$ rpki-client -vvf rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a383030303a3a2f33342d3334203d3e20323633353431.roa File: 323830343a313339383a383030303a3a2f33342d3334203d3e20323633353431.roa (raw, json) Hash identifier: EgdqEJK3Tj/CAV3M0yF6o3TJuyM8+U4qO1Np/xVOjQw= Subject key identifier: 42:37:34:80:6A:4D:9C:21:A1:5A:35:0D:F9:00:D2:9E:B3:ED:25:63 Certificate issuer: /CN=DFA5F9058A3FC234221062FC10FD9D6253F81867 Certificate serial: 350959366BD5451117696B05B7A8F4F80AB96C8A Authority key identifier: DF:A5:F9:05:8A:3F:C2:34:22:10:62:FC:10:FD:9D:62:53:F8:18:67 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFA5F9058A3FC234221062FC10FD9D6253F81867.cer Subject info access: rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a383030303a3a2f33342d3334203d3e20323633353431.roa Signing time: Thu 09 Jan 2025 14:06:51 +0000 ROA not before: Thu 09 Jan 2025 14:01:51 +0000 ROA not after: Thu 08 Jan 2026 14:06:51 +0000 asID: 263541 IP address blocks: 2804:1398:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/DFA5F9058A3FC234221062FC10FD9D6253F81867.crl rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/DFA5F9058A3FC234221062FC10FD9D6253F81867.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFA5F9058A3FC234221062FC10FD9D6253F81867.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 11 Apr 2025 01:19:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:09:59:36:6b:d5:45:11:17:69:6b:05:b7:a8:f4:f8:0a:b9:6c:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFA5F9058A3FC234221062FC10FD9D6253F81867 Validity Not Before: Jan 9 14:01:51 2025 GMT Not After : Jan 8 14:06:51 2026 GMT Subject: CN=423734806A4D9C21A15A350DF900D29EB3ED2563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3f:16:dd:89:cb:ba:4e:28:99:35:0e:1f:e8: ee:90:22:fc:a1:6e:b7:6d:55:4b:b0:46:1a:56:fa: 67:83:16:19:b1:66:06:20:8d:a6:ed:c4:36:c5:2c: b3:25:5b:f0:10:23:48:e6:21:89:1d:84:7c:4e:09: df:00:c2:a7:0a:20:61:80:5c:80:4a:df:b1:2e:33: 80:28:43:6f:0f:ef:de:ac:ab:ce:a2:6f:8b:f4:19: 9c:43:63:b7:38:04:1b:01:35:c5:fd:7c:c7:6b:b4: 5f:53:7f:a1:99:d9:d2:1f:dd:4d:27:88:c3:d1:fc: 95:a2:84:9b:72:ca:3a:26:97:97:97:1a:7f:46:a9: 6c:fa:47:20:9a:af:0b:13:7a:6a:49:6c:54:81:a2: bb:40:89:cc:5b:e6:ae:3c:55:46:34:f5:50:9c:00: f3:68:8e:46:a1:0a:76:49:3e:24:2e:5f:24:d0:d4: 24:38:44:96:9f:dd:f9:09:be:ea:82:c6:67:76:07: df:23:08:e4:52:6b:ed:6c:a2:98:4f:fe:40:0c:e6: 49:77:81:c7:00:1b:fd:a3:b8:f2:e3:89:d0:4d:d7: 54:ce:c3:bd:5a:3d:b5:a9:b7:8e:26:0e:04:95:5e: 9f:6a:a1:74:1d:d3:b2:75:e6:1b:85:77:6b:36:d7: 1e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:37:34:80:6A:4D:9C:21:A1:5A:35:0D:F9:00:D2:9E:B3:ED:25:63 X509v3 Authority Key Identifier: keyid:DF:A5:F9:05:8A:3F:C2:34:22:10:62:FC:10:FD:9D:62:53:F8:18:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/DFA5F9058A3FC234221062FC10FD9D6253F81867.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFA5F9058A3FC234221062FC10FD9D6253F81867.