$ rpki-client -vvf rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/323830343a313534343a3a2f33322d3332203d3e203238323532.roa File: 323830343a313534343a3a2f33322d3332203d3e203238323532.roa (raw, json) Hash identifier: tEEpUPgFIPX6L9IQt1PcHvQrqtVbsfHmd/pX3PG46G8= Subject key identifier: 29:81:E1:E0:0D:F6:41:8D:31:34:9E:5D:F0:FF:A0:BB:08:F4:CE:E0 Certificate issuer: /CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34 Certificate serial: 67FF644E0FA6C1C9754B81011899C677B7A836B3 Authority key identifier: 16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer Subject info access: rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/323830343a313534343a3a2f33322d3332203d3e203238323532.roa Signing time: Wed 09 Apr 2025 18:47:08 +0000 ROA not before: Wed 09 Apr 2025 18:42:08 +0000 ROA not after: Wed 08 Apr 2026 18:47:08 +0000 asID: 28252 IP address blocks: 2804:1544::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 30 Apr 2025 03:07:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:ff:64:4e:0f:a6:c1:c9:75:4b:81:01:18:99:c6:77:b7:a8:36:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34 Validity Not Before: Apr 9 18:42:08 2025 GMT Not After : Apr 8 18:47:08 2026 GMT Subject: CN=2981E1E00DF6418D31349E5DF0FFA0BB08F4CEE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:51:94:31:36:2a:6b:59:3a:22:00:4f:4d:65: 81:e2:09:f8:ca:4b:c0:5e:cc:1c:e5:dc:46:51:6c: f8:76:67:3b:9f:da:00:66:cf:58:e7:66:71:f7:93: f7:74:58:0e:a8:d0:ec:a8:18:46:f8:15:93:4d:22: a0:20:3b:28:76:c0:de:5c:28:d5:9a:57:67:db:0d: cd:46:e1:fa:d9:48:d1:2d:9d:76:61:b3:e7:7a:cb: d5:5f:cc:39:07:a9:63:e3:1b:2e:05:d6:78:9a:9b: d8:2b:94:8c:69:e7:f5:f6:f6:e7:97:7e:72:12:dd: 65:61:1a:c3:f3:dc:4b:71:1f:b1:98:b1:fc:d7:dc: 05:c7:66:46:4b:18:ae:ae:7f:ab:af:de:bf:df:cb: 24:95:80:da:d8:18:d8:83:e7:78:8b:07:c0:44:a7: 48:e9:a3:f5:bd:5e:6f:35:e1:0f:a5:b4:3a:38:28: 2e:f9:21:50:1a:dc:e4:68:ad:a6:eb:e8:70:ba:46: 62:5e:c4:bb:ba:51:8c:7c:dd:84:50:e9:a5:da:e4: ef:20:bb:c4:4a:4c:93:73:9b:dd:c5:87:b9:e4:70: 5d:e9:71:c3:3f:59:de:f7:bf:4f:ab:b2:76:70:14: a4:37:6c:22:f4:89:5c:ea:d1:69:3e:0c:46:c2:38: 36:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:81:E1:E0:0D:F6:41:8D:31:34:9E:5D:F0:FF:A0:BB:08:F4:CE:E0 X509v3 Authority Key Identifier: keyid:16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/323830343a313534343a3a2f33322d3332203d3e203238323532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:1544::/32 Signature Algorithm: sha256WithRSAEncryption 73:4b:5a:3b:74:3f:eb:8b:3e:52:b5:1a:d4:22:dd:64:6b:22: 