$ rpki-client -vvf rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/323830343a313765303a383030303a3a2f33332d3333203d3e20323633323536.roa File: 323830343a313765303a383030303a3a2f33332d3333203d3e20323633323536.roa (raw, json) Hash identifier: Z1z0NASbWdA2Cwvbp6c8kHxW/THF+wxaQSlKb14PvjA= Subject key identifier: 8D:54:04:58:9B:3A:A3:15:BD:37:39:4F:6E:6B:2B:14:0B:33:6C:A2 Certificate issuer: /CN=60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011 Certificate serial: 06882712E1D40FABEFC610049F6C315BA0BB6DF7 Authority key identifier: 60:F5:CE:DC:60:B1:C9:2A:5A:74:DC:B3:CF:E6:F0:44:F9:46:20:11 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.cer Subject info access: rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/323830343a313765303a383030303a3a2f33332d3333203d3e20323633323536.roa Signing time: Fri 10 Jan 2025 16:41:54 +0000 ROA not before: Fri 10 Jan 2025 16:36:54 +0000 ROA not after: Fri 09 Jan 2026 16:41:54 +0000 asID: 263256 IP address blocks: 2804:17e0:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.crl rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 13:49:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:88:27:12:e1:d4:0f:ab:ef:c6:10:04:9f:6c:31:5b:a0:bb:6d:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011 Validity Not Before: Jan 10 16:36:54 2025 GMT Not After : Jan 9 16:41:54 2026 GMT Subject: CN=8D5404589B3AA315BD37394F6E6B2B140B336CA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e8:44:aa:9a:b4:f8:54:a7:3b:63:0e:d0:9a: 9d:43:2e:15:4a:f8:a5:1a:22:a3:48:cd:62:81:59: 2c:e6:89:36:bb:f2:e6:1f:7a:da:9f:1f:d3:f1:34: 40:17:76:d4:de:a3:f2:79:dc:93:2c:8d:72:a8:d6: 46:42:1d:f6:79:08:27:8f:39:9b:79:c1:f5:ef:d1: 0b:af:b3:c0:ea:22:8b:63:33:f1:c3:b6:32:d5:29: df:42:ca:53:56:d2:42:90:6e:7c:a6:57:cc:0c:93: 9f:44:d1:c1:fc:34:7b:81:a3:1a:bd:79:1f:1f:22: 3b:9b:49:6e:de:13:61:db:58:ae:58:4f:51:37:d3: 99:44:e0:33:12:51:09:55:88:77:fe:3c:a0:56:29: bd:df:a3:08:13:93:79:de:53:27:33:5f:bc:33:7b: c7:cb:5c:13:25:d2:96:d1:85:54:fa:2b:1f:db:c2: 22:86:a7:44:c3:6a:46:36:a7:7b:41:76:4a:9f:e4: bb:0c:f4:2b:38:00:db:3a:44:93:8d:e6:62:36:ad: 9e:3e:26:89:ce:e6:75:cd:d7:19:c3:37:b0:d7:28: e7:83:0d:3c:eb:9b:8b:3e:07:c5:93:cb:c0:c5:43: 10:24:ec:73:ff:9a:e7:63:da:1d:1b:33:83:0b:24: 91:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:54:04:58:9B:3A:A3:15:BD:37:39:4F:6E:6B:2B:14:0B:33:6C:A2 X509v3 Authority Key Identifier: keyid:60:F5:CE:DC:60:B1:C9:2A:5A:74:DC:B3:CF:E6:F0:44:F9:46:20:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/323830343a313765303a383030303a3a2f33332d3333203d3e20323633323536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:17e0:8000::/33 Signature