$ rpki-client -vvf rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/323830343a363432633a633030303a3a2f34382d3438203d3e20323639343131.roa File: 323830343a363432633a633030303a3a2f34382d3438203d3e20323639343131.roa (raw, json) Hash identifier: RlUvirB5GtpAb1MK+Id0gaky+I9TpLQ317Z/sFsqp8Y= Subject key identifier: BA:2A:1E:BF:D7:CB:CC:D2:78:B7:4F:79:EF:3C:F6:4A:CB:22:28:76 Certificate issuer: /CN=91D0CB672455E2525CA585B9DB73D420AE011D8D Certificate serial: 0FFA201E3EF9238BF0EC69BC063F13C49B760366 Authority key identifier: 91:D0:CB:67:24:55:E2:52:5C:A5:85:B9:DB:73:D4:20:AE:01:1D:8D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D0CB672455E2525CA585B9DB73D420AE011D8D.cer Subject info access: rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/323830343a363432633a633030303a3a2f34382d3438203d3e20323639343131.roa Signing time: Thu 19 Jun 2025 13:13:09 +0000 ROA not before: Thu 19 Jun 2025 13:08:09 +0000 ROA not after: Thu 18 Jun 2026 13:13:09 +0000 asID: 269411 IP address blocks: 2804:642c:c000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/91D0CB672455E2525CA585B9DB73D420AE011D8D.crl rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/91D0CB672455E2525CA585B9DB73D420AE011D8D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D0CB672455E2525CA585B9DB73D420AE011D8D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 21 Jun 2025 07:37:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:fa:20:1e:3e:f9:23:8b:f0:ec:69:bc:06:3f:13:c4:9b:76:03:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91D0CB672455E2525CA585B9DB73D420AE011D8D Validity Not Before: Jun 19 13:08:09 2025 GMT Not After : Jun 18 13:13:09 2026 GMT Subject: CN=BA2A1EBFD7CBCCD278B74F79EF3CF64ACB222876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:90:18:23:b7:e7:b4:dd:1e:64:85:a1:13:47: f4:34:dc:ff:47:2f:07:a0:42:42:b6:1a:13:d3:63: 13:c0:14:dc:b1:14:6e:7d:4e:83:55:1c:b0:36:c0: 6f:40:aa:3d:d3:c8:a9:ce:6c:44:de:20:f1:2b:d6: 52:45:1e:cb:81:9e:6b:8d:0d:1d:20:88:58:fd:d4: f9:b8:f4:46:eb:d9:d9:ad:3b:54:a9:3e:2b:94:69: e1:8a:cb:96:ba:5a:d1:2c:ab:0e:d7:4c:7d:cf:54: 2d:94:30:b3:57:a3:5b:cf:6a:9f:ea:06:f7:f8:46: 47:73:2f:31:c0:b2:21:e4:90:a9:3a:d2:fe:f1:1b: f8:87:26:1a:9e:74:ec:8a:65:95:ad:b2:a5:9b:18: 5f:71:28:04:7c:2c:a2:01:fd:68:ac:b8:f5:2e:0b: 46:a5:11:bf:c7:d2:8b:68:a9:8a:08:5e:6b:fb:16: c0:f3:b1:40:d6:6b:ce:20:62:d0:96:2b:b9:d9:c1: a1:ed:20:39:b2:2b:f2:ca:ec:fe:ac:76:2e:db:3f: 1b:88:d7:2f:c6:e4:84:f6:40:6d:e3:91:05:81:7b: 04:95:08:e4:a8:90:cf:c9:58:77:d5:d4:98:65:9e: ab:72:c1:be:95:e4:cb:ab:ba:75:67:3d:22:bd:79: 5e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:2A:1E:BF:D7:CB:CC:D2:78:B7:4F:79:EF:3C:F6:4A:CB:22:28:76 X509v3 Authority Key Identifier: keyid:91:D0:CB:67:24:55:E2:52:5C:A5:85:B9:DB:73:D4:20:AE:01:1D:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/91D0CB672455E2525CA585B9DB73D420AE011D8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D0CB672455E2525CA585B9DB73D420AE011D8D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/323830343a363432633a633030303a3a2f34382d3438203d3e20323639343131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:642c:c000::/48 Signature Algorithm: sha256WithRSAEncryption a3:66:2b:01:ac:2f:7c:36:b3:19:a6:aa:b3:59:c1:3c:0e:74: 92:28:07:61:48:1c:0a:ef:2b:45:dd:7a:9a:f4:ee:81:1c:36: 8f:38:2a:e7:53:05:46:60:27:31:1b:8d:01:fc:8c:4a:9e:17: c1:7e:78:91:28:f8:bc:61:47:b8:54:2a:b4:ba:1a:9b:86:f6: e9:ab:89:43:1b:76:6b:ad:47:b2:64:d3:1d:b9:98:56:af:a5: 2d:30:43:d8:7d:e4:00:c4:26:05:80:e5:1e:95:6d:57:89:e0: d5:c7:00:9f:c9:39:e1:44:1e:87:a6:40:7f:ad:09:d8:80:60: d6:97:ba:16:7f:a4:cc:6f:d5:32:d8:dc:1a:22:2c:76:26:b5: 31:05:fa:1b:5f:36:63:84:a0:19:e1:20:12:96:66:7e:a9:54: 91:1e:8a:97:46:d9:8a:a4:48:ee:17:6f:60:98:c6:62:4d:d6: 5e:91:e5:4c:3d:84:04:53:50:5d:f7:2a:73:5d:64:53:76:a2: ab:50:7c:aa:27:c2:be:07:82:8e:76:c4:c8:9d:76:97:00:56: 2c:6d:68:80:98:ef:96:27:d7:b7:1f:49:44:a6:e4:29:18:b4: 60:73:e5:7f:a3:7c:f6:22:95:5d:6c:06:78:49:21:47:c7:40: 2e:40:47:0c -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIUD/ogHj75I4vw7Gm8Bj8TxJt2A2YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFEMENCNjcyNDU1RTI1MjVDQTU4NUI5REI3M0Q0MjBB RTAxMUQ4RDAeFw0yNTA2MTkxMzA4MDlaFw0yNjA2MTgxMzEzMDlaMDMxMTAvBgNV BAMTKEJBMkExRUJGRDdDQkNDRDI3OEI3NEY3OUVGM0NGNjRBQ0IyMjI4NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNkBgjt+e03R5khaETR/Q03P9H LwegQkK2GhPTYxPAFNyxFG59ToNVHLA2wG9Aqj3TyKnObETeIPEr1lJFHsuBnmuN DR0giFj91Pm49Ebr2dmtO1SpPiuUaeGKy5a6WtEsqw7XTH3PVC2UMLNXo1vPap/q Bvf4RkdzLzHAsiHkkKk60v7xG/iHJhqedOyKZZWtsqWbGF9xKAR8LKIB/WisuPUu C0alEb/H0otoqYoIXmv7FsDzsUDWa84gYtCWK7nZwaHtIDmyK/LK7P6sdi7bPxuI 1y/G5IT2QG3jkQWBewSVCOSokM/JWHfV1Jhlnqtywb6V5MurunVnPSK9eV6NAgMB AAGjggJcMIICWDAdBgNVHQ4EFgQUuioev9fLzNJ4t0957zz2SssiKHYwHwYDVR0j BBgwFoAUkdDLZyRV4lJcpYW523PUIK4BHY0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1FmWnJ0OUdTb1MySnRCanU0UmlRSDFxQkdrOEdSc0R5U0Q1cjVMMjhR eEUvMC85MUQwQ0I2NzI0NTVFMjUyNUNBNTg1QjlEQjczRDQyMEFFMDExRDhELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxRDBDQjY3MjQ1NUUyNTI1 Q0E1ODVCOURCNzNENDIwQUUwMTFEOEQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NRZlpydDlHU29TMkp0Qmp1NFJpUUgxcUJHazhHUnNEeVNENXI1TDI4UXhFLzAv MzIzODMwMzQzYTM2MzQzMjYzM2E2MzMwMzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNk M2UyMDMyMzYzOTM0MzEzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEZCzAADANBgkqhkiG9w0BAQsF AAOCAQEAo2YrAawvfDazGaaqs1nBPA50kigHYUgcCu8rRd16mvTugRw2jzgq51MF RmAnMRuNAfyMSp4XwX54kSj4vGFHuFQqtLoam4b26auJQxt2a61HsmTTHbmYVq+l LTBD2H3kAMQmBYDlHpVtV4ng1ccAn8k54UQeh6ZAf60J2IBg1pe6Fn+kzG/VMtjc GiIsdia1MQX6G182Y4SgGeEgEpZmfqlUkR6Kl0bZiqRI7hdvYJjGYk3WXpHlTD2E BFNQXfcqc11kU3aiq1B8qifCvgeCjnbEyJ12lwBWLG1ogJjvlifXtx9JRKbkKRi0 YHPlf6N89iKVXWwGeEkhR8dALkBHDA== -----END CERTIFICATE-----Generated at Fri Jun 20 11:01:33 2025 by rpki-client