$ rpki-client -vvf rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/323830343a316464343a343030303a3a2f33342d3334203d3e20323634333937.roa File: 323830343a316464343a343030303a3a2f33342d3334203d3e20323634333937.roa (raw, json) Hash identifier: ubK9AE2qmY8rdmSxWNQ58+3M5JAmnWtrOpLBnx2AhwY= Subject key identifier: CF:09:45:7E:E0:28:4D:D7:09:96:07:9E:AE:63:0C:FB:20:B5:B4:62 Certificate issuer: /CN=2C47A6E18151A828A5700D2B7E16C9A1FCABD20A Certificate serial: 4676501AC82AF13E7679B9537B38482A98454975 Authority key identifier: 2C:47:A6:E1:81:51:A8:28:A5:70:0D:2B:7E:16:C9:A1:FC:AB:D2:0A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.cer Subject info access: rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/323830343a316464343a343030303a3a2f33342d3334203d3e20323634333937.roa Signing time: Wed 07 May 2025 20:59:56 +0000 ROA not before: Wed 07 May 2025 20:54:56 +0000 ROA not after: Wed 06 May 2026 20:59:56 +0000 asID: 264397 IP address blocks: 2804:1dd4:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.crl rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 13 Jun 2025 05:04:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:76:50:1a:c8:2a:f1:3e:76:79:b9:53:7b:38:48:2a:98:45:49:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C47A6E18151A828A5700D2B7E16C9A1FCABD20A Validity Not Before: May 7 20:54:56 2025 GMT Not After : May 6 20:59:56 2026 GMT Subject: CN=CF09457EE0284DD70996079EAE630CFB20B5B462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ea:7e:19:5e:0a:67:9a:1e:aa:f0:61:45:67: 1c:b4:cd:af:ee:8f:bc:4a:96:23:24:64:42:06:bd: 53:cc:a6:08:17:32:70:00:f4:a3:54:b0:2f:d7:f9: 83:c2:72:96:1b:c7:eb:de:50:e2:20:21:c3:58:01: ce:81:bd:96:4c:63:ce:86:a5:30:fc:f3:a9:12:d1: e1:ed:0e:2c:79:ab:e4:90:d2:2e:5b:c2:7e:0b:b8: d9:dd:3f:09:d6:05:5e:63:09:25:b2:78:f3:a9:c9: e5:c8:ca:69:7f:c6:9a:8f:12:d2:8d:4a:11:3a:51: ed:53:c0:41:cb:58:d7:20:8d:06:ba:f8:27:ad:58: 95:60:b3:9e:16:5a:3a:68:e3:8b:0b:e8:50:83:47: 74:5a:d8:b8:07:00:e2:9a:e9:80:9b:93:16:d6:a6: 7f:bb:a1:2f:a9:df:91:85:ce:87:73:f8:5f:5c:65: f4:1e:45:33:2d:40:32:e9:32:46:cf:cf:81:6b:f3: 6e:c7:7a:9a:71:82:9e:49:35:95:e1:15:08:50:b3: c5:39:24:b0:70:68:76:ca:9f:a2:de:b1:ac:80:9d: 6f:a6:24:04:bd:7a:0d:96:59:f6:a4:df:3c:6e:31: c2:9d:cc:65:6d:58:db:09:5a:74:44:26:0f:96:e5: e1:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:09:45:7E:E0:28:4D:D7:09:96:07:9E:AE:63:0C:FB:20:B5:B4:62 X509v3 Authority Key Identifier: keyid:2C:47:A6:E1:81:51:A8:28:A5:70:0D:2B:7E:16:C9:A1:FC:AB:D2:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/323830343a316464343a343030303a3a2f33342d3334203d3e20323634333937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:1dd4:4000::/34 