$ rpki-client -vvf rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/323830343a326434303a3a2f33322d3430203d3e20323635323639.roa File: 323830343a326434303a3a2f33322d3430203d3e20323635323639.roa (raw, json) Hash identifier: 3TRL8KovOpS4NTJSFmMzhfDw2v15e4/TeWGYMXylRKY= Subject key identifier: 67:47:7E:64:FE:89:54:61:D2:65:69:9B:1C:7E:3E:07:9C:A6:82:A1 Certificate issuer: /CN=C11AA9A7A538C22A0258E74DEBE32F5B6628E186 Certificate serial: 5D52ED6A272EFC9F96C0F171D2DBBF957C5ACE02 Authority key identifier: C1:1A:A9:A7:A5:38:C2:2A:02:58:E7:4D:EB:E3:2F:5B:66:28:E1:86 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11AA9A7A538C22A0258E74DEBE32F5B6628E186.cer Subject info access: rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/323830343a326434303a3a2f33322d3430203d3e20323635323639.roa Signing time: Tue 28 Jan 2025 14:05:51 +0000 ROA not before: Tue 28 Jan 2025 14:00:51 +0000 ROA not after: Tue 27 Jan 2026 14:05:51 +0000 asID: 265269 IP address blocks: 2804:2d40::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/C11AA9A7A538C22A0258E74DEBE32F5B6628E186.crl rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/C11AA9A7A538C22A0258E74DEBE32F5B6628E186.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11AA9A7A538C22A0258E74DEBE32F5B6628E186.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 06 Apr 2025 12:46:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:52:ed:6a:27:2e:fc:9f:96:c0:f1:71:d2:db:bf:95:7c:5a:ce:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C11AA9A7A538C22A0258E74DEBE32F5B6628E186 Validity Not Before: Jan 28 14:00:51 2025 GMT Not After : Jan 27 14:05:51 2026 GMT Subject: CN=67477E64FE895461D265699B1C7E3E079CA682A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:69:bd:1b:06:1f:04:7b:0f:4e:1c:26:83:a7: 9e:78:a4:a8:26:c9:7e:b5:a1:54:2c:33:74:3b:4e: b2:2c:e0:65:99:85:a0:e6:3c:5e:95:1b:32:c6:2e: 8d:2d:e3:4b:ca:5b:6e:be:a4:3d:76:da:67:a5:fc: 98:53:a0:40:d9:ce:2b:cb:71:3f:86:38:89:4f:4a: 1e:93:d7:2f:12:a7:42:46:4b:08:4a:5d:99:c4:90: 58:fa:2f:9d:28:a7:f3:fd:09:bc:b2:e2:3a:08:39: 52:98:25:93:3a:7d:95:58:9b:1c:96:0c:c7:20:e3: e5:4c:7a:94:0a:80:13:d4:d2:bd:93:24:a0:5e:d1: 8b:57:a6:c8:c2:2d:0b:ad:91:cc:ec:88:3e:1d:54: 16:4d:9e:ae:91:5b:c0:aa:dd:68:ba:4a:2d:63:9c: 26:00:4c:39:a2:f0:26:87:01:0d:8e:bd:e0:43:ec: 75:74:2f:69:95:eb:5e:ae:8c:f8:76:c9:d7:f6:2b: bb:34:c5:4b:3b:31:d1:c1:34:cd:4d:ea:e0:20:d6: 6c:ae:30:c7:19:8c:e6:8d:4c:9b:9d:a0:f1:f2:c6: 38:8e:d6:87:87:5e:51:0a:ae:de:d1:54:ae:4c:14: a1:b6:11:c8:c2:be:13:4c:bd:90:f1:fb:a5:b1:67: 8f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:47:7E:64:FE:89:54:61:D2:65:69:9B:1C:7E:3E:07:9C:A6:82:A1 X509v3 Authority Key Identifier: keyid:C1:1A:A9:A7:A5:38:C2:2A:02:58:E7:4D:EB:E3:2F:5B:66:28:E1:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/C11AA9A7A538C22A0258E74DEBE32F5B6628E186.