$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a3130303a3a2f34302d3430203d3e20323632373239.roa File: 323830343a313664383a3130303a3a2f34302d3430203d3e20323632373239.roa (raw, json) Hash identifier: rZfBKuIsdOZnZs7ZWQ//ou4Ftm3uvaQ9YVH0jZklO4s= Subject key identifier: 98:F6:8D:3F:4C:AC:8E:10:CB:8C:F0:41:84:9B:40:45:44:9B:55:C3 Certificate issuer: /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017 Certificate serial: 7940DFA69D1C67E61075C8271E8DA9D34F275319 Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer Subject info access: rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a3130303a3a2f34302d3430203d3e20323632373239.roa Signing time: Mon 16 Jun 2025 14:10:46 +0000 ROA not before: Mon 16 Jun 2025 14:05:46 +0000 ROA not after: Mon 15 Jun 2026 14:10:46 +0000 asID: 262729 IP address blocks: 2804:16d8:100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 19 Jun 2025 19:18:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:40:df:a6:9d:1c:67:e6:10:75:c8:27:1e:8d:a9:d3:4f:27:53:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017 Validity Not Before: Jun 16 14:05:46 2025 GMT Not After : Jun 15 14:10:46 2026 GMT Subject: CN=98F68D3F4CAC8E10CB8CF041849B4045449B55C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e0:5f:02:41:e6:d0:69:52:34:42:ca:de:e8: f3:b2:f7:ef:45:8c:15:10:b9:fe:24:f8:c2:52:1d: 1b:bc:f4:1c:e3:fd:f6:43:f7:38:01:64:46:ab:d1: 38:0b:48:50:6e:b9:53:bf:00:eb:3e:0e:5e:55:5a: be:9c:6f:db:63:8b:92:26:13:77:73:1f:c0:92:4e: 1d:19:02:3b:56:bf:83:84:87:45:26:51:fe:46:4c: 16:80:86:83:4e:82:ed:8a:20:b5:c6:1c:96:e9:30: a6:08:c6:3f:ea:8f:ea:75:c0:fb:69:df:7d:2f:4c: 71:91:e7:3e:6e:85:fe:ce:26:2a:63:02:a9:86:9a: 89:87:d9:36:3f:c3:3e:72:9c:2a:f6:a7:0c:8a:74: 54:9c:52:43:a6:fa:d2:1c:d0:4a:05:9b:b5:3a:50: 56:6b:f1:91:d2:65:b5:89:b7:5a:b1:cc:6b:64:c0: d5:89:76:b9:b4:cb:c1:fe:69:26:23:21:33:5b:43: 5b:4e:5e:71:c9:42:d1:7f:1a:8e:8a:75:3e:7b:a9: 13:89:c4:2e:6d:3b:6b:97:61:e5:cc:b8:b4:04:a4: 23:bd:9e:79:ba:bb:2e:ed:95:2a:86:ca:9c:25:ba: f8:05:b3:69:7e:6b:e6:cc:cd:2d:1a:cc:da:3d:a5: 4a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:F6:8D:3F:4C:AC:8E:10:CB:8C:F0:41:84:9B:40:45:44:9B:55:C3 X509v3 Authority Key Identifier: keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a3130303a3a2f34302d3430203d3e20323632373239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:16d8:100::/40 Signature Algorithm: sha256WithRSAEncryption 99:b5:fe:9b:b7:73:4f:1e:55:3f:2d:a3:0b:2f:a1:66:a6:e9: 92:0b:5b:84:64:5d:53:75:95:33:33:35:43:ba:94:61:6d:5e: