$ rpki-client -vvf rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/323830343a343031633a383030303a3a2f33342d3334203d3e20323635393335.roa File: 323830343a343031633a383030303a3a2f33342d3334203d3e20323635393335.roa (raw, json) Hash identifier: K6hKgjGHS2JMsgie2uti/OK2EXoaH1YdGKcx614Q77c= Subject key identifier: FD:F1:F4:B3:54:D4:6F:DD:D3:1B:AB:C3:2A:FA:02:D1:63:A2:2F:BE Certificate issuer: /CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3 Certificate serial: 1479B1802B5AD58D8B8AD1F386BB5AEDE8EC9FAE Authority key identifier: 38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer Subject info access: rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/323830343a343031633a383030303a3a2f33342d3334203d3e20323635393335.roa Signing time: Thu 06 Mar 2025 07:52:47 +0000 ROA not before: Thu 06 Mar 2025 07:47:47 +0000 ROA not after: Thu 05 Mar 2026 07:52:47 +0000 asID: 265935 IP address blocks: 2804:401c:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 01 May 2025 14:51:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:79:b1:80:2b:5a:d5:8d:8b:8a:d1:f3:86:bb:5a:ed:e8:ec:9f:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3 Validity Not Before: Mar 6 07:47:47 2025 GMT Not After : Mar 5 07:52:47 2026 GMT Subject: CN=FDF1F4B354D46FDDD31BABC32AFA02D163A22FBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b7:b7:27:4b:03:00:1e:3a:59:9a:6c:7a:8a: 1b:2d:e7:93:67:72:dc:a0:c7:d1:e2:08:4f:17:fb: f2:fe:81:e2:c3:f0:62:6c:c9:20:6f:3c:66:02:c5: d6:28:b2:0e:68:e5:d8:7c:5d:1d:43:6c:75:66:21: a7:31:8e:99:b8:cb:cd:89:8e:18:ec:ac:74:38:89: e7:46:1c:8a:32:b2:5f:a6:c9:3b:81:7c:0a:ec:7a: 98:04:cb:5e:bc:e7:ad:82:27:1b:24:d0:65:92:cf: 81:79:47:05:ba:f5:f0:9e:8b:ae:3d:e1:07:46:c7: b8:8e:7d:76:e6:8a:e7:ac:19:1f:06:7b:57:04:75: f8:e7:15:02:4b:12:07:44:8a:f5:61:d8:e3:4e:eb: ff:62:fb:df:a8:d3:59:95:c7:c2:8c:40:8a:4f:4f: 3a:fe:3f:e8:5f:e2:8a:5b:c9:4e:14:de:71:b6:5e: df:a3:05:e1:33:46:c7:00:de:bf:57:7a:3d:6a:29: 80:4c:34:78:3d:4e:8b:d4:e5:9c:e9:a7:02:f4:b3: a1:2a:ea:b8:e6:a5:2e:f4:97:a8:ef:6f:30:e3:6e: aa:6a:d7:36:43:10:38:76:6b:94:bb:61:35:c6:f3: 92:dc:81:f8:16:de:ae:eb:ef:d8:a8:cc:0e:de:53: b1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:F1:F4:B3:54:D4:6F:DD:D3:1B:AB:C3:2A:FA:02:D1:63:A2:2F:BE X509v3 Authority Key Identifier: keyid:38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/323830343a343031633a383030303a3a2f33342d3334203d3e20323635393335.