$ rpki-client -vvf rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/323830343a356562633a3a2f33332d3333203d3e20323639303533.roa File: 323830343a356562633a3a2f33332d3333203d3e20323639303533.roa (raw, json) Hash identifier: ikb/eeov6bRBVVWN56xhzBR63CMjpkK522BDfSEzQU4= Subject key identifier: 2C:8A:7C:BA:5F:DE:76:25:5F:0F:98:28:C2:40:FE:FF:8B:8B:D4:F1 Certificate issuer: /CN=633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0 Certificate serial: 4E641AB823FF791E4EB3E0138ACA741988AC1060 Authority key identifier: 63:3B:DD:34:75:47:5D:9C:8D:62:32:CB:1F:D9:0F:D5:2C:D8:CF:D0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.cer Subject info access: rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/323830343a356562633a3a2f33332d3333203d3e20323639303533.roa Signing time: Sun 05 Jan 2025 10:48:48 +0000 ROA not before: Sun 05 Jan 2025 10:43:48 +0000 ROA not after: Sun 04 Jan 2026 10:48:48 +0000 asID: 269053 IP address blocks: 2804:5ebc::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.crl rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 17 Feb 2025 15:37:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:64:1a:b8:23:ff:79:1e:4e:b3:e0:13:8a:ca:74:19:88:ac:10:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0 Validity Not Before: Jan 5 10:43:48 2025 GMT Not After : Jan 4 10:48:48 2026 GMT Subject: CN=2C8A7CBA5FDE76255F0F9828C240FEFF8B8BD4F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:79:32:d0:f5:34:e3:83:a2:d7:85:c2:67:db: e3:05:7a:0d:ea:d6:02:53:7d:29:01:09:6c:f9:04: 53:cd:ce:85:2a:85:a5:93:d6:7d:60:b3:44:e4:ca: 42:94:4e:f3:a9:68:0e:52:76:89:cf:43:49:21:53: c5:a0:3a:20:30:24:b3:1e:e5:30:17:b0:ca:f8:fe: e2:22:b6:a8:8d:7b:b1:e3:74:13:36:a2:00:82:d7: a0:8e:6e:db:56:d6:db:f1:5c:a0:36:07:c2:e4:32: fb:2c:e9:55:05:1d:55:9f:c8:fc:c9:92:a4:94:47: 66:68:b7:64:ba:7c:99:c7:24:b7:7b:ed:62:e8:04: 67:c9:bf:1d:cb:25:65:0b:00:55:43:12:97:e4:35: 27:76:ee:20:a4:95:7c:d1:58:19:8a:b3:13:75:39: c4:4a:48:28:72:da:1b:1b:05:bf:b3:a0:3d:f8:e5: 77:46:9f:7b:6f:1b:7a:ad:68:3b:45:f8:a4:ed:c9: 55:d7:fb:d2:0d:ef:2a:3b:b7:fe:4b:e1:78:5c:bd: a7:9a:5b:c7:11:b1:13:d3:11:8e:c0:97:35:fd:d8: de:8a:67:b3:44:62:8f:a9:8d:d1:09:48:1e:a1:6c: b0:da:09:2b:f9:a3:49:ba:4f:c3:7b:8f:3d:ce:72: 61:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:8A:7C:BA:5F:DE:76:25:5F:0F:98:28:C2:40:FE:FF:8B:8B:D4:F1 X509v3 Authority Key Identifier: keyid:63:3B:DD:34:75:47:5D:9C:8D:62:32:CB:1F:D9:0F:D5:2C:D8:CF:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/323830343a356562633a3a2f33332d3333203d3e20323639303533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:5ebc::/33 Signature Algorithm: sha256WithRSAEncryption 