$ rpki-client -vvf rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/323830343a356163303a363030303a3a2f33352d3335203d3e20323638373933.roa File: 323830343a356163303a363030303a3a2f33352d3335203d3e20323638373933.roa (raw, json) Hash identifier: Pe9mHQDOLadoPis0zkb32HPsuv/Ah/d6jEToGKUYQv4= Subject key identifier: 7A:95:17:32:3D:27:D9:F5:8A:F5:17:6E:BC:39:AE:60:EE:58:AD:AA Certificate issuer: /CN=62542D04D7B086689C6E3FE7D77F27061824D478 Certificate serial: 3BB842353AAA670F5E1C4E9F331D9F42FFCF244C Authority key identifier: 62:54:2D:04:D7:B0:86:68:9C:6E:3F:E7:D7:7F:27:06:18:24:D4:78 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62542D04D7B086689C6E3FE7D77F27061824D478.cer Subject info access: rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/323830343a356163303a363030303a3a2f33352d3335203d3e20323638373933.roa Signing time: Mon 13 Jan 2025 18:14:59 +0000 ROA not before: Mon 13 Jan 2025 18:09:59 +0000 ROA not after: Mon 12 Jan 2026 18:14:59 +0000 asID: 268793 IP address blocks: 2804:5ac0:6000::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/62542D04D7B086689C6E3FE7D77F27061824D478.crl rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/62542D04D7B086689C6E3FE7D77F27061824D478.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62542D04D7B086689C6E3FE7D77F27061824D478.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 22 Feb 2025 02:23:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:b8:42:35:3a:aa:67:0f:5e:1c:4e:9f:33:1d:9f:42:ff:cf:24:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62542D04D7B086689C6E3FE7D77F27061824D478 Validity Not Before: Jan 13 18:09:59 2025 GMT Not After : Jan 12 18:14:59 2026 GMT Subject: CN=7A9517323D27D9F58AF5176EBC39AE60EE58ADAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4c:f7:86:db:ee:d0:31:66:f2:c2:88:1d:23: 55:e0:d2:d6:ce:08:80:9c:44:58:2f:94:af:31:33: 50:69:f5:99:4d:99:8b:f0:66:79:74:d1:f5:1f:10: 0d:94:d0:58:6f:40:53:b1:01:49:b0:af:d8:d1:0d: c5:03:13:11:1c:90:a6:4d:a8:32:f3:1c:a7:e5:cb: eb:43:f9:13:63:19:8e:fd:23:c6:55:59:f6:c8:e6: f2:08:c7:41:0f:3b:19:16:71:41:b2:c6:ea:04:7d: 2c:c2:44:a7:c4:fa:0b:c2:22:25:fe:21:b0:f5:cf: 96:11:2e:e2:5a:2a:91:8e:d1:40:18:76:d6:c8:5d: 9f:05:e0:67:b2:37:22:ff:f7:19:76:00:95:10:fd: 28:c6:0d:de:10:31:2e:88:89:06:66:58:ea:d3:ea: 0c:3c:4a:a9:4a:dc:44:34:b6:19:6f:6f:c5:10:88: 79:34:42:91:66:a2:9b:cc:4e:cf:17:82:6e:3d:86: 50:7b:87:73:b2:5c:e8:69:8f:9f:24:06:9d:2e:da: ab:c1:c9:12:33:6f:75:8b:d9:91:b5:ea:4a:ab:03: 78:48:3a:6f:99:4f:ae:d0:c6:ec:da:98:3a:0b:ba: 21:2b:73:19:ad:58:23:c7:81:8c:bc:e8:7b:83:3c: 68:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:95:17:32:3D:27:D9:F5:8A:F5:17:6E:BC:39:AE:60:EE:58:AD:AA X509v3 Authority Key Identifier: keyid:62:54:2D:04:D7:B0:86:68:9C:6E:3F:E7:D7:7F:27:06:18:24:D4:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/62542D04D7B086689C6E3FE7D77F27061824D478.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62542D04D7B086689C6E3FE7D77F27061824D478.