$ rpki-client -vvf rpki-repo.registro.br/repo/HFeC61ypvTMds8UMuZPpgA3ijbqr51LqjWcfgFo5BQip/0/323830343a333162383a3430303a3a2f33382d3338203d3e20323635303333.roa File: 323830343a333162383a3430303a3a2f33382d3338203d3e20323635303333.roa (raw, json) Hash identifier: FvosGEbiYS3nQ5NCjbCyUYuZOi5HahV6KX+V8/V1URU= Subject key identifier: BB:9A:D0:73:A6:72:53:7D:84:C9:93:EF:0E:82:64:05:3A:A8:30:7C Certificate issuer: /CN=6BB5D47779C998D7924924980F54C2E604962CE9 Certificate serial: 0622CD8E00E96074CDC4A956E6F9EAD34F253463 Authority key identifier: 6B:B5:D4:77:79:C9:98:D7:92:49:24:98:0F:54:C2:E6:04:96:2C:E9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BB5D47779C998D7924924980F54C2E604962CE9.cer Subject info access: rsync://rpki-repo.registro.br/repo/HFeC61ypvTMds8UMuZPpgA3ijbqr51LqjWcfgFo5BQip/0/323830343a333162383a3430303a3a2f33382d3338203d3e20323635303333.roa Signing time: Wed 22 Jan 2025 20:01:18 +0000 ROA not before: Wed 22 Jan 2025 19:56:18 +0000 ROA not after: Wed 21 Jan 2026 20:01:18 +0000 asID: 265033 IP address blocks: 2804:31b8:400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HFeC61ypvTMds8UMuZPpgA3ijbqr51LqjWcfgFo5BQip/0/6BB5D47779C998D7924924980F54C2E604962CE9.crl rsync://rpki-repo.registro.br/repo/HFeC61ypvTMds8UMuZPpgA3ijbqr51LqjWcfgFo5BQip/0/6BB5D47779C998D7924924980F54C2E604962CE9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BB5D47779C998D7924924980F54C2E604962CE9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 22 Feb 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:22:cd:8e:00:e9:60:74:cd:c4:a9:56:e6:f9:ea:d3:4f:25:34:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6BB5D47779C998D7924924980F54C2E604962CE9 Validity Not Before: Jan 22 19:56:18 2025 GMT Not After : Jan 21 20:01:18 2026 GMT Subject: CN=BB9AD073A672537D84C993EF0E8264053AA8307C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:20:8f:20:e2:7f:84:57:02:82:c5:4c:e4:44: 8e:e4:d4:83:e0:c8:4b:fd:ae:e3:db:e0:7c:c3:76: e2:0a:a8:12:67:a3:a6:2f:1c:06:6a:13:71:cb:4d: e7:ae:c2:f9:4f:29:24:81:60:0b:50:98:3b:46:de: 54:d1:1b:13:d8:aa:12:8e:bf:79:67:91:b7:a2:47: 11:38:54:a8:95:fe:86:f9:6e:93:c6:84:55:8b:b1: ae:97:20:a1:91:82:82:1e:82:2d:0c:2f:52:8c:80: 4f:95:6e:b9:f5:5d:1f:26:d9:3f:20:e3:c8:d7:77: 08:68:f4:1e:3e:06:a5:71:b7:0d:d7:76:7e:19:dd: f5:71:49:67:7e:be:31:d1:77:b9:c3:0d:2e:68:70: 82:3b:41:c2:1c:ab:9c:36:12:ea:fb:3f:a5:d1:09: 71:84:c4:66:85:9a:16:46:a9:93:a2:ba:17:31:78: 4b:aa:42:dd:1c:e3:33:89:9b:fc:80:65:f6:bc:75: 38:d9:19:ce:74:e8:4d:7e:0d:51:47:a6:1c:6d:72: a8:f2:04:e2:9b:f8:e7:08:13:02:76:63:d6:6f:5a: a6:2f:8d:5c:e5:dc:19:0f:2e:ad:5f:e3:c7:33:60: b4:e0:4e:79:95:95:a4:40:f9:0a:91:d2:f9:ec:99: 08:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:9A:D0:73:A6:72:53:7D:84:C9:93:EF:0E:82:64:05:3A:A8:30:7C X509v3 Authority Key Identifier: