$ rpki-client -vvf rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/323830343a383237303a3a2f33322d3332203d3e203631363038.roa File: 323830343a383237303a3a2f33322d3332203d3e203631363038.roa (raw, json) Hash identifier: ywWFGv4FrHR7EOcQP1+8fMFn8twSkZPAcE0qpm2Fb38= Subject key identifier: 36:DC:00:91:90:FC:87:1A:7B:9D:5A:07:4B:61:72:E0:32:58:66:2A Certificate issuer: /CN=AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01 Certificate serial: 46BDBB6D561455FFEDA6E307B575129C61BC5D60 Authority key identifier: AD:72:AB:44:A3:53:1C:FD:69:32:D3:C0:A8:DA:40:F1:37:CA:AC:01 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01.cer Subject info access: rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/323830343a383237303a3a2f33322d3332203d3e203631363038.roa Signing time: Thu 30 Jan 2025 18:28:29 +0000 ROA not before: Thu 30 Jan 2025 18:23:29 +0000 ROA not after: Thu 29 Jan 2026 18:28:29 +0000 asID: 61608 IP address blocks: 2804:8270::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01.crl rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 17 Feb 2025 08:12:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:bd:bb:6d:56:14:55:ff:ed:a6:e3:07:b5:75:12:9c:61:bc:5d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01 Validity Not Before: Jan 30 18:23:29 2025 GMT Not After : Jan 29 18:28:29 2026 GMT Subject: CN=36DC009190FC871A7B9D5A074B6172E03258662A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3b:6b:f3:1a:1f:0e:2c:da:de:87:f2:72:aa: 41:35:05:79:17:6d:ac:3a:bd:fe:e6:ae:98:9b:24: 74:a4:11:62:7e:e1:db:c5:66:11:b7:6c:37:12:f3: bb:b5:a9:fd:d0:54:2d:de:57:94:ed:25:23:90:cc: e9:b7:5a:bb:75:87:84:8d:2b:00:5c:5a:ed:65:04: f8:93:b5:64:17:09:3a:cd:be:1d:f7:bb:b4:31:31: 8b:d8:27:ca:71:15:17:0e:61:3f:7c:f8:fb:bf:9e: f2:69:b8:5d:8c:24:27:cb:be:aa:df:a9:96:37:2c: 26:a6:8d:48:73:c5:97:e7:59:a2:2e:be:cb:db:f0: 7e:a9:7e:c1:95:30:b5:91:49:cc:1e:f9:a2:b3:0f: 14:f7:b2:97:38:a3:09:a2:ef:c0:a6:35:7e:3c:6e: 2a:8f:89:ec:b9:9b:a8:1d:c9:bd:c2:57:67:08:5a: 54:f0:22:d8:3f:ed:60:8d:49:7f:4d:f8:9e:2f:12: b4:e7:a1:5f:e6:f1:78:fb:3b:fc:9a:13:0e:1d:16: 0f:f7:32:07:a1:05:f3:50:bf:18:ec:66:d3:33:ae: be:de:2a:3e:fa:55:92:4c:9d:7f:ad:0d:d1:4c:4a: d7:19:9b:ae:e0:c3:4e:30:ec:e5:34:0c:9f:3d:f4: 3f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:DC:00:91:90:FC:87:1A:7B:9D:5A:07:4B:61:72:E0:32:58:66:2A X509v3 Authority Key Identifier: keyid:AD:72:AB:44:A3:53:1C:FD:69:32:D3:C0:A8:DA:40:F1:37:CA:AC:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/323830343a383237303a3a2f33322d3332203d3e203631363038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8270::/32 Signature Algorithm: sha256WithRSAEncryption 85:b3:28:22:23:6a:52:48:b0:73:aa:6b:7e:e5:58:9b:f4:18: 1a:2c:5e:c2:f9:e0:29:c5:b9:db:20:0c:c4:c9:af:89:8d:11: 57:bf:23:12:38:c6:60:3e:0d:1f:65:40:31:8c:ab:c0:2b:e0: 3e:ee:7a:ac:1e:e3:dc:1f:e8:e5:4c:16:5a:3e:1f:d9:b8:d6: 65:78:d6:22:8f:25:b3:41:66:45:df:44:3b:3f:71:87:74:6f: 95:09:8b:7b:17:d8:bb:85:e3:c4:3c:32:7e:80:18:e3:6e:6a: 6f:cb:3c:23:40:78:a4:c8:ec:d8:49:03:38:12:71:50:dc:41: aa:de:bf:85:ba:b4:8e:f9:3e:65:eb:6b:b0:c5:4c:d7:6f:0e: 63:65:8b:71:6e:ad:76:33:fb:b4:01:e6:bb:f3:84:0b:79:c6: 2f:5c:ab:5b:16:8f:97:b8:f6:36:80:4e:c1:9a:a8:7e:03:f4: ad:fc:9d:0f:7e:64:dc:c8:ac:a2:72:54:6e:2a:ae:95:fd:f4: c7:99:80:20:8e:1d:a4:58:8a:2b:5c:8e:8e:f0:09:0b:0e:c0: ee:dd:a2:1f:69:0d:18:b3:83:80:7c:ca:46:db:6c:72:f9:94: 22:d9:e8:45:a4:f4:f4:52:b1:0f:5d:8f:c6:e8:42:bd:b9:df: 20:24:ad:26 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIURr27bVYUVf/tpuMHtXUSnGG8XWAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ3MkFCNDRBMzUzMUNGRDY5MzJEM0MwQThEQTQwRjEz N0NBQUMwMTAeFw0yNTAxMzAxODIzMjlaFw0yNjAxMjkxODI4MjlaMDMxMTAvBgNV BAMTKDM2REMwMDkxOTBGQzg3MUE3QjlENUEwNzRCNjE3MkUwMzI1ODY2MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyO2vzGh8OLNreh/JyqkE1BXkX baw6vf7mrpibJHSkEWJ+4dvFZhG3bDcS87u1qf3QVC3eV5TtJSOQzOm3Wrt1h4SN KwBcWu1lBPiTtWQXCTrNvh33u7QxMYvYJ8pxFRcOYT98+Pu/nvJpuF2MJCfLvqrf qZY3LCamjUhzxZfnWaIuvsvb8H6pfsGVMLWRScwe+aKzDxT3spc4owmi78CmNX48 biqPiey5m6gdyb3CV2cIWlTwItg/7WCNSX9N+J4vErTnoV/m8Xj7O/yaEw4dFg/3 MgehBfNQvxjsZtMzrr7eKj76VZJMnX+tDdFMStcZm67gw04w7OU0DJ899D+PAgMB AAGjggJOMIICSjAdBgNVHQ4EFgQUNtwAkZD8hxp7nVoHS2Fy4DJYZiowHwYDVR0j BBgwFoAUrXKrRKNTHP1pMtPAqNpA8TfKrAEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ05wQmtpdXM3cjZONVdTMVhYYlVWTWR5QnhrVmNqYTFIejZuQmpNSm5H Yk0vMC9BRDcyQUI0NEEzNTMxQ0ZENjkzMkQzQzBBOERBNDBGMTM3Q0FBQzAxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FENzJBQjQ0QTM1MzFDRkQ2 OTMyRDNDMEE4REE0MEYxMzdDQUFDMDEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NOcEJraXVzN3I2TjVXUzFYWGJVVk1keUJ4a1ZjamExSHo2bkJqTUpuR2JNLzAv MzIzODMwMzQzYTM4MzIzNzMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzYzMTM2 MzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB /wQRMA8wDQQCAAIwBwMFACgEgnAwDQYJKoZIhvcNAQELBQADggEBAIWzKCIjalJI sHOqa37lWJv0GBosXsL54CnFudsgDMTJr4mNEVe/IxI4xmA+DR9lQDGMq8Ar4D7u eqwe49wf6OVMFlo+H9m41mV41iKPJbNBZkXfRDs/cYd0b5UJi3sX2LuF48Q8Mn6A GONuam/LPCNAeKTI7NhJAzgScVDcQarev4W6tI75PmXra7DFTNdvDmNli3FurXYz +7QB5rvzhAt5xi9cq1sWj5e49jaATsGaqH4D9K38nQ9+ZNzIrKJyVG4qrpX99MeZ gCCOHaRYiitcjo7wCQsOwO7doh9pDRizg4B8ykbbbHL5lCLZ6EWk9PRSsQ9dj8bo Qr253yAkrSY= -----END CERTIFICATE-----Generated at Sun Feb 16 22:12:42 2025 by rpki-client