$ rpki-client -vvf rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/323830343a353239633a343030303a3a2f33342d3334203d3e20323638353239.roa File: 323830343a353239633a343030303a3a2f33342d3334203d3e20323638353239.roa (raw, json) Hash identifier: auwH4QUN6kwZSa9gLT33dr6eqp1LFveGa8jqs8TGBfc= Subject key identifier: 26:30:8B:7A:42:A8:E0:AB:F7:AE:44:D6:60:32:C1:5A:2D:EC:48:B0 Certificate issuer: /CN=B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843 Certificate serial: 681A65C177405170E95132687A8CA4ACC9C9E16F Authority key identifier: B4:1D:6A:9C:5F:D8:1F:51:C4:F5:E7:3E:59:4F:0C:F0:C9:99:B8:43 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.cer Subject info access: rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/323830343a353239633a343030303a3a2f33342d3334203d3e20323638353239.roa Signing time: Tue 04 Feb 2025 13:40:10 +0000 ROA not before: Tue 04 Feb 2025 13:35:10 +0000 ROA not after: Tue 03 Feb 2026 13:40:10 +0000 asID: 268529 IP address blocks: 2804:529c:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.crl rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 13 Apr 2025 12:44:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:1a:65:c1:77:40:51:70:e9:51:32:68:7a:8c:a4:ac:c9:c9:e1:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843 Validity Not Before: Feb 4 13:35:10 2025 GMT Not After : Feb 3 13:40:10 2026 GMT Subject: CN=26308B7A42A8E0ABF7AE44D66032C15A2DEC48B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:77:9a:16:ba:29:f5:64:01:3c:9a:d1:b0:4e: c8:c2:c2:5b:2e:a4:25:01:75:c3:4c:a3:5a:d7:72: 1c:f7:ee:6f:d5:0f:60:64:23:af:59:f6:f3:87:4a: 12:6c:dc:dc:7a:61:c1:ae:b6:31:73:d7:3a:2f:6f: 3b:f3:43:89:56:8c:18:76:0d:b9:9e:74:f5:1f:81: 07:fb:90:f1:95:05:ec:00:9a:bd:b7:75:9a:f4:64: b5:e3:4e:a4:1a:4f:74:ef:c5:72:b7:63:73:10:46: 0e:17:f5:8b:88:fc:47:db:0f:7a:cc:9c:66:15:ad: 84:1c:fe:73:11:e7:78:d7:09:ac:08:8d:2c:e2:c4: 18:b2:fa:e8:36:0d:ab:51:5c:1c:1e:7e:d4:b8:98: e0:3e:45:b5:79:1d:f6:02:c4:0f:37:20:0b:af:ad: 3f:ce:c0:c5:a8:ac:12:b8:73:15:be:39:25:15:b5: bc:73:e0:4d:3e:8a:b9:b1:a6:4e:82:1f:6f:44:87: 60:25:da:c7:7d:74:a5:0e:62:fb:c7:ed:a0:d4:93: 2b:f1:fc:06:fb:2e:35:0c:bd:53:00:62:2d:db:20: 20:2a:1f:6c:7d:e1:18:e9:a5:4f:1f:6a:98:2a:a0: 3b:1b:da:c1:9a:00:aa:ef:1d:f7:64:d4:28:0e:53: 29:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:30:8B:7A:42:A8:E0:AB:F7:AE:44:D6:60:32:C1:5A:2D:EC:48:B0 X509v3 Authority Key Identifier: keyid:B4:1D:6A:9C:5F:D8:1F:51:C4:F5:E7:3E:59:4F:0C:F0:C9:99:B8:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/323830343a353239633a343030303a3a2f33342d3334203d3e20323638353239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:529c:4000::/34 