$ rpki-client -vvf rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/323830343a373335633a383030303a3a2f33332d3333203d3e20323730393130.roa File: 323830343a373335633a383030303a3a2f33332d3333203d3e20323730393130.roa (raw, json) Hash identifier: dKfma4CpMbhcgdduv6rcM5Fr3zqENhZiTWk5f3wJUsQ= Subject key identifier: 59:12:BA:C6:CC:2B:6C:99:4C:9C:83:34:07:EA:89:BA:5C:26:90:37 Certificate issuer: /CN=21B66D518F6F1EC440896EDEA1C6F9E694CC3B66 Certificate serial: 6E876B392C048007B102AE86D8CEA873B0B56B84 Authority key identifier: 21:B6:6D:51:8F:6F:1E:C4:40:89:6E:DE:A1:C6:F9:E6:94:CC:3B:66 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer Subject info access: rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/323830343a373335633a383030303a3a2f33332d3333203d3e20323730393130.roa Signing time: Thu 04 Apr 2024 07:17:28 +0000 ROA not before: Thu 04 Apr 2024 07:12:28 +0000 ROA not after: Thu 03 Apr 2025 07:17:28 +0000 asID: 270910 IP address blocks: 2804:735c:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.crl rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 20 Feb 2025 17:26:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:87:6b:39:2c:04:80:07:b1:02:ae:86:d8:ce:a8:73:b0:b5:6b:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21B66D518F6F1EC440896EDEA1C6F9E694CC3B66 Validity Not Before: Apr 4 07:12:28 2024 GMT Not After : Apr 3 07:17:28 2025 GMT Subject: CN=5912BAC6CC2B6C994C9C833407EA89BA5C269037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fd:09:57:44:dd:e2:70:26:71:ec:e4:96:b9: c1:78:71:29:c1:ef:5c:40:3e:a3:8a:3d:26:6f:46: cd:ad:fa:cb:0a:37:65:f7:96:60:d5:bd:19:8d:3e: c3:b3:4b:d9:53:93:4d:34:8b:09:2c:82:f1:fb:63: cb:d8:a8:41:61:e4:cb:2f:16:a5:13:6a:5e:1c:26: 0b:02:75:6e:8c:63:b0:9a:7a:e3:d4:8c:3b:fe:91: ad:67:ab:1c:dd:55:7d:89:c2:77:3c:9e:7a:69:91: 1d:1e:e2:d9:e5:81:24:c9:59:e8:37:55:8a:1a:05: 2b:0c:85:ae:d6:6b:4a:73:df:8a:10:69:2f:78:e5: 31:3b:9b:bc:f0:b8:c8:86:83:c3:6f:2a:f0:e3:6b: 8d:55:a0:32:e3:81:1c:77:58:44:65:54:73:7c:7e: 1c:1d:c3:da:b7:61:eb:37:57:1c:97:34:4d:c0:6f: be:e6:cf:75:01:25:03:3c:bd:99:53:3e:f7:32:66: 3f:4d:db:73:2d:50:93:88:34:7c:17:de:88:79:e0: 63:e0:a8:95:5e:35:d6:99:30:0f:b6:30:0b:d4:09: ba:62:23:85:94:99:7b:e8:ba:6c:82:51:12:67:53: 33:f8:be:28:16:a4:43:d2:c8:0f:fb:3e:ec:e3:9b: b5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:12:BA:C6:CC:2B:6C:99:4C:9C:83:34:07:EA:89:BA:5C:26:90:37 X509v3 Authority Key Identifier: keyid:21:B6:6D:51:8F:6F:1E:C4:40:89:6E:DE:A1:C6:F9:E6:94:CC:3B:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/323830343a373335633a383030303a3a2f33332d3333203d3e20323730393130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:735c:8000::/33 