$ rpki-client -vvf rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/323830343a313638383a383030303a3a2f33362d3336203d3e20323633323930.roa File: 323830343a313638383a383030303a3a2f33362d3336203d3e20323633323930.roa (raw, json) Hash identifier: nbjNT6ijqjOK6qNk+wWAh/ahuQZje7BBAF0/hJLjuVM= Subject key identifier: 28:27:93:BE:B3:A7:8E:EA:A4:50:48:63:85:C6:50:1E:5F:B4:23:48 Certificate issuer: /CN=665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7 Certificate serial: 6F9D7A46D4F64DAF5B75401E1B064F5801E92EDF Authority key identifier: 66:53:61:CB:3A:CA:41:97:B4:AC:FD:25:7E:CF:EA:3E:0D:21:C9:B7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7.cer Subject info access: rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/323830343a313638383a383030303a3a2f33362d3336203d3e20323633323930.roa Signing time: Tue 03 Jun 2025 13:54:13 +0000 ROA not before: Tue 03 Jun 2025 13:49:13 +0000 ROA not after: Tue 02 Jun 2026 13:54:13 +0000 asID: 263290 IP address blocks: 2804:1688:8000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7.crl rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 13 Jun 2025 03:10:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:9d:7a:46:d4:f6:4d:af:5b:75:40:1e:1b:06:4f:58:01:e9:2e:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7 Validity Not Before: Jun 3 13:49:13 2025 GMT Not After : Jun 2 13:54:13 2026 GMT Subject: CN=282793BEB3A78EEAA450486385C6501E5FB42348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:78:14:db:c7:43:85:3b:f3:47:84:b2:80:9a: 2e:19:84:dc:73:4c:0a:f9:4d:f5:3a:e6:5d:8c:0b: fb:4f:f7:9d:e6:06:03:50:7e:a0:d0:68:4f:5c:63: 91:97:32:84:c7:64:d6:e1:a6:b5:a3:49:84:f1:a0: 6e:16:bc:8b:ac:28:09:1d:be:34:ef:0f:91:f6:79: 1c:70:c7:36:9f:ed:d8:45:b6:bd:03:85:5c:d1:b1: 1d:9d:c0:38:12:c4:58:0d:5a:75:ba:af:ec:67:32: a9:20:0d:83:a9:36:ec:f4:37:1b:c6:cd:15:07:e0: 14:26:0a:25:3a:c6:08:c7:01:16:1e:8f:05:bb:2a: 1a:2f:81:28:13:40:c3:44:cd:f0:00:0f:1f:72:11: 49:61:14:12:63:a8:31:c4:3f:1f:c7:11:df:37:ee: a6:32:97:6d:f9:f2:8c:e8:92:40:f0:52:25:9e:48: 4e:d0:63:a5:6a:59:53:25:1f:56:45:20:d8:f4:fe: 77:6a:d3:9a:a6:fa:b3:3b:ac:71:a6:1b:a2:b6:7c: 34:e7:8c:d7:9f:40:03:4a:8b:49:42:02:4d:bd:df: b8:ba:2c:7a:e1:3b:46:96:8b:33:cd:5e:ad:bf:39: c9:ae:94:eb:17:8e:ba:15:9c:ac:68:63:aa:da:ef: 02:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:27:93:BE:B3:A7:8E:EA:A4:50:48:63:85:C6:50:1E:5F:B4:23:48 X509v3 Authority Key Identifier: keyid:66:53:61:CB:3A:CA:41:97:B4:AC:FD:25:7E:CF:EA:3E:0D:21:C9:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/323830343a313638383a383030303a3a2f33362d3336203d3e20323633323930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:1688:8000::/36 Signature