$ rpki-client -vvf rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/323830343a336262343a3130303a3a2f34322d3432203d3e20323636313636.roa File: 323830343a336262343a3130303a3a2f34322d3432203d3e20323636313636.roa (raw, json) Hash identifier: Q/e5JNvth+tys9ahk2QNSwJyg8xAf9CQ474kBmTAFxQ= Subject key identifier: 45:1B:46:52:0C:62:F4:25:56:D4:50:6B:4F:00:B1:9F:E3:73:38:08 Certificate issuer: /CN=A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63 Certificate serial: 776B12E453D75EDED62608728F70AAE19CA185C0 Authority key identifier: A0:E7:81:7C:46:BA:B0:14:CC:0A:8E:B2:B6:DC:C3:C0:D7:2C:6E:63 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63.cer Subject info access: rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/323830343a336262343a3130303a3a2f34322d3432203d3e20323636313636.roa Signing time: Thu 29 May 2025 17:14:42 +0000 ROA not before: Thu 29 May 2025 17:09:42 +0000 ROA not after: Thu 28 May 2026 17:14:42 +0000 asID: 266166 IP address blocks: 2804:3bb4:100::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63.crl rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 11 Jun 2025 17:05:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:6b:12:e4:53:d7:5e:de:d6:26:08:72:8f:70:aa:e1:9c:a1:85:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63 Validity Not Before: May 29 17:09:42 2025 GMT Not After : May 28 17:14:42 2026 GMT Subject: CN=451B46520C62F42556D4506B4F00B19FE3733808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a1:2a:99:2b:53:8d:c0:e2:60:2d:21:e7:ec: 56:7d:d5:1e:43:79:aa:4b:3c:54:19:74:3c:c8:94: 5c:6c:03:71:73:4d:dd:9d:ad:48:24:e0:09:0c:6c: 42:35:de:4d:76:df:07:47:6a:69:a8:c5:ee:dc:15: 4b:c7:ca:93:34:ba:a7:ae:1d:41:67:1d:93:90:90: 28:39:06:4d:cf:ee:e9:96:8d:df:cb:34:b5:9d:3f: f1:d0:a1:cc:49:33:f0:32:90:e5:d9:fb:98:ab:2a: 23:f2:69:90:1d:23:2a:2b:29:94:96:d5:ab:50:25: c9:db:71:5f:80:9f:71:eb:b5:30:9e:0b:04:5c:7e: fd:af:4b:8e:20:c3:a8:b6:8c:91:3a:29:db:21:be: c0:c9:fc:26:15:f6:67:0d:c7:0a:f8:fe:f3:2a:b8: 77:77:fd:08:bf:80:1b:f0:ce:01:0c:30:72:e4:3e: 41:a9:54:de:1b:5a:4a:a0:ea:e3:13:b8:3f:58:5e: 26:a0:65:74:14:08:d8:a9:85:41:8b:01:27:6e:0a: fc:74:63:b8:a0:b3:d9:1d:c8:93:2d:4e:37:3e:60: d7:d3:78:c3:26:dd:d1:65:3b:00:b3:8d:fe:70:ef: 0c:a3:4b:c5:a9:75:44:be:34:9a:6d:a2:ae:e8:16: a5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:1B:46:52:0C:62:F4:25:56:D4:50:6B:4F:00:B1:9F:E3:73:38:08 X509v3 Authority Key Identifier: keyid:A0:E7:81:7C:46:BA:B0:14:CC:0A:8E:B2:B6:DC:C3:C0:D7:2C:6E:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/323830343a336262343a3130303a3a2f34322d3432203d3e20323636313636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:3bb4:100::/42 