$ rpki-client -vvf rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/323830343a383333303a343030303a3a2f33342d3334203d3e20323732313832.roa File: 323830343a383333303a343030303a3a2f33342d3334203d3e20323732313832.roa (raw, json) Hash identifier: h0JXkKE8j4AQh8emxKY+9vqDSG46HFbjvIreYcrZjyM= Subject key identifier: 07:D5:EB:E9:29:8B:97:0B:C4:75:C3:78:55:FB:7E:6C:76:73:17:C9 Certificate issuer: /CN=559FAD9D2467C9C1C11068D2B0E3E2E7CD1C1B3F Certificate serial: 408CDDFC6F4EF85488B007F85CBCF566055401B9 Authority key identifier: 55:9F:AD:9D:24:67:C9:C1:C1:10:68:D2:B0:E3:E2:E7:CD:1C:1B:3F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/559FAD9D2467C9C1C11068D2B0E3E2E7CD1C1B3F.cer Subject info access: rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/323830343a383333303a343030303a3a2f33342d3334203d3e20323732313832.roa Signing time: Thu 20 Mar 2025 19:36:13 +0000 ROA not before: Thu 20 Mar 2025 19:31:13 +0000 ROA not after: Thu 19 Mar 2026 19:36:13 +0000 asID: 272182 IP address blocks: 2804:8330:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/559FAD9D2467C9C1C11068D2B0E3E2E7CD1C1B3F.crl rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/559FAD9D2467C9C1C11068D2B0E3E2E7CD1C1B3F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/559FAD9D2467C9C1C11068D2B0E3E2E7CD1C1B3F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 18:19:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:8c:dd:fc:6f:4e:f8:54:88:b0:07:f8:5c:bc:f5:66:05:54:01:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=559FAD9D2467C9C1C11068D2B0E3E2E7CD1C1B3F Validity Not Before: Mar 20 19:31:13 2025 GMT Not After : Mar 19 19:36:13 2026 GMT Subject: CN=07D5EBE9298B970BC475C37855FB7E6C767317C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:30:4b:fd:ee:69:73:fa:d0:fb:dd:5b:5a:78: 09:a0:3d:9b:13:51:ff:33:f6:ef:17:25:da:cf:83: 47:f8:81:ec:e0:a8:92:01:ab:f0:66:11:96:49:08: 10:d7:53:f1:6e:22:b5:25:85:28:7f:96:83:c9:d2: 6a:00:95:8f:b5:2a:7c:59:15:dd:df:7b:d7:41:f7: b3:e9:4e:4f:3d:1a:9e:10:25:1a:19:c4:67:6d:fe: cd:a1:b5:98:e1:31:4a:0a:35:bc:9b:12:ae:37:c9: f0:1a:f9:d9:33:2b:d8:f1:49:ff:83:7f:ea:bf:8e: 3e:ad:e6:89:da:75:3d:30:76:7b:65:54:65:38:c7: 55:35:36:07:34:7d:42:d5:fd:fe:fe:af:43:a9:6c: 83:6f:c4:00:5c:32:c7:4d:6d:38:58:43:f6:4d:b2: d3:7c:be:57:2d:b6:a0:14:32:2c:b8:00:87:12:8a: ca:5b:b3:db:98:d3:20:41:48:bb:28:3f:2f:32:11: e8:3d:b2:39:e0:7b:2f:6a:0a:31:d6:48:01:92:0f: 24:3a:93:a1:8b:3b:b7:bf:94:51:bb:4f:04:f6:e8: b7:89:b6:38:9d:43:05:16:dc:c5:57:77:7e:f0:b8: d7:23:7b:c5:7f:0a:73:25:a5:1c:c7:56:cf:97:4e: 03:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:D5:EB:E9:29:8B:97:0B:C4:75:C3:78:55:FB:7E:6C:76:73:17:C9 X509v3 Authority Key Identifier: