$ rpki-client -vvf rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/3/323830343a386235633a633130303a3a2f34382d3438203d3e20323733373238.roa File: 323830343a386235633a633130303a3a2f34382d3438203d3e20323733373238.roa (raw, json) Hash identifier: /NN1OZjlSbA13xFdR4rBanoIwRyJ+BGNfkTNM5H5okY= Subject key identifier: 85:10:A7:CF:C7:2F:70:56:E2:32:1E:FD:CE:59:9D:D1:BF:2D:B0:7C Certificate issuer: /CN=49FFAF88F9E3352C5D66D4196264FC0F7B911B27 Certificate serial: 415F1F17670138D00C3165F023622A58A3C87AFF Authority key identifier: 49:FF:AF:88:F9:E3:35:2C:5D:66:D4:19:62:64:FC:0F:7B:91:1B:27 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49FFAF88F9E3352C5D66D4196264FC0F7B911B27.cer Subject info access: rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/3/323830343a386235633a633130303a3a2f34382d3438203d3e20323733373238.roa Signing time: Fri 02 May 2025 14:08:22 +0000 ROA not before: Fri 02 May 2025 14:03:22 +0000 ROA not after: Fri 01 May 2026 14:08:22 +0000 asID: 273728 IP address blocks: 2804:8b5c:c100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/3/49FFAF88F9E3352C5D66D4196264FC0F7B911B27.crl rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/3/49FFAF88F9E3352C5D66D4196264FC0F7B911B27.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49FFAF88F9E3352C5D66D4196264FC0F7B911B27.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 06 May 2025 13:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:5f:1f:17:67:01:38:d0:0c:31:65:f0:23:62:2a:58:a3:c8:7a:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49FFAF88F9E3352C5D66D4196264FC0F7B911B27 Validity Not Before: May 2 14:03:22 2025 GMT Not After : May 1 14:08:22 2026 GMT Subject: CN=8510A7CFC72F7056E2321EFDCE599DD1BF2DB07C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a0:50:3a:f3:20:e2:d9:cf:62:cb:a2:78:b9: 63:66:0d:de:12:ad:c3:2f:d4:b3:f3:2c:48:8e:33: a4:4d:c9:26:a1:d3:2c:61:ba:c4:33:15:d6:82:8a: 30:bf:17:37:83:16:cc:ee:09:e5:2e:80:66:b2:97: 57:86:14:77:d8:7c:08:42:d9:c7:3c:15:aa:84:7a: 83:39:14:31:d2:58:93:e8:5d:34:60:47:76:82:82: 1e:5c:7a:38:74:3d:ac:1a:c3:0b:d5:fe:4e:fe:35: 26:c8:73:ae:2e:00:8c:f6:66:a6:99:db:ea:ad:db: 81:29:98:8c:c9:e6:1b:38:d1:95:6b:00:a2:f7:59: 26:79:6f:66:f6:e5:a3:8b:56:34:a3:2a:bb:88:91: 8d:a0:42:14:b4:97:d2:ba:72:95:b0:e7:e6:02:89: ce:67:00:60:15:b6:02:d9:c1:70:85:09:24:76:e8: 14:9a:17:fc:12:ef:c9:ec:1d:e0:4e:6f:4e:7a:ef: 1c:30:56:09:c3:f0:ea:36:a9:24:a3:72:c1:ed:89: dc:46:cb:c5:b5:c7:a1:a4:bf:1d:86:b3:b1:8d:a2: 13:de:09:bf:2f:50:39:10:58:f5:5d:79:ed:7f:dd: 39:84:85:1f:28:40:e2:78:56:d9:50:8d:7a:da:ac: 0f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:10:A7:CF:C7:2F:70:56:E2:32:1E:FD:CE:59:9D:D1:BF:2D:B0:7C X509v3 Authority Key Identifier: keyid:49:FF:AF:88:F9:E3:35:2C:5D:66:D4:19:62:64:FC:0F:7B:91:1B:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/3/49FFAF88F9E3352C5D66D4196264FC0F7B911B27.