Signature Algorithm: sha256WithRSAEncryption 56:94:89:fc:15:b7:1f:f6:0b:03:51:4e:84:5a:d3:53:ea:56: df:f0:f0:05:71:89:85:7a:b7:9c:a8:cf:4c:a8:bf:15:b9:65: 6c:14:1a:b8:95:9c:20:f2:b3:c3:17:4b:e5:40:01:d5:d2:f6: 23:24:ef:6b:95:b4:90:98:a5:39:5e:36:6e:7a:eb:c2:56:11: 14:ea:dd:bc:c5:36:ea:e2:e7:ac:51:c1:72:84:d5:8d:25:d9: bb:27:0f:ea:59:60:68:56:0f:26:a0:9f:fa:40:3b:d8:e6:b7: 64:24:35:57:88:54:a0:14:e4:0f:0a:ec:a1:e3:6f:76:37:8b: ea:3c:0f:97:16:a4:49:f4:f2:c7:3f:e9:e4:86:f0:48:ca:1f: 62:36:3c:6e:4a:e5:0b:16:c4:d3:b0:c0:86:c7:0c:dc:01:ab: 87:81:29:eb:e3:9b:6d:59:c3:63:4f:14:d7:f1:db:4f:57:22: c6:30:c5:a7:6c:ae:3a:3f:5b:ef:39:e4:8a:17:15:0f:50:59: ee:d2:09:b9:5e:19:43:57:07:f3:85:5e:26:35:9c:3b:79:88: 35:a1:a6:ca:cb:6d:1a:fa:e0:1b:95:bb:82:65:4b:78:bd:4c: 34:1f:87:94:a1:d9:69:33:49:56:f2:f4:bc:05:02:16:04:98: 29:c8:4f:23 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgIUd2sS5FPXXt7WJghyj3Cq4ZyhhcAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBFNzgxN0M0NkJBQjAxNENDMEE4RUIyQjZEQ0MzQzBE NzJDNkU2MzAeFw0yNTA1MjkxNzA5NDJaFw0yNjA1MjgxNzE0NDJaMDMxMTAvBgNV BAMTKDQ1MUI0NjUyMEM2MkY0MjU1NkQ0NTA2QjRGMDBCMTlGRTM3MzM4MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjoSqZK1ONwOJgLSHn7FZ91R5D eapLPFQZdDzIlFxsA3FzTd2drUgk4AkMbEI13k123wdHammoxe7cFUvHypM0uqeu HUFnHZOQkCg5Bk3P7umWjd/LNLWdP/HQocxJM/AykOXZ+5irKiPyaZAdIyorKZSW 1atQJcnbcV+An3HrtTCeCwRcfv2vS44gw6i2jJE6KdshvsDJ/CYV9mcNxwr4/vMq uHd3/Qi/gBvwzgEMMHLkPkGpVN4bWkqg6uMTuD9YXiagZXQUCNiphUGLASduCvx0 Y7igs9kdyJMtTjc+YNfTeMMm3dFlOwCzjf5w7wyjS8WpdUS+NJptoq7oFqW1AgMB AAGjggJaMIICVjAdBgNVHQ4EFgQURRtGUgxi9CVW1FBrTwCxn+NzOAgwHwYDVR0j BBgwFoAUoOeBfEa6sBTMCo6yttzDwNcsbmMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQnJhN3luWnhCZ3d2R2c5RVpMUFpTNmRwOFJhUmhKS1VFTWcyRTFwWHFr WmMvMC9BMEU3ODE3QzQ2QkFCMDE0Q0MwQThFQjJCNkRDQzNDMEQ3MkM2RTYzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EwRTc4MTdDNDZCQUIwMTRD QzBBOEVCMkI2RENDM0MwRDcyQzZFNjMuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0JyYTd5blp4Qmd3dkdnOUVaTFBaUzZkcDhSYVJoSktVRU1nMkUxcFhxa1pjLzAv MzIzODMwMzQzYTMzNjI2MjM0M2EzMTMwMzAzYTNhMmYzNDMyMmQzNDMyMjAzZDNl MjAzMjM2MzYzMTM2MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwYoBDu0AQAwDQYJKoZIhvcNAQELBQAD ggEBAFaUifwVtx/2CwNRToRa01PqVt/w8AVxiYV6t5yoz0yovxW5ZWwUGriVnCDy s8MXS+VAAdXS9iMk72uVtJCYpTleNm5668JWERTq3bzFNuri56xRwXKE1Y0l2bsn D+pZYGhWDyagn/pAO9jmt2QkNVeIVKAU5A8K7KHjb3Y3i+o8D5cWpEn08sc/6eSG 8EjKH2I2PG5K5QsWxNOwwIbHDNwBq4eBKevjm21Zw2NPFNfx209XIsYwxadsrjo/ W+855IoXFQ9QWe7SCbleGUNXB/OFXiY1nDt5iDWhpsrLbRr64BuVu4JlS3i9TDQf h5Sh2WkzSVby9LwFAhYEmCnITyM= -----END CERTIFICATE-----Generated at Tue Jun 10 19:40:09 2025 by rpki-client