$ rpki-client -vvf rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/323830343a353239633a383030303a3a2f33342d3334203d3e20323638353239.roa File: 323830343a353239633a383030303a3a2f33342d3334203d3e20323638353239.roa (raw, json) Hash identifier: M//Z1iN8a9iItxR0ZafHzodRmFm4PPYoXp6RahsGcLM= Subject key identifier: 47:78:65:DD:E6:7A:96:F1:63:12:FE:0B:77:C2:30:AC:73:70:0C:88 Certificate issuer: /CN=B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843 Certificate serial: 6AAD0A554BD6FF39FDD0FFF10E3E242F6523491C Authority key identifier: B4:1D:6A:9C:5F:D8:1F:51:C4:F5:E7:3E:59:4F:0C:F0:C9:99:B8:43 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.cer Subject info access: rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/323830343a353239633a383030303a3a2f33342d3334203d3e20323638353239.roa Signing time: Tue 04 Feb 2025 13:40:28 +0000 ROA not before: Tue 04 Feb 2025 13:35:28 +0000 ROA not after: Tue 03 Feb 2026 13:40:28 +0000 asID: 268529 IP address blocks: 2804:529c:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.crl rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 13 Apr 2025 12:44:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:ad:0a:55:4b:d6:ff:39:fd:d0:ff:f1:0e:3e:24:2f:65:23:49:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843 Validity Not Before: Feb 4 13:35:28 2025 GMT Not After : Feb 3 13:40:28 2026 GMT Subject: CN=477865DDE67A96F16312FE0B77C230AC73700C88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ac:2b:0c:ee:d5:47:ac:ec:e1:f6:88:10:39: a0:14:6f:71:e2:25:ec:28:72:91:ae:44:3f:e5:8e: 9c:6e:9c:72:1c:e6:a4:e9:95:1d:95:d7:0e:f1:55: 10:41:59:e1:c6:b5:04:b4:68:84:b5:bb:28:f8:a3: 88:b2:da:42:51:2e:d7:70:c1:e9:c8:9c:1b:d4:d1: 6b:92:f7:b1:86:b7:fe:e4:f2:db:aa:87:01:9e:cb: b6:33:98:49:47:69:59:2a:1e:17:a0:bd:c6:c6:11: 24:b0:39:a2:42:db:b3:61:70:24:39:5d:a9:b9:04: 8b:bd:3c:3b:27:81:74:8d:b3:bf:4f:be:bd:67:d6: c2:45:f1:9d:a0:fe:37:87:b4:45:0b:3b:f7:0f:04: fc:06:e0:12:dd:36:38:c5:cd:38:a5:91:de:eb:e1: af:ec:89:09:22:b1:49:16:6b:e1:8a:ae:5c:da:20: 4c:f6:83:82:5e:db:19:fe:b8:b7:91:8e:74:3c:60: 2e:20:dd:7c:f4:71:b1:6a:1f:61:4e:8d:37:eb:b8: 71:b9:2e:22:17:64:1a:39:bf:f8:2b:08:83:39:53: 53:67:0a:7b:e8:5b:cf:43:f4:60:60:7d:8d:a2:99: e6:c0:d5:66:3b:69:39:cb:d4:c6:bc:0e:a2:52:95: eb:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:78:65:DD:E6:7A:96:F1:63:12:FE:0B:77:C2:30:AC:73:70:0C:88 X509v3 Authority Key Identifier: keyid:B4:1D:6A:9C:5F:D8:1F:51:C4:F5:E7:3E:59:4F:0C:F0:C9:99:B8:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/323830343a353239633a383030303a3a2f33342d3334203d3e20323638353239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:529c:8000::/34 