$ rpki-client -vvf rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/323830343a353239633a633030303a3a2f33342d3334203d3e20323638353239.roa File: 323830343a353239633a633030303a3a2f33342d3334203d3e20323638353239.roa (raw, json) Hash identifier: V7GJBegDYvXph88YQtDiWAkantZNufwwFjCL+QtZZ5A= Subject key identifier: DC:0B:31:38:56:3D:6F:08:4F:CA:87:3D:1E:BA:FA:FB:F6:6D:44:99 Certificate issuer: /CN=B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843 Certificate serial: 5BE31DB9608D595B3EEBB7151DD5AB75D9E2AC0D Authority key identifier: B4:1D:6A:9C:5F:D8:1F:51:C4:F5:E7:3E:59:4F:0C:F0:C9:99:B8:43 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.cer Subject info access: rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/323830343a353239633a633030303a3a2f33342d3334203d3e20323638353239.roa Signing time: Tue 04 Feb 2025 13:40:48 +0000 ROA not before: Tue 04 Feb 2025 13:35:48 +0000 ROA not after: Tue 03 Feb 2026 13:40:48 +0000 asID: 268529 IP address blocks: 2804:529c:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.crl rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 13 Apr 2025 12:44:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:e3:1d:b9:60:8d:59:5b:3e:eb:b7:15:1d:d5:ab:75:d9:e2:ac:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843 Validity Not Before: Feb 4 13:35:48 2025 GMT Not After : Feb 3 13:40:48 2026 GMT Subject: CN=DC0B3138563D6F084FCA873D1EBAFAFBF66D4499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c6:79:85:94:74:2a:f5:b6:a0:9d:1f:84:c5: 05:8c:f4:29:d7:5c:c4:61:ff:b9:bf:6e:5a:8d:fc: 03:d8:0b:b8:1f:e8:7c:16:53:d2:c0:fe:f1:77:f8: 8e:d3:95:85:7a:29:ae:ec:61:2b:28:06:a7:5c:18: bd:64:e5:d5:e8:27:15:5a:9a:cf:6a:c0:bf:6a:af: e4:81:ea:ec:02:c9:32:c2:95:ae:be:79:ec:79:6d: da:df:d7:db:5b:f7:85:eb:8d:2c:95:cc:80:19:4a: 6d:0b:e9:ba:e3:6b:2a:54:ac:b2:0c:c7:de:07:1d: 9e:39:49:32:bc:27:d6:f6:46:6c:4f:0e:0d:d6:8d: 9e:a9:5a:81:e7:3f:26:cf:a7:a3:72:98:d0:ed:af: 93:82:54:af:40:b0:14:11:13:74:da:0b:a9:c4:54: 66:c5:a4:de:5e:e4:df:5a:f8:b9:72:39:b6:7c:08: 88:3f:fb:e1:72:ea:95:47:01:ac:58:29:ec:1b:1c: 91:00:37:20:69:e3:63:f7:f3:a1:a1:43:ec:14:ca: b4:f9:2d:e9:08:fb:54:3c:f1:7f:19:21:08:23:06: fd:14:02:e3:b9:82:47:f9:11:19:cc:4d:d7:e5:ed: 0f:89:6b:9e:41:41:41:dd:6f:ca:93:52:87:8f:12: 87:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:0B:31:38:56:3D:6F:08:4F:CA:87:3D:1E:BA:FA:FB:F6:6D:44:99 X509v3 Authority Key Identifier: keyid:B4:1D:6A:9C:5F:D8:1F:51:C4:F5:E7:3E:59:4F:0C:F0:C9:99:B8:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/323830343a353239633a633030303a3a2f33342d3334203d3e20323638353239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:529c:c000::/34 