keyid:6B:B5:D4:77:79:C9:98:D7:92:49:24:98:0F:54:C2:E6:04:96:2C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HFeC61ypvTMds8UMuZPpgA3ijbqr51LqjWcfgFo5BQip/0/6BB5D47779C998D7924924980F54C2E604962CE9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BB5D47779C998D7924924980F54C2E604962CE9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFeC61ypvTMds8UMuZPpgA3ijbqr51LqjWcfgFo5BQip/0/323830343a333162383a3430303a3a2f33382d3338203d3e20323635303333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:31b8:400::/38 Signature Algorithm: sha256WithRSAEncryption a9:1a:41:40:19:90:1e:b4:e6:f6:3a:89:c0:14:ca:14:a2:59: ba:c2:4b:ba:fe:07:ef:0c:d8:c9:18:51:37:62:0e:fc:b6:40: 0c:ba:c2:30:ee:75:db:37:06:00:9a:0c:12:b9:5c:35:0d:b4: 7b:cd:66:98:49:67:87:8b:10:dc:c7:81:92:9e:c4:f2:0c:bf: 8f:78:e9:b4:44:e4:77:54:a3:0f:7d:c5:83:62:7b:c9:8c:fc: 3b:15:57:5d:be:1c:3a:f2:0f:9b:10:e8:4a:c4:ad:8b:17:f5: ca:64:84:8c:bb:60:1f:f0:c0:ca:be:b3:67:04:43:04:15:00: 5d:2d:fd:e1:15:92:25:75:50:3f:41:1f:00:34:b2:e9:3f:3e: 63:f8:c9:4d:f3:80:04:d4:c9:6d:d3:8c:3f:5f:5e:e3:7b:84: c0:9b:fb:09:39:16:ae:d7:34:46:26:54:88:b1:82:b2:a2:0f: bb:74:89:b9:7c:5d:f9:58:cb:4a:6a:52:23:c4:e1:06:be:1d: d6:e3:be:d5:d2:8d:1c:cb:59:97:cd:4e:4a:30:12:d6:04:22: f9:ad:54:a9:39:e6:f1:d9:86:45:9a:85:29:0e:52:25:9b:7c: f3:dd:ce:35:13:f3:47:05:9a:aa:03:a7:70:a1:bc:0d:23:50: ac:8c:2a:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBiLNjgDpYHTNxKlW5vnq008lNGMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkJCNUQ0Nzc3OUM5OThENzkyNDkyNDk4MEY1NEMyRTYw NDk2MkNFOTAeFw0yNTAxMjIxOTU2MThaFw0yNjAxMjEyMDAxMThaMDMxMTAvBgNV BAMTKEJCOUFEMDczQTY3MjUzN0Q4NEM5OTNFRjBFODI2NDA1M0FBODMwN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkII8g4n+EVwKCxUzkRI7k1IPg yEv9ruPb4HzDduIKqBJno6YvHAZqE3HLTeeuwvlPKSSBYAtQmDtG3lTRGxPYqhKO v3lnkbeiRxE4VKiV/ob5bpPGhFWLsa6XIKGRgoIegi0ML1KMgE+Vbrn1XR8m2T8g 48jXdwho9B4+BqVxtw3Xdn4Z3fVxSWd+vjHRd7nDDS5ocII7QcIcq5w2Eur7P6XR CXGExGaFmhZGqZOiuhcxeEuqQt0c4zOJm/yAZfa8dTjZGc506E1+DVFHphxtcqjy BOKb+OcIEwJ2Y9ZvWqYvjVzl3BkPLq1f48czYLTgTnmVlaRA+QqR0vnsmQjVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUu5rQc6ZyU32EyZPvDoJkBTqoMHwwHwYDVR0j BBgwFoAUa7XUd3nJmNeSSSSYD1TC5gSWLOkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEZlQzYxeXB2VE1kczhVTXVaUHBnQTNpamJxcjUxTHFqV2NmZ0ZvNUJR aXAvMC82QkI1RDQ3Nzc5Qzk5OEQ3OTI0OTI0OTgwRjU0QzJFNjA0OTYyQ0U5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZCQjVENDc3NzlDOTk4RDc5 MjQ5MjQ5ODBGNTRDMkU2MDQ5NjJDRTkuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0hGZUM2MXlwdlRNZHM4VU11WlBwZ0EzaWpicXI1MUxxaldjZmdGbzVCUWlwLzAv MzIzODMwMzQzYTMzMzE2MjM4M2EzNDMwMzAzYTNhMmYzMzM4MmQzMzM4MjAzZDNl MjAzMjM2MzUzMDMzMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgIoBDG4BDANBgkqhkiG9w0BAQsFAAOC AQEAqRpBQBmQHrTm9jqJwBTKFKJZusJLuv4H7wzYyRhRN2IO/LZADLrCMO512zcG AJoMErlcNQ20e81mmElnh4sQ3MeBkp7E8gy/j3jptETkd1SjD33Fg2J7yYz8OxVX Xb4cOvIPmxDoSsStixf1ymSEjLtgH/DAyr6zZwRDBBUAXS394RWSJXVQP0EfADSy 6T8+Y/jJTfOABNTJbdOMP19e43uEwJv7CTkWrtc0RiZUiLGCsqIPu3SJuXxd+VjL SmpSI8ThBr4d1uO+1dKNHMtZl81OSjAS1gQi+a1UqTnm8dmGRZqFKQ5SJZt8893O NRPzRwWaqgOncKG8DSNQrIwqsw== -----END CERTIFICATE-----Generated at Fri Feb 21 17:34:35 2025 by rpki-client