$ rpki-client -vvf rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/323830343a333036343a633130303a3a2f34302d3430203d3e20323634393438.roa File: 323830343a333036343a633130303a3a2f34302d3430203d3e20323634393438.roa (raw, json) Hash identifier: K24JwC75LxnTLioGMW+7yw6PUX++6bih/j6U51c9onM= Subject key identifier: 44:B6:70:74:A7:78:68:1C:0C:E2:3C:E5:46:EA:35:92:A5:4E:94:D9 Certificate issuer: /CN=BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F Certificate serial: 66DC06DFCAFBC3DB236EA8B7A5112AFBE2C9D0C9 Authority key identifier: BC:47:87:68:F2:51:0E:76:FB:1F:8C:DB:CF:5F:94:8F:D7:A7:C0:1F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F.cer Subject info access: rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/323830343a333036343a633130303a3a2f34302d3430203d3e20323634393438.roa Signing time: Wed 15 Jan 2025 20:05:52 +0000 ROA not before: Wed 15 Jan 2025 20:00:52 +0000 ROA not after: Wed 14 Jan 2026 20:05:52 +0000 asID: 264948 IP address blocks: 2804:3064:c100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F.crl rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 11:14:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:dc:06:df:ca:fb:c3:db:23:6e:a8:b7:a5:11:2a:fb:e2:c9:d0:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F Validity Not Before: Jan 15 20:00:52 2025 GMT Not After : Jan 14 20:05:52 2026 GMT Subject: CN=44B67074A778681C0CE23CE546EA3592A54E94D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:95:43:83:90:7e:60:ac:0b:47:b5:05:3d:1d: 28:52:75:ff:9e:64:04:e9:d6:8b:4e:37:fb:f2:27: bb:b5:2e:f4:f8:34:52:a4:6b:b9:7d:4c:a3:f7:73: d4:60:00:56:08:c0:87:d4:86:bd:d4:01:df:a7:c0: 18:e2:e8:75:fa:05:e0:e3:01:a7:1f:c0:64:89:fb: bf:d2:c7:d6:51:ae:84:7c:bc:0c:e3:f2:aa:9d:2a: 23:0e:41:76:1d:2b:8d:7a:d1:a6:5e:45:c1:62:a0: fd:01:a2:cc:06:5f:0e:57:c0:69:ed:fc:a7:7e:ba: 29:96:9e:22:5e:61:5c:ba:4c:79:cb:5f:0c:fe:dd: 60:82:62:7c:c2:32:c6:9d:4b:a1:4c:37:be:a0:a8: 4e:95:8d:63:c5:8c:0a:93:62:d0:09:0d:3c:e1:0a: 01:6d:33:d8:6c:cb:54:df:b8:bb:58:1e:01:51:13: 4a:c6:9e:5f:2f:9e:71:3e:38:ad:65:68:85:61:a9: 30:43:cd:1e:c8:9f:87:4e:0c:cb:fb:fa:2d:94:e1: d1:93:9b:7b:c1:66:c6:7c:e7:f7:38:7f:46:9c:b1: 5c:7b:3b:1c:22:f8:96:10:12:7a:21:07:11:9a:fd: c5:8d:27:a8:4f:87:8a:3a:4d:0e:6f:21:ca:be:3c: 93:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:B6:70:74:A7:78:68:1C:0C:E2:3C:E5:46:EA:35:92:A5:4E:94:D9 X509v3 Authority Key Identifier: keyid:BC:47:87:68:F2:51:0E:76:FB:1F:8C:DB:CF:5F:94:8F:D7:A7:C0:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/323830343a333036343a633130303a3a2f34302d3430203d3e20323634393438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:3064:c100::/40 Signature