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:401c:8000::/34 Signature Algorithm: sha256WithRSAEncryption 9c:7b:66:c4:94:fa:93:49:29:9c:2d:7b:e1:ca:27:f8:7e:fb: 5e:89:cf:68:a4:4d:6a:8b:2c:19:ab:5f:1f:42:d9:60:64:c3: 77:1d:c9:bc:c0:dc:43:b9:1d:8d:80:08:e1:bf:dc:10:61:67: f0:5c:84:5d:d3:c4:88:09:8d:d8:96:4b:62:37:79:fd:33:f5: f3:b9:36:30:31:3e:20:8d:3c:8e:9d:82:6d:d5:6f:6e:c8:dc: f3:a0:6d:67:c3:14:9f:e5:11:00:fa:e5:46:7c:0b:0a:4e:ac: 0b:68:f8:00:3b:a7:2d:78:c6:3b:2d:42:41:a2:73:fe:98:50: be:06:32:72:69:2b:f9:9c:32:57:37:e4:6c:ba:bf:98:a0:02: 69:e1:84:09:e6:7e:a9:5c:3d:b1:75:e8:e9:bf:8b:b0:e9:16: 6e:3f:fd:3e:84:cd:9d:77:91:e0:16:64:89:7e:96:c9:b6:d3: 63:10:71:3e:60:01:18:3d:ab:60:83:9a:47:1f:d8:65:93:9b: 7b:01:52:ad:3e:52:6d:e2:f6:d7:c3:52:e2:af:4a:2e:9d:1d: 48:b2:2c:c9:eb:64:63:57:86:c9:0f:ea:c6:db:37:c4:0d:9a: f0:8a:cf:cd:ee:40:f1:63:06:5b:08:55:d2:45:ee:0d:7d:a1: 98:54:ca:e1 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUFHmxgCta1Y2LitHzhrta7ejsn64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhGM0JFQUM1NzVENkI2N0JGMkYyODYzMjhDNjgwQzQ0 NjdGNUJEMzAeFw0yNTAzMDYwNzQ3NDdaFw0yNjAzMDUwNzUyNDdaMDMxMTAvBgNV BAMTKEZERjFGNEIzNTRENDZGREREMzFCQUJDMzJBRkEwMkQxNjNBMjJGQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2t7cnSwMAHjpZmmx6ihst55Nn ctygx9HiCE8X+/L+geLD8GJsySBvPGYCxdYosg5o5dh8XR1DbHVmIacxjpm4y82J jhjsrHQ4iedGHIoysl+myTuBfArsepgEy168562CJxsk0GWSz4F5RwW69fCei649 4QdGx7iOfXbmiuesGR8Ge1cEdfjnFQJLEgdEivVh2ONO6/9i+9+o01mVx8KMQIpP Tzr+P+hf4opbyU4U3nG2Xt+jBeEzRscA3r9Xej1qKYBMNHg9TovU5ZzppwL0s6Eq 6rjmpS70l6jvbzDjbqpq1zZDEDh2a5S7YTXG85LcgfgW3q7r79iozA7eU7FfAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQU/fH0s1TUb93TG6vDKvoC0WOiL74wHwYDVR0j BBgwFoAUOPO+rFdda2e/LyhjKMaAxEZ/W9MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2I3YmVad0xiVGpUQjNHUFJ0Qmh6TVJ6V3hFbllNQllHVk1BdHNFendQ NmovMS8zOEYzQkVBQzU3NUQ2QjY3QkYyRjI4NjMyOEM2ODBDNDQ2N0Y1QkQzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM4RjNCRUFDNTc1RDZCNjdC RjJGMjg2MzI4QzY4MEM0NDY3RjVCRDMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNiN2JlWndMYlRqVEIzR1BSdEJoek1Seld4RW5ZTUJZR1ZNQXRzRXp3UDZqLzEv MzIzODMwMzQzYTM0MzAzMTYzM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzYzNTM5MzMzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEQByAMA0GCSqGSIb3DQEBCwUA A4IBAQCce2bElPqTSSmcLXvhyif4fvteic9opE1qiywZq18fQtlgZMN3Hcm8wNxD uR2NgAjhv9wQYWfwXIRd08SICY3YlktiN3n9M/XzuTYwMT4gjTyOnYJt1W9uyNzz oG1nwxSf5REA+uVGfAsKTqwLaPgAO6cteMY7LUJBonP+mFC+BjJyaSv5nDJXN+Rs ur+YoAJp4YQJ5n6pXD2xdejpv4uw6RZuP/0+hM2dd5HgFmSJfpbJttNjEHE+YAEY Patgg5pHH9hlk5t7AVKtPlJt4vbXw1Lir0ounR1IsizJ62RjV4bJD+rG2zfEDZrw is/N7kDxYwZbCFXSRe4NfaGYVMrh -----END CERTIFICATE-----Generated at Wed Apr 30 23:24:39 2025 by rpki-client