$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a353030303a3a2f33372d3337203d3e20323632373239.roa File: 323830343a313664383a353030303a3a2f33372d3337203d3e20323632373239.roa (raw, json) Hash identifier: cGDwFHgU9BR9/yYbvmt+vAqXtLUx2S1zJO5ih5fIOKc= Subject key identifier: 47:73:E8:57:14:A2:64:DD:4C:D7:63:D9:66:C4:5F:3E:3A:71:22:2F Certificate issuer: /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017 Certificate serial: 5D741DA44F0E43677135DE5B15A09EB309AF0E13 Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer Subject info access: rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a353030303a3a2f33372d3337203d3e20323632373239.roa Signing time: Mon 16 Jun 2025 14:10:47 +0000 ROA not before: Mon 16 Jun 2025 14:05:47 +0000 ROA not after: Mon 15 Jun 2026 14:10:47 +0000 asID: 262729 IP address blocks: 2804:16d8:5000::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 19 Jun 2025 02:46:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:74:1d:a4:4f:0e:43:67:71:35:de:5b:15:a0:9e:b3:09:af:0e:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017 Validity Not Before: Jun 16 14:05:47 2025 GMT Not After : Jun 15 14:10:47 2026 GMT Subject: CN=4773E85714A264DD4CD763D966C45F3E3A71222F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ee:5c:34:d5:e4:da:b4:ea:f4:cd:cf:74:05: c5:83:96:f6:ba:cd:5e:c4:c9:ba:9c:fb:df:13:08: 93:80:3c:5d:f1:73:5a:ef:b4:c7:6d:6f:ce:0b:ec: 9a:f5:58:b4:72:7a:50:15:9f:15:32:c3:eb:89:cc: fd:58:0a:a7:d1:3c:80:98:a1:24:9b:a8:52:ab:d2: 67:94:2a:64:f2:de:8f:b9:c6:72:da:fb:04:38:4c: 26:9f:a8:78:46:31:8a:73:49:11:c7:33:85:b9:9a: 75:e4:fe:92:05:b4:13:f9:92:de:f8:5a:75:c4:61: b6:1c:2a:ee:0a:8e:be:e7:4a:1a:24:b8:ab:7f:76: bd:bf:39:22:1c:e0:6e:b2:8a:bc:c6:c6:c4:52:14: 27:ba:2d:db:77:48:b4:50:3e:df:d6:c5:d7:b0:4c: a6:0a:a3:fd:1b:76:4a:cf:27:ef:cc:08:92:59:1d: 92:8b:fc:ed:f0:66:6f:b4:b2:a7:8b:97:6a:aa:10: 63:30:1d:9c:1a:84:b1:61:fc:8a:02:93:1d:4d:f3: b8:f9:f2:30:d8:16:ab:d0:9c:db:57:b9:ff:4e:03: d0:0b:fb:0b:36:5e:1d:d8:73:60:ee:fe:49:2a:84: 66:d7:83:2e:6b:37:c1:ea:c3:60:58:0c:7b:93:64: a9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:73:E8:57:14:A2:64:DD:4C:D7:63:D9:66:C4:5F:3E:3A:71:22:2F X509v3 Authority Key Identifier: keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a353030303a3a2f33372d3337203d3e20323632373239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:16d8:5000::/37 Signature Algorithm: sha256WithRSAEncryption 61:00:2c:5a:fc:04:af:7f:ae:54:57:df:0f:72:ad:01:18:40: bd:06:b0:92:e0:2e:b1:fe:1c:ed:46:15:71:30:f3:cb:85:87: 