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49FFAF88F9E3352C5D66D4196264FC0F7B911B27.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/3/323830343a386235633a633130303a3a2f34382d3438203d3e20323733373238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8b5c:c100::/48 Signature Algorithm: sha256WithRSAEncryption 0f:17:43:44:e9:33:01:08:8d:cf:fa:eb:80:15:97:04:0a:64: 0c:e2:e1:15:98:3e:95:b6:1e:a6:55:64:bb:95:37:ed:be:f1: fa:b4:b6:67:18:bc:7b:67:82:0b:1e:a1:30:27:66:ac:f1:29: 5e:27:01:f1:77:3f:bc:c2:7d:b7:e0:b5:81:9e:8f:d4:06:0d: a9:c8:b7:0e:7f:50:34:bf:14:12:88:dc:de:c6:78:53:a2:d9: ea:a1:a9:c4:e3:a5:42:c2:57:73:7b:6f:c1:b5:5d:b6:8c:8c: 7c:32:5a:b2:33:19:8e:50:b7:61:0a:b7:76:49:9e:9b:55:67: 78:88:26:86:03:fd:33:e3:fe:19:12:d8:b2:44:66:8d:81:46: f3:87:ce:47:34:ee:34:f0:82:25:6c:b0:95:f2:bf:67:f7:93: 4b:af:d8:e9:63:73:50:b8:77:4d:b6:5e:51:cb:37:e0:b4:9b: 55:64:d6:99:4f:aa:92:d3:a3:7a:56:5b:c4:a9:8b:be:08:4f: 3d:15:06:22:ff:d0:10:4a:b0:75:14:ef:cc:b4:65:32:78:18: f9:7b:d7:aa:8e:70:9c:d8:f9:6c:b5:1d:1c:38:d3:55:4e:96: d8:45:6f:45:f6:06:73:d5:02:1d:57:fd:79:05:59:a3:50:06: db:d8:5b:a3 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIUQV8fF2cBONAMMWXwI2IqWKPIev8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDlGRkFGODhGOUUzMzUyQzVENjZENDE5NjI2NEZDMEY3 QjkxMUIyNzAeFw0yNTA1MDIxNDAzMjJaFw0yNjA1MDExNDA4MjJaMDMxMTAvBgNV BAMTKDg1MTBBN0NGQzcyRjcwNTZFMjMyMUVGRENFNTk5REQxQkYyREIwN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOoFA68yDi2c9iy6J4uWNmDd4S rcMv1LPzLEiOM6RNySah0yxhusQzFdaCijC/FzeDFszuCeUugGayl1eGFHfYfAhC 2cc8FaqEeoM5FDHSWJPoXTRgR3aCgh5cejh0PawawwvV/k7+NSbIc64uAIz2ZqaZ 2+qt24EpmIzJ5hs40ZVrAKL3WSZ5b2b25aOLVjSjKruIkY2gQhS0l9K6cpWw5+YC ic5nAGAVtgLZwXCFCSR26BSaF/wS78nsHeBOb0567xwwVgnD8Oo2qSSjcsHtidxG y8W1x6Gkvx2Gs7GNohPeCb8vUDkQWPVdee1/3TmEhR8oQOJ4VtlQjXrarA/FAgMB AAGjggJcMIICWDAdBgNVHQ4EFgQUhRCnz8cvcFbiMh79zlmd0b8tsHwwHwYDVR0j BBgwFoAUSf+viPnjNSxdZtQZYmT8D3uRGycwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSkNnb2lWMUpvN3NDb2pqbXNuSGQ0MWlyYlhGd1FocmhoOHd2M1BVSGpR Wm8vMy80OUZGQUY4OEY5RTMzNTJDNUQ2NkQ0MTk2MjY0RkMwRjdCOTExQjI3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ5RkZBRjg4RjlFMzM1MkM1 RDY2RDQxOTYyNjRGQzBGN0I5MTFCMjcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0pDZ29pVjFKbzdzQ29qam1zbkhkNDFpcmJYRndRaHJoaDh3djNQVUhqUVpvLzMv MzIzODMwMzQzYTM4NjIzNTYzM2E2MzMxMzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNk M2UyMDMyMzczMzM3MzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEi1zBADANBgkqhkiG9w0BAQsF AAOCAQEADxdDROkzAQiNz/rrgBWXBApkDOLhFZg+lbYeplVku5U37b7x+rS2Zxi8 e2eCCx6hMCdmrPEpXicB8Xc/vMJ9t+C1gZ6P1AYNqci3Dn9QNL8UEojc3sZ4U6LZ 6qGpxOOlQsJXc3tvwbVdtoyMfDJasjMZjlC3YQq3dkmem1VneIgmhgP9M+P+GRLY skRmjYFG84fORzTuNPCCJWywlfK/Z/eTS6/Y6WNzULh3TbZeUcs34LSbVWTWmU+q ktOjelZbxKmLvghPPRUGIv/QEEqwdRTvzLRlMngY+XvXqo5wnNj5bLUdHDjTVU6W 2EVvRfYGc9UCHVf9eQVZo1AG29hbow== -----END CERTIFICATE-----Generated at Mon May 5 12:57:53 2025 by rpki-client