8f:49:83:42:af:54:5d:51:97:f8:07:12:ce:7f:f9:05:db:c6: 7c:c3:c0:3c:b2:fe:99:01:76:31:92:23:89:92:61:6b:d1:75: 45:11:c6:89:d5:f6:c4:e6:c2:36:86:1f:c7:00:24:01:c9:9d: 94:6f:48:20:5c:ff:3f:ab:ad:8d:cb:f4:08:36:65:da:58:79: 0d:cd:b0:83:1b:6c:e0:41:88:08:7c:26:96:5b:83:3d:33:17: 41:7c:df:7a:dc:d2:c9:5d:a9:b5:74:93:4b:41:9d:ce:4e:89: b8:12:7f:fb:da:42:89:dd:ce:2f:07:9f:49:60:a8:ff:59:bc: 52:0b:f7:2b:d7:d4:93:b0:bf:c6:74:68:04:3b:1a:e9:c2:9a: 27:b1:e4:d2:4d:20:f2:c6:30:83:d4:58:0e:cc:39:80:ed:f9: b9:04:1a:cf:d0:ea:b0:77:76:0c:04:1e:c9:2d:5a:a1:80:f7: ff:c7:f3:6e:75:00:82:1a:97:1d:71:ac:98:bb:b2:7a:b1:46: 9a:3c:92:a8:9e:04:3a:82:9c:bb:66:c4:79:3a:e6:4c:72:62: ec:2b:9d:ec:14:0e:86:0c:37:bd:e8:59:94:bb:a7:cd:78:5d: 7b:d1:79:dd:10:98:6c:04:e8:7b:ce:ce:9a:66:b0:36:25:6b: 82:a3:29:ab -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUTmQauCP/eR5Os+ATisp0GYisEGAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjMzQkREMzQ3NTQ3NUQ5QzhENjIzMkNCMUZEOTBGRDUy Q0Q4Q0ZEMDAeFw0yNTAxMDUxMDQzNDhaFw0yNjAxMDQxMDQ4NDhaMDMxMTAvBgNV BAMTKDJDOEE3Q0JBNUZERTc2MjU1RjBGOTgyOEMyNDBGRUZGOEI4QkQ0RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpeTLQ9TTjg6LXhcJn2+MFeg3q 1gJTfSkBCWz5BFPNzoUqhaWT1n1gs0TkykKUTvOpaA5SdonPQ0khU8WgOiAwJLMe 5TAXsMr4/uIitqiNe7HjdBM2ogCC16CObttW1tvxXKA2B8LkMvss6VUFHVWfyPzJ kqSUR2Zot2S6fJnHJLd77WLoBGfJvx3LJWULAFVDEpfkNSd27iCklXzRWBmKsxN1 OcRKSChy2hsbBb+zoD345XdGn3tvG3qtaDtF+KTtyVXX+9IN7yo7t/5L4Xhcvaea W8cRsRPTEY7AlzX92N6KZ7NEYo+pjdEJSB6hbLDaCSv5o0m6T8N7jz3OcmHRAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQULIp8ul/ediVfD5gowkD+/4uL1PEwHwYDVR0j BBgwFoAUYzvdNHVHXZyNYjLLH9kP1SzYz9AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSGR3aFZRZ2NEUDZ5TDZMdnF0V0oxdmExczlSS1JLMllYTU14Z1RVRnp4 Mk4vMC82MzNCREQzNDc1NDc1RDlDOEQ2MjMyQ0IxRkQ5MEZENTJDRDhDRkQwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYzM0JERDM0NzU0NzVEOUM4 RDYyMzJDQjFGRDkwRkQ1MkNEOENGRDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0hkd2hWUWdjRFA2eUw2THZxdFdKMXZhMXM5UktSSzJZWE1NeGdUVUZ6eDJOLzAv MzIzODMwMzQzYTM1NjU2MjYzM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM5 MzAzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH AQH/BBIwEDAOBAIAAjAIAwYHKARevAAwDQYJKoZIhvcNAQELBQADggEBAI9Jg0Kv VF1Rl/gHEs5/+QXbxnzDwDyy/pkBdjGSI4mSYWvRdUURxonV9sTmwjaGH8cAJAHJ nZRvSCBc/z+rrY3L9Ag2ZdpYeQ3NsIMbbOBBiAh8JpZbgz0zF0F833rc0sldqbV0 k0tBnc5OibgSf/vaQondzi8Hn0lgqP9ZvFIL9yvX1JOwv8Z0aAQ7GunCmiex5NJN IPLGMIPUWA7MOYDt+bkEGs/Q6rB3dgwEHsktWqGA9//H8251AIIalx1xrJi7snqx Rpo8kqieBDqCnLtmxHk65kxyYuwrnewUDoYMN73oWZS7p814XXvRed0QmGwE6HvO zppmsDYla4KjKas= -----END CERTIFICATE-----Generated at Sun Feb 16 21:43:45 2025 by rpki-client