$ rpki-client -vvf rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a34303a3a2f34332d3433203d3e20323635313837.roa File: 323830343a326330303a34303a3a2f34332d3433203d3e20323635313837.roa (raw, json) Hash identifier: fVgd8qEYFmzmNtVuFzcLPnz3BNhZ0eosy5THgBmk6Ug= Subject key identifier: A6:57:71:CB:8C:86:B1:27:45:D7:AD:02:F2:5D:68:3E:DA:4B:E0:44 Certificate issuer: /CN=F455D0BE5138AE552B4857270EED2A7CE5B5C6F2 Certificate serial: 18D9FBCBC8B85DB062DE1180E3B7E57E04DF2885 Authority key identifier: F4:55:D0:BE:51:38:AE:55:2B:48:57:27:0E:ED:2A:7C:E5:B5:C6:F2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer Subject info access: rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a34303a3a2f34332d3433203d3e20323635313837.roa Signing time: Sat 01 Feb 2025 20:30:44 +0000 ROA not before: Sat 01 Feb 2025 20:25:44 +0000 ROA not after: Sat 31 Jan 2026 20:30:44 +0000 asID: 265187 IP address blocks: 2804:2c00:40::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.crl rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Apr 2025 14:04:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:d9:fb:cb:c8:b8:5d:b0:62:de:11:80:e3:b7:e5:7e:04:df:28:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F455D0BE5138AE552B4857270EED2A7CE5B5C6F2 Validity Not Before: Feb 1 20:25:44 2025 GMT Not After : Jan 31 20:30:44 2026 GMT Subject: CN=A65771CB8C86B12745D7AD02F25D683EDA4BE044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:20:6e:15:54:38:52:3c:49:ce:f5:4e:22:22: 02:69:88:32:c0:ab:6f:56:89:0f:23:92:4e:b5:7c: 9e:ba:77:f8:24:d7:7c:03:8d:49:72:c5:ec:36:28: 36:f4:25:b1:a1:3b:04:7a:43:fc:ac:d1:f0:67:46: 24:b4:55:c7:12:b7:19:3e:e6:3e:3a:92:06:3a:3b: fe:95:fb:7d:ec:4b:d6:bc:66:3e:1c:2a:1c:c9:49: 41:9f:5a:5b:86:97:2b:5a:28:ca:11:7c:6c:ce:94: 61:3d:f8:9e:be:35:f7:92:74:59:5e:47:c6:3c:9a: 3d:97:82:53:3c:55:97:1e:f6:c9:45:f7:97:43:12: 2f:19:6d:34:f0:b7:cf:08:28:63:30:40:5d:74:d5: 13:25:52:4d:b2:c9:cc:d4:d1:2d:2e:6f:09:c9:99: 56:08:a1:ec:d9:83:2f:7c:92:f3:b9:ce:13:80:21: bd:54:e9:3e:cb:f9:58:16:72:e5:44:02:f5:74:db: 82:a6:ae:19:b4:44:0a:fe:a5:75:6f:4f:ba:66:ca: 22:f3:e2:e1:3a:37:25:11:1e:91:2c:24:98:7f:e4: f6:7d:14:c6:84:76:7d:6a:b0:0c:44:0e:70:89:08: 52:d8:10:02:75:ae:77:b8:99:42:ed:e2:e3:79:53: 5f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:57:71:CB:8C:86:B1:27:45:D7:AD:02:F2:5D:68:3E:DA:4B:E0:44 X509v3 Authority Key Identifier: keyid:F4:55:D0:BE:51:38:AE:55:2B:48:57:27:0E:ED:2A:7C:E5:B5:C6:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a34303a3a2f34332d3433203d3e20323635313837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:2c00:40::/43 Signature Algorithm: sha256WithRSAEncryption 0b:91:8e:c6:31:08:f8:f8:ae:3a:58:4d:0c:fc:11:78:8f:4c: 2e:10:01:ed:a6:14:7e:b3:d8:4a:d6:61:f1:db:e3:ab:a9:33: 8d:cf:fd:5e:fe:d4:40:6e:4d:2b:9e:83:c6:8e:4c:32:07:58: c1:a3:95:f4:42:de:87:db:df:09:fe:52:65:d0:2e:3d:90:50: 91:43:0c:8b:9d:d4:3c:f3:25:35:12:23:17:3d:5f:79:75:ee: 09:39:62:13:0b:20:65:73:09:a4:a6:64:13:5d:6c:06:f2:e0: 0e:8a:69:f3:c3:0f:34:5d:dc:15:32:06:43:72:3b:cb:49:2e: d4:44:38:1c:12:99:5b:d7:a4:bc:e6:eb:0d:be:f4:6e:66:57: 7a:77:59:8f:4f:1a:70:36:eb:6f:4b:ec:b2:03:03:68:25:60: 9f:44:1c:a0:3a:c2:fa:45:ee:2a:7e:f6:dc:57:96:c7:a4:f7: 5e:84:44:a8:e1:ae:6b:d4:33:71:75:ba:45:1f:01:a8:f8:c0: 43:95:32:50:50:08:00:e8:aa:7c:b9:ce:2f:88:a9:67:47:b1: 52:a5:ed:09:70:c2:3f:15:74:cb:90:76:0e:da:54:db:88:3e: 1a:ce:e6:d4:d5:20:76:0d:be:0d:24:86:0d:50:49:5e:f6:fa: a9:bd:ea:46 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIUGNn7y8i4XbBi3hGA47flfgTfKIUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQ1NUQwQkU1MTM4QUU1NTJCNDg1NzI3MEVFRDJBN0NF NUI1QzZGMjAeFw0yNTAyMDEyMDI1NDRaFw0yNjAxMzEyMDMwNDRaMDMxMTAvBgNV BAMTKEE2NTc3MUNCOEM4NkIxMjc0NUQ3QUQwMkYyNUQ2ODNFREE0QkUwNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiIG4VVDhSPEnO9U4iIgJpiDLA q29WiQ8jkk61fJ66d/gk13wDjUlyxew2KDb0JbGhOwR6Q/ys0fBnRiS0VccStxk+ 5j46kgY6O/6V+33sS9a8Zj4cKhzJSUGfWluGlytaKMoRfGzOlGE9+J6+NfeSdFle R8Y8mj2XglM8VZce9slF95dDEi8ZbTTwt88IKGMwQF101RMlUk2yyczU0S0ubwnJ mVYIoezZgy98kvO5zhOAIb1U6T7L+VgWcuVEAvV024Kmrhm0RAr+pXVvT7pmyiLz 4uE6NyURHpEsJJh/5PZ9FMaEdn1qsAxEDnCJCFLYEAJ1rne4mULt4uN5U1/TAgMB AAGjggJYMIICVDAdBgNVHQ4EFgQUpldxy4yGsSdF160C8l1oPtpL4EQwHwYDVR0j BBgwFoAU9FXQvlE4rlUrSFcnDu0qfOW1xvIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDdGSFE3YlkzN1Z4VkpvM2RFVmpwUGFweHBiekhrTUxnUUtUem5HYlFh eGIvMC9GNDU1RDBCRTUxMzhBRTU1MkI0ODU3MjcwRUVEMkE3Q0U1QjVDNkYyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y0NTVEMEJFNTEzOEFFNTUy QjQ4NTcyNzBFRUQyQTdDRTVCNUM2RjIuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0Q3RkhRN2JZMzdWeFZKbzNkRVZqcFBhcHhwYnpIa01MZ1FLVHpuR2JRYXhiLzAv MzIzODMwMzQzYTMyNjMzMDMwM2EzNDMwM2EzYTJmMzQzMzJkMzQzMzIwM2QzZTIw MzIzNjM1MzEzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcFKAQsAABAMA0GCSqGSIb3DQEBCwUAA4IB AQALkY7GMQj4+K46WE0M/BF4j0wuEAHtphR+s9hK1mHx2+OrqTONz/1e/tRAbk0r noPGjkwyB1jBo5X0Qt6H298J/lJl0C49kFCRQwyLndQ88yU1EiMXPV95de4JOWIT CyBlcwmkpmQTXWwG8uAOimnzww80XdwVMgZDcjvLSS7URDgcEplb16S85usNvvRu Zld6d1mPTxpwNutvS+yyAwNoJWCfRBygOsL6Re4qfvbcV5bHpPdehESo4a5r1DNx dbpFHwGo+MBDlTJQUAgA6Kp8uc4viKlnR7FSpe0JcMI/FXTLkHYO2lTbiD4azubU 1SB2Db4NJIYNUEle9vqpvepG -----END CERTIFICATE-----Generated at Tue Apr 22 02:14:00 2025 by rpki-client