$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a633030303a3a2f33362d3336203d3e20323638323936.roa File: 323830343a346566633a633030303a3a2f33362d3336203d3e20323638323936.roa (raw, json) Hash identifier: 0oqYhI6W4T1DiUDOvivVPcOk+v0PWAVzTgSMqX0jIsw= Subject key identifier: 44:A2:46:E7:CF:92:7F:7A:34:30:1C:71:9B:76:70:17:09:45:8E:B9 Certificate issuer: /CN=78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C Certificate serial: 42A790FC46BE747ECA094A153056E3996A80266E Authority key identifier: 78:DE:C8:C0:42:48:9F:1A:E6:8F:9C:8A:1D:8C:0D:29:DC:CB:43:7C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.cer Subject info access: rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a633030303a3a2f33362d3336203d3e20323638323936.roa Signing time: Fri 16 May 2025 13:05:04 +0000 ROA not before: Fri 16 May 2025 13:00:04 +0000 ROA not after: Fri 15 May 2026 13:05:04 +0000 asID: 268296 IP address blocks: 2804:4efc:c000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.crl rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 09 Jun 2025 04:38:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:a7:90:fc:46:be:74:7e:ca:09:4a:15:30:56:e3:99:6a:80:26:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C Validity Not Before: May 16 13:00:04 2025 GMT Not After : May 15 13:05:04 2026 GMT Subject: CN=44A246E7CF927F7A34301C719B76701709458EB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c0:63:92:0e:85:1d:46:0f:fd:21:2d:2f:cf: 70:52:0a:01:44:c0:a4:8b:0f:bf:15:89:7b:32:ca: 7e:bb:e5:30:c2:f9:06:62:9c:fa:c9:90:de:89:0f: 6d:39:57:d4:6e:2e:90:44:ed:24:94:1b:db:69:b8: 68:ba:71:57:cf:92:bf:97:26:7d:e1:a4:c9:a3:0b: 3b:f0:1b:8c:44:80:3e:43:cf:d3:8d:5b:0d:69:2a: 7e:71:3e:54:8c:0a:91:de:17:d9:32:42:41:f7:02: 3e:95:78:bc:f4:af:1e:c1:ac:dd:1d:26:b2:75:c1: 87:35:6d:c6:64:3d:f6:46:54:a2:ad:59:a6:7f:52: 83:8c:ef:35:d0:ad:12:7e:0c:90:a8:67:1c:ba:00: ab:a3:2c:9c:64:32:79:b9:cc:28:d3:93:39:c9:ef: 2f:c1:47:ef:99:86:ce:28:66:3f:8a:47:cd:3c:e4: e9:c9:6a:e4:1f:ea:05:18:85:1f:0c:35:7a:c7:ac: b7:be:e0:f2:65:13:7f:f7:2c:ea:70:88:a6:81:26: 33:c3:ad:f8:75:35:b2:a1:b1:99:12:50:b6:e0:97: 69:b0:0f:b8:f6:e2:1d:dc:2f:45:48:95:34:99:b4: fc:34:c2:cc:d9:07:b5:00:28:e7:c6:66:13:be:20: 3b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:A2:46:E7:CF:92:7F:7A:34:30:1C:71:9B:76:70:17:09:45:8E:B9 X509v3 Authority Key Identifier: keyid:78:DE:C8:C0:42:48:9F:1A:E6:8F:9C:8A:1D:8C:0D:29:DC:CB:43:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a633030303a3a2f33362d3336203d3e20323638323936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:4efc:c000::/36 Signature Algorithm: sha256WithRSAEncryption 