$ rpki-client -vvf rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/323830343a356163303a343030303a3a2f33352d3335203d3e20323638373933.roa File: 323830343a356163303a343030303a3a2f33352d3335203d3e20323638373933.roa (raw, json) Hash identifier: QzhpgxKzUgGNPSHHob42r4LhWou646wTtAW/ZhY8ySk= Subject key identifier: 60:E7:F3:99:8F:87:F3:7D:95:9A:81:3D:67:6A:4A:02:30:FD:9E:F8 Certificate issuer: /CN=62542D04D7B086689C6E3FE7D77F27061824D478 Certificate serial: 615CB81AB1764ED1C11A3874F733F674DEA5A888 Authority key identifier: 62:54:2D:04:D7:B0:86:68:9C:6E:3F:E7:D7:7F:27:06:18:24:D4:78 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62542D04D7B086689C6E3FE7D77F27061824D478.cer Subject info access: rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/323830343a356163303a343030303a3a2f33352d3335203d3e20323638373933.roa Signing time: Mon 13 Jan 2025 18:14:40 +0000 ROA not before: Mon 13 Jan 2025 18:09:40 +0000 ROA not after: Mon 12 Jan 2026 18:14:40 +0000 asID: 268793 IP address blocks: 2804:5ac0:4000::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/62542D04D7B086689C6E3FE7D77F27061824D478.crl rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/62542D04D7B086689C6E3FE7D77F27061824D478.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62542D04D7B086689C6E3FE7D77F27061824D478.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Apr 2025 17:21:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:5c:b8:1a:b1:76:4e:d1:c1:1a:38:74:f7:33:f6:74:de:a5:a8:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62542D04D7B086689C6E3FE7D77F27061824D478 Validity Not Before: Jan 13 18:09:40 2025 GMT Not After : Jan 12 18:14:40 2026 GMT Subject: CN=60E7F3998F87F37D959A813D676A4A0230FD9EF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:72:17:78:5a:ab:8c:c5:37:3e:42:d1:93:9a: 96:c2:7f:85:67:e5:5b:af:0e:3d:13:9e:0a:c3:c7: 30:51:55:c9:67:1c:0e:e3:ef:5d:54:40:46:af:ec: a3:eb:7f:d4:6c:3e:ee:bf:4a:56:85:70:49:70:b9: 1c:13:a6:2b:bf:80:b6:c2:8a:38:76:7e:3f:5e:36: 8d:4a:1a:cc:93:59:d7:e4:62:e4:b6:db:ab:28:e5: 9a:af:97:f8:33:bd:84:90:0e:41:3e:14:22:60:ba: e4:e1:43:9f:c4:e5:a7:1a:fa:47:5d:bc:6c:7c:cd: ed:cf:3b:41:18:7c:e3:78:09:b4:c6:31:9b:62:5a: 31:a7:63:87:3d:e9:dc:69:f9:5f:bb:ce:04:eb:42: 89:de:06:ba:d5:b6:65:0a:0c:75:87:8b:8a:dc:a0: dd:87:9f:46:df:ad:4e:13:39:43:cf:b6:fc:22:81: ca:06:8a:f0:13:93:3e:6e:82:d0:2a:36:f1:0e:5c: 49:d9:67:f2:7a:cd:c2:a6:9a:1a:3e:af:af:76:38: 38:84:31:24:31:83:2f:ad:46:bb:47:f3:ab:95:14: e2:79:f9:64:32:a3:54:09:15:f1:13:e8:77:f0:7e: 0e:37:7f:cd:a5:14:69:a6:62:77:53:d9:54:37:3e: 11:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:E7:F3:99:8F:87:F3:7D:95:9A:81:3D:67:6A:4A:02:30:FD:9E:F8 X509v3 Authority Key Identifier: keyid:62:54:2D:04:D7:B0:86:68:9C:6E:3F:E7:D7:7F:27:06:18:24:D4:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/62542D04D7B086689C6E3FE7D77F27061824D478.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62542D04D7B086689C6E3FE7D77F27061824D478.