$ rpki-client -vvf rpki-repo.registro.br/repo/8xMA26XVpRpguUSQWiUwam12enNn5A4nMALVAfj2PBBy/0/323830343a356165343a666631303a3a2f34342d3434203d3e20323638383033.roa File: 323830343a356165343a666631303a3a2f34342d3434203d3e20323638383033.roa (raw, json) Hash identifier: hfiphG3F+FKme9b7YKF856PRaojw+FK44VpaNeeUD3Q= Subject key identifier: 46:FB:BB:99:37:C9:64:72:60:B7:F7:E8:44:1A:F3:66:17:E1:91:07 Certificate issuer: /CN=2FC7BA5EAF8832D3E42736C641F0607E50EC6D2D Certificate serial: 3A08CD32D3A593ED7D73EB6F988251548207F707 Authority key identifier: 2F:C7:BA:5E:AF:88:32:D3:E4:27:36:C6:41:F0:60:7E:50:EC:6D:2D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FC7BA5EAF8832D3E42736C641F0607E50EC6D2D.cer Subject info access: rsync://rpki-repo.registro.br/repo/8xMA26XVpRpguUSQWiUwam12enNn5A4nMALVAfj2PBBy/0/323830343a356165343a666631303a3a2f34342d3434203d3e20323638383033.roa Signing time: Tue 18 Feb 2025 16:35:58 +0000 ROA not before: Tue 18 Feb 2025 16:30:58 +0000 ROA not after: Tue 17 Feb 2026 16:35:58 +0000 asID: 268803 IP address blocks: 2804:5ae4:ff10::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8xMA26XVpRpguUSQWiUwam12enNn5A4nMALVAfj2PBBy/0/2FC7BA5EAF8832D3E42736C641F0607E50EC6D2D.crl rsync://rpki-repo.registro.br/repo/8xMA26XVpRpguUSQWiUwam12enNn5A4nMALVAfj2PBBy/0/2FC7BA5EAF8832D3E42736C641F0607E50EC6D2D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FC7BA5EAF8832D3E42736C641F0607E50EC6D2D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Apr 2025 23:56:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:08:cd:32:d3:a5:93:ed:7d:73:eb:6f:98:82:51:54:82:07:f7:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FC7BA5EAF8832D3E42736C641F0607E50EC6D2D Validity Not Before: Feb 18 16:30:58 2025 GMT Not After : Feb 17 16:35:58 2026 GMT Subject: CN=46FBBB9937C9647260B7F7E8441AF36617E19107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6d:2f:8b:e1:8d:72:0b:79:c1:38:53:d9:c5: c2:a0:6b:60:4e:46:18:0c:8c:24:09:ed:c8:4f:48: 0a:3c:f0:77:23:2c:25:ec:05:23:39:c5:d3:9d:04: 57:46:0f:ce:56:30:dc:3f:2b:7d:d0:71:ad:19:c7: 6b:d1:da:32:28:1d:f4:9a:90:e8:64:79:af:20:f4: a8:76:dd:b6:d0:63:30:20:bd:5c:3e:69:8c:f8:54: 63:a7:29:42:aa:aa:e4:e8:99:5b:11:96:c4:a3:a0: b9:99:76:db:f5:b9:96:c9:30:7d:b2:91:b4:65:70: c3:b3:49:38:e3:84:c5:29:39:d0:d8:53:c5:38:4f: df:80:35:7d:79:b5:de:39:5e:46:35:4f:fc:9d:37: 79:dc:e7:e1:f5:75:8c:5b:5c:9a:a5:77:11:8b:33: 6f:29:da:50:79:f0:80:27:db:f1:35:bb:98:e0:6b: ed:a8:7a:81:5b:bd:86:ca:33:7e:8e:12:0e:71:3a: e4:0b:7d:3d:c6:56:fd:80:c8:19:21:f5:f9:bb:d2: 19:80:3f:52:b8:bf:db:22:ad:f7:51:d6:63:b3:0c: 30:94:e2:6d:41:93:86:73:c8:2d:60:ca:fe:1e:9f: cc:ef:f1:25:07:b6:ac:43:78:bf:df:1d:03:89:26: c2:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:FB:BB:99:37:C9:64:72:60:B7:F7:E8:44:1A:F3:66:17:E1:91:07 X509v3 Authority Key Identifier: keyid:2F:C7:BA:5E:AF:88:32:D3:E4:27:36:C6:41:F0:60:7E:50:EC:6D:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8xMA26XVpRpguUSQWiUwam12enNn5A4nMALVAfj2PBBy/0/2FC7BA5EAF8832D3E42736C641F0607E50EC6D2D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FC7BA5EAF8832D3E42736C641F0607E50EC6D2D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8xMA26XVpRpguUSQWiUwam12enNn5A4nMALVAfj2PBBy/0/323830343a356165343a666631303a3a2f34342d3434203d3e20323638383033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:5ae4:ff10::/44 Signature Algorithm: sha256WithRSAEncryption 1f:ee:fc:31:42:4d:1a:c9:b2:bd:20:c1:a3:73:1d:ea:f9:e8: aa:50:70:cc:bb:10:0f:03:b4:ea:0a:21:93:3e:c2:88:dd:f6: 36:5f:e2:39:19:a5:f5:bd:d2:7a:48:f2:63:f7:a3:56:37:a7: 0f:50:3a:ef:f4:68:3b:70:43:3f:83:69:28:91:b2:88:c3:9b: 32:6d:7e:14:f7:e3:ad:76:94:0a:f8:3e:44:79:da:89:23:0b: cf:48:ba:a8:d7:21:22:c8:94:29:3c:34:2b:10:54:e7:64:3e: c2:7b:e9:10:ca:b6:12:f5:38:a0:34:17:0d:17:18:1c:f9:96: f4:76:33:a1:3a:d2:88:f2:41:b6:f0:74:48:86:2e:76:a4:06: ea:37:17:5f:53:ba:82:fd:b9:32:72:3a:bf:12:a4:55:42:55: 3d:26:e1:a1:6b:14:39:1d:e4:28:17:04:17:34:76:3d:2a:b5: fe:70:33:d0:9b:d3:9c:17:de:c9:e4:91:88:74:ab:06:46:49: b4:d6:60:e8:7f:0d:c0:20:1a:d1:25:60:1d:7c:bd:95:aa:a0: a4:03:59:31:73:77:e9:42:68:0c:03:f6:2a:77:45:6a:e9:74: 3a:20:fc:7e:25:24:27:fe:14:76:8c:07:67:fb:26:b1:4f:7c: 46:1a:bc:b1 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIUOgjNMtOlk+19c+tvmIJRVIIH9wcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZDN0JBNUVBRjg4MzJEM0U0MjczNkM2NDFGMDYwN0U1 MEVDNkQyRDAeFw0yNTAyMTgxNjMwNThaFw0yNjAyMTcxNjM1NThaMDMxMTAvBgNV BAMTKDQ2RkJCQjk5MzdDOTY0NzI2MEI3RjdFODQ0MUFGMzY2MTdFMTkxMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTbS+L4Y1yC3nBOFPZxcKga2BO RhgMjCQJ7chPSAo88HcjLCXsBSM5xdOdBFdGD85WMNw/K33Qca0Zx2vR2jIoHfSa kOhkea8g9Kh23bbQYzAgvVw+aYz4VGOnKUKqquTomVsRlsSjoLmZdtv1uZbJMH2y kbRlcMOzSTjjhMUpOdDYU8U4T9+ANX15td45XkY1T/ydN3nc5+H1dYxbXJqldxGL M28p2lB58IAn2/E1u5jga+2oeoFbvYbKM36OEg5xOuQLfT3GVv2AyBkh9fm70hmA P1K4v9sirfdR1mOzDDCU4m1Bk4ZzyC1gyv4en8zv8SUHtqxDeL/fHQOJJsKjAgMB AAGjggJcMIICWDAdBgNVHQ4EFgQURvu7mTfJZHJgt/foRBrzZhfhkQcwHwYDVR0j BBgwFoAUL8e6Xq+IMtPkJzbGQfBgflDsbS0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOHhNQTI2WFZwUnBndVVTUVdpVXdhbTEyZW5ObjVBNG5NQUxWQWZqMlBC QnkvMC8yRkM3QkE1RUFGODgzMkQzRTQyNzM2QzY0MUYwNjA3RTUwRUM2RDJELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGQzdCQTVFQUY4ODMyRDNF NDI3MzZDNjQxRjA2MDdFNTBFQzZEMkQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzh4TUEyNlhWcFJwZ3VVU1FXaVV3YW0xMmVuTm41QTRuTUFMVkFmajJQQkJ5LzAv MzIzODMwMzQzYTM1NjE2NTM0M2E2NjY2MzEzMDNhM2EyZjM0MzQyZDM0MzQyMDNk M2UyMDMyMzYzODM4MzAzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCgEWuT/EDANBgkqhkiG9w0BAQsF AAOCAQEAH+78MUJNGsmyvSDBo3Md6vnoqlBwzLsQDwO06gohkz7CiN32Nl/iORml 9b3SekjyY/ejVjenD1A67/RoO3BDP4NpKJGyiMObMm1+FPfjrXaUCvg+RHnaiSML z0i6qNchIsiUKTw0KxBU52Q+wnvpEMq2EvU4oDQXDRcYHPmW9HYzoTrSiPJBtvB0 SIYudqQG6jcXX1O6gv25MnI6vxKkVUJVPSbhoWsUOR3kKBcEFzR2PSq1/nAz0JvT nBfeyeSRiHSrBkZJtNZg6H8NwCAa0SVgHXy9laqgpANZMXN36UJoDAP2KndFaul0 OiD8fiUkJ/4UdowHZ/smsU98Rhq8sQ== -----END CERTIFICATE-----Generated at Tue Apr 22 12:36:56 2025 by rpki-client