$ rpki-client -vvf rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/323830343a363432633a383030303a3a2f33332d3333203d3e20323639343131.roa File: 323830343a363432633a383030303a3a2f33332d3333203d3e20323639343131.roa (raw, json) Hash identifier: 9L+zI8Os+/a578MRW8Q03e51H7zImYXHmsvq5MxXuU8= Subject key identifier: 33:74:6E:D6:C6:64:40:D5:BA:08:D4:AB:A6:DA:DB:BE:42:D1:77:36 Certificate issuer: /CN=91D0CB672455E2525CA585B9DB73D420AE011D8D Certificate serial: 380048D783773D3B2160B2A6D087800DC9FBCCF8 Authority key identifier: 91:D0:CB:67:24:55:E2:52:5C:A5:85:B9:DB:73:D4:20:AE:01:1D:8D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D0CB672455E2525CA585B9DB73D420AE011D8D.cer Subject info access: rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/323830343a363432633a383030303a3a2f33332d3333203d3e20323639343131.roa Signing time: Thu 19 Jun 2025 13:13:09 +0000 ROA not before: Thu 19 Jun 2025 13:08:09 +0000 ROA not after: Thu 18 Jun 2026 13:13:09 +0000 asID: 269411 IP address blocks: 2804:642c:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/91D0CB672455E2525CA585B9DB73D420AE011D8D.crl rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/91D0CB672455E2525CA585B9DB73D420AE011D8D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D0CB672455E2525CA585B9DB73D420AE011D8D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 21 Jun 2025 07:37:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:00:48:d7:83:77:3d:3b:21:60:b2:a6:d0:87:80:0d:c9:fb:cc:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91D0CB672455E2525CA585B9DB73D420AE011D8D Validity Not Before: Jun 19 13:08:09 2025 GMT Not After : Jun 18 13:13:09 2026 GMT Subject: CN=33746ED6C66440D5BA08D4ABA6DADBBE42D17736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:93:48:8d:ac:50:bd:f3:6a:60:03:dc:9a:63: 65:04:4c:20:a4:ca:49:95:4e:51:6d:f5:e6:65:82: d7:1f:44:2e:9c:17:e1:c5:36:81:b8:f2:65:12:62: 8d:b3:0d:57:e8:c7:f2:0f:09:bc:85:84:3d:07:87: 76:ec:78:9c:0d:20:46:59:65:71:47:80:35:dc:59: b2:20:8d:09:9b:de:9e:19:44:78:1b:3e:fa:40:cd: 16:3c:a2:80:ed:e3:6b:16:b7:90:36:74:92:78:a3: 2e:bd:8e:3a:a1:ba:31:33:d4:50:93:e1:d2:60:fd: 60:4c:a6:3e:d2:53:d0:a9:4c:4d:3b:70:fa:9c:24: 1e:d9:6f:2d:e3:c9:83:da:3e:7e:39:fc:f5:26:de: e6:57:ab:f7:bf:6e:8d:47:40:be:56:96:b1:8f:cf: 33:24:c7:81:d6:a6:d5:67:d2:99:4d:6a:1c:72:c2: 9b:92:a5:8d:b8:e1:16:05:06:39:07:a1:02:9d:17: 90:5f:a4:3b:e0:9a:b2:6a:d7:1f:f1:da:38:87:54: c7:62:97:f6:39:5c:6c:53:c0:e8:bd:33:9e:7e:0e: 40:d0:91:a9:a5:28:6c:14:6e:43:bc:bb:04:4c:22: e8:15:30:67:bf:12:ef:6b:2c:eb:cc:75:0d:14:29: 14:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:74:6E:D6:C6:64:40:D5:BA:08:D4:AB:A6:DA:DB:BE:42:D1:77:36 X509v3 Authority Key Identifier: keyid:91:D0:CB:67:24:55:E2:52:5C:A5:85:B9:DB:73:D4:20:AE:01:1D:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/91D0CB672455E2525CA585B9DB73D420AE011D8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D0CB672455E2525CA585B9DB73D420AE011D8D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/323830343a363432633a383030303a3a2f33332d3333203d3e20323639343131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:642c:8000::/33 Signature Algorithm: sha256WithRSAEncryption 54:e2:6b:1e:69:e1:76:51:fc:62:f5:11:7f:67:b5:0c:91:f5: 15:53:df:03:ec:04:e6:25:c2:f8:76:c6:ef:d8:b4:e5:33:2f: f5:7a:36:6c:5b:6c:8b:62:c8:9a:02:aa:42:b6:3b:ec:84:ed: 20:47:68:35:a3:21:58:48:bd:c2:6e:80:cf:25:b7:47:f0:38: 8d:cf:e2:cc:d0:4d:b2:fa:d6:17:a6:08:09:d5:06:57:85:58: 72:b1:81:3f:9b:a5:5d:44:cc:a7:1f:ab:5d:ba:6d:02:9c:81: 8e:3e:3e:72:4e:f7:96:a1:34:94:12:4a:e3:82:a7:56:7e:f6: ac:00:f8:cb:56:bd:67:63:d4:e3:59:e2:aa:6c:82:b8:bc:84: 7b:0e:23:87:6b:aa:be:0e:7a:59:8a:6f:03:c8:f2:65:78:d8: 45:c0:d5:84:19:1e:0f:d8:1d:81:8b:b2:fe:bd:ca:a8:49:48: 66:3c:b7:e0:36:94:1f:19:60:07:c2:d8:7c:cb:79:ba:79:5c: 70:5b:8c:07:eb:3c:72:6a:0c:d6:92:29:af:6f:70:61:b3:9c: 02:08:9c:38:a8:0c:38:e4:5a:19:3e:37:90:94:e6:8b:8a:97: d7:d0:eb:93:d7:2b:f1:f1:55:da:41:ac:6e:5f:33:c6:61:31: ef:d6:11:1b -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUOABI14N3PTshYLKm0IeADcn7zPgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFEMENCNjcyNDU1RTI1MjVDQTU4NUI5REI3M0Q0MjBB RTAxMUQ4RDAeFw0yNTA2MTkxMzA4MDlaFw0yNjA2MTgxMzEzMDlaMDMxMTAvBgNV BAMTKDMzNzQ2RUQ2QzY2NDQwRDVCQTA4RDRBQkE2REFEQkJFNDJEMTc3MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5k0iNrFC982pgA9yaY2UETCCk ykmVTlFt9eZlgtcfRC6cF+HFNoG48mUSYo2zDVfox/IPCbyFhD0Hh3bseJwNIEZZ ZXFHgDXcWbIgjQmb3p4ZRHgbPvpAzRY8ooDt42sWt5A2dJJ4oy69jjqhujEz1FCT 4dJg/WBMpj7SU9CpTE07cPqcJB7Zby3jyYPaPn45/PUm3uZXq/e/bo1HQL5WlrGP zzMkx4HWptVn0plNahxywpuSpY244RYFBjkHoQKdF5BfpDvgmrJq1x/x2jiHVMdi l/Y5XGxTwOi9M55+DkDQkamlKGwUbkO8uwRMIugVMGe/Eu9rLOvMdQ0UKRQBAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUM3Ru1sZkQNW6CNSrptrbvkLRdzYwHwYDVR0j BBgwFoAUkdDLZyRV4lJcpYW523PUIK4BHY0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1FmWnJ0OUdTb1MySnRCanU0UmlRSDFxQkdrOEdSc0R5U0Q1cjVMMjhR eEUvMC85MUQwQ0I2NzI0NTVFMjUyNUNBNTg1QjlEQjczRDQyMEFFMDExRDhELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxRDBDQjY3MjQ1NUUyNTI1 Q0E1ODVCOURCNzNENDIwQUUwMTFEOEQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NRZlpydDlHU29TMkp0Qmp1NFJpUUgxcUJHazhHUnNEeVNENXI1TDI4UXhFLzAv MzIzODMwMzQzYTM2MzQzMjYzM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk M2UyMDMyMzYzOTM0MzEzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEZCyAMA0GCSqGSIb3DQEBCwUA A4IBAQBU4mseaeF2Ufxi9RF/Z7UMkfUVU98D7ATmJcL4dsbv2LTlMy/1ejZsW2yL YsiaAqpCtjvshO0gR2g1oyFYSL3CboDPJbdH8DiNz+LM0E2y+tYXpggJ1QZXhVhy sYE/m6VdRMynH6tdum0CnIGOPj5yTveWoTSUEkrjgqdWfvasAPjLVr1nY9TjWeKq bIK4vIR7DiOHa6q+DnpZim8DyPJleNhFwNWEGR4P2B2Bi7L+vcqoSUhmPLfgNpQf GWAHwth8y3m6eVxwW4wH6zxyagzWkimvb3Bhs5wCCJw4qAw45FoZPjeQlOaLipfX 0OuT1yvx8VXaQaxuXzPGYTHv1hEb -----END CERTIFICATE-----Generated at Fri Jun 20 21:09:07 2025 by rpki-client