$ rpki-client -vvf rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/323830343a316263343a3a2f33332d3336203d3e203631373438.roa File: 323830343a316263343a3a2f33332d3336203d3e203631373438.roa (raw, json) Hash identifier: R9Ypkor/WoHs60LGm1RBpGk2/E0qx6LSSMm085WqZk4= Subject key identifier: D2:60:9F:58:45:A6:E0:5F:A6:50:E6:00:EC:56:75:CF:74:A5:30:02 Certificate issuer: /CN=553A87CDE2E92ADFD4442328CE2DB7349CECEA42 Certificate serial: 76BF9976B230F8CFECC95FC7BCCFAA76FBD22F17 Authority key identifier: 55:3A:87:CD:E2:E9:2A:DF:D4:44:23:28:CE:2D:B7:34:9C:EC:EA:42 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.cer Subject info access: rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/323830343a316263343a3a2f33332d3336203d3e203631373438.roa Signing time: Mon 25 Nov 2024 14:43:19 +0000 ROA not before: Mon 25 Nov 2024 14:38:19 +0000 ROA not after: Mon 24 Nov 2025 14:43:19 +0000 asID: 61748 IP address blocks: 2804:1bc4::/33 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.crl rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 26 Nov 2024 17:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:bf:99:76:b2:30:f8:cf:ec:c9:5f:c7:bc:cf:aa:76:fb:d2:2f:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=553A87CDE2E92ADFD4442328CE2DB7349CECEA42 Validity Not Before: Nov 25 14:38:19 2024 GMT Not After : Nov 24 14:43:19 2025 GMT Subject: CN=D2609F5845A6E05FA650E600EC5675CF74A53002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:aa:5b:58:ca:ff:02:c7:51:ce:72:cb:43:4b: fe:a0:d6:57:0c:d4:0a:a1:a2:a9:dc:9b:ea:8e:07: ab:4b:44:52:c4:6c:10:3a:14:92:dc:95:b6:25:cd: 95:63:d6:57:f1:67:13:58:3a:8e:38:89:a3:6b:c8: 4a:cb:6b:d4:7f:d9:ca:0e:57:04:6e:8a:53:5a:3e: 33:da:83:24:30:9d:70:cd:c0:ac:96:b9:64:8d:c6: 52:7b:1a:10:e0:72:dc:5c:a6:ac:be:6e:2f:22:56: cd:e3:6c:48:2a:a6:88:02:cf:39:45:9c:6f:5e:d9: 87:a3:a6:c5:99:f8:0b:4d:70:f1:4d:a2:a3:ee:6d: dc:e1:b0:b9:49:ef:3e:13:10:99:a5:36:8e:75:d1: 5f:cb:d4:97:63:2e:d7:72:0e:78:55:ab:65:03:b1: 49:3e:3d:f1:2b:b6:84:87:3e:d4:75:b7:62:b8:6b: 6f:bb:a2:c4:a0:0b:b4:86:d7:34:08:7c:c1:5b:29: 4a:9a:6c:51:db:ca:db:30:90:88:bf:d2:fa:03:bd: a7:ff:11:3a:3c:96:78:ad:af:bb:4e:9f:d9:93:6d: 0f:4b:4e:db:fe:35:d9:1f:d5:6f:38:84:50:55:a9: 32:c6:d0:ae:7d:9f:1d:83:fa:65:7d:e5:3c:a5:69: 76:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:60:9F:58:45:A6:E0:5F:A6:50:E6:00:EC:56:75:CF:74:A5:30:02 X509v3 Authority Key Identifier: keyid:55:3A:87:CD:E2:E9:2A:DF:D4:44:23:28:CE:2D:B7:34:9C:EC:EA:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/323830343a316263343a3a2f33332d3336203d3e203631373438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:1bc4::/33 Signature Algorithm: sha256WithRSAEncryption b0:52:f9:5d:bd:24:1c:1d:1c:dd:27:53:11:b1:29:bd:45:8f: cc:08:59:a8:49:40:62:59:b5:c1:5b:ab:7e:09:55:0a:a0:25: 47:9a:55:51:40:1b:45:5c:e7:67:16:27:46:15:27:1d:a9:01: b7:7f:21:ff:e3:e2:ba:dc:9c:ff:cb:4d:d0:93:cb:c5:bd:ac: 70:83:f5:d7:85:f4:c5:ce:a0:9a:d3:2c:a7:f5:61:cf:f7:66: 62:0e:22:3f:dd:7f:e6:49:b9:9e:9d:9e:5e:d9:31:cf:49:90: 77:77:6b:db:5d:08:8b:33:51:09:49:6b:5f:9f:34:ad:74:06: e3:f3:87:27:fa:e3:5b:18:0a:63:bf:62:33:83:b0:aa:42:83: a4:cd:65:6f:d5:0f:80:04:66:21:e2:71:55:7e:dd:e1:93:43: 74:fd:e2:c5:cf:33:45:70:d9:a3:b2:27:31:28:6f:43:99:b0: 45:e2:03:07:ac:01:1e:36:0c:04:6a:aa:d8:9b:b2:4f:09:3b: ef:c7:ce:9a:20:04:3b:6c:05:11:f9:db:9c:80:be:c1:75:03: 3f:4c:9f:4b:6f:c1:95:37:16:fc:0f:a3:87:55:00:7d:ff:03: ba:67:dd:9f:8f:77:73:04:0b:35:66:f8:79:99:68:de:3c:c5: 46:20:c8:42 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUdr+ZdrIw+M/syV/HvM+qdvvSLxcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUzQTg3Q0RFMkU5MkFERkQ0NDQyMzI4Q0UyREI3MzQ5 Q0VDRUE0MjAeFw0yNDExMjUxNDM4MTlaFw0yNTExMjQxNDQzMTlaMDMxMTAvBgNV BAMTKEQyNjA5RjU4NDVBNkUwNUZBNjUwRTYwMEVDNTY3NUNGNzRBNTMwMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYqltYyv8Cx1HOcstDS/6g1lcM 1Aqhoqncm+qOB6tLRFLEbBA6FJLclbYlzZVj1lfxZxNYOo44iaNryErLa9R/2coO VwRuilNaPjPagyQwnXDNwKyWuWSNxlJ7GhDgctxcpqy+bi8iVs3jbEgqpogCzzlF nG9e2YejpsWZ+AtNcPFNoqPubdzhsLlJ7z4TEJmlNo510V/L1JdjLtdyDnhVq2UD sUk+PfErtoSHPtR1t2K4a2+7osSgC7SG1zQIfMFbKUqabFHbytswkIi/0voDvaf/ ETo8lnitr7tOn9mTbQ9LTtv+Ndkf1W84hFBVqTLG0K59nx2D+mV95TylaXb3AgMB AAGjggJPMIICSzAdBgNVHQ4EFgQU0mCfWEWm4F+mUOYA7FZ1z3SlMAIwHwYDVR0j BBgwFoAUVTqHzeLpKt/URCMozi23NJzs6kIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRmoxQ3BCeExlcjJGeHBoSkZBQjk2ZEI0R29hMU15WFF5ZkdhbkdrUXRh aEMvMC81NTNBODdDREUyRTkyQURGRDQ0NDIzMjhDRTJEQjczNDlDRUNFQTQyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU1M0E4N0NERTJFOTJBREZE NDQ0MjMyOENFMkRCNzM0OUNFQ0VBNDIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0ZqMUNwQnhMZXIyRnhwaEpGQUI5NmRCNEdvYTFNeVhReWZHYW5Ha1F0YWhDLzAv MzIzODMwMzQzYTMxNjI2MzM0M2EzYTJmMzMzMzJkMzMzNjIwM2QzZTIwMzYzMTM3 MzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB /wQSMBAwDgQCAAIwCAMGBygEG8QAMA0GCSqGSIb3DQEBCwUAA4IBAQCwUvldvSQc HRzdJ1MRsSm9RY/MCFmoSUBiWbXBW6t+CVUKoCVHmlVRQBtFXOdnFidGFScdqQG3 fyH/4+K63Jz/y03Qk8vFvaxwg/XXhfTFzqCa0yyn9WHP92ZiDiI/3X/mSbmenZ5e 2THPSZB3d2vbXQiLM1EJSWtfnzStdAbj84cn+uNbGApjv2Izg7CqQoOkzWVv1Q+A BGYh4nFVft3hk0N0/eLFzzNFcNmjsicxKG9DmbBF4gMHrAEeNgwEaqrYm7JPCTvv x86aIAQ7bAUR+ducgL7BdQM/TJ9Lb8GVNxb8D6OHVQB9/wO6Z92fj3dzBAs1Zvh5 mWjePMVGIMhC -----END CERTIFICATE-----Generated at Mon Nov 25 15:27:12 2024 by rpki-client on console-fra.rpki-client.org