$ rpki-client -vvf rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/323830343a383333303a633030303a3a2f33342d3334203d3e20323732313832.roa File: 323830343a383333303a633030303a3a2f33342d3334203d3e20323732313832.roa (raw, json) Hash identifier: Su4AxEMbeM4yMnT5Sc6hssMZ/Y+O7SWtonpvXVQ7mIA= Subject key identifier: 7F:6D:54:35:5C:6B:54:E0:99:A7:34:1A:34:AA:F1:95:9B:2D:79:21 Certificate issuer: /CN=559FAD9D2467C9C1C11068D2B0E3E2E7CD1C1B3F Certificate serial: 105AEBEE091E44FB88AEF2B1020080B472B6DFAA Authority key identifier: 55:9F:AD:9D:24:67:C9:C1:C1:10:68:D2:B0:E3:E2:E7:CD:1C:1B:3F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/559FAD9D2467C9C1C11068D2B0E3E2E7CD1C1B3F.cer Subject info access: rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/323830343a383333303a633030303a3a2f33342d3334203d3e20323732313832.roa Signing time: Thu 20 Mar 2025 19:36:14 +0000 ROA not before: Thu 20 Mar 2025 19:31:14 +0000 ROA not after: Thu 19 Mar 2026 19:36:14 +0000 asID: 272182 IP address blocks: 2804:8330:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/559FAD9D2467C9C1C11068D2B0E3E2E7CD1C1B3F.crl rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/559FAD9D2467C9C1C11068D2B0E3E2E7CD1C1B3F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/559FAD9D2467C9C1C11068D2B0E3E2E7CD1C1B3F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 18:19:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:5a:eb:ee:09:1e:44:fb:88:ae:f2:b1:02:00:80:b4:72:b6:df:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=559FAD9D2467C9C1C11068D2B0E3E2E7CD1C1B3F Validity Not Before: Mar 20 19:31:14 2025 GMT Not After : Mar 19 19:36:14 2026 GMT Subject: CN=7F6D54355C6B54E099A7341A34AAF1959B2D7921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:56:ce:ba:e6:d9:6d:d6:15:9f:67:73:39:88: 37:ed:83:ef:b0:a6:5b:27:17:5e:c1:b2:35:25:81: d0:d9:18:12:6e:dc:e4:75:f5:68:2e:ea:5b:87:27: 05:e8:87:fc:0e:0d:86:b5:ac:2f:0e:1d:9b:7b:fe: 74:86:1b:cf:cf:1f:b6:0e:ea:b2:48:03:0b:c5:ba: 0f:44:db:74:29:11:9f:df:2e:b2:6f:6f:c4:81:44: fd:e3:33:ba:0b:82:b9:10:d4:74:e6:e7:13:dd:90: fc:bb:80:53:69:18:1d:19:34:72:04:63:ed:cd:1b: ab:fb:df:7a:8e:37:4e:76:5c:01:59:df:26:26:a3: 9a:79:77:d7:a9:ab:aa:f5:fb:67:ba:1c:d1:3b:1d: d4:65:21:df:25:fd:08:e4:8c:de:cd:65:fb:47:24: 56:6b:9e:3a:db:74:bd:c0:a7:88:2b:d8:48:3b:6d: 7f:65:c5:87:ab:69:53:42:73:2c:b2:4c:7c:cd:4c: d8:69:7d:7b:90:07:51:0a:af:4c:71:3d:dd:9f:8e: 62:00:02:e3:c1:5b:7a:2d:1d:cc:37:7f:c6:80:db: 5e:b9:6c:52:ee:ed:82:b2:8c:18:2f:9b:41:8a:75: 52:c5:92:9c:66:38:a8:e6:90:36:4e:e1:b2:63:01: 7e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:6D:54:35:5C:6B:54:E0:99:A7:34:1A:34:AA:F1:95:9B:2D:79:21 X509v3 Authority Key Identifier: keyid:55:9F:AD:9D:24:67:C9:C1:C1:10:68:D2:B0:E3:E2:E7:CD:1C:1B:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/559FAD9D2467C9C1C11068D2B0E3E2E7CD1C1B3F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/559FAD9D2467C9C1C11068D2B0E3E2E7CD1C1B3F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/323830343a383333303a633030303a3a2f33342d3334203d3e20323732313832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8330:c000::/34 Signature Algorithm: sha256WithRSAEncryption a8:0c:f2:68:8f:8a:67:62:ac:95:fd:b7:d0:3b:7d:90:31:f7: f3:ee:5d:73:c8:58:53:2b:a7:d0:d7:98:02:72:6e:54:77:ad: 02:c7:d1:0d:92:3b:59:29:5d:5d:8b:cc:ef:82:64:c0:cd:6d: 11:5d:69:24:35:a1:59:11:e3:02:a4:5f:82:c1:92:70:f9:dc: 56:44:68:72:05:d1:e8:86:f0:04:8d:0e:27:01:a5:92:7c:29: 66:66:f2:4c:86:74:5e:ee:bd:88:11:cb:1c:8a:ba:05:86:4d: 9b:41:e9:af:1a:34:d4:19:98:4c:b4:39:36:a2:2b:55:fe:aa: 00:7a:f3:3f:b4:0d:a8:b4:bc:9d:fb:d1:48:ba:fc:16:9d:27: b1:cb:3a:e7:ac:51:33:0d:ed:a7:38:64:12:1c:4f:f0:1e:c3: e6:3c:de:3e:d6:f5:d2:c9:85:33:b2:39:78:81:67:bb:37:98: cb:49:d1:85:9e:a4:48:06:50:ef:42:24:e2:b1:6a:26:37:c5: ee:b5:0c:09:c6:23:c8:2d:17:5a:e6:88:1c:2c:6f:b2:08:47: ac:d9:cb:38:67:ff:5e:ee:43:1a:f1:31:f5:f2:b8:19:28:76: 7a:d9:2a:32:ea:77:2d:c1:b4:5c:94:df:b6:d0:47:f0:bc:4a: e0:08:b0:21 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUEFrr7gkeRPuIrvKxAgCAtHK236owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU5RkFEOUQyNDY3QzlDMUMxMTA2OEQyQjBFM0UyRTdD RDFDMUIzRjAeFw0yNTAzMjAxOTMxMTRaFw0yNjAzMTkxOTM2MTRaMDMxMTAvBgNV BAMTKDdGNkQ1NDM1NUM2QjU0RTA5OUE3MzQxQTM0QUFGMTk1OUIyRDc5MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Vs665tlt1hWfZ3M5iDftg++w plsnF17BsjUlgdDZGBJu3OR19Wgu6luHJwXoh/wODYa1rC8OHZt7/nSGG8/PH7YO 6rJIAwvFug9E23QpEZ/fLrJvb8SBRP3jM7oLgrkQ1HTm5xPdkPy7gFNpGB0ZNHIE Y+3NG6v733qON052XAFZ3yYmo5p5d9epq6r1+2e6HNE7HdRlId8l/QjkjN7NZftH JFZrnjrbdL3Ap4gr2Eg7bX9lxYeraVNCcyyyTHzNTNhpfXuQB1EKr0xxPd2fjmIA AuPBW3otHcw3f8aA2165bFLu7YKyjBgvm0GKdVLFkpxmOKjmkDZO4bJjAX5vAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUf21UNVxrVOCZpzQaNKrxlZsteSEwHwYDVR0j BBgwFoAUVZ+tnSRnycHBEGjSsOPi580cGz8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOFR6ZEdLVVNaOXZCdktYdko1MWd4VnI5Y1dQR01BUEtYRjNIYWJvY2tG UGcvMC81NTlGQUQ5RDI0NjdDOUMxQzExMDY4RDJCMEUzRTJFN0NEMUMxQjNGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU1OUZBRDlEMjQ2N0M5QzFD MTEwNjhEMkIwRTNFMkU3Q0QxQzFCM0YuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzhUemRHS1VTWjl2QnZLWHZKNTFneFZyOWNXUEdNQVBLWEYzSGFib2NrRlBnLzAv MzIzODMwMzQzYTM4MzMzMzMwM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzczMjMxMzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEgzDAMA0GCSqGSIb3DQEBCwUA A4IBAQCoDPJoj4pnYqyV/bfQO32QMffz7l1zyFhTK6fQ15gCcm5Ud60Cx9ENkjtZ KV1di8zvgmTAzW0RXWkkNaFZEeMCpF+CwZJw+dxWRGhyBdHohvAEjQ4nAaWSfClm ZvJMhnRe7r2IEcsciroFhk2bQemvGjTUGZhMtDk2oitV/qoAevM/tA2otLyd+9FI uvwWnSexyzrnrFEzDe2nOGQSHE/wHsPmPN4+1vXSyYUzsjl4gWe7N5jLSdGFnqRI BlDvQiTisWomN8XutQwJxiPILRda5ogcLG+yCEes2cs4Z/9e7kMa8TH18rgZKHZ6 2Soy6nctwbRclN+20EfwvErgCLAh -----END CERTIFICATE-----Generated at Tue Apr 8 21:23:15 2025 by rpki-client