$ rpki-client -vvf rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/323830343a316635343a3a2f33322d3332203d3e20323732323230.roa File: 323830343a316635343a3a2f33322d3332203d3e20323732323230.roa (raw, json) Hash identifier: ETxIJeAD+Mu+7r+AWo3Nm9UhNL8Bg/5nxFe6vkKlSOE= Subject key identifier: 7A:61:B5:03:BD:11:7E:87:48:3B:66:3F:96:9D:96:C3:09:CE:72:B4 Certificate issuer: /CN=2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8 Certificate serial: 56A008799A78E8910973E3FABEE197E8DEC7F2A6 Authority key identifier: 2A:37:8F:3F:C3:AC:5A:FF:D2:AE:F5:89:39:89:56:7E:2D:C4:0D:B8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.cer Subject info access: rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/323830343a316635343a3a2f33322d3332203d3e20323732323230.roa Signing time: Wed 05 Mar 2025 19:00:00 +0000 ROA not before: Wed 05 Mar 2025 18:55:00 +0000 ROA not after: Wed 04 Mar 2026 19:00:00 +0000 asID: 272220 IP address blocks: 2804:1f54::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.crl rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 08 Apr 2025 01:17:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:a0:08:79:9a:78:e8:91:09:73:e3:fa:be:e1:97:e8:de:c7:f2:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8 Validity Not Before: Mar 5 18:55:00 2025 GMT Not After : Mar 4 19:00:00 2026 GMT Subject: CN=7A61B503BD117E87483B663F969D96C309CE72B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:30:d7:17:f9:b9:22:ad:d0:d4:40:cd:e9:42: 24:e7:2d:ea:d5:d8:9a:df:9f:47:05:1e:76:29:4d: 00:37:54:5e:47:b7:9c:44:d4:ce:5d:25:d9:75:95: aa:b2:b6:8f:28:96:72:10:29:b8:b6:6a:50:56:cf: 70:f7:41:f7:82:54:42:60:59:6e:5a:71:fc:32:e3: b4:9c:95:48:92:e7:56:7e:a5:3f:9a:ed:00:04:43: 83:b4:8f:ca:87:a6:30:38:ea:f1:ac:ee:4a:66:3f: 3c:37:f1:a5:8e:fb:4f:ad:09:7f:3f:45:a0:98:0b: 93:c0:ea:5f:2f:1a:96:cc:bc:cb:83:5c:8d:20:23: 2c:46:38:52:b7:f7:f2:52:4c:a2:46:01:a2:a0:ea: a5:c4:f1:9a:45:52:f4:68:95:39:8f:c6:ff:6b:d5: 9a:16:be:74:0f:ae:bb:fb:89:d2:47:ed:c4:06:39: 49:d9:45:80:f2:8f:b4:7f:92:37:93:40:ed:dc:7d: 7f:6f:f7:3c:8f:b2:5c:5e:3a:a5:0c:44:ff:33:af: 5c:86:33:0e:55:71:59:ed:e7:8c:db:2e:84:2a:b9: 21:80:47:86:4b:d5:ba:20:d4:ae:c4:36:15:02:a5: 0d:28:b4:5e:92:72:4a:5a:4d:b4:73:b2:27:d4:ab: 77:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:61:B5:03:BD:11:7E:87:48:3B:66:3F:96:9D:96:C3:09:CE:72:B4 X509v3 Authority Key Identifier: keyid:2A:37:8F:3F:C3:AC:5A:FF:D2:AE:F5:89:39:89:56:7E:2D:C4:0D:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/323830343a316635343a3a2f33322d3332203d3e20323732323230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:1f54::/32 Signature Algorithm: sha256WithRSAEncryption 32:6d:63:3a:b1:b8:e6:31:e6:94:68:bb:f5:45:88:c7:d8:95: 49:c7:6c:b1:cb:ef:2a:8e:59:22:39:8c:92:f7:c3:db:26:5f: e5:a8:4a:30:64:ea:e2:1d:6a:58:97:21:2d:2c:bc:fc:01:05: cc:35:04:75:c0:d0:aa:7c:46:93:19:84:ec:2f:48:3b:40:d6: f6:7b:33:0c:c1:45:5f:48:d1:73:c0:e1:76:1d:75:a1:85:9e: 75:9b:a8:ed:ad:48:2f:40:3a:ff:dc:ca:92:f5:ba:4a:0b:da: f4:a7:ae:57:c1:b3:21:56:98:b1:dd:1e:2c:ed:9c:b9:91:fc: 72:32:92:4f:7d:ca:7b:6e:86:e8:66:63:83:f6:88:f7:55:9d: 77:32:2a:67:57:38:37:54:59:fb:b4:4b:d0:03:55:d0:85:87: 69:0f:2e:bc:96:a4:44:37:85:15:4e:31:a8:1b:b9:67:3f:0f: a9:f7:5d:c1:0d:2c:9f:57:12:7d:f4:60:6c:4d:51:a8:f9:9b: 27:fd:fc:09:dc:16:5f:dc:ea:32:12:40:0a:89:73:b7:79:97: 9f:a5:e2:af:f6:82:68:7b:fc:09:80:4b:f0:c7:7d:67:87:9a: 7e:da:e4:d5:9e:1e:db:dd:66:ed:af:17:a0:2f:66:41:3c:23: dc:ec:bc:39 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUVqAIeZp46JEJc+P6vuGX6N7H8qYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEzNzhGM0ZDM0FDNUFGRkQyQUVGNTg5Mzk4OTU2N0Uy REM0MERCODAeFw0yNTAzMDUxODU1MDBaFw0yNjAzMDQxOTAwMDBaMDMxMTAvBgNV BAMTKDdBNjFCNTAzQkQxMTdFODc0ODNCNjYzRjk2OUQ5NkMzMDlDRTcyQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClMNcX+bkirdDUQM3pQiTnLerV 2Jrfn0cFHnYpTQA3VF5Ht5xE1M5dJdl1laqyto8olnIQKbi2alBWz3D3QfeCVEJg WW5acfwy47SclUiS51Z+pT+a7QAEQ4O0j8qHpjA46vGs7kpmPzw38aWO+0+tCX8/ RaCYC5PA6l8vGpbMvMuDXI0gIyxGOFK39/JSTKJGAaKg6qXE8ZpFUvRolTmPxv9r 1ZoWvnQPrrv7idJH7cQGOUnZRYDyj7R/kjeTQO3cfX9v9zyPslxeOqUMRP8zr1yG Mw5VcVnt54zbLoQquSGAR4ZL1bog1K7ENhUCpQ0otF6SckpaTbRzsifUq3eNAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUemG1A70RfodIO2Y/lp2WwwnOcrQwHwYDVR0j BBgwFoAUKjePP8OsWv/SrvWJOYlWfi3EDbgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmFkRDRXMkF5b25wRDRGTVZveENFQ2Z2c2VnN3hESGlrYUFqc2R0WEFj RXUvMS8yQTM3OEYzRkMzQUM1QUZGRDJBRUY1ODkzOTg5NTY3RTJEQzQwREI4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBMzc4RjNGQzNBQzVBRkZE MkFFRjU4OTM5ODk1NjdFMkRDNDBEQjguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0JhZEQ0VzJBeW9ucEQ0Rk1Wb3hDRUNmdnNlZzd4REhpa2FBanNkdFhBY0V1LzEv MzIzODMwMzQzYTMxNjYzNTM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMy MzIzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKAQfVDANBgkqhkiG9w0BAQsFAAOCAQEAMm1jOrG4 5jHmlGi79UWIx9iVScdsscvvKo5ZIjmMkvfD2yZf5ahKMGTq4h1qWJchLSy8/AEF zDUEdcDQqnxGkxmE7C9IO0DW9nszDMFFX0jRc8Dhdh11oYWedZuo7a1IL0A6/9zK kvW6Sgva9KeuV8GzIVaYsd0eLO2cuZH8cjKST33Ke26G6GZjg/aI91WddzIqZ1c4 N1RZ+7RL0ANV0IWHaQ8uvJakRDeFFU4xqBu5Zz8PqfddwQ0sn1cSffRgbE1RqPmb J/38CdwWX9zqMhJAColzt3mXn6Xir/aCaHv8CYBL8Md9Z4eaftrk1Z4e291m7a8X oC9mQTwj3Oy8OQ== -----END CERTIFICATE-----Generated at Mon Apr 7 13:10:48 2025 by rpki-client