$ rpki-client -vvf rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/323830343a363434303a633030303a3a2f33342d3334203d3e20323639343136.roa File: 323830343a363434303a633030303a3a2f33342d3334203d3e20323639343136.roa (raw, json) Hash identifier: SuOCokOyVd4qy54GILLK0wTq8N2+3dyPm61KDBscTP0= Subject key identifier: 19:68:9A:7C:E9:11:A7:48:08:98:8E:10:21:04:99:A9:BD:36:E0:D4 Certificate issuer: /CN=8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2 Certificate serial: 10F1E8EFBFC980BC3B3744B720347725C1B90055 Authority key identifier: 8A:B2:A3:D9:66:16:CA:30:40:EC:FC:C3:0E:C8:98:EF:F6:8B:CD:C2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.cer Subject info access: rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/323830343a363434303a633030303a3a2f33342d3334203d3e20323639343136.roa Signing time: Thu 24 Apr 2025 13:44:40 +0000 ROA not before: Thu 24 Apr 2025 13:39:40 +0000 ROA not after: Thu 23 Apr 2026 13:44:40 +0000 asID: 269416 IP address blocks: 2804:6440:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.crl rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 30 Apr 2025 23:24:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:f1:e8:ef:bf:c9:80:bc:3b:37:44:b7:20:34:77:25:c1:b9:00:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2 Validity Not Before: Apr 24 13:39:40 2025 GMT Not After : Apr 23 13:44:40 2026 GMT Subject: CN=19689A7CE911A74808988E10210499A9BD36E0D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ee:17:f5:4e:96:37:fa:3e:d1:b1:ec:55:cb: e7:b3:9f:bd:19:12:d4:5f:28:e4:e9:27:eb:67:34: a1:75:7e:98:af:41:1d:46:bb:10:16:b5:03:32:dc: 10:fb:6e:91:04:33:ab:5b:67:aa:e0:e6:30:7c:a9: 7e:a2:d7:32:9d:6c:3e:e5:3f:2d:65:74:c5:8f:dc: 65:0d:b7:57:a6:4f:be:b3:3e:b6:bb:b5:5b:0d:43: b4:12:19:b9:a7:c9:db:94:14:fa:93:4c:66:49:cc: 0f:ef:61:f0:fa:56:55:5f:0e:57:90:1d:3f:a8:93: e0:76:40:51:e1:c9:15:f8:ce:65:16:62:53:c4:c4: fb:bf:f3:3f:06:44:4a:99:ed:6a:cd:1f:84:ea:53: 8c:75:d7:ea:f9:9d:73:eb:d1:d2:db:45:f1:eb:5e: a7:a7:7b:ff:af:4d:a5:c0:51:f8:ce:b3:59:48:f0: 70:75:c6:70:cd:06:4c:72:8e:93:eb:25:aa:f2:ce: 7e:de:f5:0e:07:db:e8:d1:c8:b9:80:a4:11:1a:e4: 66:23:94:d3:f4:1e:2f:74:12:a7:e4:3e:a1:80:93: cb:ab:12:40:bd:bd:58:04:55:7c:5f:7d:5f:e4:6f: b5:04:3e:38:92:97:45:0e:88:4a:d9:07:94:3c:c4: f9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:68:9A:7C:E9:11:A7:48:08:98:8E:10:21:04:99:A9:BD:36:E0:D4 X509v3 Authority Key Identifier: keyid:8A:B2:A3:D9:66:16:CA:30:40:EC:FC:C3:0E:C8:98:EF:F6:8B:CD:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/323830343a363434303a633030303a3a2f33342d3334203d3e20323639343136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:6440:c000::/34 