$ rpki-client -vvf rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/323830343a356136343a383030303a3a2f33342d3334203d3e20323638373730.roa File: 323830343a356136343a383030303a3a2f33342d3334203d3e20323638373730.roa (raw, json) Hash identifier: aafx5f6EMbvFwkIHV/X2bLUE1P2cf2QLR3YXzIQGMdA= Subject key identifier: 44:2B:4D:37:E5:2E:F2:F1:69:C2:E7:43:47:8D:8A:72:7D:3E:C4:22 Certificate issuer: /CN=7FA00725B865657CC24A17AD7A99947906B51243 Certificate serial: 0F586047486073504B552BA9FF5E2DFC42A1301D Authority key identifier: 7F:A0:07:25:B8:65:65:7C:C2:4A:17:AD:7A:99:94:79:06:B5:12:43 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FA00725B865657CC24A17AD7A99947906B51243.cer Subject info access: rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/323830343a356136343a383030303a3a2f33342d3334203d3e20323638373730.roa Signing time: Thu 20 Mar 2025 19:37:16 +0000 ROA not before: Thu 20 Mar 2025 19:32:16 +0000 ROA not after: Thu 19 Mar 2026 19:37:16 +0000 asID: 268770 IP address blocks: 2804:5a64:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/7FA00725B865657CC24A17AD7A99947906B51243.crl rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/7FA00725B865657CC24A17AD7A99947906B51243.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FA00725B865657CC24A17AD7A99947906B51243.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 13 Apr 2025 19:13:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:58:60:47:48:60:73:50:4b:55:2b:a9:ff:5e:2d:fc:42:a1:30:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FA00725B865657CC24A17AD7A99947906B51243 Validity Not Before: Mar 20 19:32:16 2025 GMT Not After : Mar 19 19:37:16 2026 GMT Subject: CN=442B4D37E52EF2F169C2E743478D8A727D3EC422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e3:f9:ce:d1:aa:12:60:b6:dd:d4:eb:b5:26: d2:fb:3a:78:a0:90:ef:41:07:ee:c6:83:de:8c:b6: f5:33:04:e7:99:c6:08:9e:cc:23:44:90:cf:9f:c6: 34:91:c9:f2:46:4d:6f:28:34:b7:db:db:15:31:d4: d9:b0:6e:30:ba:cf:e3:bc:39:8e:c4:8e:cd:da:66: f0:35:93:80:b1:01:0c:05:41:c6:a1:2e:6a:f8:5c: 88:36:cf:fe:14:e6:96:29:4d:f5:24:fb:5c:f1:a0: b8:0d:cc:45:1c:f7:cf:1d:a5:86:5a:de:36:68:d5: 64:18:ea:75:d4:65:77:c3:45:a3:8b:87:26:25:3b: 30:2d:56:fc:90:4e:5c:42:2f:6d:0b:11:1d:26:68: 36:bd:60:a7:87:ac:2b:60:44:6b:11:10:e7:de:f1: 38:71:5f:54:b0:22:bf:97:e1:d3:d4:9b:cf:fb:39: 97:c0:ec:8c:1c:2a:77:d3:66:b2:91:2f:51:fc:7b: 9b:f5:f8:f5:5a:f2:ea:de:2f:24:3b:3a:55:5a:cf: f8:f8:14:b4:6e:b9:9f:d7:7b:3a:3c:04:24:aa:70: 9e:bb:d5:eb:47:d2:68:b1:20:8c:49:71:ae:78:bd: fd:fb:e3:39:44:c5:29:d2:05:9b:fa:54:78:20:07: d6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:2B:4D:37:E5:2E:F2:F1:69:C2:E7:43:47:8D:8A:72:7D:3E:C4:22 X509v3 Authority Key Identifier: keyid:7F:A0:07:25:B8:65:65:7C:C2:4A:17:AD:7A:99:94:79:06:B5:12:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/7FA00725B865657CC24A17AD7A99947906B51243.