$ rpki-client -vvf rpki-repo.registro.br/repo/8wtiZocXLjczVn1159gW8RDXXMiNh5CKwzYu4eoKWBb4/0/323830343a323266303a3a2f33322d3438203d3e20323634313333.roa File: 323830343a323266303a3a2f33322d3438203d3e20323634313333.roa (raw, json) Hash identifier: WFcjZWS38ho0VBFG8ZOUJpj+GVFEtmFb4WNzp9QLcJ0= Subject key identifier: BA:7C:E2:4F:20:81:9A:42:30:B0:D6:78:FF:D7:E6:09:1F:3C:33:99 Certificate issuer: /CN=0689B7A718B9AB008E560C380D8765FF16F902E0 Certificate serial: 7DF93E80694B16AB750CED2E99AC7CB356620318 Authority key identifier: 06:89:B7:A7:18:B9:AB:00:8E:56:0C:38:0D:87:65:FF:16:F9:02:E0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0689B7A718B9AB008E560C380D8765FF16F902E0.cer Subject info access: rsync://rpki-repo.registro.br/repo/8wtiZocXLjczVn1159gW8RDXXMiNh5CKwzYu4eoKWBb4/0/323830343a323266303a3a2f33322d3438203d3e20323634313333.roa Signing time: Fri 28 Mar 2025 12:43:54 +0000 ROA not before: Fri 28 Mar 2025 12:38:54 +0000 ROA not after: Fri 27 Mar 2026 12:43:54 +0000 asID: 264133 IP address blocks: 2804:22f0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8wtiZocXLjczVn1159gW8RDXXMiNh5CKwzYu4eoKWBb4/0/0689B7A718B9AB008E560C380D8765FF16F902E0.crl rsync://rpki-repo.registro.br/repo/8wtiZocXLjczVn1159gW8RDXXMiNh5CKwzYu4eoKWBb4/0/0689B7A718B9AB008E560C380D8765FF16F902E0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0689B7A718B9AB008E560C380D8765FF16F902E0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 12 Apr 2025 07:10:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:f9:3e:80:69:4b:16:ab:75:0c:ed:2e:99:ac:7c:b3:56:62:03:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0689B7A718B9AB008E560C380D8765FF16F902E0 Validity Not Before: Mar 28 12:38:54 2025 GMT Not After : Mar 27 12:43:54 2026 GMT Subject: CN=BA7CE24F20819A4230B0D678FFD7E6091F3C3399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:83:19:3e:39:e4:86:c2:62:e5:86:38:a4:96: 5d:36:50:38:12:bb:8a:9b:12:53:32:27:17:ab:77: 3b:2a:76:10:37:7f:5f:c7:d3:70:22:50:ff:a2:01: e6:56:60:53:f6:a1:2b:1a:78:65:88:5d:f9:bd:73: 7a:e7:c9:ed:10:b7:3e:02:e1:0e:40:1f:c7:a2:73: 6c:b9:5d:e7:2b:a9:e4:87:14:14:94:08:f0:7f:62: 50:43:71:16:9a:d8:fa:e3:96:da:dc:36:9a:c3:97: 08:4f:2b:0a:ff:2a:7d:fa:35:33:2c:ba:41:91:e7: ed:a7:37:5a:03:16:e1:0e:ce:c9:7d:5b:6b:13:b4: f0:16:f5:6f:7e:52:00:e7:6a:cd:e6:b1:5d:77:3a: 6b:d3:77:ae:9e:43:f2:83:59:9d:3c:86:34:98:4f: 40:fe:30:c4:ff:52:8b:7f:4c:0e:a9:af:56:e5:2b: 91:6e:5f:13:db:cd:d1:82:9e:6d:8a:79:d2:8c:1c: 32:9a:ef:7a:6d:e9:49:90:2f:26:25:d5:27:83:bf: c9:cf:fe:f7:1b:15:9d:2c:96:74:c1:96:a2:52:0d: 0f:b9:e5:53:69:0d:35:66:30:43:e6:dc:e8:42:f3: 83:8c:6d:a7:5d:02:1d:d4:44:6b:58:f2:55:36:fb: dd:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:7C:E2:4F:20:81:9A:42:30:B0:D6:78:FF:D7:E6:09:1F:3C:33:99 X509v3 Authority Key Identifier: keyid:06:89:B7:A7:18:B9:AB:00:8E:56:0C:38:0D:87:65:FF:16:F9:02:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8wtiZocXLjczVn1159gW8RDXXMiNh5CKwzYu4eoKWBb4/0/0689B7A718B9AB008E560C380D8765FF16F902E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0689B7A718B9AB008E560C380D8765FF16F902E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wtiZocXLjczVn1159gW8RDXXMiNh5CKwzYu4eoKWBb4/0/323830343a323266303a3a2f33322d3438203d3e20323634313333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:22f0::/32 Signature Algorithm: sha256WithRSAEncryption 3a:30:0b:f3:38:a1:0b:66:ac:e6:ea:b3:8e:bd:35:a4:62:b9: 68:51:3f:f5:f7:c9:c4:96:70:7c:44:0a:6d:8b:97:df:05:62: 1f:6f:08:59:df:ad:b7:f9:00:e6:6e:fd:3c:64:be:d4:0a:14: c5:7b:cd:f7:7f:3a:f7:d5:54:c4:c5:af:01:54:d6:36:9f:22: 38:f1:4e:df:45:5d:e2:52:4b:cd:09:60:90:19:dd:68:75:66: 44:a3:ca:ff:8b:a1:3a:99:54:b7:cc:50:ee:61:25:b7:34:a4: a1:f9:4e:2e:aa:c4:52:52:76:14:21:e0:15:58:7c:fd:b2:9e: bc:86:4a:7f:af:75:09:fa:63:02:8f:57:69:bc:2d:4a:db:0c: 0a:75:54:46:26:e4:36:92:62:4f:b8:84:7b:dc:c9:cf:52:a5: ff:bd:30:9c:e9:83:32:ce:33:63:55:a0:1d:35:58:74:35:9f: 04:9e:19:fa:82:b4:ba:6e:d2:50:df:2e:c3:58:8d:30:41:6b: cf:17:6d:e1:c3:15:8b:02:88:21:de:76:77:62:42:50:ac:25: 8c:b5:2c:48:f9:48:9c:26:ae:de:7a:9a:f9:3f:ea:56:85:3c: 0e:93:ba:2e:d3:43:fd:cc:b5:9a:d4:75:8d:bb:52:2e:e8:6f: 1b:cb:ca:5a -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUffk+gGlLFqt1DO0umax8s1ZiAxgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY4OUI3QTcxOEI5QUIwMDhFNTYwQzM4MEQ4NzY1RkYx NkY5MDJFMDAeFw0yNTAzMjgxMjM4NTRaFw0yNjAzMjcxMjQzNTRaMDMxMTAvBgNV BAMTKEJBN0NFMjRGMjA4MTlBNDIzMEIwRDY3OEZGRDdFNjA5MUYzQzMzOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmgxk+OeSGwmLlhjikll02UDgS u4qbElMyJxerdzsqdhA3f1/H03AiUP+iAeZWYFP2oSsaeGWIXfm9c3rnye0Qtz4C 4Q5AH8eic2y5XecrqeSHFBSUCPB/YlBDcRaa2PrjltrcNprDlwhPKwr/Kn36NTMs ukGR5+2nN1oDFuEOzsl9W2sTtPAW9W9+UgDnas3msV13OmvTd66eQ/KDWZ08hjSY T0D+MMT/Uot/TA6pr1blK5FuXxPbzdGCnm2KedKMHDKa73pt6UmQLyYl1SeDv8nP /vcbFZ0slnTBlqJSDQ+55VNpDTVmMEPm3OhC84OMbaddAh3URGtY8lU2+90xAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUunziTyCBmkIwsNZ4/9fmCR88M5kwHwYDVR0j BBgwFoAUBom3pxi5qwCOVgw4DYdl/xb5AuAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOHd0aVpvY1hMamN6Vm4xMTU5Z1c4UkRYWE1pTmg1Q0t3ell1NGVvS1dC YjQvMC8wNjg5QjdBNzE4QjlBQjAwOEU1NjBDMzgwRDg3NjVGRjE2RjkwMkUwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2ODlCN0E3MThCOUFCMDA4 RTU2MEMzODBEODc2NUZGMTZGOTAyRTAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzh3dGlab2NYTGpjelZuMTE1OWdXOFJEWFhNaU5oNUNLd3pZdTRlb0tXQmI0LzAv MzIzODMwMzQzYTMyMzI2NjMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM0 MzEzMzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKAQi8DANBgkqhkiG9w0BAQsFAAOCAQEAOjAL8zih C2as5uqzjr01pGK5aFE/9ffJxJZwfEQKbYuX3wViH28IWd+tt/kA5m79PGS+1AoU xXvN938699VUxMWvAVTWNp8iOPFO30Vd4lJLzQlgkBndaHVmRKPK/4uhOplUt8xQ 7mEltzSkoflOLqrEUlJ2FCHgFVh8/bKevIZKf691CfpjAo9XabwtStsMCnVURibk NpJiT7iEe9zJz1Kl/70wnOmDMs4zY1WgHTVYdDWfBJ4Z+oK0um7SUN8uw1iNMEFr zxdt4cMViwKIId52d2JCUKwljLUsSPlInCau3nqa+T/qVoU8DpO6LtND/cy1mtR1 jbtSLuhvG8vKWg== -----END CERTIFICATE-----Generated at Fri Apr 11 09:25:10 2025 by rpki-client