$ rpki-client -vvf rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/323830343a3132383a3a2f33322d313238203d3e203238363334.roa File: 323830343a3132383a3a2f33322d313238203d3e203238363334.roa (raw, json) Hash identifier: jhkpyCGOiFoaKho/F9VSBfkFrUgfmttqVKiUPpsPEuM= Subject key identifier: 7A:D7:CE:11:F4:61:57:A1:73:3E:71:7C:07:CA:2E:4C:F9:DC:C4:7D Certificate issuer: /CN=0D6FFD3C3204618EF3CCEB297FD1A42073CD712A Certificate serial: 7D4507BA3AE8A5DA1C17486F5613AE24382FF8F3 Authority key identifier: 0D:6F:FD:3C:32:04:61:8E:F3:CC:EB:29:7F:D1:A4:20:73:CD:71:2A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.cer Subject info access: rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/323830343a3132383a3a2f33322d313238203d3e203238363334.roa Signing time: Thu 06 Mar 2025 08:18:51 +0000 ROA not before: Thu 06 Mar 2025 08:13:51 +0000 ROA not after: Thu 05 Mar 2026 08:18:51 +0000 asID: 28634 IP address blocks: 2804:128::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.crl rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 12 Apr 2025 03:16:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:45:07:ba:3a:e8:a5:da:1c:17:48:6f:56:13:ae:24:38:2f:f8:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D6FFD3C3204618EF3CCEB297FD1A42073CD712A Validity Not Before: Mar 6 08:13:51 2025 GMT Not After : Mar 5 08:18:51 2026 GMT Subject: CN=7AD7CE11F46157A1733E717C07CA2E4CF9DCC47D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:bc:4c:df:cc:5a:16:fe:80:16:3c:37:a6:b6: 54:80:88:ba:05:0e:2f:e1:30:ef:cc:1c:9c:59:51: 85:4c:66:9f:31:21:ce:a7:7b:16:6f:3a:48:5e:34: 24:df:94:fb:3e:0d:67:3a:32:b4:23:36:71:fc:65: ba:de:93:c5:94:a4:f4:48:d6:c0:7b:14:b6:1a:b7: 14:03:d8:eb:b2:32:63:dc:13:8f:ee:d9:ac:b4:c7: 53:6c:9f:fe:37:81:71:0b:9a:b0:d4:17:f8:4a:65: 0b:32:dc:aa:60:fe:7a:76:5c:9d:b0:fd:50:8f:87: d5:7d:c3:4b:9c:a3:be:ee:55:ca:28:7a:e4:7a:88: 9c:96:b3:01:3f:6a:cc:09:3c:10:cf:1d:04:74:99: 5a:15:48:3a:dd:b9:30:7e:a9:c6:9d:76:65:91:38: 3a:80:e8:20:c5:64:a8:2e:be:ae:4b:65:3b:ff:c5: 11:3d:49:eb:83:74:5f:be:c8:82:7e:1f:75:88:51: 1a:11:11:ed:fa:3c:41:43:7a:ba:68:e2:02:52:03: 3d:75:29:af:b7:28:4d:f9:0a:84:ec:f0:8b:c2:cc: 2a:92:ba:41:cb:e9:b8:8f:85:10:25:24:c7:4a:34: f9:e4:87:88:59:eb:e1:8b:d9:91:f2:9b:f0:9a:4c: f4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:D7:CE:11:F4:61:57:A1:73:3E:71:7C:07:CA:2E:4C:F9:DC:C4:7D X509v3 Authority Key Identifier: keyid:0D:6F:FD:3C:32:04:61:8E:F3:CC:EB:29:7F:D1:A4:20:73:CD:71:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/323830343a3132383a3a2f33322d313238203d3e203238363334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:128::/32 Signature