$ rpki-client -vvf rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/1/323830343a326236383a3a2f33322d3333203d3e20323635313532.roa File: 323830343a326236383a3a2f33322d3333203d3e20323635313532.roa (raw, json) Hash identifier: ldBtjyaLUzBra9FoZHsnPONlvq3JFO8S7KXo1WJVdMc= Subject key identifier: 59:E9:AC:C2:3A:32:0C:B9:CF:0A:E8:4A:C5:EE:7F:98:E1:EF:BB:E6 Certificate issuer: /CN=D47E48647B940216D8BE8BE824CDD566DE29F188 Certificate serial: 35DBD705899745742AF51B6594F8E9A69632DBE2 Authority key identifier: D4:7E:48:64:7B:94:02:16:D8:BE:8B:E8:24:CD:D5:66:DE:29:F1:88 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D47E48647B940216D8BE8BE824CDD566DE29F188.cer Subject info access: rsync://rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/1/323830343a326236383a3a2f33322d3333203d3e20323635313532.roa Signing time: Thu 04 Apr 2024 21:56:31 +0000 ROA not before: Thu 04 Apr 2024 21:51:31 +0000 ROA not after: Thu 03 Apr 2025 21:56:31 +0000 asID: 265152 IP address blocks: 2804:2b68::/32 maxlen: 33 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/1/D47E48647B940216D8BE8BE824CDD566DE29F188.crl rsync://rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/1/D47E48647B940216D8BE8BE824CDD566DE29F188.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D47E48647B940216D8BE8BE824CDD566DE29F188.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 00:23:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:db:d7:05:89:97:45:74:2a:f5:1b:65:94:f8:e9:a6:96:32:db:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D47E48647B940216D8BE8BE824CDD566DE29F188 Validity Not Before: Apr 4 21:51:31 2024 GMT Not After : Apr 3 21:56:31 2025 GMT Subject: CN=59E9ACC23A320CB9CF0AE84AC5EE7F98E1EFBBE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ba:44:97:d8:b1:cc:2c:ec:e1:70:3a:8d:49: eb:9c:6e:f6:d0:4a:e5:1d:e2:be:eb:57:c8:e0:bc: 1a:a3:13:ab:45:fe:8b:85:4c:82:41:9b:df:1e:bb: cc:71:1e:02:26:cf:75:72:d4:97:5d:fc:98:3a:c9: 36:34:f8:24:01:9e:68:60:2e:44:81:31:81:7d:06: 3f:cc:0c:c0:20:b6:03:72:15:74:97:f2:bb:15:da: eb:3d:0e:33:65:56:a7:df:36:bf:b1:dc:fe:67:59: 46:e4:c3:20:bc:23:dc:97:76:60:1a:aa:b3:fd:2a: 85:0d:f3:cc:03:64:d2:c5:54:3e:c6:cb:71:16:20: 1a:4e:a5:d6:1f:cb:f7:ee:85:40:8e:61:47:bd:d0: 67:8c:d0:9a:92:0f:69:bd:22:48:47:51:5d:f5:2b: 4a:f8:be:56:b7:76:85:78:fb:a5:53:d3:56:09:0c: 63:aa:37:b1:7e:b3:e1:a5:f4:5e:8b:6a:1e:b2:04: f0:c2:86:fa:ea:b4:08:02:eb:63:b3:04:6b:ce:ef: 8e:a9:08:50:97:cf:0c:b6:10:74:dc:53:8c:93:62: a9:e2:a2:83:1e:ce:8a:ad:d8:19:70:db:f0:61:ed: fb:e4:cb:7b:92:df:9e:4f:14:8f:55:ac:d9:71:6b: d2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:E9:AC:C2:3A:32:0C:B9:CF:0A:E8:4A:C5:EE:7F:98:E1:EF:BB:E6 X509v3 Authority Key Identifier: keyid:D4:7E:48:64:7B:94:02:16:D8:BE:8B:E8:24:CD:D5:66:DE:29:F1:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/1/D47E48647B940216D8BE8BE824CDD566DE29F188.