$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a383030303a3a2f33342d3334203d3e20323632373239.roa File: 323830343a313664383a383030303a3a2f33342d3334203d3e20323632373239.roa (raw, json) Hash identifier: BxUPLEPVn0v90Y8/2+LhADmZ8CHaCsZEL9+uuHP3fpM= Subject key identifier: 2A:8A:CE:04:D3:F0:EA:61:16:B0:0F:0E:D0:38:5E:A3:9B:B0:42:1B Certificate issuer: /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017 Certificate serial: 7D9393F8BC1FE0C93992B5F245C5C3BA5CE9279F Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer Subject info access: rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a383030303a3a2f33342d3334203d3e20323632373239.roa Signing time: Mon 16 Jun 2025 14:10:48 +0000 ROA not before: Mon 16 Jun 2025 14:05:48 +0000 ROA not after: Mon 15 Jun 2026 14:10:48 +0000 asID: 262729 IP address blocks: 2804:16d8:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 20 Jun 2025 14:42:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:93:93:f8:bc:1f:e0:c9:39:92:b5:f2:45:c5:c3:ba:5c:e9:27:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017 Validity Not Before: Jun 16 14:05:48 2025 GMT Not After : Jun 15 14:10:48 2026 GMT Subject: CN=2A8ACE04D3F0EA6116B00F0ED0385EA39BB0421B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ab:3c:3c:9a:28:9d:26:62:45:7a:99:a9:00: 56:ae:71:14:f6:44:17:35:09:c5:89:25:db:1f:06: fc:ea:c4:76:b2:b1:53:d5:a8:8b:f3:f3:2e:4f:4c: bd:02:f6:fb:4d:69:39:8e:89:23:46:49:5a:37:29: 26:a2:c8:18:6d:fc:6d:ad:dc:03:de:3b:b5:a3:53: 18:66:c3:34:96:c4:e4:a8:81:f6:6a:4c:37:bd:f4: 84:02:50:ed:bf:5e:38:72:2a:4a:80:1e:40:ee:82: 1b:a6:e3:b8:f0:9d:53:80:59:19:8e:1a:87:57:46: f0:23:78:37:83:7c:3f:94:4f:81:44:f0:b9:eb:ab: 46:f8:e0:89:be:50:c1:a3:91:46:a1:6f:08:dc:06: 79:81:b7:33:96:54:be:72:ed:db:0c:bd:f0:94:5a: 71:82:a4:e0:76:b3:7d:bb:5a:8d:f1:00:ef:23:f9: 8a:0f:51:2b:ed:ca:a5:e6:2f:24:01:49:67:9d:13: d6:8b:46:e4:05:54:e3:d6:ac:4c:c3:e0:9d:0f:93: a1:eb:6d:57:7d:5d:80:a9:bd:7c:43:55:f6:5f:10: 64:ac:32:ff:cd:f5:2e:8d:13:94:c7:dd:5e:fa:7b: 89:9e:fb:b3:ad:f6:e8:58:bc:b0:c5:a1:c8:54:44: 84:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:8A:CE:04:D3:F0:EA:61:16:B0:0F:0E:D0:38:5E:A3:9B:B0:42:1B X509v3 Authority Key Identifier: keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a383030303a3a2f33342d3334203d3e20323632373239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:16d8:8000::/34 Signature Algorithm: sha256WithRSAEncryption 4d:c2:f2:b1:f0:36:1f:cf:12:96:d2:1e:2a:36:56:9d:39:a7: fd:35:b0:1e:35:e3:d4:9c:78:bc:46:b9:76:b2:8c:21:78:64: dc:ac:25:50:63:e0:c8:32:1c:0e:b6:a0:5f:b8:c1:82:0e:e7: 08:c5:b0:e4:0b:21:d6:eb:c9:f6:68:19:e7:2e:f4:a7:12:52: ec:b7:67:2c:a0:ba:2b:5b:b6:0b:e6:00:e3:70:a5:11:84:b3: 0f:bd:e5:3b:86:49:09:bc:8f:af:ee:eb:ff:3d:9b:63:61:ce: 3a:71:b8:65:d3:3e:50:4e:95:1e:af:fb:00:78:2f:37:2a:0a: f8:2e:0f:d6:8c:0c:7a:15:7a:f8:95:ed:be:bb:3e:8e:ba:79: d9:83:ff:68:ad:4c:07:bf:9a:9a:72:94:cc:fd:60:c8:a5:fa: 70:1d:1a:4c:d3:27:6b:ee:f4:49:89:67:b4:a0:dc:b1:cd:56: c1:21:36:25:a6:cb:a9:fd:c2:af:da:a1:2c:8a:74:76:1a:2c: 65:5e:8a:b8:fc:e2:08:12:61:c6:91:4c:64:b2:0c:09:39:26: 62:44:3d:bb:b2:74:7a:ea:9c:b0:d1:fd:69:9d:61:33:55:d8: ce:52:6e:ad:a2:5c:33:21:59:aa:a8:7b:6e:d7:5e:a5:7d:f9: 7c:92:3c:d0 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUfZOT+Lwf4Mk5krXyRcXDulzpJ58wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlEQjFCNThEQ0Q0NkMyRTc0NkQ4RERFQUE3RjQ5ODMz MUREQjAxNzAeFw0yNTA2MTYxNDA1NDhaFw0yNjA2MTUxNDEwNDhaMDMxMTAvBgNV BAMTKDJBOEFDRTA0RDNGMEVBNjExNkIwMEYwRUQwMzg1RUEzOUJCMDQyMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPqzw8miidJmJFepmpAFaucRT2 RBc1CcWJJdsfBvzqxHaysVPVqIvz8y5PTL0C9vtNaTmOiSNGSVo3KSaiyBht/G2t 3APeO7WjUxhmwzSWxOSogfZqTDe99IQCUO2/XjhyKkqAHkDughum47jwnVOAWRmO GodXRvAjeDeDfD+UT4FE8Lnrq0b44Im+UMGjkUahbwjcBnmBtzOWVL5y7dsMvfCU WnGCpOB2s327Wo3xAO8j+YoPUSvtyqXmLyQBSWedE9aLRuQFVOPWrEzD4J0Pk6Hr bVd9XYCpvXxDVfZfEGSsMv/N9S6NE5TH3V76e4me+7Ot9uhYvLDFochURIQHAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUKorOBNPw6mEWsA8O0Dheo5uwQhswHwYDVR0j BBgwFoAUudsbWNzUbC50bY3eqn9JgzHdsBcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDVmUEVVcmNhM21RVW9hNVVMS3pGNVB6WTdZZExVSkdXbTRiRzF0ZUZn OWsvMC9COURCMUI1OERDRDQ2QzJFNzQ2RDhEREVBQTdGNDk4MzMxRERCMDE3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5REIxQjU4RENENDZDMkU3 NDZEOERERUFBN0Y0OTgzMzFEREIwMTcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0Q1ZlBFVXJjYTNtUVVvYTVVTEt6RjVQelk3WWRMVUpHV200YkcxdGVGZzlrLzAv MzIzODMwMzQzYTMxMzY2NDM4M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzYzMjM3MzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEFtiAMA0GCSqGSIb3DQEBCwUA A4IBAQBNwvKx8DYfzxKW0h4qNladOaf9NbAeNePUnHi8Rrl2sowheGTcrCVQY+DI MhwOtqBfuMGCDucIxbDkCyHW68n2aBnnLvSnElLst2csoLorW7YL5gDjcKURhLMP veU7hkkJvI+v7uv/PZtjYc46cbhl0z5QTpUer/sAeC83Kgr4Lg/WjAx6FXr4le2+ uz6OunnZg/9orUwHv5qacpTM/WDIpfpwHRpM0ydr7vRJiWe0oNyxzVbBITYlpsup /cKv2qEsinR2GixlXoq4/OIIEmHGkUxksgwJOSZiRD27snR66pyw0f1pnWEzVdjO Um6tolwzIVmqqHtu116lffl8kjzQ -----END CERTIFICATE-----Generated at Thu Jun 19 22:52:13 2025 by rpki-client