Signature Algorithm: sha256WithRSAEncryption 63:95:d4:8a:81:5d:ee:3b:55:90:ba:7b:07:8b:86:33:cc:62: 80:2f:c6:8a:27:23:b2:66:eb:31:ce:10:ea:b3:a8:c5:e7:0c: d8:e3:44:34:b9:77:96:61:a4:9f:48:8e:20:44:e7:2e:c8:9a: 09:c0:f5:16:26:bb:49:73:ed:bc:41:82:50:11:14:17:02:9e: ce:1b:54:fc:b2:b2:4a:3c:c4:74:9c:f4:92:fd:07:c7:21:ee: 9c:f6:5d:85:6d:11:17:48:35:8f:aa:31:07:03:22:80:f1:ca: 59:41:82:5d:ae:48:62:79:2f:9b:f6:90:c6:9f:83:5c:74:ac: ed:2a:12:7f:38:fe:25:1f:51:e6:af:cd:38:a3:37:dc:94:22: fb:2a:a9:b8:6e:c4:b6:86:f2:6c:fa:75:0a:fc:ab:98:fb:93: 42:ff:aa:62:08:33:b5:36:71:5e:b4:d2:9d:17:32:51:06:f8: 0f:52:91:ab:92:0e:93:08:9d:16:80:54:4f:0e:5c:95:fd:a2: 48:79:2d:3d:90:34:76:05:96:98:f1:17:6d:42:e5:a1:16:79: 75:f8:97:20:7c:1d:02:90:96:c0:fd:2d:ad:97:a3:16:9c:45: 43:14:aa:f3:82:9a:92:b6:0c:eb:35:42:b7:94:9d:4a:36:8f: 64:bf:7d:61 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUbodrOSwEgAexAq6G2M6oc7C1a4QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFCNjZENTE4RjZGMUVDNDQwODk2RURFQTFDNkY5RTY5 NENDM0I2NjAeFw0yNDA0MDQwNzEyMjhaFw0yNTA0MDMwNzE3MjhaMDMxMTAvBgNV BAMTKDU5MTJCQUM2Q0MyQjZDOTk0QzlDODMzNDA3RUE4OUJBNUMyNjkwMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5/QlXRN3icCZx7OSWucF4cSnB 71xAPqOKPSZvRs2t+ssKN2X3lmDVvRmNPsOzS9lTk000iwksgvH7Y8vYqEFh5Msv FqUTal4cJgsCdW6MY7CaeuPUjDv+ka1nqxzdVX2Jwnc8nnppkR0e4tnlgSTJWeg3 VYoaBSsMha7Wa0pz34oQaS945TE7m7zwuMiGg8NvKvDja41VoDLjgRx3WERlVHN8 fhwdw9q3Yes3VxyXNE3Ab77mz3UBJQM8vZlTPvcyZj9N23MtUJOINHwX3oh54GPg qJVeNdaZMA+2MAvUCbpiI4WUmXvoumyCURJnUzP4vigWpEPSyA/7Puzjm7URAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUWRK6xswrbJlMnIM0B+qJulwmkDcwHwYDVR0j BBgwFoAUIbZtUY9vHsRAiW7eocb55pTMO2YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDNxRTVIc0NxOEI1SGp0Smc5MXBjeFFZRVRyUnlIUXBCa1VHUmNEaGRU Q2YvMS8yMUI2NkQ1MThGNkYxRUM0NDA4OTZFREVBMUM2RjlFNjk0Q0MzQjY2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxQjY2RDUxOEY2RjFFQzQ0 MDg5NkVERUExQzZGOUU2OTRDQzNCNjYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0QzcUU1SHNDcThCNUhqdEpnOTFwY3hRWUVUclJ5SFFwQmtVR1JjRGhkVENmLzEv MzIzODMwMzQzYTM3MzMzNTYzM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk M2UyMDMyMzczMDM5MzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEc1yAMA0GCSqGSIb3DQEBCwUA A4IBAQBjldSKgV3uO1WQunsHi4YzzGKAL8aKJyOyZusxzhDqs6jF5wzY40Q0uXeW YaSfSI4gROcuyJoJwPUWJrtJc+28QYJQERQXAp7OG1T8srJKPMR0nPSS/QfHIe6c 9l2FbREXSDWPqjEHAyKA8cpZQYJdrkhieS+b9pDGn4NcdKztKhJ/OP4lH1Hmr804 ozfclCL7Kqm4bsS2hvJs+nUK/KuY+5NC/6piCDO1NnFetNKdFzJRBvgPUpGrkg6T CJ0WgFRPDlyV/aJIeS09kDR2BZaY8RdtQuWhFnl1+JcgfB0CkJbA/S2tl6MWnEVD FKrzgpqStgzrNUK3lJ1KNo9kv31h -----END CERTIFICATE-----Generated at Wed Feb 19 22:30:01 2025 by rpki-client