$ rpki-client -vvf rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/1/323830343a316163343a3a2f33322d3438203d3e203631383834.roa File: 323830343a316163343a3a2f33322d3438203d3e203631383834.roa (raw, json) Hash identifier: sAL6T8HhDCFLDwS7gImyXCxe+0DxJsFuMLIg/XFi0Ts= Subject key identifier: B8:56:9F:18:3B:1A:D3:AE:53:65:DB:E0:7E:09:D1:F4:D6:36:1F:4B Certificate issuer: /CN=65266773FE30988C76975E1CA92521B7BCB5897A Certificate serial: 5221609931AE13062388E615EC90BF4932CFC612 Authority key identifier: 65:26:67:73:FE:30:98:8C:76:97:5E:1C:A9:25:21:B7:BC:B5:89:7A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65266773FE30988C76975E1CA92521B7BCB5897A.cer Subject info access: rsync://rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/1/323830343a316163343a3a2f33322d3438203d3e203631383834.roa Signing time: Thu 06 Mar 2025 19:06:07 +0000 ROA not before: Thu 06 Mar 2025 19:01:07 +0000 ROA not after: Thu 05 Mar 2026 19:06:07 +0000 asID: 61884 IP address blocks: 2804:1ac4::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/1/65266773FE30988C76975E1CA92521B7BCB5897A.crl rsync://rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/1/65266773FE30988C76975E1CA92521B7BCB5897A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65266773FE30988C76975E1CA92521B7BCB5897A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Apr 2025 14:27:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:21:60:99:31:ae:13:06:23:88:e6:15:ec:90:bf:49:32:cf:c6:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65266773FE30988C76975E1CA92521B7BCB5897A Validity Not Before: Mar 6 19:01:07 2025 GMT Not After : Mar 5 19:06:07 2026 GMT Subject: CN=B8569F183B1AD3AE5365DBE07E09D1F4D6361F4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:40:18:4d:49:42:f1:a5:1a:36:77:cc:c9:78: 14:61:e8:b4:f5:b4:8d:10:6a:5e:e5:6b:e0:c9:f0: 77:ae:8d:bb:f7:e0:ab:29:86:54:17:52:d0:a6:23: a0:44:fd:5c:2e:14:f1:5a:37:92:25:a2:46:92:c9: a2:a8:72:7a:5c:6f:23:0f:e4:db:df:cc:85:29:ab: 5e:d0:09:44:a2:7c:fb:68:cd:a5:e2:37:d4:0a:06: c4:08:3c:76:90:53:20:57:b1:54:51:86:27:28:5b: d3:48:03:ee:cf:41:c8:4e:da:65:ed:0f:b6:f6:1e: d7:71:d7:b3:f3:86:8f:6b:5e:1b:e8:e0:85:8d:23: f3:e7:9d:22:80:d9:f1:a6:68:01:c0:97:6e:53:c7: b0:aa:a8:78:f5:20:4d:33:b4:50:82:ad:a1:b5:0a: 8b:8c:c9:fe:c4:75:7d:c4:f2:41:37:bd:00:ab:d9: 8b:68:79:e5:4e:f8:76:a9:30:48:9e:63:93:7d:05: 6e:b6:cf:ba:a5:83:56:55:bf:4f:51:d5:8a:dd:63: ae:69:ac:1d:bc:8a:1a:98:69:3c:2e:18:9e:ec:3f: f0:2f:88:96:22:2e:77:a7:78:5c:d3:d9:22:c3:25: 6e:1c:f6:85:7a:72:aa:11:76:15:01:4a:ef:6a:5f: f6:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:56:9F:18:3B:1A:D3:AE:53:65:DB:E0:7E:09:D1:F4:D6:36:1F:4B X509v3 Authority Key Identifier: keyid:65:26:67:73:FE:30:98:8C:76:97:5E:1C:A9:25:21:B7:BC:B5:89:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/1/65266773FE30988C76975E1CA92521B7BCB5897A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65266773FE30988C76975E1CA92521B7BCB5897A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/1/323830343a316163343a3a2f33322d3438203d3e203631383834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:1ac4::/32 Signature Algorithm: sha256WithRSAEncryption 5e:bd:7b:c4:18:0c:f5:d1:c4:84:cb:43:38:5f:93:14:a0:04: 2a:fc:b7:ed:0a:ca:6f:c8:5e:4f:98:51:0d:17:e2:90:33:93: 52:ee:9f:6e:7d:cc:61:1c:74:eb:11:86:83:3a:64:28:b9:e7: 26:a5:b8:ae:f1:c0:d6:53:38:95:6d:d5:18:5d:da:67:cc:ec: a5:c7:60:56:4a:d2:6d:09:64:42:a1:97:59:a3:0f:2a:a5:af: 53:4d:9f:af:4e:c2:a0:3a:12:70:32:83:ab:44:42:f1:d2:c0: d1:da:6c:22:70:f4:39:f5:30:0f:f4:64:d5:67:2e:53:be:ed: 93:5d:9e:b2:d3:4f:5b:50:cd:1d:d9:5b:08:a0:37:85:61:c4: 77:ed:ba:90:7d:12:1c:a9:8c:eb:cd:82:a7:9b:31:7b:b2:09: 67:39:59:6a:88:11:a6:db:2c:4c:89:3c:68:54:5c:3f:ab:cf: 03:76:ab:cf:15:fd:88:56:47:b1:27:23:35:73:02:f3:6d:0e: 5e:d3:0b:07:4c:57:98:ae:c9:8e:31:d3:9b:06:5f:57:de:fb: 61:90:f6:48:64:7e:00:b8:72:1c:5b:ca:62:74:bc:28:f5:b2: 12:4f:38:af:dc:0f:15:82:a9:26:32:ab:8f:54:b2:63:77:38: c0:b3:36:e6 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIUUiFgmTGuEwYjiOYV7JC/STLPxhIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjUyNjY3NzNGRTMwOTg4Qzc2OTc1RTFDQTkyNTIxQjdC Q0I1ODk3QTAeFw0yNTAzMDYxOTAxMDdaFw0yNjAzMDUxOTA2MDdaMDMxMTAvBgNV BAMTKEI4NTY5RjE4M0IxQUQzQUU1MzY1REJFMDdFMDlEMUY0RDYzNjFGNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuQBhNSULxpRo2d8zJeBRh6LT1 tI0Qal7la+DJ8Heujbv34KsphlQXUtCmI6BE/VwuFPFaN5IlokaSyaKocnpcbyMP 5NvfzIUpq17QCUSifPtozaXiN9QKBsQIPHaQUyBXsVRRhicoW9NIA+7PQchO2mXt D7b2Htdx17Pzho9rXhvo4IWNI/PnnSKA2fGmaAHAl25Tx7CqqHj1IE0ztFCCraG1 CouMyf7EdX3E8kE3vQCr2YtoeeVO+HapMEieY5N9BW62z7qlg1ZVv09R1YrdY65p rB28ihqYaTwuGJ7sP/AviJYiLneneFzT2SLDJW4c9oV6cqoRdhUBSu9qX/ZTAgMB AAGjggJOMIICSjAdBgNVHQ4EFgQUuFafGDsa065TZdvgfgnR9NY2H0swHwYDVR0j BBgwFoAUZSZnc/4wmIx2l14cqSUht7y1iXowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOTgzemdnNUZSYm5FOFJqWHlrVTg5R1QxQmVrS2ZuUTJpU2VCc3VQUzFD OUEvMS82NTI2Njc3M0ZFMzA5ODhDNzY5NzVFMUNBOTI1MjFCN0JDQjU4OTdBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1MjY2NzczRkUzMDk4OEM3 Njk3NUUxQ0E5MjUyMUI3QkNCNTg5N0EuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzk4M3pnZzVGUmJuRThSalh5a1U4OUdUMUJla0tmblEyaVNlQnN1UFMxQzlBLzEv MzIzODMwMzQzYTMxNjE2MzM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzYzMTM4 MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB /wQRMA8wDQQCAAIwBwMFACgEGsQwDQYJKoZIhvcNAQELBQADggEBAF69e8QYDPXR xITLQzhfkxSgBCr8t+0Kym/IXk+YUQ0X4pAzk1Lun259zGEcdOsRhoM6ZCi55yal uK7xwNZTOJVt1Rhd2mfM7KXHYFZK0m0JZEKhl1mjDyqlr1NNn69OwqA6EnAyg6tE QvHSwNHabCJw9Dn1MA/0ZNVnLlO+7ZNdnrLTT1tQzR3ZWwigN4VhxHftupB9Ehyp jOvNgqebMXuyCWc5WWqIEabbLEyJPGhUXD+rzwN2q88V/YhWR7EnIzVzAvNtDl7T CwdMV5iuyY4x05sGX1fe+2GQ9khkfgC4chxbymJ0vCj1shJPOK/cDxWCqSYyq49U smN3OMCzNuY= -----END CERTIFICATE-----Generated at Tue Apr 22 03:29:55 2025 by rpki-client