$ rpki-client -vvf rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/323830343a313765303a383030303a3a2f33342d3334203d3e20323633323536.roa File: 323830343a313765303a383030303a3a2f33342d3334203d3e20323633323536.roa (raw, json) Hash identifier: pN5rU8bgMrtX000uWLBdPGIOnl9KGZr35GAhD62eTHI= Subject key identifier: 9D:50:D8:A3:64:BC:A3:6B:CC:F8:9D:FF:0A:D7:F0:93:9F:2A:AE:B8 Certificate issuer: /CN=60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011 Certificate serial: 73D6EFFDCC338A5B82BE371AA144AD0D8F11DD93 Authority key identifier: 60:F5:CE:DC:60:B1:C9:2A:5A:74:DC:B3:CF:E6:F0:44:F9:46:20:11 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.cer Subject info access: rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/323830343a313765303a383030303a3a2f33342d3334203d3e20323633323536.roa Signing time: Fri 10 Jan 2025 16:41:54 +0000 ROA not before: Fri 10 Jan 2025 16:36:54 +0000 ROA not after: Fri 09 Jan 2026 16:41:54 +0000 asID: 263256 IP address blocks: 2804:17e0:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.crl rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 14 Apr 2025 18:27:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:d6:ef:fd:cc:33:8a:5b:82:be:37:1a:a1:44:ad:0d:8f:11:dd:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011 Validity Not Before: Jan 10 16:36:54 2025 GMT Not After : Jan 9 16:41:54 2026 GMT Subject: CN=9D50D8A364BCA36BCCF89DFF0AD7F0939F2AAEB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:88:31:0c:aa:8c:ed:4d:71:64:57:a4:96:7d: 9b:0d:89:78:96:64:2c:52:c5:2b:28:07:f0:5c:61: 1d:5b:d3:69:5f:be:9a:98:9a:48:6d:63:9a:d0:4f: 54:26:c5:d0:c7:35:25:f6:ad:da:86:10:59:b0:dd: 09:31:d6:7d:a2:da:21:cd:c8:58:97:65:e0:b6:8f: 5a:c4:01:2c:a5:a8:04:52:29:51:3b:34:26:5e:e9: 0a:24:34:e0:76:e7:ef:82:bb:77:9c:6d:7c:47:ee: a4:8b:e2:59:60:fd:71:4c:89:13:6d:a2:fc:72:06: af:b1:7e:0b:51:4e:ee:58:d8:38:2c:1e:c9:1e:ef: e9:6f:60:3c:22:11:d1:bc:0b:fe:b6:b3:ae:24:0e: 08:8f:10:28:08:ee:62:52:4d:b0:0f:b2:69:4e:9e: a8:c1:e5:64:ff:ad:2f:14:77:66:b2:a5:b0:16:41: 6b:03:0f:73:09:3f:78:67:90:73:27:95:e1:11:2e: 5f:18:6f:63:3b:19:4b:7a:0b:28:cb:fb:e1:1e:55: 0f:d2:3e:76:51:c7:50:b7:df:a1:fb:6c:09:3a:27: 13:cd:41:c1:ab:8b:de:39:68:e3:04:9f:7e:f8:68: 3b:c2:81:79:c2:83:c3:4f:0f:8b:3b:86:3e:15:6e: a4:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:50:D8:A3:64:BC:A3:6B:CC:F8:9D:FF:0A:D7:F0:93:9F:2A:AE:B8 X509v3 Authority Key Identifier: keyid:60:F5:CE:DC:60:B1:C9:2A:5A:74:DC:B3:CF:E6:F0:44:F9:46:20:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/323830343a313765303a383030303a3a2f33342d3334203d3e20323633323536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:17e0:8000::/34 