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11AA9A7A538C22A0258E74DEBE32F5B6628E186.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/323830343a326434303a3a2f33322d3430203d3e20323635323639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:2d40::/32 Signature Algorithm: sha256WithRSAEncryption 17:ff:b0:b1:3b:4d:9b:a5:b1:8d:55:0a:ef:ad:f0:1d:34:17: 2b:01:f9:e0:62:0b:3a:5d:56:1e:22:14:7f:31:fe:85:bf:94: f3:be:83:2c:b8:90:10:16:97:f8:2a:de:33:c2:91:fb:e9:1a: f1:be:7a:8f:f0:53:92:77:17:08:34:5d:aa:99:c7:da:51:b4: c5:34:68:ef:48:d3:df:af:f2:ae:46:90:5e:03:74:65:e4:f2: bf:d7:19:f7:74:1e:34:ec:02:ce:7c:ab:65:6b:5d:a5:5e:1e: cc:01:b8:e5:66:38:2d:52:b2:97:3c:5f:e2:4a:70:f0:39:92: 25:57:d4:8d:e6:5e:9b:1b:06:5a:eb:84:8d:37:c8:45:a3:36: 0f:7b:b9:34:d6:2a:bd:c5:d5:48:01:4b:45:6e:b2:42:47:e7: 30:28:e6:94:5d:3a:0b:4e:9f:73:26:f1:b9:d7:0c:21:f0:ea: 55:58:2b:02:74:91:bc:02:c8:fa:2b:31:2f:85:ad:9b:cd:a9: bb:6b:d3:8f:dc:bf:d2:d1:f0:bc:43:cf:cd:1d:08:54:85:77: ac:be:b2:ba:ec:3b:77:bf:24:54:89:49:be:1f:58:51:d1:15: 9d:67:1c:57:4b:90:e2:9d:85:c5:c9:86:40:f7:cc:48:f7:03: 2b:5c:b0:89 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUXVLtaicu/J+WwPFx0tu/lXxazgIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzExQUE5QTdBNTM4QzIyQTAyNThFNzRERUJFMzJGNUI2 NjI4RTE4NjAeFw0yNTAxMjgxNDAwNTFaFw0yNjAxMjcxNDA1NTFaMDMxMTAvBgNV BAMTKDY3NDc3RTY0RkU4OTU0NjFEMjY1Njk5QjFDN0UzRTA3OUNBNjgyQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9ab0bBh8Eew9OHCaDp554pKgm yX61oVQsM3Q7TrIs4GWZhaDmPF6VGzLGLo0t40vKW26+pD122mel/JhToEDZzivL cT+GOIlPSh6T1y8Sp0JGSwhKXZnEkFj6L50op/P9Cbyy4joIOVKYJZM6fZVYmxyW DMcg4+VMepQKgBPU0r2TJKBe0YtXpsjCLQutkczsiD4dVBZNnq6RW8Cq3Wi6Si1j nCYATDmi8CaHAQ2OveBD7HV0L2mV616ujPh2ydf2K7s0xUs7MdHBNM1N6uAg1myu MMcZjOaNTJudoPHyxjiO1oeHXlEKrt7RVK5MFKG2EcjCvhNMvZDx+6WxZ48HAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUZ0d+ZP6JVGHSZWmbHH4+B5ymgqEwHwYDVR0j BBgwFoAUwRqpp6U4wioCWOdN6+MvW2Yo4YYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR3JuSHFmcWt4SldNbmIxZWFpNGFxa3JHczVrS1NEaWpmYXBuSk11Mlhv THcvMC9DMTFBQTlBN0E1MzhDMjJBMDI1OEU3NERFQkUzMkY1QjY2MjhFMTg2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MxMUFBOUE3QTUzOEMyMkEw MjU4RTc0REVCRTMyRjVCNjYyOEUxODYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0dybkhxZnFreEpXTW5iMWVhaTRhcWtyR3M1a0tTRGlqZmFwbkpNdTJYb0x3LzAv MzIzODMwMzQzYTMyNjQzNDMwM2EzYTJmMzMzMjJkMzQzMDIwM2QzZTIwMzIzNjM1 MzIzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKAQtQDANBgkqhkiG9w0BAQsFAAOCAQEAF/+wsTtN m6WxjVUK763wHTQXKwH54GILOl1WHiIUfzH+hb+U876DLLiQEBaX+CreM8KR++ka 8b56j/BTkncXCDRdqpnH2lG0xTRo70jT36/yrkaQXgN0ZeTyv9cZ93QeNOwCznyr ZWtdpV4ezAG45WY4LVKylzxf4kpw8DmSJVfUjeZemxsGWuuEjTfIRaM2D3u5NNYq vcXVSAFLRW6yQkfnMCjmlF06C06fcybxudcMIfDqVVgrAnSRvALI+isxL4Wtm82p u2vTj9y/0tHwvEPPzR0IVIV3rL6yuuw7d78kVIlJvh9YUdEVnWccV0uQ4p2FxcmG QPfMSPcDK1ywiQ== -----END CERTIFICATE-----Generated at Sat Apr 5 19:51:13 2025 by rpki-client