9a:4b:37:71:95:55:0a:a5:b7:be:cd:d0:76:6e:cf:bc:88:6c: 71:58:fe:15:32:d5:77:6d:0e:54:57:48:d4:cc:7f:d9:bc:4b: 23:a8:2e:f6:47:97:3b:77:c4:2c:d1:10:24:78:f4:81:bb:4b: 1b:b8:8f:8c:18:9d:ca:03:a7:88:95:26:8f:c2:b7:c0:e4:48: f8:56:cd:81:1f:3f:65:6a:72:08:ff:35:c4:ad:67:d4:16:de: ab:e0:69:92:2b:31:85:38:5d:48:b7:c5:19:eb:3f:07:f6:e8: 04:cc:fe:3d:49:98:b7:c9:7b:cd:fd:1c:34:a7:b6:09:cc:ca: ba:74:2a:38:ba:1f:dd:1f:c0:a3:27:0a:3e:ae:2b:d8:1d:7f: 48:a8:85:b5:9b:8e:08:7b:86:6b:ee:f4:e6:53:c5:b5:f3:45: f4:0e:8e:65:1f:c8:6c:01:d5:6c:9d:45:bb:dd:aa:3d:ca:93: fb:f1:60:73:f0:cf:c4:16:7c:aa:77:24:fd:d3:8d:96:7d:79: df:4b:ce:a4:e8:6f:72:0a:55:3e:f0:93:60:0a:4f:93:b2:15: d2:a3:ae:1a:8f:88:15:e2:2b:01:42:05:b1:25:58:5f:44:fb: f9:ac:21:1e:15:e2:6a:c5:f8:20:8f:93:5b:ce:a0:2e:02:2c: 2d:fb:42:51 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUQqeQ/Ea+dH7KCUoVMFbjmWqAJm4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhERUM4QzA0MjQ4OUYxQUU2OEY5QzhBMUQ4QzBEMjlE Q0NCNDM3QzAeFw0yNTA1MTYxMzAwMDRaFw0yNjA1MTUxMzA1MDRaMDMxMTAvBgNV BAMTKDQ0QTI0NkU3Q0Y5MjdGN0EzNDMwMUM3MTlCNzY3MDE3MDk0NThFQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGwGOSDoUdRg/9IS0vz3BSCgFE wKSLD78ViXsyyn675TDC+QZinPrJkN6JD205V9RuLpBE7SSUG9tpuGi6cVfPkr+X Jn3hpMmjCzvwG4xEgD5Dz9ONWw1pKn5xPlSMCpHeF9kyQkH3Aj6VeLz0rx7BrN0d JrJ1wYc1bcZkPfZGVKKtWaZ/UoOM7zXQrRJ+DJCoZxy6AKujLJxkMnm5zCjTkznJ 7y/BR++Zhs4oZj+KR8085OnJauQf6gUYhR8MNXrHrLe+4PJlE3/3LOpwiKaBJjPD rfh1NbKhsZkSULbgl2mwD7j24h3cL0VIlTSZtPw0wszZB7UAKOfGZhO+IDv1AgMB AAGjggJbMIICVzAdBgNVHQ4EFgQURKJG58+Sf3o0MBxxm3ZwFwlFjrkwHwYDVR0j BBgwFoAUeN7IwEJInxrmj5yKHYwNKdzLQ3wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOVc0b2hhQXZ3RnNkQTd2dWpLV1BFcFNTSzV5NWdNdUdrWXN2VVh4akNQ SnIvMC83OERFQzhDMDQyNDg5RjFBRTY4RjlDOEExRDhDMEQyOURDQ0I0MzdDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc4REVDOEMwNDI0ODlGMUFF NjhGOUM4QTFEOEMwRDI5RENDQjQzN0MuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzlXNG9oYUF2d0ZzZEE3dnVqS1dQRXBTU0s1eTVnTXVHa1lzdlVYeGpDUEpyLzAv MzIzODMwMzQzYTM0NjU2NjYzM2E2MzMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk M2UyMDMyMzYzODMyMzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgETvzAMA0GCSqGSIb3DQEBCwUA A4IBAQCaSzdxlVUKpbe+zdB2bs+8iGxxWP4VMtV3bQ5UV0jUzH/ZvEsjqC72R5c7 d8Qs0RAkePSBu0sbuI+MGJ3KA6eIlSaPwrfA5Ej4Vs2BHz9lanII/zXErWfUFt6r 4GmSKzGFOF1It8UZ6z8H9ugEzP49SZi3yXvN/Rw0p7YJzMq6dCo4uh/dH8CjJwo+ rivYHX9IqIW1m44Ie4Zr7vTmU8W180X0Do5lH8hsAdVsnUW73ao9ypP78WBz8M/E FnyqdyT9042WfXnfS86k6G9yClU+8JNgCk+TshXSo64aj4gV4isBQgWxJVhfRPv5 rCEeFeJqxfggj5NbzqAuAiwt+0JR -----END CERTIFICATE-----Generated at Sun Jun 8 11:08:54 2025 by rpki-client