Algorithm: sha256WithRSAEncryption 09:84:84:eb:c4:23:91:c6:85:69:96:12:b0:41:bc:5e:ce:76: a0:b2:40:a9:96:1a:78:ff:bd:ca:b3:f3:12:12:73:39:a9:14: 6f:96:4b:d8:00:8e:b5:85:1d:05:e1:6a:10:5b:56:6c:a2:07: 56:c2:62:b2:bf:6a:6a:83:7b:2f:95:5a:55:d1:a4:03:8b:3e: 9a:cd:58:ee:b3:ba:f5:c3:ea:7e:19:61:a8:99:1b:b8:29:a9: 61:04:0c:45:68:8b:c4:7d:3c:66:cf:f9:24:31:ba:ca:77:46: 37:f5:ad:84:50:69:d3:1b:13:81:2f:a0:82:a0:cc:89:32:e4: 5d:c9:44:aa:e1:62:a5:5c:a2:5c:c7:e8:0d:07:dd:f8:8b:83: 7c:b6:94:35:ec:ad:6a:7f:aa:af:ae:f6:b0:c9:bb:04:d6:9d: da:01:e7:90:6c:12:53:ca:58:3d:1a:67:99:b2:c8:0d:31:1c: b9:32:7d:86:6e:88:6f:30:1c:0b:99:aa:5d:72:ae:7c:6b:75: e8:ec:d3:1a:74:b4:7d:69:70:51:f0:af:a3:cd:29:3c:e5:ac: 48:da:20:a7:c6:5b:39:a9:2e:ed:ff:99:b9:0c:84:83:ef:37: e6:0d:b3:e3:86:a6:d8:aa:c9:46:9b:51:0c:a2:c0:2d:bb:5d: 62:d2:0a:f1 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIUfUUHujropdocF0hvVhOuJDgv+PMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQ2RkZEM0MzMjA0NjE4RUYzQ0NFQjI5N0ZEMUE0MjA3 M0NENzEyQTAeFw0yNTAzMDYwODEzNTFaFw0yNjAzMDUwODE4NTFaMDMxMTAvBgNV BAMTKDdBRDdDRTExRjQ2MTU3QTE3MzNFNzE3QzA3Q0EyRTRDRjlEQ0M0N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgvEzfzFoW/oAWPDemtlSAiLoF Di/hMO/MHJxZUYVMZp8xIc6nexZvOkheNCTflPs+DWc6MrQjNnH8Zbrek8WUpPRI 1sB7FLYatxQD2OuyMmPcE4/u2ay0x1Nsn/43gXELmrDUF/hKZQsy3Kpg/np2XJ2w /VCPh9V9w0uco77uVcooeuR6iJyWswE/aswJPBDPHQR0mVoVSDrduTB+qcaddmWR ODqA6CDFZKguvq5LZTv/xRE9SeuDdF++yIJ+H3WIURoREe36PEFDerpo4gJSAz11 Ka+3KE35CoTs8IvCzCqSukHL6biPhRAlJMdKNPnkh4hZ6+GL2ZHym/CaTPTxAgMB AAGjggJOMIICSjAdBgNVHQ4EFgQUetfOEfRhV6FzPnF8B8ouTPncxH0wHwYDVR0j BBgwFoAUDW/9PDIEYY7zzOspf9GkIHPNcSowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRktRd1ZvQUR5RVA1S045NmZoemlxTkhBWlJYVGtEQnBBWTJXcWNIaE1a NWcvMy8wRDZGRkQzQzMyMDQ2MThFRjNDQ0VCMjk3RkQxQTQyMDczQ0Q3MTJBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBENkZGRDNDMzIwNDYxOEVG M0NDRUIyOTdGRDFBNDIwNzNDRDcxMkEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0ZLUXdWb0FEeUVQNUtOOTZmaHppcU5IQVpSWFRrREJwQVkyV3FjSGhNWjVnLzMv MzIzODMwMzQzYTMxMzIzODNhM2EyZjMzMzIyZDMxMzIzODIwM2QzZTIwMzIzODM2 MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB /wQRMA8wDQQCAAIwBwMFACgEASgwDQYJKoZIhvcNAQELBQADggEBAAmEhOvEI5HG hWmWErBBvF7OdqCyQKmWGnj/vcqz8xISczmpFG+WS9gAjrWFHQXhahBbVmyiB1bC YrK/amqDey+VWlXRpAOLPprNWO6zuvXD6n4ZYaiZG7gpqWEEDEVoi8R9PGbP+SQx usp3Rjf1rYRQadMbE4EvoIKgzIky5F3JRKrhYqVcolzH6A0H3fiLg3y2lDXsrWp/ qq+u9rDJuwTWndoB55BsElPKWD0aZ5myyA0xHLkyfYZuiG8wHAuZql1yrnxrdejs 0xp0tH1pcFHwr6PNKTzlrEjaIKfGWzmpLu3/mbkMhIPvN+YNs+OGptiqyUabUQyi wC27XWLSCvE= -----END CERTIFICATE-----Generated at Fri Apr 11 11:59:56 2025 by rpki-client