$ rpki-client -vvf rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3232303a3a2f34332d3433203d3e20323635313837.roa File: 323830343a326330303a3232303a3a2f34332d3433203d3e20323635313837.roa (raw, json) Hash identifier: iFUa9WQj8/03vr0bmDE3JbNHfqfbua2pjfgVLgUvu90= Subject key identifier: 34:50:99:E0:CF:FF:7A:86:07:29:5D:7D:F2:FA:46:EE:01:BA:24:42 Certificate issuer: /CN=F455D0BE5138AE552B4857270EED2A7CE5B5C6F2 Certificate serial: 022D110364A8F0D2E7F07B747FE4946376066577 Authority key identifier: F4:55:D0:BE:51:38:AE:55:2B:48:57:27:0E:ED:2A:7C:E5:B5:C6:F2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer Subject info access: rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3232303a3a2f34332d3433203d3e20323635313837.roa Signing time: Sat 01 Feb 2025 20:30:56 +0000 ROA not before: Sat 01 Feb 2025 20:25:56 +0000 ROA not after: Sat 31 Jan 2026 20:30:56 +0000 asID: 265187 IP address blocks: 2804:2c00:220::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.crl rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Apr 2025 14:04:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:2d:11:03:64:a8:f0:d2:e7:f0:7b:74:7f:e4:94:63:76:06:65:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F455D0BE5138AE552B4857270EED2A7CE5B5C6F2 Validity Not Before: Feb 1 20:25:56 2025 GMT Not After : Jan 31 20:30:56 2026 GMT Subject: CN=345099E0CFFF7A8607295D7DF2FA46EE01BA2442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ff:d2:c9:af:c0:e4:fa:06:fd:76:38:55:e0: 99:bf:79:ae:e0:71:db:1b:c4:c1:22:b7:d3:10:c7: 10:b5:5a:58:f8:60:8d:fe:95:8f:e1:9d:97:7e:b0: 6d:5f:1e:e2:3a:de:a3:60:81:9b:0f:f7:14:12:00: 00:b5:4a:94:f2:75:88:35:f2:ac:82:6a:3f:2e:79: c2:d4:4b:04:73:f5:53:e1:98:67:e5:2f:cc:29:e7: 71:d8:b3:83:fc:77:a0:f6:c0:7b:a7:24:db:1c:5f: 8a:2a:54:63:f0:86:16:22:66:0f:cb:12:09:f7:cc: 4c:af:2b:fa:19:db:ab:26:07:2b:2a:22:7a:19:8d: f9:0c:89:28:d8:31:a0:e6:14:e9:46:91:5a:1d:6d: 04:a6:01:dc:f3:10:1b:e5:c9:e5:fa:71:4b:ee:48: a2:90:ac:b1:1b:bc:b4:46:4b:cf:d7:83:f6:ac:b2: cf:7f:1f:c5:1a:84:54:77:8f:ef:4c:6d:0b:4d:c3: db:03:ae:f5:be:e9:4d:d1:5e:10:69:5c:de:37:65: 2e:02:fd:f7:ae:c0:54:63:55:58:c6:27:69:07:09: 0e:ca:3f:0e:8e:aa:28:9e:68:d7:2a:7c:0b:9a:c1: 19:c1:62:55:22:5d:d2:99:d1:bb:76:d5:e4:b4:d6: 43:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:50:99:E0:CF:FF:7A:86:07:29:5D:7D:F2:FA:46:EE:01:BA:24:42 X509v3 Authority Key Identifier: keyid:F4:55:D0:BE:51:38:AE:55:2B:48:57:27:0E:ED:2A:7C:E5:B5:C6:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3232303a3a2f34332d3433203d3e20323635313837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:2c00:220::/43 Signature Algorithm: sha256WithRSAEncryption 63:2f:2e:21:74:5d:e7:dc:6a:41:ae:b2:7a:7f:cc:0a:60:a5: 65:b4:76:f9:cf:6f:7d:5b:87:7c:de:36:b1:72:b6:f6:32:72: 3a:e9:09:bc:7a:8c:53:60:dd:a8:85:42:c4:be:62:b1:a4:d1: ed:f7:60:16:75:3f:eb:63:86:c3:57:95:a1:5c:fb:b3:fa:b7: a5:e5:f5:99:3c:e1:50:af:40:ce:c3:6c:a8:c4:17:ed:12:1c: 9a:19:43:af:a7:56:83:93:95:5d:c4:6a:62:56:ef:00:74:95: 89:1c:20:a0:0a:d1:f0:19:c1:d4:7e:b0:5b:cd:af:d5:c3:d7: f4:c6:a1:40:43:b1:f5:03:a6:6f:c9:f0:bc:d7:35:f3:61:60: 63:e2:b8:71:40:5a:76:08:8d:df:69:bd:b5:92:dd:60:4f:0d: b1:e4:ef:b8:f3:c9:fd:16:94:d7:41:f7:80:6d:6f:bb:86:94: da:32:62:8e:49:d0:88:c1:bd:75:65:6b:34:a6:ff:01:50:7a: 29:cb:61:60:1c:e5:85:09:41:0a:4b:e9:92:a6:d2:34:3d:84: d7:e3:75:2a:2e:f2:be:cd:32:a1:e8:5c:c0:39:86:7d:b3:51: 85:1b:d2:da:e4:58:b1:95:2a:de:41:b1:54:ed:aa:bc:8e:47: 5b:bb:4f:71 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgIUAi0RA2So8NLn8Ht0f+SUY3YGZXcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQ1NUQwQkU1MTM4QUU1NTJCNDg1NzI3MEVFRDJBN0NF NUI1QzZGMjAeFw0yNTAyMDEyMDI1NTZaFw0yNjAxMzEyMDMwNTZaMDMxMTAvBgNV BAMTKDM0NTA5OUUwQ0ZGRjdBODYwNzI5NUQ3REYyRkE0NkVFMDFCQTI0NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8/9LJr8Dk+gb9djhV4Jm/ea7g cdsbxMEit9MQxxC1Wlj4YI3+lY/hnZd+sG1fHuI63qNggZsP9xQSAAC1SpTydYg1 8qyCaj8uecLUSwRz9VPhmGflL8wp53HYs4P8d6D2wHunJNscX4oqVGPwhhYiZg/L Egn3zEyvK/oZ26smBysqInoZjfkMiSjYMaDmFOlGkVodbQSmAdzzEBvlyeX6cUvu SKKQrLEbvLRGS8/Xg/asss9/H8UahFR3j+9MbQtNw9sDrvW+6U3RXhBpXN43ZS4C /feuwFRjVVjGJ2kHCQ7KPw6OqiieaNcqfAuawRnBYlUiXdKZ0bt21eS01kN7AgMB AAGjggJaMIICVjAdBgNVHQ4EFgQUNFCZ4M//eoYHKV198vpG7gG6JEIwHwYDVR0j BBgwFoAU9FXQvlE4rlUrSFcnDu0qfOW1xvIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDdGSFE3YlkzN1Z4VkpvM2RFVmpwUGFweHBiekhrTUxnUUtUem5HYlFh eGIvMC9GNDU1RDBCRTUxMzhBRTU1MkI0ODU3MjcwRUVEMkE3Q0U1QjVDNkYyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y0NTVEMEJFNTEzOEFFNTUy QjQ4NTcyNzBFRUQyQTdDRTVCNUM2RjIuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0Q3RkhRN2JZMzdWeFZKbzNkRVZqcFBhcHhwYnpIa01MZ1FLVHpuR2JRYXhiLzAv MzIzODMwMzQzYTMyNjMzMDMwM2EzMjMyMzAzYTNhMmYzNDMzMmQzNDMzMjAzZDNl MjAzMjM2MzUzMTM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwUoBCwAAiAwDQYJKoZIhvcNAQELBQAD ggEBAGMvLiF0XefcakGusnp/zApgpWW0dvnPb31bh3zeNrFytvYycjrpCbx6jFNg 3aiFQsS+YrGk0e33YBZ1P+tjhsNXlaFc+7P6t6Xl9Zk84VCvQM7DbKjEF+0SHJoZ Q6+nVoOTlV3EamJW7wB0lYkcIKAK0fAZwdR+sFvNr9XD1/TGoUBDsfUDpm/J8LzX NfNhYGPiuHFAWnYIjd9pvbWS3WBPDbHk77jzyf0WlNdB94Btb7uGlNoyYo5J0IjB vXVlazSm/wFQeinLYWAc5YUJQQpL6ZKm0jQ9hNfjdSou8r7NMqHoXMA5hn2zUYUb 0trkWLGVKt5BsVTtqryOR1u7T3E= -----END CERTIFICATE-----Generated at Tue Apr 22 02:00:54 2025 by rpki-client