$ rpki-client -vvf rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/323830343a336333343a3530303a3a2f34382d3438203d3e20323636313936.roa File: 323830343a336333343a3530303a3a2f34382d3438203d3e20323636313936.roa (raw, json) Hash identifier: bpEs8N9YHHW8SsBwdkQeS/flW7NxqzD5mvmZHkoIREQ= Subject key identifier: 2F:B6:9F:B4:53:D7:E2:E4:CC:1B:2A:FB:86:B5:A4:7F:D4:48:F3:D9 Certificate issuer: /CN=8723709C4D690CFE7D7971537037FC3C8E195928 Certificate serial: 6B2BDAE49C8DF87605DA50BD81648060912B96F7 Authority key identifier: 87:23:70:9C:4D:69:0C:FE:7D:79:71:53:70:37:FC:3C:8E:19:59:28 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8723709C4D690CFE7D7971537037FC3C8E195928.cer Subject info access: rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/323830343a336333343a3530303a3a2f34382d3438203d3e20323636313936.roa Signing time: Sun 29 Dec 2024 13:32:42 +0000 ROA not before: Sun 29 Dec 2024 13:27:42 +0000 ROA not after: Sun 28 Dec 2025 13:32:42 +0000 asID: 266196 IP address blocks: 2804:3c34:500::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/8723709C4D690CFE7D7971537037FC3C8E195928.crl rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/8723709C4D690CFE7D7971537037FC3C8E195928.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8723709C4D690CFE7D7971537037FC3C8E195928.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Apr 2025 10:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:2b:da:e4:9c:8d:f8:76:05:da:50:bd:81:64:80:60:91:2b:96:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8723709C4D690CFE7D7971537037FC3C8E195928 Validity Not Before: Dec 29 13:27:42 2024 GMT Not After : Dec 28 13:32:42 2025 GMT Subject: CN=2FB69FB453D7E2E4CC1B2AFB86B5A47FD448F3D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:32:54:17:71:92:2e:b8:16:cc:85:84:5e:b4: ae:c9:fb:92:19:d3:03:9a:18:b1:f9:e4:b5:24:c3: 79:f4:06:f4:ae:37:3c:1a:7d:4d:06:56:3b:22:aa: b3:83:7f:d3:fa:49:e4:fb:52:0a:35:03:3d:fc:37: d3:95:e2:42:cc:9d:21:06:2d:01:99:14:d6:f2:9b: 6e:41:20:05:0a:e5:30:27:d5:bb:43:65:48:a7:ed: 4b:5a:38:0d:6b:ca:bf:cb:0e:84:9c:41:13:fe:18: a6:3c:32:78:18:c7:4c:41:03:6c:3c:86:48:21:67: 12:a7:bc:22:96:98:f6:cf:80:e9:98:f7:9a:55:e8: 70:38:3d:0b:79:d3:61:ea:29:27:bf:6e:1b:91:e4: f3:ef:a5:40:4b:16:d7:a5:38:e5:87:0a:1f:07:3e: 16:95:24:10:a5:36:6b:54:ba:cf:39:b7:3c:be:85: df:68:d8:43:84:3b:61:2d:af:93:f6:34:a9:ee:2a: 3d:bf:57:f5:fd:b8:14:47:54:56:5e:3f:62:89:7b: 39:d9:2e:f4:70:8e:03:67:61:38:26:82:d6:2b:4e: 4d:4c:94:04:cb:07:d8:0c:2d:26:ad:85:54:a6:d7: e0:56:82:84:c6:6f:3e:ba:97:74:42:4d:85:db:4f: 7c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:B6:9F:B4:53:D7:E2:E4:CC:1B:2A:FB:86:B5:A4:7F:D4:48:F3:D9 X509v3 Authority Key Identifier: keyid:87:23:70:9C:4D:69:0C:FE:7D:79:71:53:70:37:FC:3C:8E:19:59:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/8723709C4D690CFE7D7971537037FC3C8E195928.