$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a633030303a3a2f33342d3334203d3e20323632373239.roa File: 323830343a313664383a633030303a3a2f33342d3334203d3e20323632373239.roa (raw, json) Hash identifier: KK8tjl2cgJ7PYn8DtxI1iyVn7x3lp72cyj79HlGZ05E= Subject key identifier: 12:8D:45:56:EF:47:A7:43:9E:D2:B2:3D:F4:8F:83:56:1B:F1:91:5F Certificate issuer: /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017 Certificate serial: 01678DBEEC51EBC79BDDAB26769EFCB53990A126 Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer Subject info access: rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a633030303a3a2f33342d3334203d3e20323632373239.roa Signing time: Mon 16 Jun 2025 14:10:47 +0000 ROA not before: Mon 16 Jun 2025 14:05:47 +0000 ROA not after: Mon 15 Jun 2026 14:10:47 +0000 asID: 262729 IP address blocks: 2804:16d8:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 21 Jun 2025 07:38:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:67:8d:be:ec:51:eb:c7:9b:dd:ab:26:76:9e:fc:b5:39:90:a1:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017 Validity Not Before: Jun 16 14:05:47 2025 GMT Not After : Jun 15 14:10:47 2026 GMT Subject: CN=128D4556EF47A7439ED2B23DF48F83561BF1915F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:85:4b:68:b6:5c:14:c5:25:ec:7f:56:da:c5: 2f:d3:8d:f8:44:07:f7:64:1e:98:1a:df:6e:d5:c1: 3e:2d:25:59:8e:68:ef:2b:c6:c9:6c:67:97:ac:80: 4d:30:e0:b9:50:63:4a:aa:5b:f8:ea:19:81:62:69: 64:ec:0b:3f:97:b0:8f:19:60:25:db:63:71:da:31: 40:f4:33:1b:93:72:29:ba:a4:c3:bd:2f:60:4a:74: 15:60:ef:56:62:6d:3a:49:48:3e:b9:d6:ff:fc:6d: 6b:4a:3d:fb:62:21:bc:84:7b:7b:3e:e8:b2:11:77: e5:a5:b8:34:38:07:ca:63:cb:b2:c7:61:16:f4:b4: 63:75:86:9e:bc:a5:88:f4:ca:3f:f9:0e:5a:cd:3c: 8b:59:d7:92:ca:5e:22:fe:40:49:5b:7e:6a:e3:c3: 09:aa:b8:a2:d7:87:ad:af:05:1c:f6:f5:ae:ce:6e: 55:0f:5c:be:a8:02:7f:7d:67:06:8a:51:ab:79:a7: c0:fc:cb:a0:be:da:d0:9b:f6:e1:95:ff:ad:8a:d9: cb:28:01:ec:79:52:27:7a:80:ab:f3:97:ca:1b:68: 0e:24:f6:14:5f:d9:bc:a6:a3:41:53:29:1b:b2:6d: 33:77:48:b7:cf:36:f2:ae:c4:14:03:93:1a:b6:47: cd:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:8D:45:56:EF:47:A7:43:9E:D2:B2:3D:F4:8F:83:56:1B:F1:91:5F X509v3 Authority Key Identifier: keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a633030303a3a2f33342d3334203d3e20323632373239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:16d8:c000::/34 Signature Algorithm: sha256WithRSAEncryption 50:95:c6:fe:78:6a:60:15:ad:9e:a3:38:f2:60:ad:02:ef:1b: 6b:59:02:d0:de:4f:7b:2a:94:46:f1:d2:79:b6:ac:56:dc:2a: 