$ rpki-client -vvf rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/323830313a38303a323030303a3a2f34302d3438203d3e203238363436.roa File: 323830313a38303a323030303a3a2f34302d3438203d3e203238363436.roa (raw, json) Hash identifier: 02/U8v4f7pCQEHDI7u8JVh1OIAhStzAKvuVvjqur24g= Subject key identifier: 79:D8:87:07:13:9C:8B:A0:A3:6C:98:DF:73:C0:26:3C:71:25:98:22 Certificate issuer: /CN=8D41CABF9128C1CBAC4BB641E77B86D13098BC6D Certificate serial: 58DC5952EA7CA45FD0C5113368A2663E4DA635CF Authority key identifier: 8D:41:CA:BF:91:28:C1:CB:AC:4B:B6:41:E7:7B:86:D1:30:98:BC:6D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.cer Subject info access: rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/323830313a38303a323030303a3a2f34302d3438203d3e203238363436.roa Signing time: Thu 06 Mar 2025 11:33:11 +0000 ROA not before: Thu 06 Mar 2025 11:28:11 +0000 ROA not after: Thu 05 Mar 2026 11:33:11 +0000 asID: 28646 IP address blocks: 2801:80:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.crl rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 09 May 2025 01:54:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:dc:59:52:ea:7c:a4:5f:d0:c5:11:33:68:a2:66:3e:4d:a6:35:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D41CABF9128C1CBAC4BB641E77B86D13098BC6D Validity Not Before: Mar 6 11:28:11 2025 GMT Not After : Mar 5 11:33:11 2026 GMT Subject: CN=79D88707139C8BA0A36C98DF73C0263C71259822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:df:88:96:11:cc:42:b8:19:d5:eb:da:14:53: ea:43:12:40:56:af:f5:1e:ff:18:5c:23:74:85:38: d6:5a:a7:51:4a:01:e9:a5:cf:c4:a2:0b:aa:40:e2: b7:3f:6c:70:77:a4:5b:1a:16:88:8f:98:ce:2e:2a: 49:5b:f0:83:8c:77:94:80:e8:e4:4c:9d:56:01:87: 20:2e:0b:dc:bb:a4:23:b0:5d:00:a2:c5:90:7e:79: 43:56:62:79:39:96:35:61:63:23:a2:dc:26:e3:07: c8:d0:16:48:9f:25:f4:3a:56:3e:05:31:4b:95:71: 4e:08:4d:df:27:ea:36:18:af:19:17:64:4c:98:1a: 46:78:cd:fb:6a:8c:d7:0c:0a:f0:d4:ae:fe:99:30: 8f:7e:5f:bd:0d:d6:ad:a1:44:df:4e:ff:5d:2a:2e: ab:10:d7:1c:93:f2:11:c2:aa:b0:c1:cd:16:cd:f0: 69:8d:c9:a7:80:3d:9a:62:e4:ef:db:dd:67:4f:7f: 27:c3:78:3c:cd:b3:ef:25:91:00:5c:c9:59:a3:59: bc:46:9f:57:ae:3d:a0:e4:64:6b:98:27:de:ea:82: 56:18:ec:45:a5:6d:46:34:a2:86:dc:02:8c:06:93: 4a:2e:3b:c4:cf:3f:68:63:f6:9e:1d:b7:3a:d0:1d: 44:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:D8:87:07:13:9C:8B:A0:A3:6C:98:DF:73:C0:26:3C:71:25:98:22 X509v3 Authority Key Identifier: keyid:8D:41:CA:BF:91:28:C1:CB:AC:4B:B6:41:E7:7B:86:D1:30:98:BC:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/323830313a38303a323030303a3a2f34302d3438203d3e203238363436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2801:80:2000::/40 