$ rpki-client -vvf rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/323830343a363630343a383130303a3a2f34302d3430203d3e20323639353238.roa File: 323830343a363630343a383130303a3a2f34302d3430203d3e20323639353238.roa (raw, json) Hash identifier: /sZ77TEiaBtcjHNTHWDyU/rdxKv+XLyeYm8ljzt5rMQ= Subject key identifier: A0:02:8E:DF:EC:27:A9:49:3F:DA:95:CD:0F:02:E4:E7:BA:F4:5D:3E Certificate issuer: /CN=4CFDB632C8A3E9C823323B2E5907A9238E6B8554 Certificate serial: 3A44207C74601D60CF384FD7917F40009F4BA5EF Authority key identifier: 4C:FD:B6:32:C8:A3:E9:C8:23:32:3B:2E:59:07:A9:23:8E:6B:85:54 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.cer Subject info access: rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/323830343a363630343a383130303a3a2f34302d3430203d3e20323639353238.roa Signing time: Wed 26 Feb 2025 00:18:24 +0000 ROA not before: Wed 26 Feb 2025 00:13:24 +0000 ROA not after: Wed 25 Feb 2026 00:18:24 +0000 asID: 269528 IP address blocks: 2804:6604:8100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.crl rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 20 Apr 2025 02:32:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:44:20:7c:74:60:1d:60:cf:38:4f:d7:91:7f:40:00:9f:4b:a5:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CFDB632C8A3E9C823323B2E5907A9238E6B8554 Validity Not Before: Feb 26 00:13:24 2025 GMT Not After : Feb 25 00:18:24 2026 GMT Subject: CN=A0028EDFEC27A9493FDA95CD0F02E4E7BAF45D3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c2:89:ce:da:1a:0f:0a:4d:7f:b8:44:4d:78: 30:fa:d6:d5:ac:65:23:fa:c1:44:7b:d8:d2:25:d8: 6e:55:62:56:7e:36:47:84:69:ea:9b:78:01:e6:f4: 34:43:52:77:cc:a3:f9:3e:84:a1:89:6d:a5:c8:02: a5:3c:cb:63:25:a2:54:b9:21:e4:70:30:1b:45:11: d5:1f:f5:1e:3b:99:d7:b1:b1:af:df:75:d3:d1:c9: ab:8b:ac:50:4d:05:ba:07:36:79:d0:88:56:66:32: d4:e5:64:71:1d:c0:0b:4a:c7:86:7b:92:0a:1a:f6: 1b:b8:af:a2:f2:46:7f:49:29:45:5f:cb:f1:0b:28: 31:39:e3:82:c7:8a:c4:2c:21:44:17:7d:0f:50:d5: b4:16:94:26:00:fb:f3:2d:9c:f0:11:2a:0e:80:08: e1:8b:5b:da:b5:2c:48:40:32:92:20:72:c0:fb:aa: 04:45:7a:0c:76:e5:ef:b9:20:d8:8b:ad:cd:97:08: 10:7a:a0:ac:94:25:12:a5:8c:e6:84:a9:03:76:c4: 75:61:de:30:90:22:1a:f7:50:11:6d:31:88:01:90: 65:1b:33:7d:4a:bb:c1:e1:d9:e1:8f:7f:87:80:e5: ad:ee:c4:5f:f2:9a:dd:e5:cd:9b:cd:cf:b3:56:72: df:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:02:8E:DF:EC:27:A9:49:3F:DA:95:CD:0F:02:E4:E7:BA:F4:5D:3E X509v3 Authority Key Identifier: keyid:4C:FD:B6:32:C8:A3:E9:C8:23:32:3B:2E:59:07:A9:23:8E:6B:85:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/323830343a363630343a383130303a3a2f34302d3430203d3e20323639353238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:6604:8100::/40 