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/323830343a356163303a363030303a3a2f33352d3335203d3e20323638373933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:5ac0:6000::/35 Signature Algorithm: sha256WithRSAEncryption ce:9e:02:bf:c3:75:64:4b:9b:5e:dd:69:17:00:85:6e:9d:c9: 38:d1:8a:5c:3a:a9:3c:47:d6:af:e8:67:85:f9:ca:9d:1c:0b: eb:55:b1:58:a8:5f:1d:cc:b5:5c:ba:c3:d9:c6:ce:79:5a:9c: b9:d1:9a:f7:24:65:65:52:e6:4c:19:4c:34:52:9b:c5:39:4d: 04:e1:e6:8b:4f:2c:64:fa:a9:5b:39:14:e8:4a:a3:37:94:07: fa:19:01:67:05:06:9f:12:fe:83:6f:06:03:8a:b8:aa:b8:30: b9:0a:d2:3a:57:6b:6c:da:a7:17:5b:9d:68:a4:f1:20:c4:5f: 32:20:5d:65:17:74:a2:88:93:19:eb:f6:d2:e6:de:5a:04:76: f3:2e:d1:01:61:bc:30:31:56:cc:4c:4f:23:9d:66:6d:83:37: 7e:9f:a9:1a:e7:ae:44:ec:fb:9f:f1:25:13:c5:81:fe:f3:e3: 35:f9:12:9e:83:44:43:93:c6:e8:44:9c:d9:d3:f6:bc:09:e3: 5d:0e:4a:d0:35:27:bc:8b:17:13:83:30:0b:8e:f9:23:16:50: 9f:16:1b:31:85:e3:1e:f9:7b:a0:9d:cb:6e:d6:1c:94:f8:ea: f4:96:cb:48:c8:cc:27:95:25:bd:bc:8e:16:8d:bd:bb:2d:62: 35:8f:ff:e4 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUO7hCNTqqZw9eHE6fMx2fQv/PJEwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI1NDJEMDREN0IwODY2ODlDNkUzRkU3RDc3RjI3MDYx ODI0RDQ3ODAeFw0yNTAxMTMxODA5NTlaFw0yNjAxMTIxODE0NTlaMDMxMTAvBgNV BAMTKDdBOTUxNzMyM0QyN0Q5RjU4QUY1MTc2RUJDMzlBRTYwRUU1OEFEQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8TPeG2+7QMWbywogdI1Xg0tbO CICcRFgvlK8xM1Bp9ZlNmYvwZnl00fUfEA2U0FhvQFOxAUmwr9jRDcUDExEckKZN qDLzHKfly+tD+RNjGY79I8ZVWfbI5vIIx0EPOxkWcUGyxuoEfSzCRKfE+gvCIiX+ IbD1z5YRLuJaKpGO0UAYdtbIXZ8F4GeyNyL/9xl2AJUQ/SjGDd4QMS6IiQZmWOrT 6gw8SqlK3EQ0thlvb8UQiHk0QpFmopvMTs8Xgm49hlB7h3OyXOhpj58kBp0u2qvB yRIzb3WL2ZG16kqrA3hIOm+ZT67QxuzamDoLuiErcxmtWCPHgYy86HuDPGgjAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUepUXMj0n2fWK9RduvDmuYO5YraowHwYDVR0j BBgwFoAUYlQtBNewhmicbj/n138nBhgk1HgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQnpLcWlMeHUyUHFtV3F4VVp1b0JCMWtxeHIydWZCcU1SYUhCdnNoZGh0 OWMvMS82MjU0MkQwNEQ3QjA4NjY4OUM2RTNGRTdENzdGMjcwNjE4MjRENDc4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYyNTQyRDA0RDdCMDg2Njg5 QzZFM0ZFN0Q3N0YyNzA2MTgyNEQ0NzguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0J6S3FpTHh1MlBxbVdxeFVadW9CQjFrcXhyMnVmQnFNUmFIQnZzaGRodDljLzEv MzIzODMwMzQzYTM1NjE2MzMwM2EzNjMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk M2UyMDMyMzYzODM3MzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSgEWsBgMA0GCSqGSIb3DQEBCwUA A4IBAQDOngK/w3VkS5te3WkXAIVunck40YpcOqk8R9av6GeF+cqdHAvrVbFYqF8d zLVcusPZxs55Wpy50Zr3JGVlUuZMGUw0UpvFOU0E4eaLTyxk+qlbORToSqM3lAf6 GQFnBQafEv6DbwYDiriquDC5CtI6V2ts2qcXW51opPEgxF8yIF1lF3SiiJMZ6/bS 5t5aBHbzLtEBYbwwMVbMTE8jnWZtgzd+n6ka565E7Puf8SUTxYH+8+M1+RKeg0RD k8boRJzZ0/a8CeNdDkrQNSe8ixcTgzALjvkjFlCfFhsxheMe+Xugnctu1hyU+Or0 lstIyMwnlSW9vI4Wjb27LWI1j//k -----END CERTIFICATE-----Generated at Fri Feb 21 12:13:36 2025 by rpki-client