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a383030303a3a2f33342d3334203d3e20323633353431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:1398:8000::/34 Signature Algorithm: sha256WithRSAEncryption 68:4e:ac:0c:9e:90:c2:cc:e0:a7:fc:b0:0c:fa:e8:63:8c:eb: ef:26:a7:88:6c:59:7a:df:37:b7:3e:1a:a9:70:ff:ca:cf:12: 0b:2b:ff:37:a3:1f:41:85:6d:ba:88:d2:a0:e8:b1:45:89:a2: b1:66:09:ac:fa:e7:a6:d2:53:ad:2a:70:5e:bb:72:67:62:1b: a0:55:6b:0e:e0:05:2d:a7:e1:57:08:84:b3:1d:b7:47:de:29: 01:fb:86:df:77:b7:06:5b:aa:84:77:52:13:bb:85:2c:c8:8a: 30:15:51:64:35:2a:9d:37:ca:eb:21:b7:4b:6a:51:f6:81:e4: 1d:a8:e8:09:df:9d:59:8a:49:ab:02:e1:97:58:a2:33:e7:82: d8:61:68:69:3d:58:08:67:e5:40:a0:5b:c2:d8:60:49:42:eb: 7f:71:d2:04:9f:ba:d1:66:c2:e3:bf:68:dc:f2:ba:f8:80:6a: 51:e8:c6:38:d6:b8:82:4f:ea:a3:cc:2b:23:8a:1c:83:87:15: fa:18:3d:c7:b5:9c:ef:3b:f5:2e:af:96:51:ac:f0:8a:1d:04: ef:43:62:15:a0:8a:fe:01:9c:cb:19:69:91:a5:5a:cc:e1:02: ac:40:cc:ff:19:28:e5:73:c2:22:22:82:4d:bc:a2:6d:55:8a: 2d:44:bf:0d -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUNQlZNmvVRREXaWsFt6j0+Aq5bIowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZBNUY5MDU4QTNGQzIzNDIyMTA2MkZDMTBGRDlENjI1 M0Y4MTg2NzAeFw0yNTAxMDkxNDAxNTFaFw0yNjAxMDgxNDA2NTFaMDMxMTAvBgNV BAMTKDQyMzczNDgwNkE0RDlDMjFBMTVBMzUwREY5MDBEMjlFQjNFRDI1NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCePxbdicu6TiiZNQ4f6O6QIvyh brdtVUuwRhpW+meDFhmxZgYgjabtxDbFLLMlW/AQI0jmIYkdhHxOCd8AwqcKIGGA XIBK37EuM4AoQ28P796sq86ib4v0GZxDY7c4BBsBNcX9fMdrtF9Tf6GZ2dIf3U0n iMPR/JWihJtyyjoml5eXGn9GqWz6RyCarwsTempJbFSBortAicxb5q48VUY09VCc APNojkahCnZJPiQuXyTQ1CQ4RJaf3fkJvuqCxmd2B98jCORSa+1sophP/kAM5kl3 gccAG/2juPLjidBN11TOw71aPbWpt44mDgSVXp9qoXQd07J15huFd2s21x6JAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUQjc0gGpNnCGhWjUN+QDSnrPtJWMwHwYDVR0j BBgwFoAU36X5BYo/wjQiEGL8EP2dYlP4GGcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ2lhenB2ZzgxUTRER00yajgxQ1ZTRmF1WVdSUWM2NFlBeU13ckdYdlJ6 U1UvMC9ERkE1RjkwNThBM0ZDMjM0MjIxMDYyRkMxMEZEOUQ2MjUzRjgxODY3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGQTVGOTA1OEEzRkMyMzQy MjEwNjJGQzEwRkQ5RDYyNTNGODE4NjcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NpYXpwdmc4MVE0REdNMmo4MUNWU0ZhdVlXUlFjNjRZQXlNd3JHWHZSelNVLzAv MzIzODMwMzQzYTMxMzMzOTM4M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzYzMzM1MzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEE5iAMA0GCSqGSIb3DQEBCwUA A4IBAQBoTqwMnpDCzOCn/LAM+uhjjOvvJqeIbFl63ze3PhqpcP/KzxILK/83ox9B hW26iNKg6LFFiaKxZgms+uem0lOtKnBeu3JnYhugVWsO4AUtp+FXCISzHbdH3ikB +4bfd7cGW6qEd1ITu4UsyIowFVFkNSqdN8rrIbdLalH2geQdqOgJ351ZikmrAuGX WKIz54LYYWhpPVgIZ+VAoFvC2GBJQut/cdIEn7rRZsLjv2jc8rr4gGpR6MY41riC T+qjzCsjihyDhxX6GD3HtZzvO/Uur5ZRrPCKHQTvQ2IVoIr+AZzLGWmRpVrM4QKs QMz/GSjlc8IiIoJNvKJtVYotRL8N -----END CERTIFICATE-----Generated at Thu Apr 10 15:48:56 2025 by rpki-client