$ rpki-client -vvf rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/323830343a356163303a653030303a3a2f33352d3335203d3e20323638373933.roa File: 323830343a356163303a653030303a3a2f33352d3335203d3e20323638373933.roa (raw, json) Hash identifier: LMp7vRQV2GvLJJ7oCF9FZjdPjqGvu+pd2BPzKwHeHvI= Subject key identifier: A1:6C:28:47:7C:DF:BB:22:95:AF:BD:C2:15:0C:3C:24:71:7B:74:61 Certificate issuer: /CN=62542D04D7B086689C6E3FE7D77F27061824D478 Certificate serial: 7C498C875C2B5AEF8B3464B75D149EB9723F74AE Authority key identifier: 62:54:2D:04:D7:B0:86:68:9C:6E:3F:E7:D7:7F:27:06:18:24:D4:78 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62542D04D7B086689C6E3FE7D77F27061824D478.cer Subject info access: rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/323830343a356163303a653030303a3a2f33352d3335203d3e20323638373933.roa Signing time: Mon 13 Jan 2025 18:14:43 +0000 ROA not before: Mon 13 Jan 2025 18:09:43 +0000 ROA not after: Mon 12 Jan 2026 18:14:43 +0000 asID: 268793 IP address blocks: 2804:5ac0:e000::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/62542D04D7B086689C6E3FE7D77F27061824D478.crl rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/62542D04D7B086689C6E3FE7D77F27061824D478.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62542D04D7B086689C6E3FE7D77F27061824D478.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 22 Feb 2025 02:23:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:49:8c:87:5c:2b:5a:ef:8b:34:64:b7:5d:14:9e:b9:72:3f:74:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62542D04D7B086689C6E3FE7D77F27061824D478 Validity Not Before: Jan 13 18:09:43 2025 GMT Not After : Jan 12 18:14:43 2026 GMT Subject: CN=A16C28477CDFBB2295AFBDC2150C3C24717B7461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:f8:da:e4:36:19:93:41:f8:4d:1a:08:9e:fa: 52:2f:5d:15:1a:73:d2:6b:5b:21:a6:c4:a1:00:38: 73:f4:3d:c3:45:71:ea:5e:b7:66:b6:fc:7b:fa:b5: 90:b0:90:2f:20:f0:01:1e:4a:11:c4:0f:42:e2:a3: 18:fb:00:3a:c6:e9:ed:bb:58:8b:f7:f0:72:b6:b0: 58:ad:f5:2c:3f:87:32:af:da:d5:d6:5e:d2:5f:74: 10:0a:fc:e6:02:93:6c:ea:a0:0d:56:d6:41:1d:99: da:6e:fe:a0:ed:60:98:bd:2a:2e:c8:d9:af:7f:47: ce:d4:6c:93:88:36:d6:cf:c5:bd:af:ff:59:b6:19: dd:9f:06:1f:75:13:e4:3e:55:73:ed:17:77:18:32: 5c:0e:ed:27:36:23:67:00:c8:47:b4:dd:53:db:25: e0:64:13:2d:15:b7:1d:20:e8:88:68:2f:ff:aa:9d: 86:a2:63:8e:dd:10:82:de:30:47:ef:cf:f3:6d:66: 09:ae:1a:08:4a:dc:92:ff:30:33:32:2b:6e:dd:05: 7d:50:b0:a2:44:2b:46:16:ba:26:5e:af:c3:54:d7: 95:3e:83:52:08:c0:a2:54:25:ed:3a:77:f7:c2:b6: 3e:6d:27:c7:00:8d:bd:8e:96:46:2f:60:9a:70:be: b7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:6C:28:47:7C:DF:BB:22:95:AF:BD:C2:15:0C:3C:24:71:7B:74:61 X509v3 Authority Key Identifier: keyid:62:54:2D:04:D7:B0:86:68:9C:6E:3F:E7:D7:7F:27:06:18:24:D4:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/62542D04D7B086689C6E3FE7D77F27061824D478.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62542D04D7B086689C6E3FE7D77F27061824D478.