46:54:92:b3:77:39:03:3c:b2:55:4f:4d:fe:88:48:d2:34:16: 11:a2:3a:10:8b:fc:dd:2c:a5:1c:e7:41:29:fd:ad:d6:77:f5: 3b:c0:ac:93:22:1b:c2:23:1a:15:df:e0:1d:7c:3e:06:e4:07: 40:c4:07:e6:8d:99:e2:28:f4:86:eb:93:6d:1d:08:f7:73:d8: 5b:3d:34:46:21:40:d3:e2:73:4a:36:5d:29:d2:81:69:df:94: 4e:9d:84:f7:94:06:4c:84:f6:8e:c6:c8:2e:d7:5c:7b:dc:0b: b1:c0:0b:6c:d2:3a:0d:02:42:dd:3d:1a:77:8a:4e:c8:3b:79: 01:5d:94:a0:4c:2d:d4:46:20:cc:f8:1c:fd:bf:8c:87:69:59: 35:ff:7d:a0:55:b2:a9:98:e8:7e:a7:bc:ce:43:a5:76:54:44: 9b:55:be:ed:5a:2d:b7:27:4c:df:4f:5c:8f:c2:92:44:df:3f: 6f:7d:74:b9:a5:0f:aa:49:07:e6:79:b8:2a:5a:20:fc:a7:c5: 8f:b6:92:05:c7:2f:cf:44:4c:08:0f:a4:7f:95:42:4b:eb:66: f6:1b:3a:ab -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUXXQdpE8OQ2dxNd5bFaCeswmvDhMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlEQjFCNThEQ0Q0NkMyRTc0NkQ4RERFQUE3RjQ5ODMz MUREQjAxNzAeFw0yNTA2MTYxNDA1NDdaFw0yNjA2MTUxNDEwNDdaMDMxMTAvBgNV BAMTKDQ3NzNFODU3MTRBMjY0REQ0Q0Q3NjNEOTY2QzQ1RjNFM0E3MTIyMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI7lw01eTatOr0zc90BcWDlva6 zV7Eybqc+98TCJOAPF3xc1rvtMdtb84L7Jr1WLRyelAVnxUyw+uJzP1YCqfRPICY oSSbqFKr0meUKmTy3o+5xnLa+wQ4TCafqHhGMYpzSRHHM4W5mnXk/pIFtBP5kt74 WnXEYbYcKu4Kjr7nShokuKt/dr2/OSIc4G6yirzGxsRSFCe6Ldt3SLRQPt/Wxdew TKYKo/0bdkrPJ+/MCJJZHZKL/O3wZm+0sqeLl2qqEGMwHZwahLFh/IoCkx1N87j5 8jDYFqvQnNtXuf9OA9AL+ws2Xh3Yc2Du/kkqhGbXgy5rN8Hqw2BYDHuTZKn1AgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUR3PoVxSiZN1M12PZZsRfPjpxIi8wHwYDVR0j BBgwFoAUudsbWNzUbC50bY3eqn9JgzHdsBcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDVmUEVVcmNhM21RVW9hNVVMS3pGNVB6WTdZZExVSkdXbTRiRzF0ZUZn OWsvMC9COURCMUI1OERDRDQ2QzJFNzQ2RDhEREVBQTdGNDk4MzMxRERCMDE3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5REIxQjU4RENENDZDMkU3 NDZEOERERUFBN0Y0OTgzMzFEREIwMTcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0Q1ZlBFVXJjYTNtUVVvYTVVTEt6RjVQelk3WWRMVUpHV200YkcxdGVGZzlrLzAv MzIzODMwMzQzYTMxMzY2NDM4M2EzNTMwMzAzMDNhM2EyZjMzMzcyZDMzMzcyMDNk M2UyMDMyMzYzMjM3MzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAygEFthQMA0GCSqGSIb3DQEBCwUA A4IBAQBhACxa/ASvf65UV98Pcq0BGEC9BrCS4C6x/hztRhVxMPPLhYdGVJKzdzkD PLJVT03+iEjSNBYRojoQi/zdLKUc50Ep/a3Wd/U7wKyTIhvCIxoV3+AdfD4G5AdA xAfmjZniKPSG65NtHQj3c9hbPTRGIUDT4nNKNl0p0oFp35ROnYT3lAZMhPaOxsgu 11x73AuxwAts0joNAkLdPRp3ik7IO3kBXZSgTC3URiDM+Bz9v4yHaVk1/32gVbKp mOh+p7zOQ6V2VESbVb7tWi23J0zfT1yPwpJE3z9vfXS5pQ+qSQfmebgqWiD8p8WP tpIFxy/PREwID6R/lUJL62b2Gzqr -----END CERTIFICATE-----Generated at Wed Jun 18 17:12:03 2025 by rpki-client