$ rpki-client -vvf rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/323830343a376661303a383030303a3a2f33342d3334203d3e20323731363939.roa File: 323830343a376661303a383030303a3a2f33342d3334203d3e20323731363939.roa (raw, json) Hash identifier: BAyEEtxcOxFl530Gp7IQIqjvrge9TL2hxmMNiX5B5pA= Subject key identifier: 96:51:73:39:C3:BB:50:98:08:A5:42:E4:66:8E:A5:91:D7:F9:C6:CD Certificate issuer: /CN=22B8865EE2EC8BB08F2A5FE22F8E7EC07E38340F Certificate serial: 1FCABBACCFE2C740EFB7B915D606D6A1B69A18B6 Authority key identifier: 22:B8:86:5E:E2:EC:8B:B0:8F:2A:5F:E2:2F:8E:7E:C0:7E:38:34:0F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22B8865EE2EC8BB08F2A5FE22F8E7EC07E38340F.cer Subject info access: rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/323830343a376661303a383030303a3a2f33342d3334203d3e20323731363939.roa Signing time: Mon 17 Mar 2025 17:41:21 +0000 ROA not before: Mon 17 Mar 2025 17:36:21 +0000 ROA not after: Mon 16 Mar 2026 17:41:21 +0000 asID: 271699 IP address blocks: 2804:7fa0:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/22B8865EE2EC8BB08F2A5FE22F8E7EC07E38340F.crl rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/22B8865EE2EC8BB08F2A5FE22F8E7EC07E38340F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22B8865EE2EC8BB08F2A5FE22F8E7EC07E38340F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Apr 2025 23:30:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:ca:bb:ac:cf:e2:c7:40:ef:b7:b9:15:d6:06:d6:a1:b6:9a:18:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22B8865EE2EC8BB08F2A5FE22F8E7EC07E38340F Validity Not Before: Mar 17 17:36:21 2025 GMT Not After : Mar 16 17:41:21 2026 GMT Subject: CN=96517339C3BB509808A542E4668EA591D7F9C6CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:77:28:40:d5:a8:6d:bb:83:52:f2:0f:84:23: 70:57:6e:08:e5:4e:84:0b:1b:88:47:b5:ac:dc:fe: de:95:83:e3:1e:61:8d:53:d4:87:bc:01:30:1c:62: 6d:94:c5:3a:3e:05:a7:2c:cb:84:ab:e3:8f:6a:f8: 64:2d:f2:84:d4:90:e0:31:59:9e:3f:19:06:f4:a4: 0d:65:e8:03:ea:f5:21:4d:29:76:a1:54:10:c6:06: 4d:c2:c8:6c:b2:e9:76:66:ef:07:13:d2:df:e0:e5: da:5c:08:51:dd:c4:db:4c:8a:75:a5:f9:7e:f0:66: 3b:e1:1a:c7:12:31:ce:a8:0a:ff:10:93:37:e5:e4: e6:71:f2:bf:65:5f:c8:9e:a5:bf:1b:28:52:b5:b6: 9b:e0:9d:a0:33:cc:37:29:4c:8e:81:34:6d:ad:fe: 75:79:cd:d5:96:06:eb:49:5f:5a:ba:1e:78:33:4c: df:24:2a:a3:5e:0f:1a:e5:78:fd:7a:d9:48:11:ad: a0:ce:2d:9b:af:fe:01:59:16:bf:e9:a7:66:43:e6: 0d:2c:8e:76:a0:30:ef:48:78:bb:01:33:e2:e1:19: fe:a3:96:0d:19:8a:d2:3d:f3:8d:03:a2:c1:40:e9: fd:08:cb:97:9a:b9:96:02:ca:b7:fa:a3:2d:22:7d: 04:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:51:73:39:C3:BB:50:98:08:A5:42:E4:66:8E:A5:91:D7:F9:C6:CD X509v3 Authority Key Identifier: keyid:22:B8:86:5E:E2:EC:8B:B0:8F:2A:5F:E2:2F:8E:7E:C0:7E:38:34:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/22B8865EE2EC8BB08F2A5FE22F8E7EC07E38340F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22B8865EE2EC8BB08F2A5FE22F8E7EC07E38340F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/323830343a376661303a383030303a3a2f33342d3334203d3e20323731363939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:7fa0:8000::/34 Signature Algorithm: sha256WithRSAEncryption 19:b0:2d:be:79:1d:1a:f4:4e:77:95:d4:34:35:bc:ba:62:f7: d2:89:c6:85:6d:c2:d0:57:30:87:3b:e7:72:50:fd:d8:e8:3b: 2d:49:5d:14:9e:e7:fe:67:71:49:69:f5:28:65:49:8f:91:96: 1d:58:91:f0:9b:37:cc:1f:86:2b:7f:04:d1:6d:95:66:8f:56: cf:10:f7:cc:d9:b5:cb:b8:4f:e2:fd:c4:82:4c:55:4d:c5:aa: ba:4a:5f:7e:a5:c2:34:99:0d:b0:7d:52:bb:de:3a:b8:ff:ef: 49:62:24:04:6e:0a:40:d8:a3:18:47:d6:41:82:89:e6:e8:1f: 32:30:2a:4c:0c:13:93:9a:36:ed:28:68:d9:2c:e7:59:b5:21: 30:fd:84:26:c7:3c:58:39:2b:ec:97:21:eb:63:3a:03:64:5c: 3d:2e:a6:52:f5:d9:65:80:c2:3d:86:b3:31:d5:36:52:0c:d0: ae:87:46:8a:23:79:0d:01:36:04:f9:6d:f2:30:10:e8:df:a9: 61:03:e8:d6:0b:27:c1:32:4e:6b:87:e9:48:51:b6:e6:9e:09: c3:21:35:01:57:0b:73:75:57:26:84:bc:4f:a7:72:81:92:13: a5:7a:c1:a8:76:e7:77:cf:25:59:aa:22:d0:d3:fd:91:2d:69: 74:71:bf:b7 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUH8q7rM/ix0Dvt7kV1gbWobaaGLYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjJCODg2NUVFMkVDOEJCMDhGMkE1RkUyMkY4RTdFQzA3 RTM4MzQwRjAeFw0yNTAzMTcxNzM2MjFaFw0yNjAzMTYxNzQxMjFaMDMxMTAvBgNV BAMTKDk2NTE3MzM5QzNCQjUwOTgwOEE1NDJFNDY2OEVBNTkxRDdGOUM2Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgdyhA1ahtu4NS8g+EI3BXbgjl ToQLG4hHtazc/t6Vg+MeYY1T1Ie8ATAcYm2UxTo+Bacsy4Sr449q+GQt8oTUkOAx WZ4/GQb0pA1l6APq9SFNKXahVBDGBk3CyGyy6XZm7wcT0t/g5dpcCFHdxNtMinWl +X7wZjvhGscSMc6oCv8Qkzfl5OZx8r9lX8iepb8bKFK1tpvgnaAzzDcpTI6BNG2t /nV5zdWWButJX1q6HngzTN8kKqNeDxrleP162UgRraDOLZuv/gFZFr/pp2ZD5g0s jnagMO9IeLsBM+LhGf6jlg0ZitI9840DosFA6f0Iy5eauZYCyrf6oy0ifQTzAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUllFzOcO7UJgIpULkZo6lkdf5xs0wHwYDVR0j BBgwFoAUIriGXuLsi7CPKl/iL45+wH44NA8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOW53RUNXUVpEWEFoVzVWcGFkVnZDYUo2c3dwYnNSUDhQSmM0WWZON1pM RFgvMC8yMkI4ODY1RUUyRUM4QkIwOEYyQTVGRTIyRjhFN0VDMDdFMzgzNDBGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIyQjg4NjVFRTJFQzhCQjA4 RjJBNUZFMjJGOEU3RUMwN0UzODM0MEYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzlud0VDV1FaRFhBaFc1VnBhZFZ2Q2FKNnN3cGJzUlA4UEpjNFlmTjdaTERYLzAv MzIzODMwMzQzYTM3NjY2MTMwM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzczMTM2MzkzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEf6CAMA0GCSqGSIb3DQEBCwUA A4IBAQAZsC2+eR0a9E53ldQ0Nby6YvfSicaFbcLQVzCHO+dyUP3Y6DstSV0Unuf+ Z3FJafUoZUmPkZYdWJHwmzfMH4YrfwTRbZVmj1bPEPfM2bXLuE/i/cSCTFVNxaq6 Sl9+pcI0mQ2wfVK73jq4/+9JYiQEbgpA2KMYR9ZBgonm6B8yMCpMDBOTmjbtKGjZ LOdZtSEw/YQmxzxYOSvslyHrYzoDZFw9LqZS9dllgMI9hrMx1TZSDNCuh0aKI3kN ATYE+W3yMBDo36lhA+jWCyfBMk5rh+lIUbbmngnDITUBVwtzdVcmhLxPp3KBkhOl esGodud3zyVZqiLQ0/2RLWl0cb+3 -----END CERTIFICATE-----Generated at Mon Apr 7 13:43:42 2025 by rpki-client