$ rpki-client -vvf rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a633030303a3a2f33342d3334203d3e20323633353431.roa File: 323830343a313339383a633030303a3a2f33342d3334203d3e20323633353431.roa (raw, json) Hash identifier: 6+Y23mcx6i7uYXLSciFLKfo9qesuJ/5n9HKaAxmH36w= Subject key identifier: D8:8F:80:6D:6F:B5:2A:39:69:51:1D:C3:62:E2:54:AC:D0:DB:4C:4D Certificate issuer: /CN=DFA5F9058A3FC234221062FC10FD9D6253F81867 Certificate serial: 1BD8952C9AC441C22F24956CF96F2CA408E447F7 Authority key identifier: DF:A5:F9:05:8A:3F:C2:34:22:10:62:FC:10:FD:9D:62:53:F8:18:67 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFA5F9058A3FC234221062FC10FD9D6253F81867.cer Subject info access: rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a633030303a3a2f33342d3334203d3e20323633353431.roa Signing time: Thu 09 Jan 2025 14:06:54 +0000 ROA not before: Thu 09 Jan 2025 14:01:54 +0000 ROA not after: Thu 08 Jan 2026 14:06:54 +0000 asID: 263541 IP address blocks: 2804:1398:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/DFA5F9058A3FC234221062FC10FD9D6253F81867.crl rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/DFA5F9058A3FC234221062FC10FD9D6253F81867.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFA5F9058A3FC234221062FC10FD9D6253F81867.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 11 Apr 2025 01:19:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:d8:95:2c:9a:c4:41:c2:2f:24:95:6c:f9:6f:2c:a4:08:e4:47:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFA5F9058A3FC234221062FC10FD9D6253F81867 Validity Not Before: Jan 9 14:01:54 2025 GMT Not After : Jan 8 14:06:54 2026 GMT Subject: CN=D88F806D6FB52A3969511DC362E254ACD0DB4C4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:c5:6d:94:5a:33:bc:48:72:75:d0:0d:26:76: 99:8a:c9:34:7d:b3:76:c7:ef:e7:d3:94:1b:3d:41: 57:92:41:c7:cc:2f:0c:cd:1a:e9:21:5d:1b:57:75: ac:9d:e4:45:7c:ac:6b:9c:17:f7:16:a6:ea:96:da: 2f:15:67:31:1e:08:a0:53:ed:b0:9a:17:2b:3e:60: 7e:c3:36:51:8f:6f:f6:f3:db:c1:4b:d8:48:ec:60: 44:db:fd:b8:fa:db:1e:fa:ed:78:3b:2c:fc:bb:4d: ee:d3:42:7d:90:59:5e:1e:9d:a1:eb:90:e0:b1:4e: 2f:0f:2b:06:ee:5d:f9:14:f8:8e:1a:30:43:dc:ab: 54:33:6f:ff:01:6c:76:35:f5:70:bd:78:a2:ba:38: 68:9a:a4:96:30:35:ca:62:1c:85:f0:70:29:89:08: 68:96:ce:e3:1e:7b:26:3d:6c:ca:db:81:cb:b5:80: 54:7c:c6:60:0e:92:05:13:6c:a8:36:57:e5:57:b7: 7e:30:9e:6b:62:f9:3c:f1:b1:da:ff:e2:8a:19:f4: ae:be:63:1e:43:81:d8:5c:76:6d:68:45:b7:c0:06: 5a:d7:72:70:1e:c5:6b:97:41:b5:d9:e6:b3:02:e6: 22:07:47:f3:b4:7b:06:e6:2a:45:38:84:5b:f8:17: f6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:8F:80:6D:6F:B5:2A:39:69:51:1D:C3:62:E2:54:AC:D0:DB:4C:4D X509v3 Authority Key Identifier: keyid:DF:A5:F9:05:8A:3F:C2:34:22:10:62:FC:10:FD:9D:62:53:F8:18:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/DFA5F9058A3FC234221062FC10FD9D6253F81867.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFA5F9058A3FC234221062FC10FD9D6253F81867.