Signature Algorithm: sha256WithRSAEncryption 24:df:71:d9:84:62:1e:3a:fc:43:3b:dd:a7:98:ca:39:6c:f8: 7e:0c:82:73:cb:fe:cc:df:ca:bf:d3:4f:26:9c:1f:cc:ef:c0: 68:f9:03:90:04:43:b3:17:03:e8:d0:d5:04:0e:a2:80:44:c9: 31:1a:60:cf:0c:ec:a1:ba:19:cc:de:98:cf:fc:0f:cf:89:d4: 22:47:46:04:44:a4:0b:18:c6:2c:5f:8d:bb:3a:00:ff:b2:17: a1:97:90:ec:db:9a:80:23:f1:a9:ec:f4:1e:8b:ce:89:05:8f: 06:6c:15:05:7b:80:3e:8c:d7:f6:04:c5:23:87:6d:a8:43:34: 46:2c:b9:3a:c6:05:bb:b7:d4:d7:d1:d8:11:78:35:58:a8:6c: 3a:4f:f9:49:e8:0a:ad:5e:65:af:82:5e:3c:4e:0a:ee:0f:e2: 9c:43:50:da:c6:a0:92:86:f4:5f:fd:28:15:70:60:ed:a9:91: d2:41:83:f0:0f:b2:93:a4:d1:30:a3:df:2f:78:80:d3:85:4f: 38:7f:2d:fd:87:97:32:0f:ee:63:c1:51:6b:5c:27:67:91:45: bd:26:83:ce:3c:28:59:57:72:0f:fa:43:b8:d5:3b:0f:4d:46: 54:83:78:d8:d5:05:ad:c6:b1:c0:f5:a9:25:1e:8c:79:91:f9: 99:3a:f8:f7 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUc9bv/cwziluCvjcaoUStDY8R3ZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBGNUNFREM2MEIxQzkyQTVBNzREQ0IzQ0ZFNkYwNDRG OTQ2MjAxMTAeFw0yNTAxMTAxNjM2NTRaFw0yNjAxMDkxNjQxNTRaMDMxMTAvBgNV BAMTKDlENTBEOEEzNjRCQ0EzNkJDQ0Y4OURGRjBBRDdGMDkzOUYyQUFFQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRiDEMqoztTXFkV6SWfZsNiXiW ZCxSxSsoB/BcYR1b02lfvpqYmkhtY5rQT1QmxdDHNSX2rdqGEFmw3Qkx1n2i2iHN yFiXZeC2j1rEASylqARSKVE7NCZe6QokNOB25++Cu3ecbXxH7qSL4llg/XFMiRNt ovxyBq+xfgtRTu5Y2DgsHske7+lvYDwiEdG8C/62s64kDgiPECgI7mJSTbAPsmlO nqjB5WT/rS8Ud2aypbAWQWsDD3MJP3hnkHMnleERLl8Yb2M7GUt6CyjL++EeVQ/S PnZRx1C336H7bAk6JxPNQcGri945aOMEn374aDvCgXnCg8NPD4s7hj4VbqTVAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUnVDYo2S8o2vM+J3/Ctfwk58qrrgwHwYDVR0j BBgwFoAUYPXO3GCxySpadNyzz+bwRPlGIBEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRXB3UGZzd1c5TmdMZVZKdXFHQ2RZTlRLRWluMXpWQlQ2b0d6ZXM5YXJk U2QvMC82MEY1Q0VEQzYwQjFDOTJBNUE3NERDQjNDRkU2RjA0NEY5NDYyMDExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYwRjVDRURDNjBCMUM5MkE1 QTc0RENCM0NGRTZGMDQ0Rjk0NjIwMTEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0Vwd1Bmc3dXOU5nTGVWSnVxR0NkWU5US0VpbjF6VkJUNm9HemVzOWFyZFNkLzAv MzIzODMwMzQzYTMxMzc2NTMwM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzYzMzMyMzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEF+CAMA0GCSqGSIb3DQEBCwUA A4IBAQAk33HZhGIeOvxDO92nmMo5bPh+DIJzy/7M38q/008mnB/M78Bo+QOQBEOz FwPo0NUEDqKARMkxGmDPDOyhuhnM3pjP/A/PidQiR0YERKQLGMYsX427OgD/sheh l5Ds25qAI/Gp7PQei86JBY8GbBUFe4A+jNf2BMUjh22oQzRGLLk6xgW7t9TX0dgR eDVYqGw6T/lJ6AqtXmWvgl48TgruD+KcQ1DaxqCShvRf/SgVcGDtqZHSQYPwD7KT pNEwo98veIDThU84fy39h5cyD+5jwVFrXCdnkUW9JoPOPChZV3IP+kO41TsPTUZU g3jY1QWtxrHA9aklHox5kfmZOvj3 -----END CERTIFICATE-----Generated at Mon Apr 14 01:57:13 2025 by rpki-client