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/323830343a356163303a343030303a3a2f33352d3335203d3e20323638373933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:5ac0:4000::/35 Signature Algorithm: sha256WithRSAEncryption 88:a8:ec:b5:b9:33:b2:9c:f9:85:83:07:da:22:5a:e5:b8:ed: b3:12:ed:56:84:0a:c2:85:1b:68:41:eb:c8:bf:84:74:ae:8b: 0f:fd:64:e7:f5:e0:f4:9a:90:d7:ab:1c:c0:5f:3a:64:cb:97: db:1c:ba:59:f4:ca:ce:f7:96:aa:0e:96:fe:24:7b:ed:ab:d9: 34:af:94:9c:56:0a:0a:f3:c2:fa:6a:d8:5b:9a:11:7b:1e:75: ba:51:7d:8d:1b:20:3f:1f:b6:e6:d1:9d:dd:0c:ad:f2:46:5c: 8b:46:3b:e7:1a:60:c6:f0:a4:44:20:ed:01:6c:ab:ef:be:38: 57:9d:6c:1f:81:4a:cd:8f:28:7f:30:06:88:9a:1b:a5:5a:33: 75:dc:df:9e:b4:c2:ec:cc:38:aa:f6:d4:2b:f3:4f:0f:cd:6c: 48:21:a4:24:30:75:65:8a:92:fb:87:1c:6a:1e:ee:b2:e5:b0: c8:e8:43:5f:ad:d7:60:1d:e4:0b:19:85:db:50:1e:bc:2c:81: e4:39:a6:c9:66:ac:f0:94:81:21:cb:34:56:3e:61:58:99:e8: e8:46:47:8d:61:c7:dd:14:4d:f0:4a:e3:60:f3:1f:e6:a6:34: 50:1d:5c:99:1a:4a:be:fa:3f:0d:48:37:32:53:89:a9:ef:2c: 99:06:95:00 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUYVy4GrF2TtHBGjh09zP2dN6lqIgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI1NDJEMDREN0IwODY2ODlDNkUzRkU3RDc3RjI3MDYx ODI0RDQ3ODAeFw0yNTAxMTMxODA5NDBaFw0yNjAxMTIxODE0NDBaMDMxMTAvBgNV BAMTKDYwRTdGMzk5OEY4N0YzN0Q5NTlBODEzRDY3NkE0QTAyMzBGRDlFRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBchd4WquMxTc+QtGTmpbCf4Vn 5VuvDj0TngrDxzBRVclnHA7j711UQEav7KPrf9RsPu6/SlaFcElwuRwTpiu/gLbC ijh2fj9eNo1KGsyTWdfkYuS226so5Zqvl/gzvYSQDkE+FCJguuThQ5/E5aca+kdd vGx8ze3PO0EYfON4CbTGMZtiWjGnY4c96dxp+V+7zgTrQoneBrrVtmUKDHWHi4rc oN2Hn0bfrU4TOUPPtvwigcoGivATkz5ugtAqNvEOXEnZZ/J6zcKmmho+r692ODiE MSQxgy+tRrtH86uVFOJ5+WQyo1QJFfET6Hfwfg43f82lFGmmYndT2VQ3PhF9AgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUYOfzmY+H832VmoE9Z2pKAjD9nvgwHwYDVR0j BBgwFoAUYlQtBNewhmicbj/n138nBhgk1HgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQnpLcWlMeHUyUHFtV3F4VVp1b0JCMWtxeHIydWZCcU1SYUhCdnNoZGh0 OWMvMS82MjU0MkQwNEQ3QjA4NjY4OUM2RTNGRTdENzdGMjcwNjE4MjRENDc4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYyNTQyRDA0RDdCMDg2Njg5 QzZFM0ZFN0Q3N0YyNzA2MTgyNEQ0NzguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0J6S3FpTHh1MlBxbVdxeFVadW9CQjFrcXhyMnVmQnFNUmFIQnZzaGRodDljLzEv MzIzODMwMzQzYTM1NjE2MzMwM2EzNDMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk M2UyMDMyMzYzODM3MzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSgEWsBAMA0GCSqGSIb3DQEBCwUA A4IBAQCIqOy1uTOynPmFgwfaIlrluO2zEu1WhArChRtoQevIv4R0rosP/WTn9eD0 mpDXqxzAXzpky5fbHLpZ9MrO95aqDpb+JHvtq9k0r5ScVgoK88L6athbmhF7HnW6 UX2NGyA/H7bm0Z3dDK3yRlyLRjvnGmDG8KREIO0BbKvvvjhXnWwfgUrNjyh/MAaI mhulWjN13N+etMLszDiq9tQr808PzWxIIaQkMHVlipL7hxxqHu6y5bDI6ENfrddg HeQLGYXbUB68LIHkOabJZqzwlIEhyzRWPmFYmejoRkeNYcfdFE3wSuNg8x/mpjRQ HVyZGkq++j8NSDcyU4mp7yyZBpUA -----END CERTIFICATE-----Generated at Tue Apr 22 10:28:08 2025 by rpki-client