Algorithm: sha256WithRSAEncryption be:f6:25:c7:9d:64:a9:37:67:13:99:ff:be:b2:d5:8d:bd:3c: 08:5d:4e:29:2e:15:84:8b:6c:e2:ff:02:1b:d3:05:d9:b9:c1: ee:8d:b1:9e:c0:66:dc:11:30:fb:9d:48:c4:7b:03:d8:cc:7e: 68:35:4c:53:92:85:29:4e:3b:85:93:c3:09:cb:fe:89:8c:27: bb:eb:c3:3e:67:39:d5:38:2d:fd:da:a1:00:17:df:8c:6b:5e: a7:49:9b:95:e9:56:5d:b1:ac:2c:ac:81:31:74:16:25:42:f3: af:9d:e0:ce:9b:fb:c9:72:d7:52:cf:ea:1b:ab:6a:d6:22:35: 8b:06:48:a0:77:1b:7a:23:a7:b8:1f:f2:4b:34:8c:08:24:d2: ce:e9:bc:22:8f:c6:88:ce:54:d0:2f:1e:64:a9:2d:14:13:b2: a8:97:b7:47:9f:96:4c:f0:5a:52:14:24:69:76:01:ac:08:e5: f7:87:b2:72:e7:32:57:bd:b5:d7:e3:9d:80:15:cb:22:de:1b: f3:8e:c2:93:5e:f6:24:ab:d7:3e:9d:55:d6:2b:70:3a:f3:e6: 34:39:f4:33:db:46:98:99:b1:b0:44:57:c0:e6:d1:0c:7f:ca: cd:ed:37:ed:37:57:9a:0f:5f:2c:2a:73:b3:c0:ae:04:c0:79: 81:bc:ed:d1 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUb516RtT2Ta9bdUAeGwZPWAHpLt8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjY1MzYxQ0IzQUNBNDE5N0I0QUNGRDI1N0VDRkVBM0Uw RDIxQzlCNzAeFw0yNTA2MDMxMzQ5MTNaFw0yNjA2MDIxMzU0MTNaMDMxMTAvBgNV BAMTKDI4Mjc5M0JFQjNBNzhFRUFBNDUwNDg2Mzg1QzY1MDFFNUZCNDIzNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCweBTbx0OFO/NHhLKAmi4ZhNxz TAr5TfU65l2MC/tP953mBgNQfqDQaE9cY5GXMoTHZNbhprWjSYTxoG4WvIusKAkd vjTvD5H2eRxwxzaf7dhFtr0DhVzRsR2dwDgSxFgNWnW6r+xnMqkgDYOpNuz0NxvG zRUH4BQmCiU6xgjHARYejwW7KhovgSgTQMNEzfAADx9yEUlhFBJjqDHEPx/HEd83 7qYyl2358ozokkDwUiWeSE7QY6VqWVMlH1ZFINj0/ndq05qm+rM7rHGmG6K2fDTn jNefQANKi0lCAk2937i6LHrhO0aWizPNXq2/OcmulOsXjroVnKxoY6ra7wKhAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUKCeTvrOnjuqkUEhjhcZQHl+0I0gwHwYDVR0j BBgwFoAUZlNhyzrKQZe0rP0lfs/qPg0hybcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vODg0Q2NFVmdjOHZ2Q0JnNENVQTE4MXZheFpwc2NMdEEzdHBCc0JmcjZ3 b3kvMC82NjUzNjFDQjNBQ0E0MTk3QjRBQ0ZEMjU3RUNGRUEzRTBEMjFDOUI3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY2NTM2MUNCM0FDQTQxOTdC NEFDRkQyNTdFQ0ZFQTNFMEQyMUM5QjcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzg4NENjRVZnYzh2dkNCZzRDVUExODF2YXhacHNjTHRBM3RwQnNCZnI2d295LzAv MzIzODMwMzQzYTMxMzYzODM4M2EzODMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk M2UyMDMyMzYzMzMyMzkzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEFoiAMA0GCSqGSIb3DQEBCwUA A4IBAQC+9iXHnWSpN2cTmf++stWNvTwIXU4pLhWEi2zi/wIb0wXZucHujbGewGbc ETD7nUjEewPYzH5oNUxTkoUpTjuFk8MJy/6JjCe768M+ZznVOC392qEAF9+Ma16n SZuV6VZdsawsrIExdBYlQvOvneDOm/vJctdSz+obq2rWIjWLBkigdxt6I6e4H/JL NIwIJNLO6bwij8aIzlTQLx5kqS0UE7Kol7dHn5ZM8FpSFCRpdgGsCOX3h7Jy5zJX vbXX452AFcsi3hvzjsKTXvYkq9c+nVXWK3A68+Y0OfQz20aYmbGwRFfA5tEMf8rN 7TftN1eaD18sKnOzwK4EwHmBvO3R -----END CERTIFICATE-----Generated at Thu Jun 12 09:13:07 2025 by rpki-client