Signature Algorithm: sha256WithRSAEncryption a2:4e:f7:c8:88:9a:f7:c7:c1:0a:b3:ca:58:61:4d:db:d4:0c: 37:c8:e5:1c:7e:fc:11:c1:14:c6:ad:8c:94:d3:4f:1b:ec:16: 5d:5a:ab:72:cc:c9:ea:88:67:7e:1b:76:27:2c:80:83:1c:ac: 7e:1f:10:0f:fa:45:43:e9:0b:2e:12:2b:dc:df:dd:50:af:f8: a0:5d:f4:6d:dd:64:3e:b7:79:94:79:75:ca:51:64:44:3b:25: e0:34:30:e5:2d:45:7a:ef:6e:72:d1:97:aa:c5:7a:59:d8:30: 91:d5:2a:62:ea:6f:15:d0:93:ee:66:7a:11:a3:8f:b5:4d:fb: 70:98:eb:35:10:a8:8b:68:52:96:79:8b:3a:c1:65:71:6b:d9: b7:f3:0d:32:66:dd:89:b8:72:93:11:7e:85:5b:a7:99:4c:64: c9:82:af:2c:ae:31:62:9e:23:04:9c:e5:d3:83:46:fa:15:72: ee:a7:d3:69:d1:93:c2:ef:78:d1:4e:a1:d4:9b:0d:1a:7f:18: c2:b3:28:ab:ff:7a:cf:85:f2:4f:01:0b:1d:5e:31:f3:f8:62: b1:80:93:a5:50:00:89:9d:43:0e:f0:19:6e:cd:4d:ed:a8:98: 97:85:37:71:80:85:fc:be:32:8e:0b:7e:64:12:55:0f:d3:04: 14:c5:4d:ea -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUaq0KVUvW/zn90P/xDj4kL2UjSRwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQxRDZBOUM1RkQ4MUY1MUM0RjVFNzNFNTk0RjBDRjBD OTk5Qjg0MzAeFw0yNTAyMDQxMzM1MjhaFw0yNjAyMDMxMzQwMjhaMDMxMTAvBgNV BAMTKDQ3Nzg2NURERTY3QTk2RjE2MzEyRkUwQjc3QzIzMEFDNzM3MDBDODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPrCsM7tVHrOzh9ogQOaAUb3Hi JewocpGuRD/ljpxunHIc5qTplR2V1w7xVRBBWeHGtQS0aIS1uyj4o4iy2kJRLtdw wenInBvU0WuS97GGt/7k8tuqhwGey7YzmElHaVkqHhegvcbGESSwOaJC27NhcCQ5 Xam5BIu9PDsngXSNs79Pvr1n1sJF8Z2g/jeHtEULO/cPBPwG4BLdNjjFzTilkd7r 4a/siQkisUkWa+GKrlzaIEz2g4Je2xn+uLeRjnQ8YC4g3Xz0cbFqH2FOjTfruHG5 LiIXZBo5v/grCIM5U1NnCnvoW89D9GBgfY2imebA1WY7aTnL1Ma8DqJSlevTAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUR3hl3eZ6lvFjEv4Ld8IwrHNwDIgwHwYDVR0j BBgwFoAUtB1qnF/YH1HE9ec+WU8M8MmZuEMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQzlIS0tRVG8xZ2NjVlZrV200a1lIN0JjZkdCUnliTGFnMUhCandzM29K YjEvMC9CNDFENkE5QzVGRDgxRjUxQzRGNUU3M0U1OTRGMENGMEM5OTlCODQzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I0MUQ2QTlDNUZEODFGNTFD NEY1RTczRTU5NEYwQ0YwQzk5OUI4NDMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0M5SEtLUVRvMWdjY1ZWa1dtNGtZSDdCY2ZHQlJ5YkxhZzFIQmp3czNvSmIxLzAv MzIzODMwMzQzYTM1MzIzOTYzM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzYzODM1MzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEUpyAMA0GCSqGSIb3DQEBCwUA A4IBAQCiTvfIiJr3x8EKs8pYYU3b1Aw3yOUcfvwRwRTGrYyU008b7BZdWqtyzMnq iGd+G3YnLICDHKx+HxAP+kVD6QsuEivc391Qr/igXfRt3WQ+t3mUeXXKUWREOyXg NDDlLUV6725y0ZeqxXpZ2DCR1Spi6m8V0JPuZnoRo4+1TftwmOs1EKiLaFKWeYs6 wWVxa9m38w0yZt2JuHKTEX6FW6eZTGTJgq8srjFiniMEnOXTg0b6FXLup9Np0ZPC 73jRTqHUmw0afxjCsyir/3rPhfJPAQsdXjHz+GKxgJOlUACJnUMO8BluzU3tqJiX hTdxgIX8vjKOC35kElUP0wQUxU3q -----END CERTIFICATE-----Generated at Sat Apr 12 20:55:26 2025 by rpki-client