$ rpki-client -vvf rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a3a2f33322d3438203d3e20323731303134.roa File: 323830343a373466343a3a2f33322d3438203d3e20323731303134.roa (raw, json) Hash identifier: ppHLnUyIsK5T+46iMty9nXKM89F82FfFvAYn8gOfxX8= Subject key identifier: 31:4A:00:9F:99:F3:FD:8F:24:28:31:A6:48:08:80:44:C2:FE:1D:AF Certificate issuer: /CN=107956E9CD07A3AAE9EFEBAEA7DDFB1C27A116D2 Certificate serial: 4D384E619B944CFA02BEE4039A88DB0E4B1E0302 Authority key identifier: 10:79:56:E9:CD:07:A3:AA:E9:EF:EB:AE:A7:DD:FB:1C:27:A1:16:D2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/107956E9CD07A3AAE9EFEBAEA7DDFB1C27A116D2.cer Subject info access: rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a3a2f33322d3438203d3e20323731303134.roa Signing time: Fri 24 Jan 2025 15:29:11 +0000 ROA not before: Fri 24 Jan 2025 15:24:11 +0000 ROA not after: Fri 23 Jan 2026 15:29:11 +0000 asID: 271014 IP address blocks: 2804:74f4::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/107956E9CD07A3AAE9EFEBAEA7DDFB1C27A116D2.crl rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/107956E9CD07A3AAE9EFEBAEA7DDFB1C27A116D2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/107956E9CD07A3AAE9EFEBAEA7DDFB1C27A116D2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 19 Feb 2025 07:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:38:4e:61:9b:94:4c:fa:02:be:e4:03:9a:88:db:0e:4b:1e:03:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=107956E9CD07A3AAE9EFEBAEA7DDFB1C27A116D2 Validity Not Before: Jan 24 15:24:11 2025 GMT Not After : Jan 23 15:29:11 2026 GMT Subject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ubject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3c:30:bd:73:62:d0:d0:0a:4d:dd:16:0e:ec: 40:35:5d:f1:e1:45:95:08:3c:46:22:d1:05:56:fd: 60:e3:2d:bb:64:35:69:3a:ea:43:c0:da:47:7a:1f: 72:a5:22:ec:a3:70:9a:53:1d:62:6b:44:17:58:b6: c1:2a:ef:20:5e:de:dc:5d:35:1b:30:c5:af:8d:6d: 10:ba:ae:07:90:3e:19:9e:f4:24:7d:d8:be:4e:b0: c2:fa:3f:c6:4b:32:ad:08:59:0e:d2:0c:96:5a:62: e6:c0:db:87:dd:de:2a:1f:91:b1:be:61:d3:49:26: e5:81:95:f4:d9:32:41:92:a5:5d:89:8f:a3:18:ec: f4:df:f7:10:d0:24:5f:20:04:48:b9:a2:2f:94:d4: a2:fc:84:68:5d:b0:7f:77:8f:77:75:ce:a3:f5:c5: 86:c6:f7:c2:2b:19:17:38:9a:43:67:27:7f:81:84: da:cb:2b:d5:69:6a:ee:b3:f9:37:37:d6:54:38:f1: 3f:5b:98:ba:ee:7a:88:ed:3c:9f:3d:0e:39:82:61: b1:7c:38:98:24:89:18:8c:29:c0:cb:f9:1d:43:5d: 6f:a9:6e:a4:cf:28:90:42:cd:07:3c:f2:74:8e:2b: 04:5d:83:c0:bd:19:29:30:b5:c6:6d:67:01:1c:9b: e1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:4A:00:9F:99:F3:FD:8F:24:28:31:A6:48:08:80:44:C2:FE:1D:AF X509v3 Authority Key Identifier: keyid:10:79:56:E9:CD:07:A3:AA:E9:EF:EB:AE:A7:DD:FB:1C:27:A1:16:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/107956E9CD07A3AAE9EFEBAEA7DDFB1C27A116D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/107956E9CD07A3AAE9EFEBAEA7DDFB1C27A116D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a3a2f33322d3438203d3e20323731303134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:74f4::/32 Signature Algorithm: sha256WithRSAEncryption b2:5c:f7:a1:7f:62:c4:54:2d:07:56:97:81:e8:4e:5b:eb:16: 10:ab:9c:cc:a0:bb:59:82:1e:9f:2e:60:40:d4:3a:8a:ff:43: 