$ rpki-client -vvf rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/323830343a346331633a343030303a3a2f33342d3334203d3e20323637333530.roa File: 323830343a346331633a343030303a3a2f33342d3334203d3e20323637333530.roa (raw, json) Hash identifier: yypoDy5bSn77qxeuXVndQniHgm9nMysCWdFI9074rt0= Subject key identifier: 3C:5C:B5:6A:0C:68:FC:F7:88:D6:BF:A1:6F:2C:13:C0:04:53:71:06 Certificate issuer: /CN=D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F Certificate serial: 3353B3A1F574DA6FB322B9CDFA6CA0B38ADD8576 Authority key identifier: D1:B4:AF:0A:27:5C:0D:07:42:C7:43:A8:BE:8B:CD:F5:6B:03:DA:7F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.cer Subject info access: rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/323830343a346331633a343030303a3a2f33342d3334203d3e20323637333530.roa Signing time: Sat 07 Jun 2025 01:56:50 +0000 ROA not before: Sat 07 Jun 2025 01:51:50 +0000 ROA not after: Sat 06 Jun 2026 01:56:50 +0000 asID: 267350 IP address blocks: 2804:4c1c:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.crl rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 19 Jun 2025 22:41:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:53:b3:a1:f5:74:da:6f:b3:22:b9:cd:fa:6c:a0:b3:8a:dd:85:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F Validity Not Before: Jun 7 01:51:50 2025 GMT Not After : Jun 6 01:56:50 2026 GMT Subject: CN=3C5CB56A0C68FCF788D6BFA16F2C13C004537106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cb:e2:00:f0:fd:ca:f0:b0:d6:96:a6:85:c0: c1:21:60:c6:bb:d9:e5:5a:07:6b:cd:66:05:57:59: ff:e6:25:96:39:4f:93:8c:18:12:42:15:a5:98:93: 6c:8d:c3:8d:97:3d:cd:09:52:5b:d2:0c:e9:3b:22: 9a:90:9a:ca:33:83:dd:02:bc:20:0e:28:48:5d:7a: ec:15:88:af:ef:d1:7c:b1:25:15:49:6c:4f:76:be: be:cd:6b:99:bd:2e:0f:e4:27:6f:7f:09:61:fa:fb: 3f:0f:03:a7:de:8b:d7:85:03:b1:7e:9b:d2:cc:f5: 2c:eb:b0:ac:5d:d3:56:3a:45:c0:2e:a6:f2:5c:0a: 76:98:cc:96:91:f3:3f:24:cb:7f:cd:15:7a:57:0a: 36:fa:2e:af:ca:54:90:14:76:86:c8:a2:5c:80:0e: 58:4b:0f:5e:f1:9d:b3:24:4d:06:3f:cc:35:0b:a2: 93:19:5b:6a:11:53:8f:6c:59:64:be:a1:67:f5:63: 62:9c:af:3d:f3:1d:83:66:b0:23:20:87:05:6d:20: 6b:39:a7:87:da:49:e7:b7:94:d4:16:ad:71:b5:d6: 45:9f:ea:e2:ef:b3:6d:46:2e:0f:51:26:21:ea:f5: 61:67:ae:21:62:6b:03:03:02:e7:93:14:1e:33:f8: 06:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:5C:B5:6A:0C:68:FC:F7:88:D6:BF:A1:6F:2C:13:C0:04:53:71:06 X509v3 Authority Key Identifier: keyid:D1:B4:AF:0A:27:5C:0D:07:42:C7:43:A8:BE:8B:CD:F5:6B:03:DA:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/323830343a346331633a343030303a3a2f33342d3334203d3e20323637333530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:4c1c:4000::/34 