$ rpki-client -vvf rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/323830343a6335383a3a2f33322d313238203d3e203532363934.roa File: 323830343a6335383a3a2f33322d313238203d3e203532363934.roa (raw, json) Hash identifier: 9O2EZ1ZOA5SxIxzwzkyeRpvslbdGVqnJeJ0v8OoeGGs= Subject key identifier: 74:97:53:A8:1E:F0:3C:3D:21:72:B4:C9:95:73:85:A2:9B:64:65:67 Certificate issuer: /CN=3DAF1CA48633D42F38955C47C8BA0FADA73D7007 Certificate serial: 64BB01CBE879DEE2A6F55E45A1EBDE93C351D826 Authority key identifier: 3D:AF:1C:A4:86:33:D4:2F:38:95:5C:47:C8:BA:0F:AD:A7:3D:70:07 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer Subject info access: rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/323830343a6335383a3a2f33322d313238203d3e203532363934.roa Signing time: Fri 07 Mar 2025 00:13:53 +0000 ROA not before: Fri 07 Mar 2025 00:08:53 +0000 ROA not after: Fri 06 Mar 2026 00:13:53 +0000 asID: 52694 IP address blocks: 2804:c58::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.crl rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 08 Apr 2025 21:14:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:bb:01:cb:e8:79:de:e2:a6:f5:5e:45:a1:eb:de:93:c3:51:d8:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DAF1CA48633D42F38955C47C8BA0FADA73D7007 Validity Not Before: Mar 7 00:08:53 2025 GMT Not After : Mar 6 00:13:53 2026 GMT Subject: CN=749753A81EF03C3D2172B4C9957385A29B646567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c9:4b:ad:d6:5f:a0:dc:03:fb:be:76:d2:75: e4:38:6d:bc:fb:2c:73:95:73:01:ff:7d:b6:f0:9e: 4e:19:5f:6b:7d:06:30:ab:4c:1c:ef:57:3e:2f:77: 97:37:44:1a:44:71:5e:c8:38:64:ad:8c:63:71:0b: ab:17:1a:0f:c5:d9:44:7e:c8:ed:2e:c8:88:31:fa: a5:28:f0:5f:03:1e:f4:ae:55:22:f2:13:6c:5b:0c: df:d9:a6:29:58:1b:df:c6:9e:7f:a4:f3:6e:97:13: 0e:74:4c:ed:a4:86:21:24:c0:2a:23:39:b4:37:5e: 37:9a:5a:12:93:da:38:fb:79:bd:54:6f:be:61:24: d9:3a:bd:f5:25:4c:40:5a:0a:d6:3c:2d:49:0b:94: 19:b1:fe:66:4b:56:94:f4:fd:65:f6:bd:24:ba:80: a1:c2:ee:de:41:0e:cd:30:70:c8:97:21:7e:a4:d3: 4b:3c:52:d1:d8:67:f1:46:16:be:95:c8:82:31:43: 43:1d:56:99:88:d0:4f:02:ad:6f:f0:8a:b4:98:3b: e8:cc:28:a7:bf:21:85:af:83:88:ee:78:e4:45:46: 71:4d:b7:f4:04:bc:ad:ec:ed:8a:73:c3:c2:4c:ba: 35:af:63:3e:98:75:6e:33:5b:fd:8b:7f:1f:ed:a1: eb:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:97:53:A8:1E:F0:3C:3D:21:72:B4:C9:95:73:85:A2:9B:64:65:67 X509v3 Authority Key Identifier: keyid:3D:AF:1C:A4:86:33:D4:2F:38:95:5C:47:C8:BA:0F:AD:A7:3D:70:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/323830343a6335383a3a2f33322d313238203d3e203532363934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:c58::/32 Signature