$ rpki-client -vvf rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/323830343a336262343a63303a3a2f34322d3432203d3e20323636313636.roa File: 323830343a336262343a63303a3a2f34322d3432203d3e20323636313636.roa (raw, json) Hash identifier: YQsoURuD1fmDx47ol66X8MLWAq/u4DcgjKGpb3tA8CU= Subject key identifier: 1C:AC:C8:44:35:B2:6D:1F:0A:69:5F:6F:61:9D:57:1B:EF:49:68:1A Certificate issuer: /CN=A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63 Certificate serial: 25BD5DDF8A84DC0A23A04F8E4353F49FF897B6B3 Authority key identifier: A0:E7:81:7C:46:BA:B0:14:CC:0A:8E:B2:B6:DC:C3:C0:D7:2C:6E:63 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63.cer Subject info access: rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/323830343a336262343a63303a3a2f34322d3432203d3e20323636313636.roa Signing time: Thu 29 May 2025 17:14:40 +0000 ROA not before: Thu 29 May 2025 17:09:40 +0000 ROA not after: Thu 28 May 2026 17:14:40 +0000 asID: 266166 IP address blocks: 2804:3bb4:c0::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63.crl rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 12 Jun 2025 11:27:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:bd:5d:df:8a:84:dc:0a:23:a0:4f:8e:43:53:f4:9f:f8:97:b6:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63 Validity Not Before: May 29 17:09:40 2025 GMT Not After : May 28 17:14:40 2026 GMT Subject: CN=1CACC84435B26D1F0A695F6F619D571BEF49681A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:73:2b:34:70:7a:cb:ac:b7:b6:53:0b:17:da: 24:60:bf:32:ff:d9:f1:6c:ca:28:de:58:5c:3b:37: 45:3d:40:87:9a:9a:43:4f:fe:47:2b:17:89:1e:63: 28:5c:52:6d:71:f3:ee:43:ba:1a:06:96:34:ca:d5: bc:57:24:9a:ec:dd:1a:c1:ab:a4:49:59:05:b9:e8: 21:2b:f2:dd:6e:36:c4:45:90:f6:70:47:57:ea:17: a3:b7:b9:5c:6a:49:e2:4d:3b:01:96:24:ed:7f:17: 8b:8e:3a:6d:62:a3:21:87:a7:30:c4:83:ca:0a:83: 61:f3:9e:b0:f9:27:f7:65:0b:89:e1:d2:43:d6:73: 49:7b:c0:be:cf:9b:ac:b1:0a:ae:56:a7:a1:53:f7: dd:42:ce:5f:2a:ba:e6:b3:61:62:07:9d:f1:0f:d9: 05:d0:cf:b0:db:a5:a2:29:6f:f1:81:5f:5d:d9:60: 70:28:d2:a3:29:a8:cf:9c:73:4b:b9:bf:79:5e:2c: f7:26:8e:76:ec:c0:69:5e:73:2f:65:79:bd:8d:54: 15:13:0b:47:0f:ae:d5:a0:34:ca:be:23:84:08:c9: 54:ca:f6:cf:18:f4:21:b4:be:74:20:f1:dd:ea:9f: a1:6a:dc:73:63:97:3a:f3:0c:42:a8:23:5d:9b:53: 00:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:AC:C8:44:35:B2:6D:1F:0A:69:5F:6F:61:9D:57:1B:EF:49:68:1A X509v3 Authority Key Identifier: keyid:A0:E7:81:7C:46:BA:B0:14:CC:0A:8E:B2:B6:DC:C3:C0:D7:2C:6E:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/323830343a336262343a63303a3a2f34322d3432203d3e20323636313636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:3bb4:c0::/42 