$ rpki-client -vvf rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/323830343a323038343a343030303a3a2f33362d3336203d3e20323634343936.roa File: 323830343a323038343a343030303a3a2f33362d3336203d3e20323634343936.roa (raw, json) Hash identifier: qXyWt2X5fyxjLtSKb7oa008UDQghNqqxBNX+4DPo1G8= Subject key identifier: DA:76:90:12:AB:A7:95:80:D9:1C:6D:9D:EB:1E:0D:87:60:1C:56:FB Certificate issuer: /CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C Certificate serial: 43A9864CF87F6473C470493460B458017E1744DE Authority key identifier: 97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer Subject info access: rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/323830343a323038343a343030303a3a2f33362d3336203d3e20323634343936.roa Signing time: Wed 26 Feb 2025 16:41:50 +0000 ROA not before: Wed 26 Feb 2025 16:36:50 +0000 ROA not after: Wed 25 Feb 2026 16:41:50 +0000 asID: 264496 IP address blocks: 2804:2084:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.crl rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Apr 2025 10:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:a9:86:4c:f8:7f:64:73:c4:70:49:34:60:b4:58:01:7e:17:44:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C Validity Not Before: Feb 26 16:36:50 2025 GMT Not After : Feb 25 16:41:50 2026 GMT Subject: CN=DA769012ABA79580D91C6D9DEB1E0D87601C56FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:42:82:f6:12:7b:ca:5d:3e:92:73:5e:c8:cf: 7a:4b:59:49:1a:5f:6d:b6:08:e1:fd:9f:ce:79:68: d6:0a:0c:68:ef:ee:43:3d:ff:70:28:df:98:bb:16: b9:db:17:f6:75:a8:a1:e1:93:f8:78:7f:e5:4c:6c: 8c:f2:48:b6:7c:74:b8:e1:ed:48:95:8c:70:0c:26: 2a:e3:60:93:f6:98:e8:21:5a:a8:a7:1a:0b:3f:0c: c7:3b:a1:1e:fa:f1:a3:ff:b1:81:f3:22:d8:35:73: dc:2f:f1:ac:c0:4d:ac:9b:e3:68:28:95:e5:a6:4c: 84:9f:b0:eb:e7:05:50:9e:0e:62:bd:bf:57:2c:cf: f1:bb:9f:7f:a0:06:bc:1a:ac:37:2a:e0:5a:45:a7: e1:86:76:26:43:92:00:66:32:84:37:b2:62:92:02: e2:d5:26:90:2f:b5:79:4b:19:f8:82:71:d2:47:ef: 3a:ae:c6:d6:f4:c9:78:89:32:25:f7:81:cc:dc:fa: 1f:8e:90:ce:64:1f:67:9f:42:f7:3b:91:66:38:d4: a7:45:9e:7b:2e:0d:2a:7d:4b:a1:78:b9:b6:63:af: 5c:7c:5b:7e:d0:9f:7d:ed:ce:2e:e9:54:88:01:06: 4f:ed:a8:11:2b:84:cc:f4:d4:df:05:e4:a1:0a:e6: 23:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:76:90:12:AB:A7:95:80:D9:1C:6D:9D:EB:1E:0D:87:60:1C:56:FB X509v3 Authority Key Identifier: keyid:97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/323830343a323038343a343030303a3a2f33362d3336203d3e20323634343936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:2084:4000::/36 Signature Algorithm: sha256WithRSAEncryption 98:a7:d9:53:3b:01:aa:4a:15:5d:1f:d7:52:ce:fb:9d:a1:f6: 