47:ce:56:f8:8a:d1:1f:c9:b7:e2:51:b5:f4:9a:6d:a4:62:a9: 9e:6d:0f:0c:55:a9:02:e9:1b:63:53:3b:21:d1:49:eb:e4:72: dc:da:8b:46:47:23:d8:ef:27:4e:a0:ca:b7:b6:b7:ae:e0:ef: 60:d5:98:a6:7f:c8:d0:03:d7:6d:2e:1f:3a:25:bd:dc:cf:07: 8b:0e:f1:42:49:4d:d7:d3:03:90:20:76:72:98:17:f8:71:d3: 01:96:39:9f:97:bd:9e:da:d9:7b:f8:40:5a:c2:59:2b:9e:1e: 5c:76:33:38:38:05:92:75:48:40:c4:73:2b:7f:c3:78:8d:aa: 38:5f:e2:f9:b6:f2:4b:63:1c:6a:87:be:fe:29:34:9c:d4:4d: 30:84:a1:98:ff:64:19:1d:05:1c:d6:23:36:11:72:a9:0a:d1: 37:fc:e0:7b:b2:19:e9:8e:e3:95:66:73:63:73:21:9a:5e:0c: 1d:ee:72:ed:01:99:03:c3:18:ea:c6:d2:02:4e:1d:d6:2b:b8: a0:fd:8d:3b:30:30:b7:e6:67:92:d7:7d:42:72:5b:6c:57:0c: 47:e2:fd:cc -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUAWeNvuxR68eb3asmdp78tTmQoSYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlEQjFCNThEQ0Q0NkMyRTc0NkQ4RERFQUE3RjQ5ODMz MUREQjAxNzAeFw0yNTA2MTYxNDA1NDdaFw0yNjA2MTUxNDEwNDdaMDMxMTAvBgNV BAMTKDEyOEQ0NTU2RUY0N0E3NDM5RUQyQjIzREY0OEY4MzU2MUJGMTkxNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNhUtotlwUxSXsf1baxS/TjfhE B/dkHpga327VwT4tJVmOaO8rxslsZ5esgE0w4LlQY0qqW/jqGYFiaWTsCz+XsI8Z YCXbY3HaMUD0MxuTcim6pMO9L2BKdBVg71ZibTpJSD651v/8bWtKPftiIbyEe3s+ 6LIRd+WluDQ4B8pjy7LHYRb0tGN1hp68pYj0yj/5DlrNPItZ15LKXiL+QElbfmrj wwmquKLXh62vBRz29a7OblUPXL6oAn99ZwaKUat5p8D8y6C+2tCb9uGV/62K2cso Aex5Uid6gKvzl8obaA4k9hRf2bymo0FTKRuybTN3SLfPNvKuxBQDkxq2R81zAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUEo1FVu9Hp0Oe0rI99I+DVhvxkV8wHwYDVR0j BBgwFoAUudsbWNzUbC50bY3eqn9JgzHdsBcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDVmUEVVcmNhM21RVW9hNVVMS3pGNVB6WTdZZExVSkdXbTRiRzF0ZUZn OWsvMC9COURCMUI1OERDRDQ2QzJFNzQ2RDhEREVBQTdGNDk4MzMxRERCMDE3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5REIxQjU4RENENDZDMkU3 NDZEOERERUFBN0Y0OTgzMzFEREIwMTcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0Q1ZlBFVXJjYTNtUVVvYTVVTEt6RjVQelk3WWRMVUpHV200YkcxdGVGZzlrLzAv MzIzODMwMzQzYTMxMzY2NDM4M2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzYzMjM3MzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEFtjAMA0GCSqGSIb3DQEBCwUA A4IBAQBQlcb+eGpgFa2eozjyYK0C7xtrWQLQ3k97KpRG8dJ5tqxW3CpHzlb4itEf ybfiUbX0mm2kYqmebQ8MVakC6RtjUzsh0Unr5HLc2otGRyPY7ydOoMq3treu4O9g 1Zimf8jQA9dtLh86Jb3czweLDvFCSU3X0wOQIHZymBf4cdMBljmfl72e2tl7+EBa wlkrnh5cdjM4OAWSdUhAxHMrf8N4jao4X+L5tvJLYxxqh77+KTSc1E0whKGY/2QZ HQUc1iM2EXKpCtE3/OB7shnpjuOVZnNjcyGaXgwd7nLtAZkDwxjqxtICTh3WK7ig /Y07MDC35meS131CcltsVwxH4v3M -----END CERTIFICATE-----Generated at Fri Jun 20 08:55:04 2025 by rpki-client