Algorithm: sha256WithRSAEncryption 4a:04:e4:f7:7b:3e:5f:27:bc:ef:f9:79:e1:cf:af:b3:ee:7a: e5:ab:4b:3f:52:9d:44:5c:58:d1:da:55:28:4c:49:6f:1b:10: 54:ae:4f:68:70:66:e1:eb:3e:f6:b9:ba:e0:11:7f:ae:e1:c0: 3b:a1:fb:3d:f4:5a:97:a7:63:70:3b:69:14:f1:67:89:f8:27: 8e:46:f2:93:ea:a0:04:3d:1b:a4:2f:16:98:0f:1d:90:28:96: 77:bb:ba:f7:ba:98:09:56:21:55:e7:36:be:15:ac:e8:da:89: 85:a8:4e:54:f5:41:ab:8e:3f:be:e3:12:73:af:3f:c1:67:31: e0:5e:3b:22:01:a8:71:f9:4d:1c:10:df:bd:fa:64:5b:18:cc: ce:23:8b:ba:e0:57:21:5d:f7:50:5c:35:8a:c0:0f:c2:55:47: bd:07:26:da:1b:9b:6b:66:7c:9e:de:ba:48:0a:5d:08:06:94: ec:b2:91:33:c8:9e:c5:af:10:8b:bd:f7:a0:85:b1:dd:5c:20: 8d:2a:de:9a:7a:e2:70:59:9c:e3:3d:11:e7:41:43:d2:29:43: ce:9a:6c:46:21:f0:5a:fa:ee:b5:db:c0:c0:bb:47:2a:f1:3c: 49:51:6a:87:8f:9b:d0:fa:b7:39:17:6b:eb:55:59:73:a6:e9: 10:60:c5:cd -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUZtwG38r7w9sjbqi3pREq++LJ0MkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkM0Nzg3NjhGMjUxMEU3NkZCMUY4Q0RCQ0Y1Rjk0OEZE N0E3QzAxRjAeFw0yNTAxMTUyMDAwNTJaFw0yNjAxMTQyMDA1NTJaMDMxMTAvBgNV BAMTKDQ0QjY3MDc0QTc3ODY4MUMwQ0UyM0NFNTQ2RUEzNTkyQTU0RTk0RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMlUODkH5grAtHtQU9HShSdf+e ZATp1otON/vyJ7u1LvT4NFKka7l9TKP3c9RgAFYIwIfUhr3UAd+nwBji6HX6BeDj AacfwGSJ+7/Sx9ZRroR8vAzj8qqdKiMOQXYdK4160aZeRcFioP0BoswGXw5XwGnt /Kd+uimWniJeYVy6THnLXwz+3WCCYnzCMsadS6FMN76gqE6VjWPFjAqTYtAJDTzh CgFtM9hsy1TfuLtYHgFRE0rGnl8vnnE+OK1laIVhqTBDzR7In4dODMv7+i2U4dGT m3vBZsZ85/c4f0acsVx7Oxwi+JYQEnohBxGa/cWNJ6hPh4o6TQ5vIcq+PJNFAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQURLZwdKd4aBwM4jzlRuo1kqVOlNkwHwYDVR0j BBgwFoAUvEeHaPJRDnb7H4zbz1+Uj9enwB8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQUJlbk02QkhhVTJteG5qeHdhSGFwYk5NZlJhWXJOS3VNakR0Uml2bjRq Y1gvMC9CQzQ3ODc2OEYyNTEwRTc2RkIxRjhDREJDRjVGOTQ4RkQ3QTdDMDFGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JDNDc4NzY4RjI1MTBFNzZG QjFGOENEQkNGNUY5NDhGRDdBN0MwMUYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0FCZW5NNkJIYVUybXhuanh3YUhhcGJOTWZSYVlyTkt1TWpEdFJpdm40amNYLzAv MzIzODMwMzQzYTMzMzAzNjM0M2E2MzMxMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk M2UyMDMyMzYzNDM5MzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEMGTBMA0GCSqGSIb3DQEBCwUA A4IBAQBKBOT3ez5fJ7zv+Xnhz6+z7nrlq0s/Up1EXFjR2lUoTElvGxBUrk9ocGbh 6z72ubrgEX+u4cA7ofs99FqXp2NwO2kU8WeJ+CeORvKT6qAEPRukLxaYDx2QKJZ3 u7r3upgJViFV5za+Fazo2omFqE5U9UGrjj++4xJzrz/BZzHgXjsiAahx+U0cEN+9 +mRbGMzOI4u64FchXfdQXDWKwA/CVUe9BybaG5trZnye3rpICl0IBpTsspEzyJ7F rxCLvfeghbHdXCCNKt6aeuJwWZzjPRHnQUPSKUPOmmxGIfBa+u6128DAu0cq8TxJ UWqHj5vQ+rc5F2vrVVlzpukQYMXN -----END CERTIFICATE-----Generated at Tue Apr 8 21:42:45 2025 by rpki-client