$ rpki-client -vvf rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/323830343a363862633a3a2f33332d3333203d3e20323639373132.roa File: 323830343a363862633a3a2f33332d3333203d3e20323639373132.roa (raw, json) Hash identifier: iTBCz5d+r1yl9GxrApG+0Q07QV52IXQ9V+n1/n4ToQk= Subject key identifier: 5B:92:05:FB:AB:AF:E8:6F:BF:AB:68:02:42:59:98:13:08:03:2A:D5 Certificate issuer: /CN=9B40C2CC13EAB50345EDACFACC15DB43E60B85A2 Certificate serial: 1D416CBF8BBE7AC8C241B89B1BF0B832A774E585 Authority key identifier: 9B:40:C2:CC:13:EA:B5:03:45:ED:AC:FA:CC:15:DB:43:E6:0B:85:A2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer Subject info access: rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/323830343a363862633a3a2f33332d3333203d3e20323639373132.roa Signing time: Mon 24 Feb 2025 17:20:09 +0000 ROA not before: Mon 24 Feb 2025 17:15:09 +0000 ROA not after: Mon 23 Feb 2026 17:20:09 +0000 asID: 269712 IP address blocks: 2804:68bc::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 03 May 2025 19:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:41:6c:bf:8b:be:7a:c8:c2:41:b8:9b:1b:f0:b8:32:a7:74:e5:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B40C2CC13EAB50345EDACFACC15DB43E60B85A2 Validity Not Before: Feb 24 17:15:09 2025 GMT Not After : Feb 23 17:20:09 2026 GMT Subject: CN=5B9205FBABAFE86FBFAB68024259981308032AD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4c:24:ac:63:3a:5e:a0:27:fd:c9:51:2c:3e: 18:fd:8e:b8:e6:03:85:72:46:88:53:a4:63:37:ae: 11:0b:92:ec:3e:05:b8:89:9e:62:49:5d:fe:88:3d: d1:ff:7a:8a:8f:14:d3:cb:67:bc:c2:32:b1:d9:05: c5:5b:ff:a1:40:9f:ec:f4:70:1f:44:8b:f7:c9:90: 93:07:65:bc:f5:dd:00:cc:ab:9a:de:64:6e:ff:b4: 23:6f:89:7a:a5:1b:ab:68:ef:86:85:a1:97:98:26: ef:04:9d:34:25:6d:88:1c:53:e2:ec:61:51:0e:0e: 46:9e:e8:4c:59:66:12:ea:dc:38:1b:7b:38:10:1b: cc:59:5f:ca:64:7d:66:a6:b0:f6:a3:42:7b:64:3b: 18:a0:05:fa:0c:4d:e6:4d:17:56:33:97:da:98:7c: 83:e2:83:0f:26:f6:fe:2b:48:c5:0c:55:fb:44:1e: 20:18:fe:ac:47:f9:ef:53:eb:af:be:7c:c9:8a:55: 16:f5:e3:72:8f:19:26:19:a7:03:a2:5c:b7:63:2f: 63:53:83:fc:d1:52:ab:bb:6d:d9:06:26:16:3e:be: e1:e6:53:95:e5:fb:04:5d:9a:bb:f9:cf:e7:d0:2f: 69:03:c5:b5:13:3a:d8:fd:49:47:8b:4b:b1:99:f4: d8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:92:05:FB:AB:AF:E8:6F:BF:AB:68:02:42:59:98:13:08:03:2A:D5 X509v3 Authority Key Identifier: keyid:9B:40:C2:CC:13:EA:B5:03:45:ED:AC:FA:CC:15:DB:43:E6:0B:85:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/323830343a363862633a3a2f33332d3333203d3e20323639373132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:68bc::/33 Signature Algorithm: sha256WithRSAEncryption 