$ rpki-client -vvf rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/323830343a343635343a343030303a3a2f33342d3334203d3e20323636393833.roa File: 323830343a343635343a343030303a3a2f33342d3334203d3e20323636393833.roa (raw, json) Hash identifier: Nm3EUn5V2Z9HvwQQi+iuPy3fV92DlLRLNzxF5ZxoNmI= Subject key identifier: 3F:62:21:C1:E3:F9:B2:6B:0B:15:A1:F2:D2:EC:99:FC:C7:34:6E:9B Certificate issuer: /CN=FC7B655C6372CB73D708B42D83FE2B62B3EEF17D Certificate serial: 7DAE069142D41538309245D73CAE530A2AAE1628 Authority key identifier: FC:7B:65:5C:63:72:CB:73:D7:08:B4:2D:83:FE:2B:62:B3:EE:F1:7D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC7B655C6372CB73D708B42D83FE2B62B3EEF17D.cer Subject info access: rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/323830343a343635343a343030303a3a2f33342d3334203d3e20323636393833.roa Signing time: Thu 10 Apr 2025 12:10:31 +0000 ROA not before: Thu 10 Apr 2025 12:05:31 +0000 ROA not after: Thu 09 Apr 2026 12:10:31 +0000 asID: 266983 IP address blocks: 2804:4654:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/FC7B655C6372CB73D708B42D83FE2B62B3EEF17D.crl rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/FC7B655C6372CB73D708B42D83FE2B62B3EEF17D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC7B655C6372CB73D708B42D83FE2B62B3EEF17D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 30 Apr 2025 18:48:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:ae:06:91:42:d4:15:38:30:92:45:d7:3c:ae:53:0a:2a:ae:16:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC7B655C6372CB73D708B42D83FE2B62B3EEF17D Validity Not Before: Apr 10 12:05:31 2025 GMT Not After : Apr 9 12:10:31 2026 GMT Subject: CN=3F6221C1E3F9B26B0B15A1F2D2EC99FCC7346E9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b2:ff:6e:94:1f:13:78:29:7f:a5:0a:58:d4: 95:8c:d6:3c:f1:c8:c3:f1:a5:0c:49:d3:99:69:d9: 18:1f:cc:d9:b2:92:19:b5:7d:0c:94:56:e2:e9:ee: 5a:ff:92:83:d0:7a:be:89:bc:ef:85:dc:5a:f8:70: bd:8e:09:f0:90:ff:52:c7:6d:25:7d:8b:78:7b:cf: 59:10:07:d4:fc:51:5c:73:2e:56:0e:06:db:15:6e: 1d:14:74:b1:4c:d4:bb:31:62:87:5e:e7:d1:1d:8c: 04:0d:e3:5f:61:12:fd:05:1f:d3:73:c0:47:29:57: 3c:41:22:30:9d:1a:1c:95:38:8d:82:2f:79:7b:4d: 18:49:e1:7c:d0:0e:87:e2:d2:65:1d:2e:17:95:fa: 86:73:5d:89:50:55:fd:e1:cf:76:81:4d:2b:3d:a0: 44:68:49:16:c8:44:e6:c6:ca:41:09:0c:c7:15:ff: 3f:9e:de:a7:2f:73:59:7b:0f:8f:f8:79:f8:c9:f4: f3:08:35:c3:d1:4f:9f:8a:18:6b:23:4b:4b:42:ae: 3a:ef:a9:e6:6c:fe:bf:d1:61:03:d0:51:0d:63:b2: 9f:de:50:9f:c8:d0:20:27:8c:1f:b6:40:6d:c0:a3: 5b:48:87:7d:b8:a5:53:82:84:e2:c4:a8:1a:4b:77: d9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:62:21:C1:E3:F9:B2:6B:0B:15:A1:F2:D2:EC:99:FC:C7:34:6E:9B X509v3 Authority Key Identifier: keyid:FC:7B:65:5C:63:72:CB:73:D7:08:B4:2D:83:FE:2B:62:B3:EE:F1:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/FC7B655C6372CB73D708B42D83FE2B62B3EEF17D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC7B655C6372CB73D708B42D83FE2B62B3EEF17D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/323830343a343635343a343030303a3a2f33342d3334203d3e20323636393833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:4654:4000::/34 Signature Algorithm: sha256WithRSAEncryption 66:a4:f4:d4:df:2d:95:14:7a:6c:81:68:33:3a:f9:7c:78:00: 5b:9a:69:3a:fc:ed:0a:57:58:40:3d:27:ea:93:2f:cd:3f:b4: d5:71:6a:a0:8d:f9:d4:ec:f2:4d:a5:24:61:26:dc:e2:9b:90: 11:1f:82:62:28:f1:03:bc:bd:5a:6e:a0:29:f3:83:5e:e8:94: 69:5a:97:55:b6:9e:ce:91:00:39:77:3b:35:2b:94:4f:eb:b0: 17:40:f9:f1:94:d9:7d:14:37:c7:7a:cb:5c:da:b1:38:fc:3f: 83:d3:aa:35:7d:ef:41:cf:8f:d5:46:73:14:c2:7f:13:e7:5b: 89:6d:e8:7f:96:c0:1e:08:fa:01:dc:c6:00:56:76:14:30:fe: 1f:f6:5c:7a:44:c1:0b:27:06:58:bc:1a:c6:d2:02:31:1a:fa: 23:b5:c4:b9:1d:c2:ff:03:30:80:67:b1:68:7c:ce:ce:9b:2f: b1:db:3f:29:26:4b:cc:2a:82:06:2f:6a:28:2b:a1:11:45:8b: 52:75:ca:25:7c:65:7c:a2:25:96:62:35:f8:79:30:de:4b:5a: 01:96:d7:ea:2d:0c:ce:47:d6:6f:85:0b:1f:f3:39:75:00:ae: 42:b5:40:ff:22:38:46:a6:aa:89:b4:b8:25:5a:77:0a:c9:62: ef:8a:7f:4b -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUfa4GkULUFTgwkkXXPK5TCiquFigwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM3QjY1NUM2MzcyQ0I3M0Q3MDhCNDJEODNGRTJCNjJC M0VFRjE3RDAeFw0yNTA0MTAxMjA1MzFaFw0yNjA0MDkxMjEwMzFaMDMxMTAvBgNV BAMTKDNGNjIyMUMxRTNGOUIyNkIwQjE1QTFGMkQyRUM5OUZDQzczNDZFOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYsv9ulB8TeCl/pQpY1JWM1jzx yMPxpQxJ05lp2RgfzNmykhm1fQyUVuLp7lr/koPQer6JvO+F3Fr4cL2OCfCQ/1LH bSV9i3h7z1kQB9T8UVxzLlYOBtsVbh0UdLFM1LsxYode59EdjAQN419hEv0FH9Nz wEcpVzxBIjCdGhyVOI2CL3l7TRhJ4XzQDofi0mUdLheV+oZzXYlQVf3hz3aBTSs9 oERoSRbIRObGykEJDMcV/z+e3qcvc1l7D4/4efjJ9PMINcPRT5+KGGsjS0tCrjrv qeZs/r/RYQPQUQ1jsp/eUJ/I0CAnjB+2QG3Ao1tIh324pVOChOLEqBpLd9kVAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUP2IhweP5smsLFaHy0uyZ/Mc0bpswHwYDVR0j BBgwFoAU/HtlXGNyy3PXCLQtg/4rYrPu8X0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ01KaHRWOE5kbUdYcXRYWnlaTHVoQXdRWmtYTk1vQlBQaTJDN2N4SFlW WWgvMC9GQzdCNjU1QzYzNzJDQjczRDcwOEI0MkQ4M0ZFMkI2MkIzRUVGMTdELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZDN0I2NTVDNjM3MkNCNzNE NzA4QjQyRDgzRkUyQjYyQjNFRUYxN0QuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NNSmh0VjhOZG1HWHF0WFp5Wkx1aEF3UVprWE5Nb0JQUGkyQzdjeEhZVlloLzAv MzIzODMwMzQzYTM0MzYzNTM0M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzYzNjM5MzgzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigERlRAMA0GCSqGSIb3DQEBCwUA A4IBAQBmpPTU3y2VFHpsgWgzOvl8eABbmmk6/O0KV1hAPSfqky/NP7TVcWqgjfnU 7PJNpSRhJtzim5ARH4JiKPEDvL1abqAp84Ne6JRpWpdVtp7OkQA5dzs1K5RP67AX QPnxlNl9FDfHestc2rE4/D+D06o1fe9Bz4/VRnMUwn8T51uJbeh/lsAeCPoB3MYA VnYUMP4f9lx6RMELJwZYvBrG0gIxGvojtcS5HcL/AzCAZ7FofM7Omy+x2z8pJkvM KoIGL2ooK6ERRYtSdcolfGV8oiWWYjX4eTDeS1oBltfqLQzOR9ZvhQsf8zl1AK5C tUD/IjhGpqqJtLglWncKyWLvin9L -----END CERTIFICATE-----Generated at Wed Apr 30 12:22:54 2025 by rpki-client