19:c1:d5:9c:f0:48:e1:5a:f8:40:94:b7:43:16:4a:f9:1a:f2: e2:e2:20:97:43:68:d4:86:1e:cc:42:33:f1:ff:2d:f9:64:16: ac:06:00:48:2d:69:d1:52:cd:33:28:1e:2d:6a:b8:25:02:bf: 4a:8e:33:d6:f9:b0:6c:79:2e:1c:1a:03:31:c1:8b:0f:e2:7c: 12:55:5e:38:d9:11:2b:60:10:49:4c:18:40:66:56:3e:63:e2: 6b:a1:1e:9a:b3:a7:d0:07:a2:e6:0a:e8:a0:33:ec:fd:25:c6: 38:6c:ae:60:61:c8:18:63:f4:e3:1a:3c:c8:59:ac:1f:97:e8: 8c:48:0b:39:62:68:0b:55:59:dc:e3:af:0c:10:84:fb:ce:8c: 5c:67:97:97:a4:79:29:c2:cf:7e:e9:b8:80:ef:82:8b:1e:69: df:74:a9:bc:8e:e8:65:38:3a:f6:85:1d:b5:ae:89:3d:6f:5e: 96:ef:e1:52:44:4a:92:10:d9:e8:16:f3:bc:60:9b:d2:c0:fc: a0:e8:4b:88:ea:06:5c:2a:9a:b6:d2:46:4c:55:3b:32:14:36: f9:da:6d:ca -----BEGIN CERTIFICATE----- MIIHQjCCBiqgAwIBAgIUTThOYZuUTPoCvuQDmojbDkseAwIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA3OTU2RTlDRDA3QTNBQUU5RUZFQkFFQTdEREZCMUMy N0ExMTZEMjAeFw0yNTAxMjQxNTI0MTFaFw0yNjAxMjMxNTI5MTFaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0IzQzMwQkQ3MzYyRDBEMDBB NERERDE2MEVFQzQwMzU1REYxRTE0NTk1MDgzQzQ2MjJEMTA1NTZGRDYwRTMyREJC NjQzNTY5M0FFQTQzQzBEQTQ3N0ExRjcyQTUyMkVDQTM3MDlBNTMxRDYyNkI0NDE3 NThCNkMxMkFFRjIwNUVERURDNUQzNTFCMzBDNUFGOEQ2RDEwQkFBRTA3OTAzRTE5 OUVGNDI0N0REOEJFNEVCMEMyRkEzRkM2NEIzMkFEMDg1OTBFRDIwQzk2NUE2MkU2 QzBEQjg3RERERTJBMUY5MUIxQkU2MUQzNDkyNkU1ODE5NUY0RDkzMjQxOTJBNTVE ODk4RkEzMThFQ0Y0REZGNzEwRDAyNDVGMjAwNDQ4QjlBMjJGOTRENEEyRkM4NDY4 NURCMDdGNzc4Rjc3NzVDRUEzRjVDNTg2QzZGN0MyMkIxOTE3Mzg5QTQzNjcyNzdG ODE4NERBQ0IyQkQ1Njk2QUVFQjNGOTM3MzdENjU0MzhGMTNGNUI5OEJBRUU3QTg4 RUQzQzlGM0QwRTM5ODI2MUIxN0MzODk4MjQ4OTE4OEMyOUMwQ0JGOTFENDM1RDZG QTk2RUE0Q0YyODkwNDJDRDA3M0NGMjc0OEUyQjA0NUQ4M0MwQkQxOTI5MzBCNUM2 NkQ2NzAxMUM5QkUxOUQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAyzwwvXNi0NAKTd0WDuxANV3x4UWVCDxGItEFVv1g4y27ZDVpOupD wNpHeh9ypSLso3CaUx1ia0QXWLbBKu8gXt7cXTUbMMWvjW0Quq4HkD4ZnvQkfdi+ TrDC+j/GSzKtCFkO0gyWWmLmwNuH3d4qH5GxvmHTSSblgZX02TJBkqVdiY+jGOz0 3/cQ0CRfIARIuaIvlNSi/IRoXbB/d493dc6j9cWGxvfCKxkXOJpDZyd/gYTayyvV aWrus/k3N9ZUOPE/W5i67nqI7TyfPQ45gmGxfDiYJIkYjCnAy/kdQ11vqW6kzyiQ Qs0HPPJ0jisEXYPAvRkpMLXGbWcBHJvhnQIDAQABo4ICUDCCAkwwHQYDVR0OBBYE FDFKAJ+Z8/2PJCgxpkgIgETC/h2vMB8GA1UdIwQYMBaAFBB5VunNB6Oq6e/rrqfd +xwnoRbSMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0U0M0dkYm1peGNQWDg3 eGlBUzN5dFdqZmY0c3ViQnVrZzZ0b2NVRExHZ0R3LzAvMTA3OTU2RTlDRDA3QTNB QUU5RUZFQkFFQTdEREZCMUMyN0ExMTZEMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p Y2JyX3JlcG8vMS8xMDc5NTZFOUNEMDdBM0FBRTlFRkVCQUVBN0RERkIxQzI3QTEx NkQyLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6 Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9FNDNHZGJtaXhjUFg4N3hpQVMz eXRXamZmNHN1YkJ1a2c2dG9jVURMR2dEdy8wLzMyMzgzMDM0M2EzNzM0NjYzNDNh M2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMTMwMzEzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE dPQwDQYJKoZIhvcNAQELBQADggEBALJc96F/YsRULQdWl4HoTlvrFhCrnMygu1mC Hp8uYEDUOor/QxnB1ZzwSOFa+ECUt0MWSvka8uLiIJdDaNSGHsxCM/H/LflkFqwG AEgtadFSzTMoHi1quCUCv0qOM9b5sGx5LhwaAzHBiw/ifBJVXjjZEStgEElMGEBm Vj5j4muhHpqzp9AHouYK6KAz7P0lxjhsrmBhyBhj9OMaPMhZrB+X6IxICzliaAtV WdzjrwwQhPvOjFxnl5ekeSnCz37puIDvgosead90qbyO6GU4OvaFHbWuiT1vXpbv 4VJESpIQ2egW87xgm9LA/KDoS4jqBlwqmrbSRkxVOzIUNvnabco= -----END CERTIFICATE-----Generated at Tue Feb 18 13:37:51 2025 by rpki-client