Signature Algorithm: sha256WithRSAEncryption 5c:31:c1:19:5a:22:8b:ad:a4:3d:bc:b7:42:8e:30:51:e6:84: b6:46:99:1b:1d:fa:23:55:0a:95:59:a7:b9:8b:38:75:e8:41: 4c:ff:4b:6c:76:d0:39:fa:99:28:b9:2d:18:f1:f0:55:bf:ae: d3:b0:50:74:a7:f6:eb:4d:dd:58:ce:e3:61:2f:a1:c3:7e:a7: d1:36:1f:23:ba:b6:ba:00:09:2c:70:63:b8:53:ec:07:8a:b8: 25:af:bc:a7:be:c8:cb:c6:d2:9d:c7:48:fa:0a:1e:df:4c:9b: 2b:9b:6a:25:13:d7:7a:0f:33:26:f8:e6:f3:05:46:5b:53:a1: fa:1c:3b:0a:6e:2a:9a:d6:96:b3:c9:63:10:d7:01:b8:ba:9f: 23:ec:fa:cd:a5:e7:b8:09:ea:9f:a5:15:90:78:d9:a7:f5:78: 35:5f:e8:13:86:d4:3f:1a:f2:de:1f:90:e7:f2:f2:92:28:c4: 12:8f:0b:4a:65:7b:13:85:38:ac:29:0a:26:92:3a:fb:c2:a7: c3:44:54:75:6a:eb:e9:05:e9:a7:6a:d9:4a:e5:21:92:3d:4b: a3:10:19:13:1b:42:e5:63:9c:e8:d1:e2:21:f8:7b:4c:f0:f1: b4:3a:f3:8c:bd:b2:bb:24:35:60:21:19:c4:61:a3:4a:15:20: ad:8c:0d:66 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUaBplwXdAUXDpUTJoeoykrMnJ4W8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQxRDZBOUM1RkQ4MUY1MUM0RjVFNzNFNTk0RjBDRjBD OTk5Qjg0MzAeFw0yNTAyMDQxMzM1MTBaFw0yNjAyMDMxMzQwMTBaMDMxMTAvBgNV BAMTKDI2MzA4QjdBNDJBOEUwQUJGN0FFNDRENjYwMzJDMTVBMkRFQzQ4QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1d5oWuin1ZAE8mtGwTsjCwlsu pCUBdcNMo1rXchz37m/VD2BkI69Z9vOHShJs3Nx6YcGutjFz1zovbzvzQ4lWjBh2 DbmedPUfgQf7kPGVBewAmr23dZr0ZLXjTqQaT3TvxXK3Y3MQRg4X9YuI/EfbD3rM nGYVrYQc/nMR53jXCawIjSzixBiy+ug2DatRXBweftS4mOA+RbV5HfYCxA83IAuv rT/OwMWorBK4cxW+OSUVtbxz4E0+irmxpk6CH29Eh2Al2sd9dKUOYvvH7aDUkyvx /Ab7LjUMvVMAYi3bICAqH2x94RjppU8fapgqoDsb2sGaAKrvHfdk1CgOUynBAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUJjCLekKo4Kv3rkTWYDLBWi3sSLAwHwYDVR0j BBgwFoAUtB1qnF/YH1HE9ec+WU8M8MmZuEMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQzlIS0tRVG8xZ2NjVlZrV200a1lIN0JjZkdCUnliTGFnMUhCandzM29K YjEvMC9CNDFENkE5QzVGRDgxRjUxQzRGNUU3M0U1OTRGMENGMEM5OTlCODQzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I0MUQ2QTlDNUZEODFGNTFD NEY1RTczRTU5NEYwQ0YwQzk5OUI4NDMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0M5SEtLUVRvMWdjY1ZWa1dtNGtZSDdCY2ZHQlJ5YkxhZzFIQmp3czNvSmIxLzAv MzIzODMwMzQzYTM1MzIzOTYzM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzYzODM1MzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEUpxAMA0GCSqGSIb3DQEBCwUA A4IBAQBcMcEZWiKLraQ9vLdCjjBR5oS2RpkbHfojVQqVWae5izh16EFM/0tsdtA5 +pkouS0Y8fBVv67TsFB0p/brTd1YzuNhL6HDfqfRNh8jura6AAkscGO4U+wHirgl r7ynvsjLxtKdx0j6Ch7fTJsrm2olE9d6DzMm+ObzBUZbU6H6HDsKbiqa1pazyWMQ 1wG4up8j7PrNpee4CeqfpRWQeNmn9Xg1X+gThtQ/GvLeH5Dn8vKSKMQSjwtKZXsT hTisKQomkjr7wqfDRFR1auvpBemnatlK5SGSPUujEBkTG0LlY5zo0eIh+HtM8PG0 OvOMvbK7JDVgIRnEYaNKFSCtjA1m -----END CERTIFICATE-----Generated at Sat Apr 12 20:47:49 2025 by rpki-client