7:f5:bd: 8e:46:62:4d -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUZIIdr4gFXVnWLx6uFpAhtnQatkMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjY1MzYxQ0IzQUNBNDE5N0I0QUNGRDI1N0VDRkVBM0Uw RDIxQzlCNzAeFw0yNTA2MDMxMzQ5MTRaFw0yNjA2MDIxMzU0MTRaMDMxMTAvBgNV BAMTKEI3NkZCRjZCRDVEQzQ4OUFBNjRBQjc5MzY4NTNDNTAzODgxNzFCRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEpaYXoYcElG727frcao0ThAB7 F6P85n6GajW0JXg16e25ec9641WL+kXb7npyNm1ywKmsQcIQK4c6HvqC5aaA0Kiv VmTqoLNVXmykVY900BRADgH9l7jxkaJkJ/0D5EHQlCxrKmw+tH6GnU2UqIWm8gd/ DQqxvTk0ix7PCXsBB8JVfay0hILntApBgEDh5IoodXPzlwBJllFUpdpFE62Z66n3 nfPyNYfGBp+YsS6p1abYkSlznTxKHg/a0/tLVEfK+hShT0gUw/s26w0il22FswkF IgGuK0Ncy717wEqXhtBo8lEoFtCa/7Ol1s5sfTAZGSBHIJcAaNXUQEX56Ur9AgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUt2+/a9XcSJqmSreTaFPFA4gXG9MwHwYDVR0j BBgwFoAUZlNhyzrKQZe0rP0lfs/qPg0hybcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vODg0Q2NFVmdjOHZ2Q0JnNENVQTE4MXZheFpwc2NMdEEzdHBCc0JmcjZ3 b3kvMC82NjUzNjFDQjNBQ0E0MTk3QjRBQ0ZEMjU3RUNGRUEzRTBEMjFDOUI3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY2NTM2MUNCM0FDQTQxOTdC NEFDRkQyNTdFQ0ZFQTNFMEQyMUM5QjcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzg4NENjRVZnYzh2dkNCZzRDVUExODF2YXhacHNjTHRBM3RwQnNCZnI2d295LzAv MzIzODMwMzQzYTMxMzYzODM4M2EzODMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk M2UyMDMyMzYzMzMyMzkzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSgEFoiAMA0GCSqGSIb3DQEBCwUA A4IBAQBSn3OwNIiJgNSf3+H3gTu9hzNLUflDE6oMSvnMLr3aLMvLZ+DdXqYjryC/ kBATDTLKry3nPPi8keEUGa+gGhFhJFmmFzLpKQJiDIjOlt5GCqoxarFNyAOZ4/Pn HCTJidPUFAfqj7ORMRxa/dBo7bXjmqO3JQc0mnJn5e+f/e/pkBWHmGaQFFm6VvoG 71AsZQTVxs3t/Dm17vx6FXeKjM6zbFnlgn9pF6OgjG1QJaDk6vlcl+m25QBp3nMi HaALIxbvojgpaWbLtN64Z8dU9BE/BWhUsPh9lMbIVFtmknLCMnb7oXuakZsAkbYN WLtxAkUloFnw/Ss0ksn39b2ORmJN -----END CERTIFICATE-----Generated at Sat Jun 14 09:57:43 2025 by rpki-client