0f:f5:06:79:9b:a9:47:e3:12:b9:e7:98:d9:9e:53:9f:32:98: 50:58:e0:9d:fd:fc:cb:83:54:01:f2:ed:94:59:c0:fe:1e:60: 10:fa:54:52:2c:51:37:4d:15:09:4a:9a:1c:e8:56:42:1a:7c: ac:ef:fa:87:57:1f:64:7d:0e:7b:6d:02:fc:79:64:fc:de:b9: f6:12:98:94:3b:49:9d:36:5c:ab:52:13:9c:46:0d:41:ba:46: 73:8f:fd:4c:0c:d5:a8:9e:3b:22:01:58:60:72:33:c0:10:6b: 93:c4:36:c5:11:f6:fc:24:83:12:4a:64:2b:61:23:b2:c8:75: e1:d4:ca:39:a3:8b:cd:7a:5c:70:3e:5f:4d:9e:61:3c:58:15: 9b:05:8a:84:50:21:4d:e5:fe:6a:79:ea:d5:f6:be:ac:8f:20: 6e:79:e4:9e:db:ea:8d:44:eb:fc:55:97:cd:d6:ab:b7:a6:a6: e0:b0:50:ca:f5:6d:40:44:e4:f0:33:c9:8b:f6:c3:dd:ce:0e: 00:69:9d:5d:bb:39:87:7d:a6:4d:81:bc:89:f3:29:86:93:24: 9d:c1:f7:ea:18:a6:05:41:8e:3c:29:ef:da:03:dd:ce:ec:b2: 3a:f9:39:4f -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIUZ/9kTg+mwcl1S4EBGJnGd7eoNrMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY4RTJDNzNBQTdFQzlEQUIzMDZEODBCNUJBQTREQkVD M0RDQUIzNDAeFw0yNTA0MDkxODQyMDhaFw0yNjA0MDgxODQ3MDhaMDMxMTAvBgNV BAMTKDI5ODFFMUUwMERGNjQxOEQzMTM0OUU1REYwRkZBMEJCMDhGNENFRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqUZQxNiprWToiAE9NZYHiCfjK S8BezBzl3EZRbPh2Zzuf2gBmz1jnZnH3k/d0WA6o0OyoGEb4FZNNIqAgOyh2wN5c KNWaV2fbDc1G4frZSNEtnXZhs+d6y9VfzDkHqWPjGy4F1niam9grlIxp5/X29ueX fnIS3WVhGsPz3EtxH7GYsfzX3AXHZkZLGK6uf6uv3r/fyySVgNrYGNiD53iLB8BE p0jpo/W9Xm814Q+ltDo4KC75IVAa3ORorabr6HC6RmJexLu6UYx83YRQ6aXa5O8g u8RKTJNzm93Fh7nkcF3pccM/Wd73v0+rsnZwFKQ3bCL0iVzq0Wk+DEbCODbbAgMB AAGjggJOMIICSjAdBgNVHQ4EFgQUKYHh4A32QY0xNJ5d8P+guwj0zuAwHwYDVR0j BBgwFoAUFo4sc6p+ydqzBtgLW6pNvsPcqzQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN3hTb0E0SkdDeHc0UVFIeEQySkNXWXFBaW5ucUIzZUVGdnFVNG4zbnZ1 bTMvMC8xNjhFMkM3M0FBN0VDOURBQjMwNkQ4MEI1QkFBNERCRUMzRENBQjM0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE2OEUyQzczQUE3RUM5REFC MzA2RDgwQjVCQUE0REJFQzNEQ0FCMzQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzd4U29BNEpHQ3h3NFFRSHhEMkpDV1lxQWlubnFCM2VFRnZxVTRuM252dW0zLzAv MzIzODMwMzQzYTMxMzUzNDM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzODMy MzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB /wQRMA8wDQQCAAIwBwMFACgEFUQwDQYJKoZIhvcNAQELBQADggEBAHNLWjt0P+uL PlK1GtQi3WRrIg/1BnmbqUfjErnnmNmeU58ymFBY4J39/MuDVAHy7ZRZwP4eYBD6 VFIsUTdNFQlKmhzoVkIafKzv+odXH2R9DnttAvx5ZPzeufYSmJQ7SZ02XKtSE5xG DUG6RnOP/UwM1aieOyIBWGByM8AQa5PENsUR9vwkgxJKZCthI7LIdeHUyjmji816 XHA+X02eYTxYFZsFioRQIU3l/mp56tX2vqyPIG555J7b6o1E6/xVl83Wq7empuCw UMr1bUBE5PAzyYv2w93ODgBpnV27OYd9pk2BvInzKYaTJJ3B9+oYpgVBjjwp79oD 3c7ssjr5OU8= -----END CERTIFICATE-----Generated at Tue Apr 29 05:53:53 2025 by rpki-client