Signature Algorithm: sha256WithRSAEncryption 47:7d:cb:e1:e4:54:39:0e:a5:0a:39:aa:05:e3:b0:f9:2a:00: 1c:48:82:9e:ff:52:37:40:b3:c0:14:78:34:00:1c:71:8c:a2: 1b:3a:89:59:17:a9:c4:e9:76:6a:29:a0:e5:d1:25:e2:16:db: 39:30:5a:c9:94:c5:50:fd:b1:73:6e:de:1d:4b:14:24:a9:af: 92:4e:10:9f:66:fb:e8:69:41:ad:d3:16:7f:00:45:85:1e:92: d2:18:12:b2:f1:21:3f:c0:51:0e:c6:01:d8:56:f8:0a:ca:7a: 6b:a4:93:24:3b:f1:d2:69:c2:8b:c8:bb:94:e6:92:38:5a:5b: 85:b3:eb:99:b6:8d:fe:36:be:5a:52:8a:2e:84:7c:9a:e8:fd: 67:2f:a4:e5:56:c0:4c:31:77:e4:e5:17:89:67:d7:77:47:4a: 70:f8:ce:44:76:d9:f3:6c:a7:35:6e:6c:79:22:f1:42:5e:9e: d7:21:81:32:a5:f2:dc:91:ec:be:f2:d6:07:08:32:61:77:d4: 90:57:58:7e:b1:56:9b:1d:a0:f9:da:35:b3:f7:61:6b:59:e9: e5:d2:39:d5:c8:e1:c8:c8:eb:6c:17:11:1c:18:ca:eb:e5:69: 9d:a6:19:d8:b3:ff:c8:47:9a:90:50:1b:79:79:e4:f5:4b:df: e8:3f:81:f0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIUJb1d34qE3AojoE+OQ1P0n/iXtrMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBFNzgxN0M0NkJBQjAxNENDMEE4RUIyQjZEQ0MzQzBE NzJDNkU2MzAeFw0yNTA1MjkxNzA5NDBaFw0yNjA1MjgxNzE0NDBaMDMxMTAvBgNV BAMTKDFDQUNDODQ0MzVCMjZEMUYwQTY5NUY2RjYxOUQ1NzFCRUY0OTY4MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrcys0cHrLrLe2UwsX2iRgvzL/ 2fFsyijeWFw7N0U9QIeamkNP/kcrF4keYyhcUm1x8+5DuhoGljTK1bxXJJrs3RrB q6RJWQW56CEr8t1uNsRFkPZwR1fqF6O3uVxqSeJNOwGWJO1/F4uOOm1ioyGHpzDE g8oKg2HznrD5J/dlC4nh0kPWc0l7wL7Pm6yxCq5Wp6FT991Czl8quuazYWIHnfEP 2QXQz7DbpaIpb/GBX13ZYHAo0qMpqM+cc0u5v3leLPcmjnbswGlecy9leb2NVBUT C0cPrtWgNMq+I4QIyVTK9s8Y9CG0vnQg8d3qn6Fq3HNjlzrzDEKoI12bUwALAgMB AAGjggJYMIICVDAdBgNVHQ4EFgQUHKzIRDWybR8KaV9vYZ1XG+9JaBowHwYDVR0j BBgwFoAUoOeBfEa6sBTMCo6yttzDwNcsbmMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQnJhN3luWnhCZ3d2R2c5RVpMUFpTNmRwOFJhUmhKS1VFTWcyRTFwWHFr WmMvMC9BMEU3ODE3QzQ2QkFCMDE0Q0MwQThFQjJCNkRDQzNDMEQ3MkM2RTYzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EwRTc4MTdDNDZCQUIwMTRD QzBBOEVCMkI2RENDM0MwRDcyQzZFNjMuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0JyYTd5blp4Qmd3dkdnOUVaTFBaUzZkcDhSYVJoSktVRU1nMkUxcFhxa1pjLzAv MzIzODMwMzQzYTMzNjI2MjM0M2E2MzMwM2EzYTJmMzQzMjJkMzQzMjIwM2QzZTIw MzIzNjM2MzEzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGKAQ7tADAMA0GCSqGSIb3DQEBCwUAA4IB AQBHfcvh5FQ5DqUKOaoF47D5KgAcSIKe/1I3QLPAFHg0ABxxjKIbOolZF6nE6XZq KaDl0SXiFts5MFrJlMVQ/bFzbt4dSxQkqa+SThCfZvvoaUGt0xZ/AEWFHpLSGBKy 8SE/wFEOxgHYVvgKynprpJMkO/HSacKLyLuU5pI4WluFs+uZto3+Nr5aUoouhHya 6P1nL6TlVsBMMXfk5ReJZ9d3R0pw+M5EdtnzbKc1bmx5IvFCXp7XIYEypfLckey+ 8tYHCDJhd9SQV1h+sVabHaD52jWz92FrWenl0jnVyOHIyOtsFxEcGMrr5WmdphnY s//IR5qQUBt5eeT1S9/oP4Hw -----END CERTIFICATE-----Generated at Thu Jun 12 00:24:17 2025 by rpki-client