$ rpki-client -vvf rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/323830343a356163303a343030303a3a2f33342d3334203d3e20323638373933.roa File: 323830343a356163303a343030303a3a2f33342d3334203d3e20323638373933.roa (raw, json) Hash identifier: 5foGw1oARRshcUalysmaHmQlEwE2KDFi8NOJbJTYFo4= Subject key identifier: EB:9C:82:C4:8B:EE:A3:6C:AB:21:AB:59:E2:7D:F0:A2:6F:99:83:88 Certificate issuer: /CN=62542D04D7B086689C6E3FE7D77F27061824D478 Certificate serial: 57E6725F1A0A15B906B0B0399A20116739BE80AD Authority key identifier: 62:54:2D:04:D7:B0:86:68:9C:6E:3F:E7:D7:7F:27:06:18:24:D4:78 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62542D04D7B086689C6E3FE7D77F27061824D478.cer Subject info access: rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/323830343a356163303a343030303a3a2f33342d3334203d3e20323638373933.roa Signing time: Mon 13 Jan 2025 18:14:37 +0000 ROA not before: Mon 13 Jan 2025 18:09:37 +0000 ROA not after: Mon 12 Jan 2026 18:14:37 +0000 asID: 268793 IP address blocks: 2804:5ac0:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/62542D04D7B086689C6E3FE7D77F27061824D478.crl rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/62542D04D7B086689C6E3FE7D77F27061824D478.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62542D04D7B086689C6E3FE7D77F27061824D478.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Apr 2025 17:21:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:e6:72:5f:1a:0a:15:b9:06:b0:b0:39:9a:20:11:67:39:be:80:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62542D04D7B086689C6E3FE7D77F27061824D478 Validity Not Before: Jan 13 18:09:37 2025 GMT Not After : Jan 12 18:14:37 2026 GMT Subject: CN=EB9C82C48BEEA36CAB21AB59E27DF0A26F998388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fe:c6:de:34:69:c3:11:b0:7b:3e:1a:2f:92: c7:3e:fd:50:cf:61:e1:4a:2a:bb:b3:82:91:53:49: a7:5e:73:a4:26:e3:a5:fb:1a:b7:39:bd:7e:79:62: e1:db:b8:6d:68:cf:12:64:d4:c9:55:29:6f:c5:13: ad:97:61:e6:74:e0:11:ca:f7:e3:9f:a6:23:e2:c7: 40:65:fe:25:95:ce:54:47:b8:4c:e3:a7:20:28:d0: a3:5e:03:05:c6:bf:fd:9a:b0:c8:d5:8f:da:9e:bc: 35:3e:52:7d:3d:cb:f9:c1:87:69:b5:51:8a:84:0f: d5:53:08:b9:0b:2d:7d:f5:a4:83:52:cc:ba:2d:b6: 73:21:39:a0:c2:08:c8:8a:ab:e8:8e:05:c3:dd:a2: ab:6a:8e:c4:d5:0f:e9:6b:53:03:46:46:67:09:f6: 9e:13:3a:91:8a:f7:fa:d9:e0:68:89:2b:5a:77:16: 88:4d:0c:c8:fa:f6:51:d8:69:fd:db:c3:1d:1a:83: 4f:74:09:ec:ae:c8:c7:71:ae:c2:e0:cd:2e:09:37: 02:4a:7a:94:b8:fd:e9:b3:c7:e2:58:8d:d6:de:0e: 5e:93:da:43:6a:d7:59:10:d5:35:ce:1e:76:96:cf: e0:10:57:d5:96:5a:1d:af:53:e5:6c:26:c5:fd:5b: d7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:9C:82:C4:8B:EE:A3:6C:AB:21:AB:59:E2:7D:F0:A2:6F:99:83:88 X509v3 Authority Key Identifier: keyid:62:54:2D:04:D7:B0:86:68:9C:6E:3F:E7:D7:7F:27:06:18:24:D4:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/62542D04D7B086689C6E3FE7D77F27061824D478.