$ rpki-client -vvf rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/323830343a363862633a633030303a3a2f33342d3334203d3e20323639373132.roa File: 323830343a363862633a633030303a3a2f33342d3334203d3e20323639373132.roa (raw, json) Hash identifier: ui9jzDo44V71IBoNlGBgL+5MvykFy2SsD9eArSkPA3M= Subject key identifier: A8:21:13:06:6C:09:10:73:B7:06:43:70:AF:E8:77:18:C9:02:60:3E Certificate issuer: /CN=9B40C2CC13EAB50345EDACFACC15DB43E60B85A2 Certificate serial: 54130048EA1B16DD197AFCDE733287D2C3613BCE Authority key identifier: 9B:40:C2:CC:13:EA:B5:03:45:ED:AC:FA:CC:15:DB:43:E6:0B:85:A2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer Subject info access: rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/323830343a363862633a633030303a3a2f33342d3334203d3e20323639373132.roa Signing time: Mon 24 Feb 2025 17:23:29 +0000 ROA not before: Mon 24 Feb 2025 17:18:29 +0000 ROA not after: Mon 23 Feb 2026 17:23:29 +0000 asID: 269712 IP address blocks: 2804:68bc:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 08 Apr 2025 08:19:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:13:00:48:ea:1b:16:dd:19:7a:fc:de:73:32:87:d2:c3:61:3b:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B40C2CC13EAB50345EDACFACC15DB43E60B85A2 Validity Not Before: Feb 24 17:18:29 2025 GMT Not After : Feb 23 17:23:29 2026 GMT Subject: CN=A82113066C091073B7064370AFE87718C902603E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c1:f4:ed:95:c3:2d:af:54:b8:6f:34:96:d5: 41:89:95:7c:59:6a:9a:d6:8d:b1:39:de:46:e2:18: f9:48:16:df:fb:7d:7e:a9:2a:c9:2e:93:44:35:6a: d6:3a:09:59:1f:b1:54:da:19:e2:10:e4:f7:3b:e4: 70:e1:64:5c:f5:4b:49:a4:fa:e7:c8:a5:fe:27:29: e3:43:ea:41:70:af:b2:ad:6e:be:33:f0:2b:86:26: 8a:1a:20:c6:e5:01:5c:c6:3b:ae:ee:2a:cb:05:64: 96:17:97:a8:34:b5:8c:02:75:10:1b:07:1f:1a:31: b2:20:75:7f:c9:e9:c9:47:35:a9:11:6f:f4:60:ae: cd:8c:dc:26:fb:6f:a1:9c:f1:a7:11:ca:48:af:23: 95:a6:2e:4e:e8:4c:1f:67:2b:dd:ae:8c:65:e5:b3: 96:a9:5d:a0:ba:ff:87:f3:ee:bf:5e:65:95:bc:22: 9c:d2:fa:d6:cc:d7:d7:17:5e:23:fd:c1:05:7d:7e: b8:c8:16:c7:7d:2c:62:cb:5c:b8:03:33:39:0f:a5: 6b:e1:11:73:4e:c5:76:f1:58:1e:e1:c9:b2:46:c4: c7:e7:57:10:0f:0e:56:78:92:a7:c1:7c:8d:2d:2a: c0:96:1b:0a:b8:a6:46:8e:1f:f2:c4:6d:13:c3:2b: 4a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:21:13:06:6C:09:10:73:B7:06:43:70:AF:E8:77:18:C9:02:60:3E X509v3 Authority Key Identifier: keyid:9B:40:C2:CC:13:EA:B5:03:45:ED:AC:FA:CC:15:DB:43:E6:0B:85:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/323830343a363862633a633030303a3a2f33342d3334203d3e20323639373132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:68bc:c000::/34 Signature Algorithm: sha256WithRSAEncryption 63:6b:67:4d:a3:47:63:07:5d:42:80:9b:63:41:e9:ac:5e:6c: 9d:0c:1c:85:be:1e:36:42:c6:ca:0f:7b:52:cd:6b:7c:57:81: 98:02:ec:9f:5e:3d:14:21:6e:ec:18:d4:66:be:34:2c:82:c9: a9:aa:7d:82:35:67:1e:ae:d0:4a:7c:ed:c0:e7:0d:a8:3e:8d: c7:68:ea:e8:d3:8a:76:04:a8:c7:2e:cb:5d:7a:46:fb:fb:4a: c5:53:79:49:ff:eb:25:fb:92:28:e9:82:df:b2:ed:4a:b3:6f: cb:e7:91:26:e3:46:1f:bb:e7:e8:31:df:42:c8:8a:58:5e:a1: 2c:4f:7b:6b:ed:9b:53:d0:35:1c:8a:8f:f0:8c:50:d1:5c:ff: 24:a7:2b:9d:32:18:f4:97:db:a9:fd:1f:33:35:93:ec:6b:65: 14:51:18:1b:65:79:00:c3:6a:68:8b:fd:f2:85:ca:14:20:03: 77:14:af:6d:a0:68:b9:81:e5:ca:77:22:45:0e:29:99:da:3a: 16:df:9a:b2:db:3b:3f:d3:37:99:3b:bb:7e:41:0b:3f:e3:8e: f9:db:04:cd:a7:30:b5:95:02:d2:43:75:a9:e0:e7:48:e4:33: 91:30:df:65:73:ee:b4:f1:24:cc:eb:b7:bd:9d:0c:57:f1:0b: 9e:97:f5:5b -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUVBMASOobFt0ZevzeczKH0sNhO84wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI0MEMyQ0MxM0VBQjUwMzQ1RURBQ0ZBQ0MxNURCNDNF NjBCODVBMjAeFw0yNTAyMjQxNzE4MjlaFw0yNjAyMjMxNzIzMjlaMDMxMTAvBgNV BAMTKEE4MjExMzA2NkMwOTEwNzNCNzA2NDM3MEFGRTg3NzE4QzkwMjYwM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdwfTtlcMtr1S4bzSW1UGJlXxZ aprWjbE53kbiGPlIFt/7fX6pKskuk0Q1atY6CVkfsVTaGeIQ5Pc75HDhZFz1S0mk +ufIpf4nKeND6kFwr7Ktbr4z8CuGJooaIMblAVzGO67uKssFZJYXl6g0tYwCdRAb Bx8aMbIgdX/J6clHNakRb/Rgrs2M3Cb7b6Gc8acRykivI5WmLk7oTB9nK92ujGXl s5apXaC6/4fz7r9eZZW8IpzS+tbM19cXXiP9wQV9frjIFsd9LGLLXLgDMzkPpWvh EXNOxXbxWB7hybJGxMfnVxAPDlZ4kqfBfI0tKsCWGwq4pkaOH/LEbRPDK0qzAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUqCETBmwJEHO3BkNwr+h3GMkCYD4wHwYDVR0j BBgwFoAUm0DCzBPqtQNF7az6zBXbQ+YLhaIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQnpOejVkQkUya01ZR25BZnhFc05ZTHY3YU1UOG00eXhQNjNZdjgyTGRt MmcvMC85QjQwQzJDQzEzRUFCNTAzNDVFREFDRkFDQzE1REI0M0U2MEI4NUEyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlCNDBDMkNDMTNFQUI1MDM0 NUVEQUNGQUNDMTVEQjQzRTYwQjg1QTIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0J6Tno1ZEJFMmtNWUduQWZ4RXNOWUx2N2FNVDhtNHl4UDYzWXY4MkxkbTJnLzAv MzIzODMwMzQzYTM2Mzg2MjYzM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzYzOTM3MzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEaLzAMA0GCSqGSIb3DQEBCwUA A4IBAQBja2dNo0djB11CgJtjQemsXmydDByFvh42QsbKD3tSzWt8V4GYAuyfXj0U IW7sGNRmvjQsgsmpqn2CNWcertBKfO3A5w2oPo3HaOro04p2BKjHLstdekb7+0rF U3lJ/+sl+5Io6YLfsu1Ks2/L55Em40Yfu+foMd9CyIpYXqEsT3tr7ZtT0DUcio/w jFDRXP8kpyudMhj0l9up/R8zNZPsa2UUURgbZXkAw2poi/3yhcoUIAN3FK9toGi5 geXKdyJFDimZ2joW35qy2zs/0zeZO7t+QQs/44752wTNpzC1lQLSQ3Wp4OdI5DOR MN9lc+608STM67e9nQxX8Quel/Vb -----END CERTIFICATE-----Generated at Mon Apr 7 14:29:06 2025 by rpki-client