$ rpki-client -vvf rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/323830343a386133343a656330303a3a2f33382d3338203d3e20323733363534.roa File: 323830343a386133343a656330303a3a2f33382d3338203d3e20323733363534.roa (raw, json) Hash identifier: 7nFV3a+hQjLyzppGzpIflRodGqWB/Ue6XkXpTxIfQY4= Subject key identifier: C5:CF:72:4E:CE:73:DD:C8:6E:EC:21:4A:BF:6D:06:2D:10:19:37:B9 Certificate issuer: /CN=D4B92897692C4F611B738C6728923C318CA5378D Certificate serial: 3A174A82DB71A6DA74183917AFC3C2BDC80E310A Authority key identifier: D4:B9:28:97:69:2C:4F:61:1B:73:8C:67:28:92:3C:31:8C:A5:37:8D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4B92897692C4F611B738C6728923C318CA5378D.cer Subject info access: rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/323830343a386133343a656330303a3a2f33382d3338203d3e20323733363534.roa Signing time: Sat 05 Apr 2025 19:13:25 +0000 ROA not before: Sat 05 Apr 2025 19:08:25 +0000 ROA not after: Sat 04 Apr 2026 19:13:25 +0000 asID: 273654 IP address blocks: 2804:8a34:ec00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/D4B92897692C4F611B738C6728923C318CA5378D.crl rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/D4B92897692C4F611B738C6728923C318CA5378D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4B92897692C4F611B738C6728923C318CA5378D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 12 Apr 2025 23:21:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:17:4a:82:db:71:a6:da:74:18:39:17:af:c3:c2:bd:c8:0e:31:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4B92897692C4F611B738C6728923C318CA5378D Validity Not Before: Apr 5 19:08:25 2025 GMT Not After : Apr 4 19:13:25 2026 GMT Subject: CN=C5CF724ECE73DDC86EEC214ABF6D062D101937B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ba:d7:41:e6:12:50:31:8a:7b:0b:23:f2:c6: a6:40:8d:a8:8a:1c:07:42:b1:d3:bb:fe:ab:27:fb: cf:8d:45:2a:18:b7:0d:7d:09:cd:93:5e:eb:f8:ca: 3f:25:7d:e3:9a:1f:ed:96:6d:d5:c5:82:e7:98:3b: b8:a8:f0:99:5f:8e:75:d2:35:47:90:78:fb:7f:3b: 5a:e7:2d:ab:c2:e5:9e:be:4b:4c:65:7e:95:65:eb: 24:23:f9:06:45:3a:cc:61:2c:2e:eb:a9:ee:8c:60: a8:70:b5:6c:75:9a:71:48:cf:cc:9a:68:ec:26:ea: d1:2c:f1:31:6f:03:e4:79:72:7c:32:a5:b9:84:80: 1c:d2:6f:0b:74:83:fd:97:2e:55:aa:3e:5f:23:bc: 3c:ce:5b:10:7a:f2:f8:8b:f8:55:13:13:9b:60:70: 6f:b1:b5:b2:f5:cc:e9:1a:2c:93:51:d8:65:c0:cc: b9:cc:bd:9f:7f:e4:ba:be:67:4b:91:95:9c:3e:d8: ad:2e:d2:f0:08:39:6b:2f:34:de:64:23:b5:8a:d0: bc:b8:72:29:ad:c7:fc:d9:ac:d0:d1:65:c2:d6:1b: f5:bd:2a:3f:13:ab:f6:44:9f:81:ff:dd:09:83:94: 55:2d:1a:62:e9:f7:76:5f:3d:79:51:8c:b7:a5:86: 50:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:CF:72:4E:CE:73:DD:C8:6E:EC:21:4A:BF:6D:06:2D:10:19:37:B9 X509v3 Authority Key Identifier: keyid:D4:B9:28:97:69:2C:4F:61:1B:73:8C:67:28:92:3C:31:8C:A5:37:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/D4B92897692C4F611B738C6728923C318CA5378D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4B92897692C4F611B738C6728923C318CA5378D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/323830343a386133343a656330303a3a2f33382d3338203d3e20323733363534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8a34:ec00::/38 Signature Algorithm: sha256WithRSAEncryption 50:5d:8b:64:63:b2:29:9f:b0:f6:2f:ea:9b:07:a8:0e:f2:0f: 91:7e:90:e0:d8:bc:f0:c8:cc:b5:bb:97:c4:73:33:9d:62:04: fa:2e:46:7b:0a:01:82:36:7e:e9:54:2c:82:ff:42:f4:01:0b: 48:3b:b5:f8:41:d8:d7:89:65:3b:90:85:cd:42:3c:d2:b6:9c: 6d:f9:4c:27:02:6c:e7:f9:96:54:06:06:c7:54:8b:a7:9f:37: a0:42:81:73:31:05:79:c5:b3:33:b9:39:a8:55:96:0d:23:84: d5:ba:34:fd:d6:67:43:c0:ab:4e:7d:3c:74:cf:d9:b9:c5:b6: c0:21:43:7e:45:16:41:c7:49:d2:5b:dc:4d:41:87:d9:ce:b1: 8b:8b:0c:1b:6c:08:50:f8:19:3f:e5:24:05:9a:ba:89:d4:6b: d2:a6:04:c9:49:81:68:eb:2e:0d:ec:47:b6:7d:09:e7:e2:67: 3a:06:8c:66:f6:e2:18:46:58:15:34:8e:16:ed:89:91:10:58: ca:27:8d:3c:b4:a0:17:12:90:3f:1a:45:41:30:65:d8:c1:d3: 7e:07:10:55:77:c2:ca:2b:f6:ff:d1:17:70:70:aa:f5:7a:27: 9d:0f:2d:3b:7f:0f:ff:65:e7:19:ec:4d:e4:a4:62:2a:67:c4: 8d:f3:1f:41 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUOhdKgttxptp0GDkXr8PCvcgOMQowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDRCOTI4OTc2OTJDNEY2MTFCNzM4QzY3Mjg5MjNDMzE4 Q0E1Mzc4RDAeFw0yNTA0MDUxOTA4MjVaFw0yNjA0MDQxOTEzMjVaMDMxMTAvBgNV BAMTKEM1Q0Y3MjRFQ0U3M0REQzg2RUVDMjE0QUJGNkQwNjJEMTAxOTM3QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqutdB5hJQMYp7CyPyxqZAjaiK HAdCsdO7/qsn+8+NRSoYtw19Cc2TXuv4yj8lfeOaH+2WbdXFgueYO7io8JlfjnXS NUeQePt/O1rnLavC5Z6+S0xlfpVl6yQj+QZFOsxhLC7rqe6MYKhwtWx1mnFIz8ya aOwm6tEs8TFvA+R5cnwypbmEgBzSbwt0g/2XLlWqPl8jvDzOWxB68viL+FUTE5tg cG+xtbL1zOkaLJNR2GXAzLnMvZ9/5Lq+Z0uRlZw+2K0u0vAIOWsvNN5kI7WK0Ly4 cimtx/zZrNDRZcLWG/W9Kj8Tq/ZEn4H/3QmDlFUtGmLp93ZfPXlRjLelhlDpAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUxc9yTs5z3chu7CFKv20GLRAZN7kwHwYDVR0j BBgwFoAU1Lkol2ksT2Ebc4xnKJI8MYylN40wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR2hucUJoRU1oUk5TVnlodmNLbkNjamU0dW9qRDFFTHB3VGREV2ViTUh6 ZzMvMS9ENEI5Mjg5NzY5MkM0RjYxMUI3MzhDNjcyODkyM0MzMThDQTUzNzhELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0QjkyODk3NjkyQzRGNjEx QjczOEM2NzI4OTIzQzMxOENBNTM3OEQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0dobnFCaEVNaFJOU1Z5aHZjS25DY2plNHVvakQxRUxwd1RkRFdlYk1IemczLzEv MzIzODMwMzQzYTM4NjEzMzM0M2E2NTYzMzAzMDNhM2EyZjMzMzgyZDMzMzgyMDNk M2UyMDMyMzczMzM2MzUzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAigEijTsMA0GCSqGSIb3DQEBCwUA A4IBAQBQXYtkY7Ipn7D2L+qbB6gO8g+RfpDg2LzwyMy1u5fEczOdYgT6LkZ7CgGC Nn7pVCyC/0L0AQtIO7X4QdjXiWU7kIXNQjzStpxt+UwnAmzn+ZZUBgbHVIunnzeg QoFzMQV5xbMzuTmoVZYNI4TVujT91mdDwKtOfTx0z9m5xbbAIUN+RRZBx0nSW9xN QYfZzrGLiwwbbAhQ+Bk/5SQFmrqJ1GvSpgTJSYFo6y4N7Ee2fQnn4mc6Boxm9uIY RlgVNI4W7YmREFjKJ408tKAXEpA/GkVBMGXYwdN+BxBVd8LKK/b/0RdwcKr1eied Dy07fw//ZecZ7E3kpGIqZ8SN8x9B -----END CERTIFICATE-----Generated at Sat Apr 12 05:26:47 2025 by rpki-client