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62542D04D7B086689C6E3FE7D77F27061824D478.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/323830343a356163303a343030303a3a2f33342d3334203d3e20323638373933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:5ac0:4000::/34 Signature Algorithm: sha256WithRSAEncryption 18:43:7a:99:09:03:4f:3c:eb:90:c0:f0:a6:d7:fb:a7:81:f8: bf:02:dc:7f:e6:0b:90:eb:5c:5f:6b:57:3c:86:36:ff:4f:85: 6b:aa:04:20:0d:9d:7e:76:7f:58:61:10:f8:42:73:53:06:74: 61:85:31:da:5a:29:e5:e9:05:96:eb:f3:06:96:f1:99:fe:ca: 8e:7e:0a:7c:8c:4a:ee:8b:82:8c:85:6e:83:59:db:da:46:5c: 02:19:d6:48:99:fa:2e:e6:36:48:50:dc:9f:38:b9:5f:48:5f: cb:30:c2:cb:91:b5:0e:03:8c:22:04:1d:10:30:91:43:b9:ac: 1b:c4:ae:b0:71:29:dd:c3:a8:35:24:ab:f8:72:c9:00:5b:f8: a3:06:47:b0:25:96:e2:90:00:e3:36:5b:20:02:50:4d:33:b6: 2e:05:6e:65:3b:bd:75:55:f0:5d:e1:ef:5f:8b:ac:63:4b:87: 34:fd:52:33:27:f7:18:bb:30:af:51:2e:3b:ce:4b:e1:e0:63: 86:9f:58:f2:54:a5:88:a3:b7:d9:99:2d:b6:1d:50:27:f4:97: a4:53:e8:76:4d:05:8f:25:56:ef:f6:78:ef:a9:f8:fe:02:28: 3e:da:a1:79:d5:69:5e:3b:23:6c:5f:fd:1e:3e:4b:ff:5c:f2: be:84:aa:29 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUV+ZyXxoKFbkGsLA5miARZzm+gK0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI1NDJEMDREN0IwODY2ODlDNkUzRkU3RDc3RjI3MDYx ODI0RDQ3ODAeFw0yNTAxMTMxODA5MzdaFw0yNjAxMTIxODE0MzdaMDMxMTAvBgNV BAMTKEVCOUM4MkM0OEJFRUEzNkNBQjIxQUI1OUUyN0RGMEEyNkY5OTgzODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH/sbeNGnDEbB7Phovksc+/VDP YeFKKruzgpFTSadec6Qm46X7Grc5vX55YuHbuG1ozxJk1MlVKW/FE62XYeZ04BHK 9+OfpiPix0Bl/iWVzlRHuEzjpyAo0KNeAwXGv/2asMjVj9qevDU+Un09y/nBh2m1 UYqED9VTCLkLLX31pINSzLottnMhOaDCCMiKq+iOBcPdoqtqjsTVD+lrUwNGRmcJ 9p4TOpGK9/rZ4GiJK1p3FohNDMj69lHYaf3bwx0ag090CeyuyMdxrsLgzS4JNwJK epS4/emzx+JYjdbeDl6T2kNq11kQ1TXOHnaWz+AQV9WWWh2vU+VsJsX9W9cvAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQU65yCxIvuo2yrIatZ4n3wom+Zg4gwHwYDVR0j BBgwFoAUYlQtBNewhmicbj/n138nBhgk1HgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQnpLcWlMeHUyUHFtV3F4VVp1b0JCMWtxeHIydWZCcU1SYUhCdnNoZGh0 OWMvMS82MjU0MkQwNEQ3QjA4NjY4OUM2RTNGRTdENzdGMjcwNjE4MjRENDc4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYyNTQyRDA0RDdCMDg2Njg5 QzZFM0ZFN0Q3N0YyNzA2MTgyNEQ0NzguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0J6S3FpTHh1MlBxbVdxeFVadW9CQjFrcXhyMnVmQnFNUmFIQnZzaGRodDljLzEv MzIzODMwMzQzYTM1NjE2MzMwM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzYzODM3MzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEWsBAMA0GCSqGSIb3DQEBCwUA A4IBAQAYQ3qZCQNPPOuQwPCm1/ungfi/Atx/5guQ61xfa1c8hjb/T4VrqgQgDZ1+ dn9YYRD4QnNTBnRhhTHaWinl6QWW6/MGlvGZ/sqOfgp8jErui4KMhW6DWdvaRlwC GdZImfou5jZIUNyfOLlfSF/LMMLLkbUOA4wiBB0QMJFDuawbxK6wcSndw6g1JKv4 cskAW/ijBkewJZbikADjNlsgAlBNM7YuBW5lO711VfBd4e9fi6xjS4c0/VIzJ/cY uzCvUS47zkvh4GOGn1jyVKWIo7fZmS22HVAn9JekU+h2TQWPJVbv9njvqfj+Aig+ 2qF51WleOyNsX/0ePkv/XPK+hKop -----END CERTIFICATE-----Generated at Mon Apr 21 19:22:41 2025 by rpki-client