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/323830343a356163303a653030303a3a2f33352d3335203d3e20323638373933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:5ac0:e000::/35 Signature Algorithm: sha256WithRSAEncryption 86:4d:9f:62:cc:a2:b1:a4:79:6e:a4:5e:48:c8:76:cb:a3:fb: 3c:d7:75:9c:09:e9:17:e4:51:ad:00:b4:53:62:44:84:34:fe: 4b:b3:2a:80:92:9e:4f:8b:0b:15:37:6f:19:6b:0c:d7:53:1b: 06:23:07:2a:11:37:c7:4a:d1:d8:fc:bc:6e:a0:06:8b:ee:62: eb:89:4c:44:84:ce:b2:a0:b2:d8:6c:cf:3f:43:9f:22:7e:83: d7:c9:f3:71:68:0d:d7:1e:73:50:58:f2:a5:1c:c7:32:68:2f: 0f:08:f0:dc:a5:0f:3b:17:38:16:3f:79:09:34:61:c8:60:7c: 5c:4a:99:35:ca:d1:e3:9f:cb:0d:f3:24:2c:3b:30:95:87:f5: 35:78:99:3a:90:a7:ca:8d:71:52:36:36:a4:4f:11:94:a7:1e: bd:af:1c:29:6e:8f:3c:93:31:31:5d:93:1b:76:2b:0e:59:d5: 7e:bf:67:9d:63:3f:84:e3:15:8d:4e:17:a0:12:a9:aa:d4:dc: 2a:97:ad:0c:23:f8:fe:2f:45:a1:30:b3:5d:1d:da:8e:b2:78: ea:4f:3f:39:0d:db:a1:bf:d4:7c:b7:00:89:20:c3:10:1f:74: f1:af:d1:ec:aa:05:f4:12:31:ea:fa:ca:e3:98:54:36:fd:00: 4e:d0:99:48 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUfEmMh1wrWu+LNGS3XRSeuXI/dK4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI1NDJEMDREN0IwODY2ODlDNkUzRkU3RDc3RjI3MDYx ODI0RDQ3ODAeFw0yNTAxMTMxODA5NDNaFw0yNjAxMTIxODE0NDNaMDMxMTAvBgNV BAMTKEExNkMyODQ3N0NERkJCMjI5NUFGQkRDMjE1MEMzQzI0NzE3Qjc0NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt+NrkNhmTQfhNGgie+lIvXRUa c9JrWyGmxKEAOHP0PcNFcepet2a2/Hv6tZCwkC8g8AEeShHED0Lioxj7ADrG6e27 WIv38HK2sFit9Sw/hzKv2tXWXtJfdBAK/OYCk2zqoA1W1kEdmdpu/qDtYJi9Ki7I 2a9/R87UbJOINtbPxb2v/1m2Gd2fBh91E+Q+VXPtF3cYMlwO7Sc2I2cAyEe03VPb JeBkEy0Vtx0g6IhoL/+qnYaiY47dEILeMEfvz/NtZgmuGghK3JL/MDMyK27dBX1Q sKJEK0YWuiZer8NU15U+g1IIwKJUJe06d/fCtj5tJ8cAjb2OlkYvYJpwvrfdAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUoWwoR3zfuyKVr73CFQw8JHF7dGEwHwYDVR0j BBgwFoAUYlQtBNewhmicbj/n138nBhgk1HgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQnpLcWlMeHUyUHFtV3F4VVp1b0JCMWtxeHIydWZCcU1SYUhCdnNoZGh0 OWMvMS82MjU0MkQwNEQ3QjA4NjY4OUM2RTNGRTdENzdGMjcwNjE4MjRENDc4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYyNTQyRDA0RDdCMDg2Njg5 QzZFM0ZFN0Q3N0YyNzA2MTgyNEQ0NzguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0J6S3FpTHh1MlBxbVdxeFVadW9CQjFrcXhyMnVmQnFNUmFIQnZzaGRodDljLzEv MzIzODMwMzQzYTM1NjE2MzMwM2E2NTMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk M2UyMDMyMzYzODM3MzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSgEWsDgMA0GCSqGSIb3DQEBCwUA A4IBAQCGTZ9izKKxpHlupF5IyHbLo/s813WcCekX5FGtALRTYkSENP5LsyqAkp5P iwsVN28ZawzXUxsGIwcqETfHStHY/LxuoAaL7mLriUxEhM6yoLLYbM8/Q58ifoPX yfNxaA3XHnNQWPKlHMcyaC8PCPDcpQ87FzgWP3kJNGHIYHxcSpk1ytHjn8sN8yQs OzCVh/U1eJk6kKfKjXFSNjakTxGUpx69rxwpbo88kzExXZMbdisOWdV+v2edYz+E 4xWNThegEqmq1Nwql60MI/j+L0WhMLNdHdqOsnjqTz85Dduhv9R8twCJIMMQH3Tx r9HsqgX0EjHq+srjmFQ2/QBO0JlI -----END CERTIFICATE-----Generated at Fri Feb 21 12:24:54 2025 by rpki-client