6e:c0:54:54:c1:b1:31:62:d1:8d:d9:14:44:14:81:c3:dc:6c: 57:64:b8:58:b5:47:a8:2a:58:4a:47:b2:8f:95:67:4a:bd:f4: c4:c6:bb:91:9c:a6:70:82:66:9e:59:37:7a:3b:72:c2:fe:1b: 8b:fd:dc:29:1b:a9:37:2b:48:33:a0:cb:91:9c:64:5a:15:ed: 5a:a5:80:b6:dc:9a:dd:39:b7:1a:04:0e:52:02:b4:0e:71:48: 5e:49:03:57:3c:f0:a2:68:7e:be:6c:6e:e7:8f:74:b9:9d:24: 84:8a:57:31:6b:4e:4a:a8:57:91:4f:42:2a:96:f5:8c:17:cd: 3c:e6:49:ee:a3:ff:ff:1e:38:0c:07:79:99:64:a0:67:25:91: 7e:dc:f1:f0:38:60:31:3c:0e:53:ae:e0:68:a6:5f:19:09:6f: 5d:72:bd:03:81:ac:8b:89:67:e8:b3:09:61:05:00:a7:8c:ca: a4:4e:c1:87:bd:d6:98:fb:c8:91:1a:89:f2:de:31:8c:f4:19: c6:32:92:91:7d:a0:59:21:da:38:78:05:de:3d:d8:bb:7d:90: 76:2f:7b:63:23:ea:2e:34:ef:53:b7:f2:b9:be:8f:c0:74:c6: 1d:4c:b9:6a -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUQ6mGTPh/ZHPEcEk0YLRYAX4XRN4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTcwQ0MyNkREMEMzNTNDMjQ0RjcyRjVCNjJBRTRCNUIw RUU1QUU3QzAeFw0yNTAyMjYxNjM2NTBaFw0yNjAyMjUxNjQxNTBaMDMxMTAvBgNV BAMTKERBNzY5MDEyQUJBNzk1ODBEOTFDNkQ5REVCMUUwRDg3NjAxQzU2RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4QoL2EnvKXT6Sc17Iz3pLWUka X222COH9n855aNYKDGjv7kM9/3Ao35i7FrnbF/Z1qKHhk/h4f+VMbIzySLZ8dLjh 7UiVjHAMJirjYJP2mOghWqinGgs/DMc7oR768aP/sYHzItg1c9wv8azATayb42go leWmTISfsOvnBVCeDmK9v1csz/G7n3+gBrwarDcq4FpFp+GGdiZDkgBmMoQ3smKS AuLVJpAvtXlLGfiCcdJH7zquxtb0yXiJMiX3gczc+h+OkM5kH2efQvc7kWY41KdF nnsuDSp9S6F4ubZjr1x8W37Qn33tzi7pVIgBBk/tqBErhMz01N8F5KEK5iNJAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQU2naQEqunlYDZHG2d6x4Nh2AcVvswHwYDVR0j BBgwFoAUlwzCbdDDU8JE9y9bYq5LWw7lrnwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR25SYmp4Y2h1RDZySFB1Znc1SzdicVR3MUR3ZmtTUTRLWGFOZURTSlZa bmcvMC85NzBDQzI2REQwQzM1M0MyNDRGNzJGNUI2MkFFNEI1QjBFRTVBRTdDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk3MENDMjZERDBDMzUzQzI0 NEY3MkY1QjYyQUU0QjVCMEVFNUFFN0MuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0duUmJqeGNodUQ2ckhQdWZ3NUs3YnFUdzFEd2ZrU1E0S1hhTmVEU0pWWm5nLzAv MzIzODMwMzQzYTMyMzAzODM0M2EzNDMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk M2UyMDMyMzYzNDM0MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEIIRAMA0GCSqGSIb3DQEBCwUA A4IBAQCYp9lTOwGqShVdH9dSzvudofZuwFRUwbExYtGN2RREFIHD3GxXZLhYtUeo KlhKR7KPlWdKvfTExruRnKZwgmaeWTd6O3LC/huL/dwpG6k3K0gzoMuRnGRaFe1a pYC23JrdObcaBA5SArQOcUheSQNXPPCiaH6+bG7nj3S5nSSEilcxa05KqFeRT0Iq lvWMF8085knuo///HjgMB3mZZKBnJZF+3PHwOGAxPA5TruBopl8ZCW9dcr0DgayL iWfoswlhBQCnjMqkTsGHvdaY+8iRGony3jGM9BnGMpKRfaBZIdo4eAXePdi7fZB2 L3tjI+ouNO9Tt/K5vo/AdMYdTLlq -----END CERTIFICATE-----Generated at Sun Apr 6 15:31:23 2025 by rpki-client