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8723709C4D690CFE7D7971537037FC3C8E195928.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/323830343a336333343a3530303a3a2f34382d3438203d3e20323636313936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:3c34:500::/48 Signature Algorithm: sha256WithRSAEncryption 20:cc:fc:f4:ab:a0:b3:2d:b3:ff:5f:2b:41:84:f3:b7:b6:58: 42:f7:1e:70:a4:5c:62:e3:32:88:6c:28:8b:6a:55:13:ad:02: 76:e3:9f:72:e4:61:05:18:d2:f8:f0:76:7b:ba:83:d1:6b:25: e8:ec:09:f4:3c:61:7a:f8:44:39:ba:82:3a:3d:dd:6e:9a:63: 46:6c:b8:10:04:d9:a1:12:47:56:8f:12:db:48:f4:9a:90:f1: a1:c4:48:96:aa:f3:32:a8:a8:62:a8:d2:43:89:f5:10:54:6c: 2c:22:43:38:0e:d6:95:11:d3:55:c6:a2:2d:02:7f:fc:7c:33: 86:86:48:f7:9e:87:25:8d:e6:c8:97:7b:80:6b:50:79:c5:40: b3:df:86:67:44:2c:1f:2c:76:8c:6f:34:52:83:90:9f:98:17: df:92:9b:f7:2a:72:8d:3b:2b:d2:2d:da:a4:cd:a5:4c:b1:80: a3:5a:f0:50:d2:f6:f4:24:63:44:58:0f:bc:d2:50:9e:63:35: ec:72:c7:f7:d0:04:e7:7e:25:30:08:ff:7e:71:fa:e2:23:e1: 31:8e:1b:df:51:fa:96:1d:bc:6e:cb:71:9e:91:31:c1:5c:b5: 50:2d:a0:b9:84:f6:1d:49:58:48:c3:54:4f:db:48:16:11:5b: 2f:8b:e0:d6 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgIUayva5JyN+HYF2lC9gWSAYJErlvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcyMzcwOUM0RDY5MENGRTdENzk3MTUzNzAzN0ZDM0M4 RTE5NTkyODAeFw0yNDEyMjkxMzI3NDJaFw0yNTEyMjgxMzMyNDJaMDMxMTAvBgNV BAMTKDJGQjY5RkI0NTNEN0UyRTRDQzFCMkFGQjg2QjVBNDdGRDQ0OEYzRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClMlQXcZIuuBbMhYRetK7J+5IZ 0wOaGLH55LUkw3n0BvSuNzwafU0GVjsiqrODf9P6SeT7Ugo1Az38N9OV4kLMnSEG LQGZFNbym25BIAUK5TAn1btDZUin7UtaOA1ryr/LDoScQRP+GKY8MngYx0xBA2w8 hkghZxKnvCKWmPbPgOmY95pV6HA4PQt502HqKSe/bhuR5PPvpUBLFtelOOWHCh8H PhaVJBClNmtUus85tzy+hd9o2EOEO2Etr5P2NKnuKj2/V/X9uBRHVFZeP2KJeznZ LvRwjgNnYTgmgtYrTk1MlATLB9gMLSathVSm1+BWgoTGbz66l3RCTYXbT3ytAgMB AAGjggJaMIICVjAdBgNVHQ4EFgQUL7aftFPX4uTMGyr7hrWkf9RI89kwHwYDVR0j BBgwFoAUhyNwnE1pDP59eXFTcDf8PI4ZWSgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR0hVQ0RXQnU2U3BDM3VZVzhUOTlGdzRwb2RuV2RMMjY5R3NYMlUyNTRB ZFEvMC84NzIzNzA5QzRENjkwQ0ZFN0Q3OTcxNTM3MDM3RkMzQzhFMTk1OTI4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg3MjM3MDlDNEQ2OTBDRkU3 RDc5NzE1MzcwMzdGQzNDOEUxOTU5MjguY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0dIVUNEV0J1NlNwQzN1WVc4VDk5Rnc0cG9kbldkTDI2OUdzWDJVMjU0QWRRLzAv MzIzODMwMzQzYTMzNjMzMzM0M2EzNTMwMzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNl MjAzMjM2MzYzMTM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBDw0BQAwDQYJKoZIhvcNAQELBQAD ggEBACDM/PSroLMts/9fK0GE87e2WEL3HnCkXGLjMohsKItqVROtAnbjn3LkYQUY 0vjwdnu6g9FrJejsCfQ8YXr4RDm6gjo93W6aY0ZsuBAE2aESR1aPEttI9JqQ8aHE SJaq8zKoqGKo0kOJ9RBUbCwiQzgO1pUR01XGoi0Cf/x8M4aGSPeehyWN5siXe4Br UHnFQLPfhmdELB8sdoxvNFKDkJ+YF9+Sm/cqco07K9It2qTNpUyxgKNa8FDS9vQk Y0RYD7zSUJ5jNexyx/fQBOd+JTAI/35x+uIj4TGOG99R+pYdvG7LcZ6RMcFctVAt oLmE9h1JWEjDVE/bSBYRWy+L4NY= -----END CERTIFICATE-----Generated at Sun Apr 6 16:02:04 2025 by rpki-client