Signature Algorithm: sha256WithRSAEncryption c4:72:dc:25:a5:12:53:e9:ba:a5:25:eb:8c:74:2a:5c:1d:29: 7d:0f:0d:8e:cd:41:1e:13:49:88:1e:c4:93:5d:f6:6c:e5:5a: 44:62:fa:9a:7e:a9:d6:d9:65:c6:f3:b4:cd:5e:cb:9c:d3:f6: 5c:5b:91:0d:cc:b5:96:20:eb:b7:1b:fe:ff:7f:29:d3:ea:6c: b5:3f:e8:eb:1a:8a:4c:ec:b6:f9:58:4d:8a:85:12:53:ba:f5: 2a:4d:02:55:2b:1f:b4:9c:b8:de:c4:2a:4c:e2:f7:15:a8:35: f6:2a:ea:73:3f:b3:fc:d2:29:b2:f6:41:07:2a:5d:fe:84:3e: e1:8e:98:6d:ea:2d:52:27:e8:3f:3d:5e:29:2e:f3:ed:6a:4b: b5:0f:2e:0e:85:11:d4:39:3e:0d:14:f1:f4:70:28:17:8d:5a: 8d:2c:8e:e5:9d:d2:68:9c:86:4b:c5:99:bd:82:36:a4:1f:c7: f3:2c:ec:ea:ae:cd:b4:82:0e:70:8e:95:4a:25:cf:b2:2c:94: d0:b7:f6:c3:d4:f2:ba:08:e0:7d:e1:da:3c:85:99:03:e6:89: af:9f:57:6f:f3:f0:9d:b9:02:7a:32:20:4b:eb:47:cc:36:49: 9d:cc:86:74:16:97:1d:f5:df:54:db:f5:0f:ec:d3:73:21:55: b1:cc:dc:a5 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIURnZQGsgq8T52eblTezhIKphFSXUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM0N0E2RTE4MTUxQTgyOEE1NzAwRDJCN0UxNkM5QTFG Q0FCRDIwQTAeFw0yNTA1MDcyMDU0NTZaFw0yNjA1MDYyMDU5NTZaMDMxMTAvBgNV BAMTKENGMDk0NTdFRTAyODRERDcwOTk2MDc5RUFFNjMwQ0ZCMjBCNUI0NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC06n4ZXgpnmh6q8GFFZxy0za/u j7xKliMkZEIGvVPMpggXMnAA9KNUsC/X+YPCcpYbx+veUOIgIcNYAc6BvZZMY86G pTD886kS0eHtDix5q+SQ0i5bwn4LuNndPwnWBV5jCSWyePOpyeXIyml/xpqPEtKN ShE6Ue1TwEHLWNcgjQa6+CetWJVgs54WWjpo44sL6FCDR3Ra2LgHAOKa6YCbkxbW pn+7oS+p35GFzodz+F9cZfQeRTMtQDLpMkbPz4Fr827Heppxgp5JNZXhFQhQs8U5 JLBwaHbKn6LesayAnW+mJAS9eg2WWfak3zxuMcKdzGVtWNsJWnREJg+W5eEhAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUzwlFfuAoTdcJlgeermMM+yC1tGIwHwYDVR0j BBgwFoAULEem4YFRqCilcA0rfhbJofyr0gowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ296WldhRGZkdTNCYmhrRmZTZmJzMzNnYUdnTXlSZkRCRURYUnI4eFNy OGEvMC8yQzQ3QTZFMTgxNTFBODI4QTU3MDBEMkI3RTE2QzlBMUZDQUJEMjBBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJDNDdBNkUxODE1MUE4MjhB NTcwMEQyQjdFMTZDOUExRkNBQkQyMEEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NvelpXYURmZHUzQmJoa0ZmU2ZiczMzZ2FHZ015UmZEQkVEWFJyOHhTcjhhLzAv MzIzODMwMzQzYTMxNjQ2NDM0M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzYzNDMzMzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEHdRAMA0GCSqGSIb3DQEBCwUA A4IBAQDEctwlpRJT6bqlJeuMdCpcHSl9Dw2OzUEeE0mIHsSTXfZs5VpEYvqafqnW 2WXG87TNXsuc0/ZcW5ENzLWWIOu3G/7/fynT6my1P+jrGopM7Lb5WE2KhRJTuvUq TQJVKx+0nLjexCpM4vcVqDX2KupzP7P80imy9kEHKl3+hD7hjpht6i1SJ+g/PV4p LvPtaku1Dy4OhRHUOT4NFPH0cCgXjVqNLI7lndJonIZLxZm9gjakH8fzLOzqrs20 gg5wjpVKJc+yLJTQt/bD1PK6COB94do8hZkD5omvn1dv8/CduQJ6MiBL60fMNkmd zIZ0Fpcd9d9U2/UP7NNzIVWxzNyl -----END CERTIFICATE-----Generated at Thu Jun 12 14:19:42 2025 by rpki-client