keyid:55:9F:AD:9D:24:67:C9:C1:C1:10:68:D2:B0:E3:E2:E7:CD:1C:1B:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/559FAD9D2467C9C1C11068D2B0E3E2E7CD1C1B3F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/559FAD9D2467C9C1C11068D2B0E3E2E7CD1C1B3F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/323830343a383333303a343030303a3a2f33342d3334203d3e20323732313832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8330:4000::/34 Signature Algorithm: sha256WithRSAEncryption a6:33:9a:d9:2f:a3:08:ce:f9:38:ca:df:03:ac:7a:c6:4c:9e: c2:5c:a9:9a:3b:d7:87:a1:d7:be:40:a6:17:90:bc:76:80:60: 7b:98:09:8d:d4:48:a0:53:63:86:c0:d5:1d:20:e4:ba:72:89: f8:38:fb:44:25:ea:10:08:96:93:06:38:e3:47:7a:fd:15:41: ed:c8:a9:d2:f9:4a:65:66:66:ff:53:b4:6b:09:3f:b0:87:9c: 2b:76:aa:a6:47:88:a8:52:5a:ea:51:4f:26:50:af:cf:b5:18: 73:89:c9:06:07:a5:f7:90:9e:29:c0:df:ad:95:78:5a:82:84: e0:5f:8d:5c:0a:0c:28:9d:63:d4:b5:03:ec:8c:55:9d:51:11: bf:03:d2:95:9a:85:71:d1:a9:66:96:c0:56:d4:0d:2a:6f:6b: 1b:20:00:6b:a6:84:fa:a3:ac:36:22:95:f2:15:c6:ad:86:1e: 9c:79:fc:32:65:80:7a:da:5c:2d:10:7a:15:56:4f:51:17:e0: 61:52:57:03:c3:75:a2:e5:82:ac:ce:70:6b:f9:ba:06:13:83: e1:30:9d:98:26:49:32:58:71:ed:43:41:07:dc:2c:93:b7:fd: c1:9a:82:87:c5:9a:62:35:34:3b:8c:02:30:9e:2f:cc:6c:45: f1:cb:76:58 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUQIzd/G9O+FSIsAf4XLz1ZgVUAbkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU5RkFEOUQyNDY3QzlDMUMxMTA2OEQyQjBFM0UyRTdD RDFDMUIzRjAeFw0yNTAzMjAxOTMxMTNaFw0yNjAzMTkxOTM2MTNaMDMxMTAvBgNV BAMTKDA3RDVFQkU5Mjk4Qjk3MEJDNDc1QzM3ODU1RkI3RTZDNzY3MzE3QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiMEv97mlz+tD73VtaeAmgPZsT Uf8z9u8XJdrPg0f4gezgqJIBq/BmEZZJCBDXU/FuIrUlhSh/loPJ0moAlY+1KnxZ Fd3fe9dB97PpTk89Gp4QJRoZxGdt/s2htZjhMUoKNbybEq43yfAa+dkzK9jxSf+D f+q/jj6t5onadT0wdntlVGU4x1U1Ngc0fULV/f7+r0OpbINvxABcMsdNbThYQ/ZN stN8vlcttqAUMiy4AIcSispbs9uY0yBBSLsoPy8yEeg9sjngey9qCjHWSAGSDyQ6 k6GLO7e/lFG7TwT26LeJtjidQwUW3MVXd37wuNcje8V/CnMlpRzHVs+XTgMPAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUB9Xr6SmLlwvEdcN4Vft+bHZzF8kwHwYDVR0j BBgwFoAUVZ+tnSRnycHBEGjSsOPi580cGz8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOFR6ZEdLVVNaOXZCdktYdko1MWd4VnI5Y1dQR01BUEtYRjNIYWJvY2tG UGcvMC81NTlGQUQ5RDI0NjdDOUMxQzExMDY4RDJCMEUzRTJFN0NEMUMxQjNGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU1OUZBRDlEMjQ2N0M5QzFD MTEwNjhEMkIwRTNFMkU3Q0QxQzFCM0YuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzhUemRHS1VTWjl2QnZLWHZKNTFneFZyOWNXUEdNQVBLWEYzSGFib2NrRlBnLzAv MzIzODMwMzQzYTM4MzMzMzMwM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzczMjMxMzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEgzBAMA0GCSqGSIb3DQEBCwUA A4IBAQCmM5rZL6MIzvk4yt8DrHrGTJ7CXKmaO9eHode+QKYXkLx2gGB7mAmN1Eig U2OGwNUdIOS6con4OPtEJeoQCJaTBjjjR3r9FUHtyKnS+UplZmb/U7RrCT+wh5wr dqqmR4ioUlrqUU8mUK/PtRhzickGB6X3kJ4pwN+tlXhagoTgX41cCgwonWPUtQPs jFWdURG/A9KVmoVx0almlsBW1A0qb2sbIABrpoT6o6w2IpXyFcathh6cefwyZYB6 2lwtEHoVVk9RF+BhUlcDw3Wi5YKsznBr+boGE4PhMJ2YJkkyWHHtQ0EH3CyTt/3B moKHxZpiNTQ7jAIwni/MbEXxy3ZY -----END CERTIFICATE-----Generated at Tue Apr 8 21:21:43 2025 by rpki-client