Algorithm: sha256WithRSAEncryption 26:34:77:ff:40:1e:d0:d0:ed:69:db:ac:d9:c3:16:92:2c:96: c7:91:2f:fb:3a:62:d1:8e:88:d9:bd:8a:a8:c7:1d:44:6d:14: 90:28:71:c6:7c:1e:1f:cc:c8:c1:b3:c6:aa:6b:b7:62:a7:c6: f1:92:6f:7c:67:30:b2:be:f4:e0:c0:da:b1:ba:43:f0:8d:6a: 70:5d:71:7f:fb:97:ae:5c:13:6f:6f:82:c1:7c:09:80:a1:3c: 50:5f:0f:a0:7d:82:64:a7:96:f1:79:c6:73:58:f9:89:66:8e: 12:57:de:66:12:51:a7:ec:92:fe:57:c1:83:8d:0b:7d:f8:1e: e8:a9:cb:ce:98:5c:f1:af:47:1d:ce:21:25:c6:29:17:7d:0f: 62:f2:d0:93:b8:2f:9d:fb:af:5b:5b:86:dc:c4:8d:56:0d:ce: 0d:57:52:e0:c2:64:dd:f5:da:b1:d7:b3:23:b4:ca:70:22:6f: a0:3e:15:1f:6b:23:9c:88:6c:56:64:0e:ae:72:cd:3c:3f:82: 66:e4:32:42:f0:c8:ed:49:4c:c9:50:c8:12:03:c5:36:a3:64: be:34:01:41:2e:3f:4c:48:e1:4e:c6:9c:9b:e0:a2:89:8f:2a: 53:ee:a4:8b:aa:9f:d3:e1:4d:5f:cb:71:ee:32:e5:42:ae:63: 9b:8f:a1:ec -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUBognEuHUD6vvxhAEn2wxW6C7bfcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBGNUNFREM2MEIxQzkyQTVBNzREQ0IzQ0ZFNkYwNDRG OTQ2MjAxMTAeFw0yNTAxMTAxNjM2NTRaFw0yNjAxMDkxNjQxNTRaMDMxMTAvBgNV BAMTKDhENTQwNDU4OUIzQUEzMTVCRDM3Mzk0RjZFNkIyQjE0MEIzMzZDQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR6ESqmrT4VKc7Yw7Qmp1DLhVK +KUaIqNIzWKBWSzmiTa78uYfetqfH9PxNEAXdtTeo/J53JMsjXKo1kZCHfZ5CCeP OZt5wfXv0Quvs8DqIotjM/HDtjLVKd9CylNW0kKQbnymV8wMk59E0cH8NHuBoxq9 eR8fIjubSW7eE2HbWK5YT1E305lE4DMSUQlViHf+PKBWKb3fowgTk3neUyczX7wz e8fLXBMl0pbRhVT6Kx/bwiKGp0TDakY2p3tBdkqf5LsM9Cs4ANs6RJON5mI2rZ4+ JonO5nXN1xnDN7DXKOeDDTzrm4s+B8WTy8DFQxAk7HP/mudj2h0bM4MLJJHRAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUjVQEWJs6oxW9NzlPbmsrFAszbKIwHwYDVR0j BBgwFoAUYPXO3GCxySpadNyzz+bwRPlGIBEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRXB3UGZzd1c5TmdMZVZKdXFHQ2RZTlRLRWluMXpWQlQ2b0d6ZXM5YXJk U2QvMC82MEY1Q0VEQzYwQjFDOTJBNUE3NERDQjNDRkU2RjA0NEY5NDYyMDExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYwRjVDRURDNjBCMUM5MkE1 QTc0RENCM0NGRTZGMDQ0Rjk0NjIwMTEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0Vwd1Bmc3dXOU5nTGVWSnVxR0NkWU5US0VpbjF6VkJUNm9HemVzOWFyZFNkLzAv MzIzODMwMzQzYTMxMzc2NTMwM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk M2UyMDMyMzYzMzMyMzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEF+CAMA0GCSqGSIb3DQEBCwUA A4IBAQAmNHf/QB7Q0O1p26zZwxaSLJbHkS/7OmLRjojZvYqoxx1EbRSQKHHGfB4f zMjBs8aqa7dip8bxkm98ZzCyvvTgwNqxukPwjWpwXXF/+5euXBNvb4LBfAmAoTxQ Xw+gfYJkp5bxecZzWPmJZo4SV95mElGn7JL+V8GDjQt9+B7oqcvOmFzxr0cdziEl xikXfQ9i8tCTuC+d+69bW4bcxI1WDc4NV1LgwmTd9dqx17MjtMpwIm+gPhUfayOc iGxWZA6ucs08P4Jm5DJC8MjtSUzJUMgSA8U2o2S+NAFBLj9MSOFOxpyb4KKJjypT 7qSLqp/T4U1fy3HuMuVCrmObj6Hs -----END CERTIFICATE-----Generated at Tue Apr 8 16:39:19 2025 by rpki-client