Signature Algorithm: sha256WithRSAEncryption 93:79:51:a1:3f:8c:cd:8c:a2:70:f7:a7:7c:99:a4:ae:cd:99: c5:7a:66:c3:4e:19:f3:8f:56:19:8c:24:e1:0f:15:83:51:24: 83:0b:01:1a:ed:6b:49:2e:13:c3:70:71:de:54:da:63:b9:33: d6:cb:86:e1:a4:68:c5:db:3f:0d:dc:ce:fe:2b:a1:94:18:44: d7:0b:34:d0:2c:b3:af:5d:9f:17:b1:4c:b7:86:bd:4d:d8:a7: 40:41:e4:0f:a8:3f:63:05:8d:c9:c1:96:0c:30:09:9f:e5:7f: cd:b3:58:21:95:d1:0f:c4:fe:70:fe:8c:36:d4:99:56:71:d2: c0:38:29:1d:82:a1:7a:24:f4:c4:38:a8:1a:cb:63:59:5a:cf: c7:28:41:30:f1:5a:89:3a:c3:f8:ed:c2:ce:67:8c:13:b8:d3: 13:15:66:a5:af:84:bf:78:de:8d:22:17:a4:42:d2:3e:b4:8f: fe:c0:aa:52:7a:0a:78:42:08:e6:14:e8:bc:72:f3:d7:37:47: 93:20:ef:3a:7f:4b:eb:bb:ca:84:f4:8f:10:9b:c6:ce:bb:b1: a2:2f:f8:28:51:5e:90:49:ff:d1:8f:b7:09:60:1c:b5:1f:77: 2a:d6:d0:fe:ff:c7:7f:6d:79:8f:91:c7:76:ad:81:5e:e7:8d: 8a:95:9b:d7 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUM1OzofV02m+zIrnN+mygs4rdhXYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFCNEFGMEEyNzVDMEQwNzQyQzc0M0E4QkU4QkNERjU2 QjAzREE3RjAeFw0yNTA2MDcwMTUxNTBaFw0yNjA2MDYwMTU2NTBaMDMxMTAvBgNV BAMTKDNDNUNCNTZBMEM2OEZDRjc4OEQ2QkZBMTZGMkMxM0MwMDQ1MzcxMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEy+IA8P3K8LDWlqaFwMEhYMa7 2eVaB2vNZgVXWf/mJZY5T5OMGBJCFaWYk2yNw42XPc0JUlvSDOk7IpqQmsozg90C vCAOKEhdeuwViK/v0XyxJRVJbE92vr7Na5m9Lg/kJ29/CWH6+z8PA6fei9eFA7F+ m9LM9SzrsKxd01Y6RcAupvJcCnaYzJaR8z8ky3/NFXpXCjb6Lq/KVJAUdobIolyA DlhLD17xnbMkTQY/zDULopMZW2oRU49sWWS+oWf1Y2Kcrz3zHYNmsCMghwVtIGs5 p4faSee3lNQWrXG11kWf6uLvs21GLg9RJiHq9WFnriFiawMDAueTFB4z+AYpAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUPFy1agxo/PeI1r+hbywTwARTcQYwHwYDVR0j BBgwFoAU0bSvCidcDQdCx0OovovN9WsD2n8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOGk3bWk4bThhUzRmVkFja2dWNDZiYk1KalBINXlBYldLYUhrQ2V4c1hQ ekUvMC9EMUI0QUYwQTI3NUMwRDA3NDJDNzQzQThCRThCQ0RGNTZCMDNEQTdGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxQjRBRjBBMjc1QzBEMDc0 MkM3NDNBOEJFOEJDREY1NkIwM0RBN0YuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzhpN21pOG04YVM0ZlZBY2tnVjQ2YmJNSmpQSDV5QWJXS2FIa0NleHNYUHpFLzAv MzIzODMwMzQzYTM0NjMzMTYzM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzYzNzMzMzUzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigETBxAMA0GCSqGSIb3DQEBCwUA A4IBAQCTeVGhP4zNjKJw96d8maSuzZnFembDThnzj1YZjCThDxWDUSSDCwEa7WtJ LhPDcHHeVNpjuTPWy4bhpGjF2z8N3M7+K6GUGETXCzTQLLOvXZ8XsUy3hr1N2KdA QeQPqD9jBY3JwZYMMAmf5X/Ns1ghldEPxP5w/ow21JlWcdLAOCkdgqF6JPTEOKga y2NZWs/HKEEw8VqJOsP47cLOZ4wTuNMTFWalr4S/eN6NIhekQtI+tI/+wKpSegp4 QgjmFOi8cvPXN0eTIO86f0vru8qE9I8Qm8bOu7GiL/goUV6QSf/Rj7cJYBy1H3cq 1tD+/8d/bXmPkcd2rYFe542KlZvX -----END CERTIFICATE-----Generated at Thu Jun 19 07:57:01 2025 by rpki-client