Signature Algorithm: sha256WithRSAEncryption 55:dd:65:2e:68:7c:02:e3:e4:73:f0:32:87:08:0b:5d:d2:51: fc:db:78:64:d1:89:71:1e:e9:80:de:ea:0b:0a:7e:ad:0e:99: ef:f2:d5:2a:a3:19:b9:69:31:e1:26:53:8c:49:f9:35:57:61: 81:32:03:cd:6f:8b:92:a0:cc:0c:c2:5d:22:61:b5:6c:8a:c6: bb:42:7a:76:e1:24:6c:ce:c7:48:8f:96:0c:f4:28:e3:d2:c8: 73:fc:5e:a9:8b:7e:bb:77:4d:1e:76:36:1b:76:df:f0:e4:f3: f3:85:72:55:de:37:bc:9d:a0:89:f8:0a:18:4b:ce:b5:21:f6: 66:fe:d8:60:54:ae:fc:ca:08:a6:2f:48:ed:40:11:2b:48:80: 95:7d:25:db:73:ab:24:ec:bd:56:e6:30:9c:9f:9e:75:19:ca: 8e:cc:b2:2b:41:22:24:32:aa:1f:07:15:20:7f:0f:57:29:27: 83:21:cc:42:84:e9:64:0f:f3:50:2d:5c:60:9a:64:86:c2:e2: 9c:36:7a:25:41:b6:4a:c7:e4:a6:2d:e1:00:d2:d0:b2:02:84: 84:fd:ab:d0:d0:21:e8:4b:a6:ef:f4:dd:d7:de:b5:61:60:02: 57:c2:97:1b:b8:bf:f6:72:dc:fa:31:14:66:e7:cd:11:4d:91: db:a9:83:99 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUW+MduWCNWVs+67cVHdWrddnirA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQxRDZBOUM1RkQ4MUY1MUM0RjVFNzNFNTk0RjBDRjBD OTk5Qjg0MzAeFw0yNTAyMDQxMzM1NDhaFw0yNjAyMDMxMzQwNDhaMDMxMTAvBgNV BAMTKERDMEIzMTM4NTYzRDZGMDg0RkNBODczRDFFQkFGQUZCRjY2RDQ0OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqxnmFlHQq9bagnR+ExQWM9CnX XMRh/7m/blqN/APYC7gf6HwWU9LA/vF3+I7TlYV6Ka7sYSsoBqdcGL1k5dXoJxVa ms9qwL9qr+SB6uwCyTLCla6+eex5bdrf19tb94XrjSyVzIAZSm0L6brjaypUrLIM x94HHZ45STK8J9b2RmxPDg3WjZ6pWoHnPybPp6NymNDtr5OCVK9AsBQRE3TaC6nE VGbFpN5e5N9a+LlyObZ8CIg/++Fy6pVHAaxYKewbHJEANyBp42P386GhQ+wUyrT5 LekI+1Q88X8ZIQgjBv0UAuO5gkf5ERnMTdfl7Q+Ja55BQUHdb8qTUoePEoeDAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQU3AsxOFY9bwhPyoc9Hrr6+/ZtRJkwHwYDVR0j BBgwFoAUtB1qnF/YH1HE9ec+WU8M8MmZuEMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQzlIS0tRVG8xZ2NjVlZrV200a1lIN0JjZkdCUnliTGFnMUhCandzM29K YjEvMC9CNDFENkE5QzVGRDgxRjUxQzRGNUU3M0U1OTRGMENGMEM5OTlCODQzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I0MUQ2QTlDNUZEODFGNTFD NEY1RTczRTU5NEYwQ0YwQzk5OUI4NDMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0M5SEtLUVRvMWdjY1ZWa1dtNGtZSDdCY2ZHQlJ5YkxhZzFIQmp3czNvSmIxLzAv MzIzODMwMzQzYTM1MzIzOTYzM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzYzODM1MzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEUpzAMA0GCSqGSIb3DQEBCwUA A4IBAQBV3WUuaHwC4+Rz8DKHCAtd0lH823hk0YlxHumA3uoLCn6tDpnv8tUqoxm5 aTHhJlOMSfk1V2GBMgPNb4uSoMwMwl0iYbVsisa7Qnp24SRszsdIj5YM9Cjj0shz /F6pi367d00edjYbdt/w5PPzhXJV3je8naCJ+AoYS861IfZm/thgVK78ygimL0jt QBErSICVfSXbc6sk7L1W5jCcn551GcqOzLIrQSIkMqofBxUgfw9XKSeDIcxChOlk D/NQLVxgmmSGwuKcNnolQbZKx+SmLeEA0tCyAoSE/avQ0CHoS6bv9N3X3rVhYAJX wpcbuL/2ctz6MRRm580RTZHbqYOZ -----END CERTIFICATE-----Generated at Sat Apr 12 20:45:05 2025 by rpki-client