Signature Algorithm: sha256WithRSAEncryption 7a:66:69:7e:14:f7:44:93:2f:b6:fa:5a:0e:d6:3e:7a:90:f4: 35:d7:a7:75:7e:66:46:f2:28:cd:42:a9:ed:2f:ad:ef:58:ce: 02:26:f4:f5:81:08:ef:a0:b6:61:cd:bf:34:02:6d:8e:66:e8: d0:63:35:f3:f4:59:4c:77:57:7f:c3:28:03:d9:76:28:92:01: b4:ce:04:54:e1:ed:ef:56:d2:1b:4f:a9:af:80:55:7d:38:fc: 91:3f:ed:e6:47:3b:35:f0:07:93:6f:e1:58:5b:09:64:30:aa: 8b:33:bc:94:93:7e:89:c1:38:35:69:29:61:d6:61:a9:60:05: 83:d6:e2:a7:f5:07:68:8a:28:87:32:ff:7b:69:50:97:02:50: f0:72:d5:8f:7d:56:20:39:0e:b3:a9:55:a7:06:4d:e1:76:83: ac:1b:11:9a:91:26:d0:45:bb:74:7f:a1:c2:b6:d6:9e:f2:fd: b9:f5:55:e2:30:fd:06:14:98:aa:39:40:de:b5:2d:ff:95:3a: 27:dc:46:f3:b5:19:84:8f:5a:96:ad:51:3a:f4:d7:b6:17:21: 4a:63:ea:53:73:cb:6d:a2:e7:b3:dd:ba:46:c4:46:45:47:4e: 6c:1b:8c:be:f3:8b:d3:9b:35:5d:99:76:e0:4f:bd:9c:24:da: 7a:f7:75:86 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUOkQgfHRgHWDPOE/XkX9AAJ9Lpe8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENGREI2MzJDOEEzRTlDODIzMzIzQjJFNTkwN0E5MjM4 RTZCODU1NDAeFw0yNTAyMjYwMDEzMjRaFw0yNjAyMjUwMDE4MjRaMDMxMTAvBgNV BAMTKEEwMDI4RURGRUMyN0E5NDkzRkRBOTVDRDBGMDJFNEU3QkFGNDVEM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbwonO2hoPCk1/uERNeDD61tWs ZSP6wUR72NIl2G5VYlZ+NkeEaeqbeAHm9DRDUnfMo/k+hKGJbaXIAqU8y2MlolS5 IeRwMBtFEdUf9R47mdexsa/fddPRyauLrFBNBboHNnnQiFZmMtTlZHEdwAtKx4Z7 kgoa9hu4r6LyRn9JKUVfy/ELKDE544LHisQsIUQXfQ9Q1bQWlCYA+/MtnPARKg6A COGLW9q1LEhAMpIgcsD7qgRFegx25e+5INiLrc2XCBB6oKyUJRKljOaEqQN2xHVh 3jCQIhr3UBFtMYgBkGUbM31Ku8Hh2eGPf4eA5a3uxF/ymt3lzZvNz7NWct8nAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUoAKO3+wnqUk/2pXNDwLk57r0XT4wHwYDVR0j BBgwFoAUTP22Msij6cgjMjsuWQepI45rhVQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOEQ2enM2ZXZqRVRid0JZc3loSEZlNlJLcEhjTVdFdzhaZzJHalJ3amFT VzIvMC80Q0ZEQjYzMkM4QTNFOUM4MjMzMjNCMkU1OTA3QTkyMzhFNkI4NTU0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDRkRCNjMyQzhBM0U5Qzgy MzMyM0IyRTU5MDdBOTIzOEU2Qjg1NTQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzhENnpzNmV2akVUYndCWXN5aEhGZTZSS3BIY01XRXc4WmcyR2pSd2phU1cyLzAv MzIzODMwMzQzYTM2MzYzMDM0M2EzODMxMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk M2UyMDMyMzYzOTM1MzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEZgSBMA0GCSqGSIb3DQEBCwUA A4IBAQB6Zml+FPdEky+2+loO1j56kPQ116d1fmZG8ijNQqntL63vWM4CJvT1gQjv oLZhzb80Am2OZujQYzXz9FlMd1d/wygD2XYokgG0zgRU4e3vVtIbT6mvgFV9OPyR P+3mRzs18AeTb+FYWwlkMKqLM7yUk36JwTg1aSlh1mGpYAWD1uKn9QdoiiiHMv97 aVCXAlDwctWPfVYgOQ6zqVWnBk3hdoOsGxGakSbQRbt0f6HCttae8v259VXiMP0G FJiqOUDetS3/lTon3EbztRmEj1qWrVE69Ne2FyFKY+pTc8ttouez3bpGxEZFR05s G4y+84vTmzVdmXbgT72cJNp693WG -----END CERTIFICATE-----Generated at Sat Apr 19 07:59:07 2025 by rpki-client