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FA00725B865657CC24A17AD7A99947906B51243.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/323830343a356136343a383030303a3a2f33342d3334203d3e20323638373730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:5a64:8000::/34 Signature Algorithm: sha256WithRSAEncryption 61:82:eb:33:22:2c:5d:15:a1:4b:8d:f5:3d:5a:38:72:c8:c4: a2:a8:ff:0a:a5:ef:6b:7e:4e:89:06:94:88:24:85:e5:14:f7: 43:0c:b8:0f:aa:3c:0e:66:4c:b9:02:35:b7:6f:fa:fd:51:4f: c4:39:66:60:76:51:9a:12:d2:bf:a1:a8:2d:8d:4b:5a:b0:78: 3a:4f:89:ef:79:f0:c9:b7:66:c8:3e:97:a2:0b:3d:43:c0:13: f2:0b:80:c5:01:0e:c5:22:f9:93:54:d8:87:cf:21:83:be:b9: 8b:3d:d5:f0:cf:db:ef:4d:e9:7a:f4:96:c5:e2:db:78:c2:20: 84:32:42:69:6c:1d:ef:a1:4e:98:5b:77:c3:f6:fb:fa:42:e0: e0:c5:d0:34:b3:c0:e5:43:07:01:f4:67:b9:16:4f:84:a1:90: fa:5d:8a:ef:c5:aa:3a:c7:12:c9:ca:37:98:40:6b:2e:7d:78: af:a7:36:30:ff:c3:e3:70:ae:a8:5c:72:21:b4:01:7d:60:09: 65:a8:71:03:0d:71:a1:9d:83:15:58:e4:3f:d0:10:13:1a:28: 38:1a:58:b3:d5:4d:e9:9e:2f:68:af:36:a9:ae:ae:fc:50:37: c8:ac:6b:f8:a9:bf:94:d2:db:22:26:3d:6b:a1:6a:6b:61:d3: 67:27:7a:3f -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUD1hgR0hgc1BLVSup/14t/EKhMB0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ZBMDA3MjVCODY1NjU3Q0MyNEExN0FEN0E5OTk0Nzkw NkI1MTI0MzAeFw0yNTAzMjAxOTMyMTZaFw0yNjAzMTkxOTM3MTZaMDMxMTAvBgNV BAMTKDQ0MkI0RDM3RTUyRUYyRjE2OUMyRTc0MzQ3OEQ4QTcyN0QzRUM0MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ4/nO0aoSYLbd1Ou1JtL7Onig kO9BB+7Gg96MtvUzBOeZxgiezCNEkM+fxjSRyfJGTW8oNLfb2xUx1NmwbjC6z+O8 OY7Ejs3aZvA1k4CxAQwFQcahLmr4XIg2z/4U5pYpTfUk+1zxoLgNzEUc988dpYZa 3jZo1WQY6nXUZXfDRaOLhyYlOzAtVvyQTlxCL20LER0maDa9YKeHrCtgRGsREOfe 8ThxX1SwIr+X4dPUm8/7OZfA7IwcKnfTZrKRL1H8e5v1+PVa8ureLyQ7OlVaz/j4 FLRuuZ/Xezo8BCSqcJ671etH0mixIIxJca54vf374zlExSnSBZv6VHggB9Z/AgMB AAGjggJbMIICVzAdBgNVHQ4EFgQURCtNN+Uu8vFpwudDR42Kcn0+xCIwHwYDVR0j BBgwFoAUf6AHJbhlZXzCShetepmUeQa1EkMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSGpzYmtIRUdtN0E3ckduRVFrRVNZRmdBcEVycFJDWUY2VjJmQ3pKY0E3 UmEvMC83RkEwMDcyNUI4NjU2NTdDQzI0QTE3QUQ3QTk5OTQ3OTA2QjUxMjQzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdGQTAwNzI1Qjg2NTY1N0ND MjRBMTdBRDdBOTk5NDc5MDZCNTEyNDMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0hqc2JrSEVHbTdBN3JHbkVRa0VTWUZnQXBFcnBSQ1lGNlYyZkN6SmNBN1JhLzAv MzIzODMwMzQzYTM1NjEzNjM0M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzYzODM3MzczMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEWmSAMA0GCSqGSIb3DQEBCwUA A4IBAQBhguszIixdFaFLjfU9WjhyyMSiqP8Kpe9rfk6JBpSIJIXlFPdDDLgPqjwO Zky5AjW3b/r9UU/EOWZgdlGaEtK/oagtjUtasHg6T4nvefDJt2bIPpeiCz1DwBPy C4DFAQ7FIvmTVNiHzyGDvrmLPdXwz9vvTel69JbF4tt4wiCEMkJpbB3voU6YW3fD 9vv6QuDgxdA0s8DlQwcB9Ge5Fk+EoZD6XYrvxao6xxLJyjeYQGsufXivpzYw/8Pj cK6oXHIhtAF9YAllqHEDDXGhnYMVWOQ/0BATGig4Gliz1U3pni9orzaprq78UDfI rGv4qb+U0tsiJj1roWprYdNnJ3o/ -----END CERTIFICATE-----Generated at Sun Apr 13 02:05:02 2025 by rpki-client