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a633030303a3a2f33342d3334203d3e20323633353431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:1398:c000::/34 Signature Algorithm: sha256WithRSAEncryption 9e:20:71:22:77:33:15:a5:1c:5b:20:35:76:8b:5f:ff:43:8b: e8:c5:cc:77:36:7e:50:fd:1a:bc:3d:00:a1:93:2a:70:cc:fe: 96:23:78:ef:d5:a4:46:ab:98:99:43:06:ec:af:d1:e9:ef:26: 65:b4:1d:3f:1f:7e:6b:d6:01:e5:b0:79:03:6e:da:15:59:ba: 4d:8f:a7:f8:9e:8e:6a:d2:31:b1:37:2e:c6:ea:9a:b0:f6:9b: 7e:0a:c1:f6:00:f3:ac:43:2f:81:21:85:42:50:de:03:fb:ea: 4e:48:b3:e7:94:ce:e1:d4:20:78:e5:8d:59:6d:70:e4:77:a2: 03:12:4e:6f:be:bc:0b:22:1a:60:b2:da:66:3f:87:42:c7:57: 00:47:d6:69:c7:6a:fa:47:be:0d:e5:3c:06:aa:98:02:fa:6d: 31:ee:c5:1e:67:9e:60:b2:a3:b6:66:38:b4:5f:b2:4e:36:50: 87:75:cd:90:3b:95:2c:37:bb:65:6b:00:02:ef:f9:31:56:82: 92:98:82:ce:1f:9b:c6:39:eb:6c:e3:5e:9b:f5:27:66:a9:fc: 33:0c:97:1c:21:b0:5a:5e:0c:20:6a:43:be:bc:31:c8:26:20: 05:6a:fb:d4:35:ba:a5:7d:95:41:e0:69:74:84:84:c7:a6:19: 50:ab:37:06 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUG9iVLJrEQcIvJJVs+W8spAjkR/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZBNUY5MDU4QTNGQzIzNDIyMTA2MkZDMTBGRDlENjI1 M0Y4MTg2NzAeFw0yNTAxMDkxNDAxNTRaFw0yNjAxMDgxNDA2NTRaMDMxMTAvBgNV BAMTKEQ4OEY4MDZENkZCNTJBMzk2OTUxMURDMzYyRTI1NEFDRDBEQjRDNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2xW2UWjO8SHJ10A0mdpmKyTR9 s3bH7+fTlBs9QVeSQcfMLwzNGukhXRtXdayd5EV8rGucF/cWpuqW2i8VZzEeCKBT 7bCaFys+YH7DNlGPb/bz28FL2EjsYETb/bj62x767Xg7LPy7Te7TQn2QWV4enaHr kOCxTi8PKwbuXfkU+I4aMEPcq1Qzb/8BbHY19XC9eKK6OGiapJYwNcpiHIXwcCmJ CGiWzuMeeyY9bMrbgcu1gFR8xmAOkgUTbKg2V+VXt34wnmti+Tzxsdr/4ooZ9K6+ Yx5Dgdhcdm1oRbfABlrXcnAexWuXQbXZ5rMC5iIHR/O0ewbmKkU4hFv4F/aLAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQU2I+AbW+1KjlpUR3DYuJUrNDbTE0wHwYDVR0j BBgwFoAU36X5BYo/wjQiEGL8EP2dYlP4GGcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ2lhenB2ZzgxUTRER00yajgxQ1ZTRmF1WVdSUWM2NFlBeU13ckdYdlJ6 U1UvMC9ERkE1RjkwNThBM0ZDMjM0MjIxMDYyRkMxMEZEOUQ2MjUzRjgxODY3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGQTVGOTA1OEEzRkMyMzQy MjEwNjJGQzEwRkQ5RDYyNTNGODE4NjcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NpYXpwdmc4MVE0REdNMmo4MUNWU0ZhdVlXUlFjNjRZQXlNd3JHWHZSelNVLzAv MzIzODMwMzQzYTMxMzMzOTM4M2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzYzMzM1MzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEE5jAMA0GCSqGSIb3DQEBCwUA A4IBAQCeIHEidzMVpRxbIDV2i1//Q4voxcx3Nn5Q/Rq8PQChkypwzP6WI3jv1aRG q5iZQwbsr9Hp7yZltB0/H35r1gHlsHkDbtoVWbpNj6f4no5q0jGxNy7G6pqw9pt+ CsH2APOsQy+BIYVCUN4D++pOSLPnlM7h1CB45Y1ZbXDkd6IDEk5vvrwLIhpgstpm P4dCx1cAR9Zpx2r6R74N5TwGqpgC+m0x7sUeZ55gsqO2Zji0X7JONlCHdc2QO5Us N7tlawAC7/kxVoKSmILOH5vGOets416b9SdmqfwzDJccIbBaXgwgakO+vDHIJiAF avvUNbqlfZVB4Gl0hITHphlQqzcG -----END CERTIFICATE-----Generated at Thu Apr 10 15:47:32 2025 by rpki-client