Signature Algorithm: sha256WithRSAEncryption a2:03:7a:0a:d6:b8:3e:b4:a0:77:3a:07:a6:dd:55:15:a5:a2: 64:ce:ed:65:d0:e8:85:af:bc:65:68:28:03:46:30:22:a5:3e: d7:cb:73:ef:0a:14:63:0e:cd:3b:7a:d8:19:d8:a5:13:c2:e6: d4:a7:46:9d:8b:c7:e4:ed:1b:a7:76:a9:55:a8:4c:bd:63:78: c3:29:d1:0c:78:79:6e:7a:d5:94:e6:81:4b:93:2f:fc:be:fa: e1:c8:ef:ce:15:f3:bb:46:11:80:0a:81:6a:75:86:f9:3f:3a: 43:7b:05:59:8e:71:1d:1a:59:a5:75:42:4f:0b:f3:7f:fb:8e: b4:81:09:28:af:3b:ac:1f:a7:cd:69:ab:b0:4a:ce:f0:f2:e6: 68:1e:81:01:0f:8f:fd:96:ff:91:19:18:ce:bd:72:6a:38:77: 68:c0:cf:b4:94:2e:ec:62:8c:e7:0d:ac:91:f1:d9:ce:fa:5d: 2a:be:b0:af:b3:ac:66:dd:18:7f:b3:80:7f:db:b8:3b:f6:2c: 0d:91:aa:7a:69:16:c6:d1:f7:ce:20:c9:27:6e:48:60:d5:0a: 43:31:5a:a4:3e:ab:d0:87:de:90:9d:46:e3:56:23:b2:5b:5e: 46:3b:b3:33:b0:db:47:7a:7c:7b:36:6f:46:2d:8a:ac:b5:43: 45:3d:f4:b1 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgIUWNxZUup8pF/QxREzaKJmPk2mNc8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ0MUNBQkY5MTI4QzFDQkFDNEJCNjQxRTc3Qjg2RDEz MDk4QkM2RDAeFw0yNTAzMDYxMTI4MTFaFw0yNjAzMDUxMTMzMTFaMDMxMTAvBgNV BAMTKDc5RDg4NzA3MTM5QzhCQTBBMzZDOThERjczQzAyNjNDNzEyNTk4MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp34iWEcxCuBnV69oUU+pDEkBW r/Ue/xhcI3SFONZap1FKAemlz8SiC6pA4rc/bHB3pFsaFoiPmM4uKklb8IOMd5SA 6ORMnVYBhyAuC9y7pCOwXQCixZB+eUNWYnk5ljVhYyOi3CbjB8jQFkifJfQ6Vj4F MUuVcU4ITd8n6jYYrxkXZEyYGkZ4zftqjNcMCvDUrv6ZMI9+X70N1q2hRN9O/10q LqsQ1xyT8hHCqrDBzRbN8GmNyaeAPZpi5O/b3WdPfyfDeDzNs+8lkQBcyVmjWbxG n1euPaDkZGuYJ97qglYY7EWlbUY0oobcAowGk0ouO8TPP2hj9p4dtzrQHUR1AgMB AAGjggJVMIICUTAdBgNVHQ4EFgQUediHBxOci6CjbJjfc8AmPHElmCIwHwYDVR0j BBgwFoAUjUHKv5EowcusS7ZB53uG0TCYvG0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOTFkc0dUc3hXQ3hQRUdUUVF1YWpOU2E0OFI0dkRFNE1nVnc1dkJhYmdF THgvMS84RDQxQ0FCRjkxMjhDMUNCQUM0QkI2NDFFNzdCODZEMTMwOThCQzZELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhENDFDQUJGOTEyOEMxQ0JB QzRCQjY0MUU3N0I4NkQxMzA5OEJDNkQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzkxZHNHVHN4V0N4UEVHVFFRdWFqTlNhNDhSNHZERTRNZ1Z3NXZCYWJnRUx4LzEv MzIzODMwMzEzYTM4MzAzYTMyMzAzMDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIw MzIzODM2MzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwDgQCAAIwCAMGACgBAIAgMA0GCSqGSIb3DQEBCwUAA4IBAQCi A3oK1rg+tKB3Ogem3VUVpaJkzu1l0OiFr7xlaCgDRjAipT7Xy3PvChRjDs07etgZ 2KUTwubUp0adi8fk7RundqlVqEy9Y3jDKdEMeHluetWU5oFLky/8vvrhyO/OFfO7 RhGACoFqdYb5PzpDewVZjnEdGlmldUJPC/N/+460gQkorzusH6fNaauwSs7w8uZo HoEBD4/9lv+RGRjOvXJqOHdowM+0lC7sYoznDayR8dnO+l0qvrCvs6xm3Rh/s4B/ 27g79iwNkap6aRbG0ffOIMknbkhg1QpDMVqkPqvQh96QnUbjViOyW15GO7MzsNtH enx7Nm9GLYqstUNFPfSx -----END CERTIFICATE-----Generated at Thu May 8 10:35:28 2025 by rpki-client