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D47E48647B940216D8BE8BE824CDD566DE29F188.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/1/323830343a326236383a3a2f33322d3333203d3e20323635313532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:2b68::/32 Signature Algorithm: sha256WithRSAEncryption c4:f0:9a:47:83:ba:97:fd:28:73:ef:d1:d8:5b:7c:93:71:78: ac:0b:5c:c6:58:a4:33:36:f9:b7:c0:84:24:f5:67:5b:30:b1: e2:11:30:cc:b1:9b:b4:c1:a4:f3:9a:1f:a1:65:9d:2c:03:c2: d0:46:eb:d7:e4:64:11:fc:d6:39:5c:5b:fc:84:07:6a:ac:07: d6:8e:58:ff:27:b0:9e:b3:61:13:f5:80:13:1f:25:4f:2b:4e: 9c:23:92:7b:c3:4b:13:92:7d:3f:d7:d8:7d:90:87:fb:5a:e9: c4:d6:f5:18:45:e6:2c:3f:7a:fa:50:0f:7e:f3:bd:42:b1:e4: ba:7f:ef:8a:3b:e5:6b:48:d6:1d:10:04:77:84:26:a4:b5:34: e1:e9:10:27:ef:d7:23:14:d3:e1:b5:ef:25:35:0e:a4:a4:51: 4c:d2:13:85:57:4a:0c:66:d7:7f:0c:11:fb:dc:20:15:42:3b: d1:44:8d:06:ae:08:f2:e7:34:75:4c:c5:96:fb:81:91:75:73: 47:f8:bc:60:b5:1d:a9:ff:d4:38:dd:b1:6c:9c:a9:1d:6a:7a: e7:0e:a8:00:cb:37:04:81:a8:2b:72:6a:80:09:18:ba:0c:f1: 85:b9:3d:9c:94:61:36:f0:8a:aa:cf:07:bd:20:98:af:0c:bf: 91:b1:cd:a4 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUNdvXBYmXRXQq9RtllPjpppYy2+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ3RTQ4NjQ3Qjk0MDIxNkQ4QkU4QkU4MjRDREQ1NjZE RTI5RjE4ODAeFw0yNDA0MDQyMTUxMzFaFw0yNTA0MDMyMTU2MzFaMDMxMTAvBgNV BAMTKDU5RTlBQ0MyM0EzMjBDQjlDRjBBRTg0QUM1RUU3Rjk4RTFFRkJCRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLukSX2LHMLOzhcDqNSeucbvbQ SuUd4r7rV8jgvBqjE6tF/ouFTIJBm98eu8xxHgImz3Vy1Jdd/Jg6yTY0+CQBnmhg LkSBMYF9Bj/MDMAgtgNyFXSX8rsV2us9DjNlVqffNr+x3P5nWUbkwyC8I9yXdmAa qrP9KoUN88wDZNLFVD7Gy3EWIBpOpdYfy/fuhUCOYUe90GeM0JqSD2m9IkhHUV31 K0r4vla3doV4+6VT01YJDGOqN7F+s+Gl9F6Lah6yBPDChvrqtAgC62OzBGvO746p CFCXzwy2EHTcU4yTYqniooMezoqt2Blw2/Bh7fvky3uS355PFI9VrNlxa9KTAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUWemswjoyDLnPCuhKxe5/mOHvu+YwHwYDVR0j BBgwFoAU1H5IZHuUAhbYvovoJM3VZt4p8YgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR0h5YmtpOG1BbkZVUHpZQ01xZXRIcmVYTTJZZnFleW81OHFQc1lRQ1VQ dEIvMS9ENDdFNDg2NDdCOTQwMjE2RDhCRThCRTgyNENERDU2NkRFMjlGMTg4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0N0U0ODY0N0I5NDAyMTZE OEJFOEJFODI0Q0RENTY2REUyOUYxODguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0dIeWJraThtQW5GVVB6WUNNcWV0SHJlWE0yWWZxZXlvNThxUHNZUUNVUHRCLzEv MzIzODMwMzQzYTMyNjIzNjM4M2EzYTJmMzMzMjJkMzMzMzIwM2QzZTIwMzIzNjM1 MzEzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKAQraDANBgkqhkiG9w0BAQsFAAOCAQEAxPCaR4O6 l/0oc+/R2Ft8k3F4rAtcxlikMzb5t8CEJPVnWzCx4hEwzLGbtMGk85ofoWWdLAPC 0Ebr1+RkEfzWOVxb/IQHaqwH1o5Y/yewnrNhE/WAEx8lTytOnCOSe8NLE5J9P9fY fZCH+1rpxNb1GEXmLD96+lAPfvO9QrHkun/vijvla0jWHRAEd4QmpLU04ekQJ+/X IxTT4bXvJTUOpKRRTNIThVdKDGbXfwwR+9wgFUI70USNBq4I8uc0dUzFlvuBkXVz R/i8YLUdqf/UON2xbJypHWp65w6oAMs3BIGoK3JqgAkYugzxhbk9nJRhNvCKqs8H vSCYrwy/kbHNpA== -----END CERTIFICATE-----