$ rpki-client -vvf rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/323830343a336262303a383030303a3a2f33332d3333203d3e20323636313635.roa File: 323830343a336262303a383030303a3a2f33332d3333203d3e20323636313635.roa (raw, json) Hash identifier: 6JqX0l0S4/KiDJii85tf2NF/GJ2/x9dKO/wr32AAe4s= Subject key identifier: 5B:54:2D:3F:9A:B4:8C:A6:93:91:C5:08:73:A7:4A:6A:14:AD:92:F7 Certificate issuer: /CN=DFB165A55B30AAC4E32CEC8FE9B4386EF0EA8D3C Certificate serial: 080EAD938CAD2EBB842C21EA6DAFD984B7780E3F Authority key identifier: DF:B1:65:A5:5B:30:AA:C4:E3:2C:EC:8F:E9:B4:38:6E:F0:EA:8D:3C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFB165A55B30AAC4E32CEC8FE9B4386EF0EA8D3C.cer Subject info access: rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/323830343a336262303a383030303a3a2f33332d3333203d3e20323636313635.roa Signing time: Mon 03 Mar 2025 23:56:11 +0000 ROA not before: Mon 03 Mar 2025 23:51:11 +0000 ROA not after: Mon 02 Mar 2026 23:56:11 +0000 asID: 266165 IP address blocks: 2804:3bb0:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/DFB165A55B30AAC4E32CEC8FE9B4386EF0EA8D3C.crl rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/DFB165A55B30AAC4E32CEC8FE9B4386EF0EA8D3C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFB165A55B30AAC4E32CEC8FE9B4386EF0EA8D3C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 06 Apr 2025 16:49:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:0e:ad:93:8c:ad:2e:bb:84:2c:21:ea:6d:af:d9:84:b7:78:0e:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFB165A55B30AAC4E32CEC8FE9B4386EF0EA8D3C Validity Not Before: Mar 3 23:51:11 2025 GMT Not After : Mar 2 23:56:11 2026 GMT Subject: CN=5B542D3F9AB48CA69391C50873A74A6A14AD92F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:72:b4:a8:76:3c:cd:6e:58:b0:7f:39:14:91: 46:f7:93:00:49:57:7c:c2:b1:88:a1:a4:61:a0:ab: 9e:35:01:0f:ac:85:99:0f:40:86:9b:04:8f:7f:72: c6:a8:86:cd:72:46:92:dc:4d:24:37:34:1a:b3:94: 73:93:43:12:b1:8b:b9:34:83:23:ca:d1:aa:ca:ca: 8c:7a:94:ec:de:a6:c3:31:99:b1:1c:06:68:8f:58: 0c:d0:c9:ac:32:4d:f3:de:b4:ca:b9:cd:3f:88:20: 51:8c:0b:b5:81:8d:cd:be:89:19:05:24:72:7c:83: 9c:fc:cd:3c:94:ea:cc:8b:c3:33:70:20:97:64:8f: 5a:9c:e2:16:c0:2e:e2:85:e1:31:af:e0:38:10:1a: ed:20:4e:f3:0a:02:f8:d1:09:c3:a8:24:56:d7:5e: 96:49:27:a4:63:27:51:cc:1e:a6:ed:ee:ac:1d:4a: ee:79:61:f8:0a:3b:d3:79:1a:f4:ca:65:7a:ee:fe: a3:88:a0:1d:53:b1:ed:68:fc:01:38:05:86:72:c2: 6c:d3:dd:ee:a3:95:64:08:17:0c:10:16:8c:85:21: 33:3d:7f:2c:08:9c:bf:dd:8e:2b:d4:5d:27:fc:d7: 66:c0:a1:bb:b7:a9:a2:34:af:62:3b:89:6d:9d:cb: d4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:54:2D:3F:9A:B4:8C:A6:93:91:C5:08:73:A7:4A:6A:14:AD:92:F7 X509v3 Authority Key Identifier: keyid:DF:B1:65:A5:5B:30:AA:C4:E3:2C:EC:8F:E9:B4:38:6E:F0:EA:8D:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/DFB165A55B30AAC4E32CEC8FE9B4386EF0EA8D3C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFB165A55B30AAC4E32CEC8FE9B4386EF0EA8D3C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/323830343a336262303a383030303a3a2f33332d3333203d3e20323636313635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:3bb0:8000::/33 Signature Algorithm: sha256WithRSAEncryption 48:88:16:bd:b0:67:4d:9b:c7:41:94:fc:a6:b8:d1:8b:be:9f: 34:f5:3e:8b:5a:bd:98:a2:76:1f:fb:d8:94:c0:88:aa:3b:b6: 16:ab:f5:43:da:f8:f2:00:d4:66:3d:ce:a2:ce:0e:eb:1c:2f: 4e:f1:c0:d4:94:4e:ae:82:fa:2d:50:a5:86:78:ac:a2:4e:21: 4f:dd:2d:f1:b9:ef:9a:41:0a:b0:49:ad:94:3c:29:97:84:e9: 79:cf:04:fa:d0:0f:e7:21:59:09:cb:8f:4a:c3:5b:eb:7f:ff: eb:b8:a4:5e:03:48:3c:f8:fe:17:b7:96:e2:93:7f:ac:5c:01: 0d:a1:82:72:ef:72:ec:a5:7e:8c:c3:76:1c:d1:68:f7:c1:7a: 85:d2:f2:4c:af:bc:c3:1d:fa:d2:77:50:c5:66:11:05:a0:50: 8f:34:a2:bf:c0:33:76:f1:bd:a6:ee:26:f3:5d:9d:c7:b6:33: b4:a9:9e:39:20:b4:2b:3a:20:44:fc:08:9e:23:8b:1f:4f:a8: c9:62:e4:e1:57:2d:8a:7c:bf:e3:a4:6c:91:ae:3a:59:07:0c: 25:b8:df:cc:fc:44:66:dd:36:73:01:a3:ef:78:05:1d:4d:c2: f7:a0:26:41:ba:87:22:d4:c4:46:2d:e0:0e:28:38:4a:87:cd: 41:59:a0:cb -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUCA6tk4ytLruELCHqba/ZhLd4Dj8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZCMTY1QTU1QjMwQUFDNEUzMkNFQzhGRTlCNDM4NkVG MEVBOEQzQzAeFw0yNTAzMDMyMzUxMTFaFw0yNjAzMDIyMzU2MTFaMDMxMTAvBgNV BAMTKDVCNTQyRDNGOUFCNDhDQTY5MzkxQzUwODczQTc0QTZBMTRBRDkyRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTcrSodjzNbliwfzkUkUb3kwBJ V3zCsYihpGGgq541AQ+shZkPQIabBI9/csaohs1yRpLcTSQ3NBqzlHOTQxKxi7k0 gyPK0arKyox6lOzepsMxmbEcBmiPWAzQyawyTfPetMq5zT+IIFGMC7WBjc2+iRkF JHJ8g5z8zTyU6syLwzNwIJdkj1qc4hbALuKF4TGv4DgQGu0gTvMKAvjRCcOoJFbX XpZJJ6RjJ1HMHqbt7qwdSu55YfgKO9N5GvTKZXru/qOIoB1Tse1o/AE4BYZywmzT 3e6jlWQIFwwQFoyFITM9fywInL/djivUXSf812bAobu3qaI0r2I7iW2dy9QlAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUW1QtP5q0jKaTkcUIc6dKahStkvcwHwYDVR0j BBgwFoAU37FlpVswqsTjLOyP6bQ4bvDqjTwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSjRoc1VnUkg4bW9jWERBNUJ3U0gyVFRwRHZzQmR3cVNUNDNCRUJKZ0Vx ajIvMC9ERkIxNjVBNTVCMzBBQUM0RTMyQ0VDOEZFOUI0Mzg2RUYwRUE4RDNDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGQjE2NUE1NUIzMEFBQzRF MzJDRUM4RkU5QjQzODZFRjBFQThEM0MuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0o0aHNVZ1JIOG1vY1hEQTVCd1NIMlRUcER2c0Jkd3FTVDQzQkVCSmdFcWoyLzAv MzIzODMwMzQzYTMzNjI2MjMwM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk M2UyMDMyMzYzNjMxMzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEO7CAMA0GCSqGSIb3DQEBCwUA A4IBAQBIiBa9sGdNm8dBlPymuNGLvp809T6LWr2YonYf+9iUwIiqO7YWq/VD2vjy ANRmPc6izg7rHC9O8cDUlE6ugvotUKWGeKyiTiFP3S3xue+aQQqwSa2UPCmXhOl5 zwT60A/nIVkJy49Kw1vrf//ruKReA0g8+P4Xt5bik3+sXAENoYJy73LspX6Mw3Yc 0Wj3wXqF0vJMr7zDHfrSd1DFZhEFoFCPNKK/wDN28b2m7ibzXZ3HtjO0qZ45ILQr OiBE/AieI4sfT6jJYuThVy2KfL/jpGyRrjpZBwwluN/M/ERm3TZzAaPveAUdTcL3 oCZBuoci1MRGLeAOKDhKh81BWaDL -----END CERTIFICATE-----Generated at Sun Apr 6 02:38:10 2025 by rpki-client