e4:5e:4b:30:b2:2a:ba:ba:4f:c8:41:1a:d2:1c:1d:90:fd:ae: ea:25:c6:2f:cb:9a:a5:a1:26:e6:b6:b2:79:14:e0:3d:0c:30: ae:7e:8d:8b:5c:b9:23:d4:4d:30:7f:59:4c:c9:ad:5e:48:00: 77:f6:24:95:d3:4f:25:93:0d:b4:14:97:48:d1:65:f2:31:3f: ec:5e:a2:d0:5d:ff:b7:27:48:35:15:7a:98:58:94:3e:1a:37: af:97:27:b7:75:9b:33:f6:57:de:b7:e2:0b:a3:68:2e:8e:9b: 3f:83:e7:98:92:29:23:2f:4b:76:7c:53:92:20:a5:de:25:6b: 01:7d:49:e3:db:d3:f6:40:59:49:44:a7:13:6a:30:49:6a:cb: 18:80:47:2f:e3:d3:da:72:6c:f4:e5:15:e3:95:63:71:3a:b4: c2:ae:40:06:ce:fa:b6:9a:3b:0a:5e:08:ae:86:f0:b9:57:9e: 96:32:cb:e0:4c:c2:19:4d:59:ad:f7:3f:91:f4:ad:b0:5f:80: 50:09:49:4d:29:9b:3b:b6:36:24:ef:63:f2:d7:3b:ae:b6:c1: 9f:a2:e9:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUeUDfpp0cZ+YQdcgnHo2p008nUxkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlEQjFCNThEQ0Q0NkMyRTc0NkQ4RERFQUE3RjQ5ODMz MUREQjAxNzAeFw0yNTA2MTYxNDA1NDZaFw0yNjA2MTUxNDEwNDZaMDMxMTAvBgNV BAMTKDk4RjY4RDNGNENBQzhFMTBDQjhDRjA0MTg0OUI0MDQ1NDQ5QjU1QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY4F8CQebQaVI0Qsre6POy9+9F jBUQuf4k+MJSHRu89Bzj/fZD9zgBZEar0TgLSFBuuVO/AOs+Dl5VWr6cb9tji5Im E3dzH8CSTh0ZAjtWv4OEh0UmUf5GTBaAhoNOgu2KILXGHJbpMKYIxj/qj+p1wPtp 330vTHGR5z5uhf7OJipjAqmGmomH2TY/wz5ynCr2pwyKdFScUkOm+tIc0EoFm7U6 UFZr8ZHSZbWJt1qxzGtkwNWJdrm0y8H+aSYjITNbQ1tOXnHJQtF/Go6KdT57qROJ xC5tO2uXYeXMuLQEpCO9nnm6uy7tlSqGypwluvgFs2l+a+bMzS0azNo9pUp3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUmPaNP0ysjhDLjPBBhJtARUSbVcMwHwYDVR0j BBgwFoAUudsbWNzUbC50bY3eqn9JgzHdsBcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDVmUEVVcmNhM21RVW9hNVVMS3pGNVB6WTdZZExVSkdXbTRiRzF0ZUZn OWsvMC9COURCMUI1OERDRDQ2QzJFNzQ2RDhEREVBQTdGNDk4MzMxRERCMDE3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5REIxQjU4RENENDZDMkU3 NDZEOERERUFBN0Y0OTgzMzFEREIwMTcuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0Q1ZlBFVXJjYTNtUVVvYTVVTEt6RjVQelk3WWRMVUpHV200YkcxdGVGZzlrLzAv MzIzODMwMzQzYTMxMzY2NDM4M2EzMTMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl MjAzMjM2MzIzNzMyMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBBbYATANBgkqhkiG9w0BAQsFAAOC AQEAmbX+m7dzTx5VPy2jCy+hZqbpkgtbhGRdU3WVMzM1Q7qUYW1e5F5LMLIqurpP yEEa0hwdkP2u6iXGL8uapaEm5rayeRTgPQwwrn6Ni1y5I9RNMH9ZTMmtXkgAd/Yk ldNPJZMNtBSXSNFl8jE/7F6i0F3/tydINRV6mFiUPho3r5cnt3WbM/ZX3rfiC6No Lo6bP4PnmJIpIy9LdnxTkiCl3iVrAX1J49vT9kBZSUSnE2owSWrLGIBHL+PT2nJs 9OUV45VjcTq0wq5ABs76tpo7Cl4IrobwuVeeljLL4EzCGU1Zrfc/kfStsF+AUAlJ TSmbO7Y2JO9j8tc7rrbBn6LpSw== -----END CERTIFICATE-----Generated at Wed Jun 18 20:26:21 2025 by rpki-client