Signature Algorithm: sha256WithRSAEncryption 03:1c:f3:c9:cd:ea:6a:41:04:32:e1:86:3d:62:73:85:61:fe: b2:cc:a5:ce:23:53:5f:65:1c:ac:e8:b9:80:fa:b4:4e:a5:a2: 39:8e:d7:1f:8f:6d:9c:85:d7:9e:f6:62:45:be:1d:2f:5d:2b: fe:c1:bd:14:a5:6c:8c:c6:a8:8c:17:5e:bb:b1:e3:b1:58:20: 1e:4e:3d:07:b1:b0:17:d1:e2:9a:48:2e:97:fa:e5:37:f7:56: e4:d8:f2:56:56:7f:8a:df:2e:20:2a:2a:6d:01:f9:f2:4b:e6: 56:6f:2b:74:ec:e0:f0:8f:4c:16:7f:dd:ce:31:72:de:55:70: 73:93:ea:e2:2e:be:61:ab:cc:21:c2:fb:16:21:21:0b:24:c8: 9c:31:e7:13:7c:34:bb:28:e0:17:a0:e1:4e:aa:19:18:c1:14: ac:1e:9e:1c:ab:30:6a:66:b7:e2:c5:1d:58:4e:06:d3:d5:4d: be:1b:0e:04:6c:ac:e6:e5:65:03:05:d9:d2:a6:55:65:0c:58: 9c:8c:64:e4:d0:8f:73:c0:26:e4:01:a0:b8:38:fa:96:23:14: e1:44:07:f2:09:c0:94:ff:3a:85:27:56:2e:ac:b7:06:6a:a7: 69:36:31:9d:93:ee:72:6b:a7:11:2d:42:ce:a1:c7:8e:67:30: 6f:e3:36:fb -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUEPHo77/JgLw7N0S3IDR3JcG5AFUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFCMkEzRDk2NjE2Q0EzMDQwRUNGQ0MzMEVDODk4RUZG NjhCQ0RDMjAeFw0yNTA0MjQxMzM5NDBaFw0yNjA0MjMxMzQ0NDBaMDMxMTAvBgNV BAMTKDE5Njg5QTdDRTkxMUE3NDgwODk4OEUxMDIxMDQ5OUE5QkQzNkUwRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe7hf1TpY3+j7RsexVy+ezn70Z EtRfKOTpJ+tnNKF1fpivQR1GuxAWtQMy3BD7bpEEM6tbZ6rg5jB8qX6i1zKdbD7l Py1ldMWP3GUNt1emT76zPra7tVsNQ7QSGbmnyduUFPqTTGZJzA/vYfD6VlVfDleQ HT+ok+B2QFHhyRX4zmUWYlPExPu/8z8GREqZ7WrNH4TqU4x11+r5nXPr0dLbRfHr Xqene/+vTaXAUfjOs1lI8HB1xnDNBkxyjpPrJaryzn7e9Q4H2+jRyLmApBEa5GYj lNP0Hi90EqfkPqGAk8urEkC9vVgEVXxffV/kb7UEPjiSl0UOiErZB5Q8xPmnAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUGWiafOkRp0gImI4QIQSZqb024NQwHwYDVR0j BBgwFoAUirKj2WYWyjBA7PzDDsiY7/aLzcIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGhVWDM1Wk1VQ2JSaFl1RUNMUXVRaXlpcUNYNHo5THZSaXJKdzNiQlV3 eVgvMC84QUIyQTNEOTY2MTZDQTMwNDBFQ0ZDQzMwRUM4OThFRkY2OEJDREMyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhBQjJBM0Q5NjYxNkNBMzA0 MEVDRkNDMzBFQzg5OEVGRjY4QkNEQzIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0RoVVgzNVpNVUNiUmhZdUVDTFF1UWl5aXFDWDR6OUx2UmlySnczYkJVd3lYLzAv MzIzODMwMzQzYTM2MzQzNDMwM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzYzOTM0MzEzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEZEDAMA0GCSqGSIb3DQEBCwUA A4IBAQADHPPJzepqQQQy4YY9YnOFYf6yzKXOI1NfZRys6LmA+rROpaI5jtcfj22c hdee9mJFvh0vXSv+wb0UpWyMxqiMF167seOxWCAeTj0HsbAX0eKaSC6X+uU391bk 2PJWVn+K3y4gKiptAfnyS+ZWbyt07ODwj0wWf93OMXLeVXBzk+riLr5hq8whwvsW ISELJMicMecTfDS7KOAXoOFOqhkYwRSsHp4cqzBqZrfixR1YTgbT1U2+Gw4EbKzm 5WUDBdnSplVlDFicjGTk0I9zwCbkAaC4OPqWIxThRAfyCcCU/zqFJ1YurLcGaqdp NjGdk+5ya6cRLULOoceOZzBv4zb7 -----END CERTIFICATE-----Generated at Tue Apr 29 23:29:59 2025 by rpki-client