$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a313030303a3a2f33382d3338203d3e20323632373239.roa File: 323830343a313664383a313030303a3a2f33382d3338203d3e20323632373239.roa (raw, json) Hash identifier: 5x680eOTI+BXOPNotpgkNZlxbRS2s/eyX0l/lxIk+3I= Subject key identifier: 71:BE:24:B4:98:42:51:C5:46:E1:61:A5:B8:21:C1:40:EA:DA:BD:A1 Certificate issuer: /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017 Certificate serial: 6CC642FCE0C97C19141DA388C71D2626A54EC944 Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer Subject info access: rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a313030303a3a2f33382d3338203d3e20323632373239.roa Signing time: Mon 16 Jun 2025 14:10:47 +0000 ROA not before: Mon 16 Jun 2025 14:05:47 +0000 ROA not after: Mon 15 Jun 2026 14:10:47 +0000 asID: 262729 IP address blocks: 2804:16d8:1000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 19 Jun 2025 19:18:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:c6:42:fc:e0:c9:7c:19:14:1d:a3:88:c7:1d:26:26:a5:4e:c9:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017 Validity Not Before: Jun 16 14:05:47 2025 GMT Not After : Jun 15 14:10:47 2026 GMT Subject: CN=71BE24B4984251C546E161A5B821C140EADABDA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e2:38:8e:ab:2f:1d:b2:8c:a6:58:ea:8f:61: f2:a5:c9:8d:35:0f:44:d2:d7:ce:bb:2c:69:4d:92: c1:9a:9d:bd:91:27:71:95:60:87:24:b1:f8:73:28: 67:c0:45:b5:6d:28:b2:a9:0c:8d:52:3f:e6:39:66: b4:ae:78:e5:0b:f0:1f:e3:13:97:28:5a:67:8e:d8: 56:d3:a8:74:bd:d6:cc:4b:fb:a4:8d:87:d7:f3:94: 6b:c9:1c:ae:99:62:cd:20:09:e7:e8:ad:dc:ec:9b: cf:9e:c0:c3:a0:92:49:2b:a7:ca:d7:03:83:0e:8b: c8:12:6f:55:00:a7:3a:d3:35:6d:e3:03:2d:2b:26: 4d:4c:6a:ad:2b:a0:96:f2:79:cf:f9:f4:2c:f3:37: 57:a5:34:35:14:eb:13:f5:e3:05:20:18:e3:0c:38: c0:a5:98:40:1f:00:08:45:90:49:5c:86:77:4a:8d: 22:57:e8:10:ce:21:e5:c2:9f:aa:39:c7:9f:2b:45: 83:08:61:b0:60:32:f1:d3:76:8e:3a:21:98:8a:a9: 40:0f:bf:16:63:d9:c6:ca:08:81:09:47:92:f0:00: 0c:61:aa:59:7a:52:8f:bc:f6:47:6c:c5:9f:0e:b4: d6:97:6c:e6:90:45:46:ca:75:cd:3f:0f:8a:c8:eb: 55:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:BE:24:B4:98:42:51:C5:46:E1:61:A5:B8:21:C1:40:EA:DA:BD:A1 X509v3 Authority Key Identifier: keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a313030303a3a2f33382d3338203d3e20323632373239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:16d8:1000::/38 Signature Algorithm: sha256WithRSAEncryption 04:d8:2a:69:bf:37:35:a3:31:b3:c4:49:1a:31:73:22:ae:52: 29:00:04:74:4c:3e:a9:67:ae:82:ed:74:ee:95:85:e9:a9:d7: 