Algorithm: sha256WithRSAEncryption 1a:9e:aa:6c:d5:bb:49:f8:dd:48:f6:2a:37:7d:d9:34:45:04: a2:7a:97:6c:38:fd:e2:12:c0:fc:e8:6a:fa:e0:f6:3a:75:d5: 5c:df:5d:d4:19:33:10:fd:3a:01:32:66:8f:3e:be:c4:71:f2: a3:4c:ee:7e:37:40:55:53:94:68:93:35:ee:56:fe:a4:f2:f5: 69:78:ee:86:ca:92:f9:4a:7c:77:11:f5:2e:fd:a8:f1:eb:35: d5:54:d4:49:c5:cc:01:a8:d4:88:b7:ef:ce:c6:72:89:79:eb: 17:0c:2e:05:18:f7:86:ba:36:2b:ce:a5:34:ca:48:c5:43:0c: 6f:e0:55:3e:be:84:ce:2e:4f:d5:2c:87:f6:4b:98:72:09:df: 87:12:82:55:33:9b:21:9e:2b:65:34:0d:37:ea:59:74:14:ca: e1:65:43:74:44:58:a4:19:7e:70:df:59:bb:e5:1c:9d:89:12: 60:6f:cc:b1:0a:8b:e8:17:2c:37:c3:87:67:8d:2d:a6:74:a1: 02:07:1e:db:6b:da:ce:9d:55:3d:36:cb:5d:51:73:af:3a:3e: 99:54:65:88:3e:28:85:13:04:6f:e5:9b:35:05:0e:74:81:6a: 1e:92:0f:23:a8:dc:44:f3:1d:46:1f:df:96:e2:38:a9:2d:1b: 30:ff:e6:f2 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIUZLsBy+h53uKm9V5Foevek8NR2CYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0RBRjFDQTQ4NjMzRDQyRjM4OTU1QzQ3QzhCQTBGQURB NzNENzAwNzAeFw0yNTAzMDcwMDA4NTNaFw0yNjAzMDYwMDEzNTNaMDMxMTAvBgNV BAMTKDc0OTc1M0E4MUVGMDNDM0QyMTcyQjRDOTk1NzM4NUEyOUI2NDY1NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJyUut1l+g3AP7vnbSdeQ4bbz7 LHOVcwH/fbbwnk4ZX2t9BjCrTBzvVz4vd5c3RBpEcV7IOGStjGNxC6sXGg/F2UR+ yO0uyIgx+qUo8F8DHvSuVSLyE2xbDN/ZpilYG9/Gnn+k826XEw50TO2khiEkwCoj ObQ3XjeaWhKT2jj7eb1Ub75hJNk6vfUlTEBaCtY8LUkLlBmx/mZLVpT0/WX2vSS6 gKHC7t5BDs0wcMiXIX6k00s8UtHYZ/FGFr6VyIIxQ0MdVpmI0E8CrW/wirSYO+jM KKe/IYWvg4jueORFRnFNt/QEvK3s7Ypzw8JMujWvYz6YdW4zW/2Lfx/toeuJAgMB AAGjggJOMIICSjAdBgNVHQ4EFgQUdJdTqB7wPD0hcrTJlXOFoptkZWcwHwYDVR0j BBgwFoAUPa8cpIYz1C84lVxHyLoPrac9cAcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRjk2OTVYRW5raFZ6ZXVkWGZrVTZGVlBiR0ZYNldVSzdlc05CemhIUkw3 cGQvMC8zREFGMUNBNDg2MzNENDJGMzg5NTVDNDdDOEJBMEZBREE3M0Q3MDA3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNEQUYxQ0E0ODYzM0Q0MkYz ODk1NUM0N0M4QkEwRkFEQTczRDcwMDcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0Y5Njk1WEVua2hWemV1ZFhma1U2RlZQYkdGWDZXVUs3ZXNOQnpoSFJMN3BkLzAv MzIzODMwMzQzYTYzMzUzODNhM2EyZjMzMzIyZDMxMzIzODIwM2QzZTIwMzUzMjM2 MzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB /wQRMA8wDQQCAAIwBwMFACgEDFgwDQYJKoZIhvcNAQELBQADggEBABqeqmzVu0n4 3Uj2Kjd92TRFBKJ6l2w4/eISwPzoavrg9jp11VzfXdQZMxD9OgEyZo8+vsRx8qNM 7n43QFVTlGiTNe5W/qTy9Wl47obKkvlKfHcR9S79qPHrNdVU1EnFzAGo1Ii3787G col56xcMLgUY94a6NivOpTTKSMVDDG/gVT6+hM4uT9Ush/ZLmHIJ34cSglUzmyGe K2U0DTfqWXQUyuFlQ3REWKQZfnDfWbvlHJ2JEmBvzLEKi+gXLDfDh2eNLaZ0oQIH Httr2s6dVT02y11Rc686PplUZYg+KIUTBG/lmzUFDnSBah6SDyOo3ETzHUYf35bi OKktGzD/5vI= -----END CERTIFICATE-----Generated at Tue Apr 8 00:22:34 2025 by rpki-client