$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a316430323a3a2f34382d3438203d3e20323632373239.roa File: 323830343a313664383a316430323a3a2f34382d3438203d3e20323632373239.roa (raw, json) Hash identifier: v4y3W+dKgc2lMTo6Lxlnr4UdnNxY0KaH6stfarF6Qag= Subject key identifier: B8:FD:2A:0D:78:ED:0E:BF:A7:A1:3B:C5:DA:B9:2C:56:F5:9C:C6:41 Certificate issuer: /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017 Certificate serial: 52A899DFC719A3EB5067AF689B05EB9CBD3B46B3 Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer Subject info access: rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a316430323a3a2f34382d3438203d3e20323632373239.roa Signing time: Mon 16 Jun 2025 14:10:48 +0000 ROA not before: Mon 16 Jun 2025 14:05:48 +0000 ROA not after: Mon 15 Jun 2026 14:10:48 +0000 asID: 262729 IP address blocks: 2804:16d8:1d02::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 19 Jun 2025 02:46:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:a8:99:df:c7:19:a3:eb:50:67:af:68:9b:05:eb:9c:bd:3b:46:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017 Validity Not Before: Jun 16 14:05:48 2025 GMT Not After : Jun 15 14:10:48 2026 GMT Subject: CN=B8FD2A0D78ED0EBFA7A13BC5DAB92C56F59CC641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:7d:f6:f7:d0:95:d6:9c:4e:e3:82:97:d7:9e: a5:30:d5:ef:00:d8:b2:99:9d:89:6c:b5:6e:a2:14: ed:d8:14:c2:76:53:2e:b5:c1:8f:e4:f7:09:7a:da: e4:3a:21:11:b5:ea:c9:ca:7c:1e:c1:98:f4:c3:31: 21:dd:de:fe:98:e8:de:c1:97:7a:b7:7b:77:85:fe: ce:a5:41:ae:d6:8e:98:5f:41:21:61:e8:04:fd:f3: 16:f3:2b:f4:4a:64:d9:12:dd:7e:ca:2c:d2:2b:ab: 30:f6:8c:25:8e:b4:b9:68:f0:b7:96:08:20:ec:e0: 4e:ac:61:d4:40:18:1f:6c:16:65:57:69:0e:7f:45: 7f:a3:77:96:66:d2:ea:77:b1:ae:4e:12:0a:50:2f: 32:23:be:97:20:93:01:9e:6b:1e:2a:2d:e1:f2:ef: 50:a5:04:52:ef:c9:35:67:7f:bb:53:9d:24:8b:63: 84:1b:d0:f8:84:cd:83:43:c7:73:a8:b4:6a:3a:d9: 94:41:8c:80:6a:cf:84:b3:74:2b:30:a6:f9:79:5d: 2c:e1:80:52:2c:99:60:dc:9a:31:d9:17:ed:6c:6d: 4f:bc:18:17:e4:17:02:09:da:5f:b7:9d:89:db:22: 6f:86:45:aa:d3:93:fe:6f:bb:bd:d4:cb:c9:c7:e4: 30:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:FD:2A:0D:78:ED:0E:BF:A7:A1:3B:C5:DA:B9:2C:56:F5:9C:C6:41 X509v3 Authority Key Identifier: keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a316430323a3a2f34382d3438203d3e20323632373239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:16d8:1d02::/48 Signature Algorithm: sha256WithRSAEncryption 9f:c8:cd:aa:2d:83:78:57:fe:25:e3:ee:2c:01:03:5f:ed:f8: 4f:0f:ed:5e:83:ca:e6:dd:5a:7d:ca:16:8f:9e:32:f8:6e:af: ae:70:f5:51:c5:0c:af:d1:27:9d:7d:80:91:2d:cd:06:76:e5: 4d:09:aa:6d:8a:f5:31:57:15:d0:f4:5f:c6:9d:20:fb:f6:15: 0d:80:78:47:c7:07:39:00:39:a3:16:59:c1:ef:fe:ea:f7:0b: 25:84:3b:6c:35:86:e1:02:b9:60:23:13:35:9e:2a:14:eb:89: bf:f1:bf:06:9c:fa:0c:4c:83:54:4c:90:c9:9e:90:88:b3:c2: 5e:8e:a6:63:89:2c:12:f9:55:35:39:e0:ad:02:d2:b0:31:c5: 73:91:d1:10:ff:d0:59:f5:00:1a:01:2b:2c:b4:7d:d0:8f:37: 43:b2:56:bf:9c:a8:5e:04:32:b0:b0:bf:f0:2e:18:45:4b:bb: 8e:e7:70:8e:1d:17:e2:94:86:57:8b:67:f3:3b:6a:e2:bd:61: f3:c3:6e:c3:ad:e6:16:08:73:ca:40:79:c5:7d:bd:34:62:6e: 2c:7c:36:43:de:5b:17:db:22:84:18:7f:5d:5e:ae:3a:4a:30: df:3e:6f:86:d9:8b:a3:6c:bb:ea:d9:43:b8:f9:87:96:09:53: d7:40:79:d5 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIUUqiZ38cZo+tQZ69omwXrnL07RrMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlEQjFCNThEQ0Q0NkMyRTc0NkQ4RERFQUE3RjQ5ODMz MUREQjAxNzAeFw0yNTA2MTYxNDA1NDhaFw0yNjA2MTUxNDEwNDhaMDMxMTAvBgNV BAMTKEI4RkQyQTBENzhFRDBFQkZBN0ExM0JDNURBQjkyQzU2RjU5Q0M2NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaffb30JXWnE7jgpfXnqUw1e8A 2LKZnYlstW6iFO3YFMJ2Uy61wY/k9wl62uQ6IRG16snKfB7BmPTDMSHd3v6Y6N7B l3q3e3eF/s6lQa7WjphfQSFh6AT98xbzK/RKZNkS3X7KLNIrqzD2jCWOtLlo8LeW CCDs4E6sYdRAGB9sFmVXaQ5/RX+jd5Zm0up3sa5OEgpQLzIjvpcgkwGeax4qLeHy 71ClBFLvyTVnf7tTnSSLY4Qb0PiEzYNDx3OotGo62ZRBjIBqz4SzdCswpvl5XSzh gFIsmWDcmjHZF+1sbU+8GBfkFwIJ2l+3nYnbIm+GRarTk/5vu73Uy8nH5DBzAgMB AAGjggJcMIICWDAdBgNVHQ4EFgQUuP0qDXjtDr+noTvF2rksVvWcxkEwHwYDVR0j BBgwFoAUudsbWNzUbC50bY3eqn9JgzHdsBcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDVmUEVVcmNhM21RVW9hNVVMS3pGNVB6WTdZZExVSkdXbTRiRzF0ZUZn OWsvMC9COURCMUI1OERDRDQ2QzJFNzQ2RDhEREVBQTdGNDk4MzMxRERCMDE3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5REIxQjU4RENENDZDMkU3 NDZEOERERUFBN0Y0OTgzMzFEREIwMTcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0Q1ZlBFVXJjYTNtUVVvYTVVTEt6RjVQelk3WWRMVUpHV200YkcxdGVGZzlrLzAv MzIzODMwMzQzYTMxMzY2NDM4M2EzMTY0MzAzMjNhM2EyZjM0MzgyZDM0MzgyMDNk M2UyMDMyMzYzMjM3MzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEFtgdAjANBgkqhkiG9w0BAQsF AAOCAQEAn8jNqi2DeFf+JePuLAEDX+34Tw/tXoPK5t1afcoWj54y+G6vrnD1UcUM r9EnnX2AkS3NBnblTQmqbYr1MVcV0PRfxp0g+/YVDYB4R8cHOQA5oxZZwe/+6vcL JYQ7bDWG4QK5YCMTNZ4qFOuJv/G/Bpz6DEyDVEyQyZ6QiLPCXo6mY4ksEvlVNTng rQLSsDHFc5HREP/QWfUAGgErLLR90I83Q7JWv5yoXgQysLC/8C4YRUu7judwjh0X 4pSGV4tn8ztq4r1h88Nuw63mFghzykB5xX29NGJuLHw2Q95bF9sihBh/XV6uOkow 3z5vhtmLo2y76tlDuPmHlglT10B51Q== -----END CERTIFICATE-----Generated at Wed Jun 18 17:22:00 2025 by rpki-client