$ rpki-client -vvf rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/323830343a323539633a3130303a3a2f34302d3430203d3e203532373732.roa File: 323830343a323539633a3130303a3a2f34302d3430203d3e203532373732.roa (raw, json) Hash identifier: o9mdCfi1BkUL4KnVcck/VyVkt65bxujXA0YL62dKdug= Subject key identifier: 92:CF:FA:98:2A:53:56:D5:78:A7:5E:99:34:9B:DC:04:B8:B5:FC:A7 Certificate issuer: /CN=32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9 Certificate serial: 2E3462A0DDAF49023923F80EE8E3B5F6A48104DB Authority key identifier: 32:F6:AC:3D:8F:50:6B:DC:EC:81:2B:DF:D2:CF:B3:31:A2:51:EA:C9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9.cer Subject info access: rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/323830343a323539633a3130303a3a2f34302d3430203d3e203532373732.roa Signing time: Fri 14 Feb 2025 17:47:31 +0000 ROA not before: Fri 14 Feb 2025 17:42:31 +0000 ROA not after: Fri 13 Feb 2026 17:47:31 +0000 asID: 52772 IP address blocks: 2804:259c:100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9.crl rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 03 May 2025 06:17:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:34:62:a0:dd:af:49:02:39:23:f8:0e:e8:e3:b5:f6:a4:81:04:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9 Validity Not Before: Feb 14 17:42:31 2025 GMT Not After : Feb 13 17:47:31 2026 GMT Subject: CN=92CFFA982A5356D578A75E99349BDC04B8B5FCA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ad:73:b6:84:4f:e6:8d:b3:97:6c:5c:2f:d8: 0e:24:b0:cc:46:c3:fe:21:6f:c8:4d:bd:4f:08:b5: 03:75:eb:51:fd:f4:c0:e4:d1:0a:7e:ee:47:9b:b0: b5:c2:79:5d:16:ad:9e:57:9e:67:87:fb:c8:61:75: 14:53:4c:18:c0:9c:90:bb:c3:9e:55:33:80:32:ac: e9:f4:7d:93:2d:7e:fb:57:74:8c:53:14:9a:67:7e: 7c:00:20:7d:cb:56:92:a3:18:d9:63:e0:cd:1d:4a: 09:91:b8:de:91:fa:8f:24:5e:a0:73:e9:87:fc:e2: fb:70:73:22:aa:b9:ea:d1:fd:18:24:01:71:0f:85: a8:f3:9f:e0:be:b0:c8:a8:ca:b6:be:dd:1d:a7:ed: 01:32:78:bf:67:d4:b4:92:7f:03:80:df:e1:7d:ca: 7e:40:fc:e6:8f:c5:5f:24:5d:18:39:31:8e:e4:9f: 07:50:d5:a8:24:7e:5e:10:40:cf:6c:27:f3:16:99: d0:c6:38:37:c1:00:12:71:5a:7d:de:5a:fa:9f:66: 0b:98:8f:62:5f:41:dc:c8:49:b8:02:4f:a1:01:f5: 80:81:f9:f3:8b:de:40:68:f9:95:42:72:e8:79:8f: 7a:1d:54:1d:55:4c:88:cf:4a:46:aa:7a:95:24:b4: 05:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:CF:FA:98:2A:53:56:D5:78:A7:5E:99:34:9B:DC:04:B8:B5:FC:A7 X509v3 Authority Key Identifier: keyid:32:F6:AC:3D:8F:50:6B:DC:EC:81:2B:DF:D2:CF:B3:31:A2:51:EA:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/323830343a323539633a3130303a3a2f34302d3430203d3e203532373732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:259c:100::/40 Signature Algorithm: sha256WithRSAEncryption 