36:1d:b4:77:ed:40:07:1a:fd:72:19:97:a4:a4:14:79:93:31: a5:88:89:02:0c:f4:37:4f:c3:22:16:db:1a:5e:35:a4:dd:9d: 3b:7b:50:3e:b5:a5:76:c4:f8:1d:cd:e2:f0:c1:d4:d2:2c:16: 1e:01:68:cc:68:58:15:43:b2:df:c4:6f:23:b7:3a:97:da:98: 8c:53:8c:40:b4:55:a5:d4:4f:c9:21:c0:d3:4e:a8:0a:56:9b: 99:0a:cc:88:b5:41:17:e7:28:e1:9c:bb:c2:36:32:a4:c2:f2: 59:c2:14:b3:80:f0:31:53:65:ed:21:61:2f:58:03:b7:2a:62: 0e:02:cb:23:e9:6b:f1:28:72:a6:69:05:34:17:d8:dd:2e:a1: 9a:de:bd:4e:39:10:81:18:83:28:74:b7:8c:6a:f6:4f:bf:a3: 14:b3:af:ed:50:40:ab:83:e4:d7:17:77:6e:27:19:b1:d1:f6: ea:e6:e1:10:79:c3:9c:8e:29:55:d3:29:fb:57:d5:17:cb:a6: 42:0c:db:8e:c1:66:9f:62:06:3a:79:b0:ae:97:d1:cc:01:fd: 91:ba:1a:cd -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUbMZC/ODJfBkUHaOIxx0mJqVOyUQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlEQjFCNThEQ0Q0NkMyRTc0NkQ4RERFQUE3RjQ5ODMz MUREQjAxNzAeFw0yNTA2MTYxNDA1NDdaFw0yNjA2MTUxNDEwNDdaMDMxMTAvBgNV BAMTKDcxQkUyNEI0OTg0MjUxQzU0NkUxNjFBNUI4MjFDMTQwRUFEQUJEQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI4jiOqy8dsoymWOqPYfKlyY01 D0TS1867LGlNksGanb2RJ3GVYIcksfhzKGfARbVtKLKpDI1SP+Y5ZrSueOUL8B/j E5coWmeO2FbTqHS91sxL+6SNh9fzlGvJHK6ZYs0gCefordzsm8+ewMOgkkkrp8rX A4MOi8gSb1UApzrTNW3jAy0rJk1Maq0roJbyec/59CzzN1elNDUU6xP14wUgGOMM OMClmEAfAAhFkElchndKjSJX6BDOIeXCn6o5x58rRYMIYbBgMvHTdo46IZiKqUAP vxZj2cbKCIEJR5LwAAxhqll6Uo+89kdsxZ8OtNaXbOaQRUbKdc0/D4rI61XlAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUcb4ktJhCUcVG4WGluCHBQOravaEwHwYDVR0j BBgwFoAUudsbWNzUbC50bY3eqn9JgzHdsBcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDVmUEVVcmNhM21RVW9hNVVMS3pGNVB6WTdZZExVSkdXbTRiRzF0ZUZn OWsvMC9COURCMUI1OERDRDQ2QzJFNzQ2RDhEREVBQTdGNDk4MzMxRERCMDE3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5REIxQjU4RENENDZDMkU3 NDZEOERERUFBN0Y0OTgzMzFEREIwMTcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0Q1ZlBFVXJjYTNtUVVvYTVVTEt6RjVQelk3WWRMVUpHV200YkcxdGVGZzlrLzAv MzIzODMwMzQzYTMxMzY2NDM4M2EzMTMwMzAzMDNhM2EyZjMzMzgyZDMzMzgyMDNk M2UyMDMyMzYzMjM3MzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAigEFtgQMA0GCSqGSIb3DQEBCwUA A4IBAQAE2Cppvzc1ozGzxEkaMXMirlIpAAR0TD6pZ66C7XTulYXpqdc2HbR37UAH Gv1yGZekpBR5kzGliIkCDPQ3T8MiFtsaXjWk3Z07e1A+taV2xPgdzeLwwdTSLBYe AWjMaFgVQ7LfxG8jtzqX2piMU4xAtFWl1E/JIcDTTqgKVpuZCsyItUEX5yjhnLvC NjKkwvJZwhSzgPAxU2XtIWEvWAO3KmIOAssj6WvxKHKmaQU0F9jdLqGa3r1OORCB GIModLeMavZPv6MUs6/tUECrg+TXF3duJxmx0fbq5uEQecOcjilV0yn7V9UXy6ZC DNuOwWafYgY6ebCul9HMAf2RuhrN -----END CERTIFICATE-----Generated at Thu Jun 19 09:55:19 2025 by rpki-client