5c:bb:2d:af:7f:a0:2e:7e:27:0a:50:4c:bd:b6:9a:eb:a4:22: ff:73:c0:89:57:43:d0:93:3a:1f:02:a5:01:49:3a:af:e9:87: a2:85:49:8e:15:63:87:8b:77:3a:c8:66:2f:69:ab:7d:59:dd: 0a:d3:0d:1a:fc:7f:54:dd:96:56:9e:ab:85:1d:f6:66:d5:12: 97:5d:f9:96:89:14:d5:9c:ff:29:db:28:86:04:6b:10:d6:14: 06:59:5e:01:c8:52:c1:a4:34:73:20:1e:33:5d:a1:9b:30:5a: 65:36:8b:c8:cc:e4:0f:9e:9c:6c:41:15:04:b9:6f:f6:f3:6a: 31:c4:c5:c6:6e:47:c9:28:28:7b:52:44:9e:8a:cc:c1:99:73: 7e:41:cd:42:60:c2:3c:04:64:2c:c0:3c:bb:ab:0a:27:73:a7: 39:c9:c4:7a:c5:1b:33:cb:1d:70:bb:f3:2b:81:78:6c:78:dd: a5:a9:56:99:6d:cf:3d:47:89:27:46:f5:3b:e2:c1:71:84:30: 53:f7:6c:b9:f0:ed:06:1c:8a:ee:14:8c:86:77:4b:fb:f6:6a: 23:a0:23:7d:9b:62:41:f9:75:d3:c8:40:85:78:e8:c3:48:d5: c6:ce:0d:2e:d1:0d:da:ec:17:1b:41:0e:20:58:7f:44:89:a8: a8:c3:1b:5f -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUHUFsv4u+esjCQbibG/C4Mqd05YUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI0MEMyQ0MxM0VBQjUwMzQ1RURBQ0ZBQ0MxNURCNDNF NjBCODVBMjAeFw0yNTAyMjQxNzE1MDlaFw0yNjAyMjMxNzIwMDlaMDMxMTAvBgNV BAMTKDVCOTIwNUZCQUJBRkU4NkZCRkFCNjgwMjQyNTk5ODEzMDgwMzJBRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDETCSsYzpeoCf9yVEsPhj9jrjm A4VyRohTpGM3rhELkuw+BbiJnmJJXf6IPdH/eoqPFNPLZ7zCMrHZBcVb/6FAn+z0 cB9Ei/fJkJMHZbz13QDMq5reZG7/tCNviXqlG6to74aFoZeYJu8EnTQlbYgcU+Ls YVEODkae6ExZZhLq3DgbezgQG8xZX8pkfWamsPajQntkOxigBfoMTeZNF1Yzl9qY fIPigw8m9v4rSMUMVftEHiAY/qxH+e9T66++fMmKVRb143KPGSYZpwOiXLdjL2NT g/zRUqu7bdkGJhY+vuHmU5Xl+wRdmrv5z+fQL2kDxbUTOtj9SUeLS7GZ9NiJAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUW5IF+6uv6G+/q2gCQlmYEwgDKtUwHwYDVR0j BBgwFoAUm0DCzBPqtQNF7az6zBXbQ+YLhaIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQnpOejVkQkUya01ZR25BZnhFc05ZTHY3YU1UOG00eXhQNjNZdjgyTGRt MmcvMC85QjQwQzJDQzEzRUFCNTAzNDVFREFDRkFDQzE1REI0M0U2MEI4NUEyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlCNDBDMkNDMTNFQUI1MDM0 NUVEQUNGQUNDMTVEQjQzRTYwQjg1QTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0J6Tno1ZEJFMmtNWUduQWZ4RXNOWUx2N2FNVDhtNHl4UDYzWXY4MkxkbTJnLzAv MzIzODMwMzQzYTM2Mzg2MjYzM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM5 MzczMTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH AQH/BBIwEDAOBAIAAjAIAwYHKARovAAwDQYJKoZIhvcNAQELBQADggEBAFy7La9/ oC5+JwpQTL22muukIv9zwIlXQ9CTOh8CpQFJOq/ph6KFSY4VY4eLdzrIZi9pq31Z 3QrTDRr8f1Tdllaeq4Ud9mbVEpdd+ZaJFNWc/ynbKIYEaxDWFAZZXgHIUsGkNHMg HjNdoZswWmU2i8jM5A+enGxBFQS5b/bzajHExcZuR8koKHtSRJ6KzMGZc35BzUJg wjwEZCzAPLurCidzpznJxHrFGzPLHXC78yuBeGx43aWpVpltzz1HiSdG9TviwXGE MFP3bLnw7QYciu4UjIZ3S/v2aiOgI32bYkH5ddPIQIV46MNI1cbODS7RDdrsFxtB DiBYf0SJqKjDG18= -----END CERTIFICATE-----Generated at Sat May 3 11:30:08 2025 by rpki-client