20:bf:89:5f:93:19:bc:82:e7:e0:50:c2:15:5d:84:dd:26:ed: d2:5b:9d:a8:bd:bb:4a:3a:13:30:eb:d5:7d:c9:55:ca:40:ed: 87:31:b4:71:d0:6e:2e:36:45:b7:70:55:d4:32:6a:1d:63:15: ae:ed:5e:43:f6:52:3e:90:fc:07:8c:e6:1e:3f:84:a6:b2:0d: 4f:ca:5e:56:23:ac:62:93:3c:52:e5:12:e4:02:4b:f6:e5:46: 96:a2:44:da:4d:e8:d8:b3:43:26:a7:db:6e:39:19:e8:0b:c6: cd:3f:7f:14:89:82:d7:46:df:92:f9:46:fa:bc:c5:9d:22:b8: 19:85:6a:19:e1:d8:a0:62:7c:d9:1d:8b:0d:e4:2b:fd:a5:77: 4d:29:60:76:34:6b:1a:94:02:74:c0:da:7e:5f:5d:52:76:48: 57:f5:15:57:87:53:d8:50:9c:d1:3e:1f:e0:c1:99:37:39:2a: 45:a0:81:be:5a:f2:61:3b:54:89:80:bc:da:c8:ee:57:9c:3f: 43:64:62:c2:34:54:06:31:c0:b5:89:d1:66:00:74:ac:a3:a8: 83:a7:ff:a0:2a:21:50:c7:8c:ab:c9:8b:fc:f9:0b:db:af:de: a0:1a:ec:08:25:6a:b8:07:46:6b:cf:a1:7b:bb:cb:bf:23:a9: f0:ef:dd:00 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgIULjRioN2vSQI5I/gO6OO19qSBBNswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJGNkFDM0Q4RjUwNkJEQ0VDODEyQkRGRDJDRkIzMzFB MjUxRUFDOTAeFw0yNTAyMTQxNzQyMzFaFw0yNjAyMTMxNzQ3MzFaMDMxMTAvBgNV BAMTKDkyQ0ZGQTk4MkE1MzU2RDU3OEE3NUU5OTM0OUJEQzA0QjhCNUZDQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCarXO2hE/mjbOXbFwv2A4ksMxG w/4hb8hNvU8ItQN161H99MDk0Qp+7kebsLXCeV0WrZ5XnmeH+8hhdRRTTBjAnJC7 w55VM4AyrOn0fZMtfvtXdIxTFJpnfnwAIH3LVpKjGNlj4M0dSgmRuN6R+o8kXqBz 6Yf84vtwcyKquerR/RgkAXEPhajzn+C+sMioyra+3R2n7QEyeL9n1LSSfwOA3+F9 yn5A/OaPxV8kXRg5MY7knwdQ1agkfl4QQM9sJ/MWmdDGODfBABJxWn3eWvqfZguY j2JfQdzISbgCT6EB9YCB+fOL3kBo+ZVCcuh5j3odVB1VTIjPSkaqepUktAW7AgMB AAGjggJXMIICUzAdBgNVHQ4EFgQUks/6mCpTVtV4p16ZNJvcBLi1/KcwHwYDVR0j BBgwFoAUMvasPY9Qa9zsgSvf0s+zMaJR6skwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDN4NHB3cmprSHY4Mm0xZ3hUS25wdjhKNXg0U0NKZk1iVUt5TldpUGR4 VGYvMC8zMkY2QUMzRDhGNTA2QkRDRUM4MTJCREZEMkNGQjMzMUEyNTFFQUM5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMyRjZBQzNEOEY1MDZCRENF QzgxMkJERkQyQ0ZCMzMxQTI1MUVBQzkuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0QzeDRwd3Jqa0h2ODJtMWd4VEtucHY4SjV4NFNDSmZNYlVLeU5XaVBkeFRmLzAv MzIzODMwMzQzYTMyMzUzOTYzM2EzMTMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl MjAzNTMyMzczNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG AQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKAQlnAEwDQYJKoZIhvcNAQELBQADggEB ACC/iV+TGbyC5+BQwhVdhN0m7dJbnai9u0o6EzDr1X3JVcpA7YcxtHHQbi42Rbdw VdQyah1jFa7tXkP2Uj6Q/AeM5h4/hKayDU/KXlYjrGKTPFLlEuQCS/blRpaiRNpN 6NizQyan2245GegLxs0/fxSJgtdG35L5Rvq8xZ0iuBmFahnh2KBifNkdiw3kK/2l d00pYHY0axqUAnTA2n5fXVJ2SFf1FVeHU9hQnNE+H+DBmTc5KkWggb5a8mE7VImA vNrI7lecP0NkYsI0VAYxwLWJ0WYAdKyjqIOn/6AqIVDHjKvJi/z5C9uv3qAa7Agl argHRmvPoXu7y78jqfDv3QA= -----END CERTIFICATE-----Generated at Fri May 2 15:41:09 2025 by rpki-client