$ rpki-client -vvf rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/323830343a323831383a343030303a3a2f33342d3334203d3e20323633393430.roa File: 323830343a323831383a343030303a3a2f33342d3334203d3e20323633393430.roa (raw, json) Hash identifier: fGmke1LzhOxRHeLksXMIqVEUvtRkKPDajqSfZc1F4hU= Subject key identifier: B0:1A:C1:32:25:E0:8B:D0:D0:22:1C:81:5F:A3:34:6F:47:83:7E:3D Certificate issuer: /CN=1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0 Certificate serial: 643D80AD7F0D3EBAD13AC6830A552FD77E15FF1E Authority key identifier: 1C:27:36:B7:CF:C9:C7:EA:5B:9C:A9:D4:E0:02:80:39:6A:DF:13:B0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0.cer Subject info access: rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/323830343a323831383a343030303a3a2f33342d3334203d3e20323633393430.roa Signing time: Wed 09 Apr 2025 14:26:38 +0000 ROA not before: Wed 09 Apr 2025 14:21:38 +0000 ROA not after: Wed 08 Apr 2026 14:26:38 +0000 asID: 263940 IP address blocks: 2804:2818:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0.crl rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 04 May 2025 03:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:3d:80:ad:7f:0d:3e:ba:d1:3a:c6:83:0a:55:2f:d7:7e:15:ff:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0 Validity Not Before: Apr 9 14:21:38 2025 GMT Not After : Apr 8 14:26:38 2026 GMT Subject: CN=B01AC13225E08BD0D0221C815FA3346F47837E3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:10:2f:c8:87:ca:5f:fd:3b:e3:03:f6:c6:a9: 3e:4e:90:b1:29:bf:aa:fc:71:f7:74:ba:73:10:66: c1:bf:7e:4c:27:46:36:0e:b7:a1:39:12:bc:1d:b2: b5:5e:85:d5:bf:cc:e9:f9:eb:d8:c0:5b:92:8d:83: ac:3d:3f:61:d7:12:12:fd:37:a7:0a:27:c9:a6:18: 43:08:aa:4f:5b:6f:18:52:04:46:1c:08:46:84:d2: 1e:83:fb:46:99:37:bf:b1:b7:69:63:4b:df:a8:e2: 36:4f:26:51:6a:24:93:77:ae:64:84:1b:38:d1:34: 47:55:a4:35:16:a9:98:7d:0c:2e:74:97:e5:52:62: 76:e6:e9:cf:79:ef:b5:68:25:60:be:87:25:36:3f: bf:e4:b3:db:30:99:0d:9f:5a:fc:ba:56:f5:ec:e5: 89:c3:d2:90:1c:35:67:0b:e1:51:3f:f6:aa:ad:f6: 58:64:63:d1:4d:46:a3:51:a8:8e:40:c5:9e:92:e5: 0d:d4:31:68:7e:1b:d0:97:6d:4f:e2:82:b8:6a:fc: 66:58:f9:75:78:e8:6f:f0:0b:71:a2:d5:11:f7:40: b6:75:3d:5e:ea:d6:09:b5:e0:9a:54:fd:f2:d7:1f: 1e:b5:77:0f:f3:a3:11:dd:f6:d0:40:bd:3c:a4:5f: ad:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:1A:C1:32:25:E0:8B:D0:D0:22:1C:81:5F:A3:34:6F:47:83:7E:3D X509v3 Authority Key Identifier: keyid:1C:27:36:B7:CF:C9:C7:EA:5B:9C:A9:D4:E0:02:80:39:6A:DF:13:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/323830343a323831383a343030303a3a2f33342d3334203d3e20323633393430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:2818:4000::/34 Signature Algorithm: sha256WithRSAEncryption d9:f9:cb:6e:e1:00:ce:9e:42:0b:d7:b5:34:bf:44:79:7e:b2: e9:49:5f:7b:7d:b8:79:c3:70:21:ea:84:1f:a2:5f:b7:81:03: 3a:df:ad:e5:48:fb:aa:ff:76:43:8f:52:fb:8e:1c:9c:5b:3a: 1d:71:fe:7e:f7:55:26:1c:ab:58:8d:da:ee:20:cd:e2:6a:e9: fe:e9:4f:2f:62:54:f5:35:f1:b4:f2:48:79:42:8c:92:d9:b4: 9a:af:07:9a:8d:43:9d:31:1a:46:e6:25:b6:4e:ad:a0:1d:38: 6a:c8:22:03:5d:87:d0:5e:2a:32:4e:b4:f7:bc:5f:fd:ed:14: c0:97:f9:a3:24:83:82:d6:bc:bc:c5:e5:3c:c2:f4:03:b9:e4: 77:13:91:97:22:7d:a9:3e:5f:ee:a3:fd:8e:0f:f7:31:0a:1f: fd:fb:6d:6c:1d:8c:14:62:41:96:56:03:c4:e3:46:87:1d:54: 75:4e:fb:e5:e9:79:ec:9c:67:90:62:9f:f9:5e:60:6e:90:d3: 99:43:c2:26:ab:71:69:87:b0:b0:e4:8e:0f:c2:61:23:88:40: 85:57:4f:9f:f7:2b:dc:0f:d4:73:d6:32:9c:de:e0:39:9f:b6: 2a:65:25:94:8d:08:88:ed:34:35:3d:40:50:e3:fa:b9:58:08: e3:74:1b:ef -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIUZD2ArX8NPrrROsaDClUv134V/x4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUMyNzM2QjdDRkM5QzdFQTVCOUNBOUQ0RTAwMjgwMzk2 QURGMTNCMDAeFw0yNTA0MDkxNDIxMzhaFw0yNjA0MDgxNDI2MzhaMDMxMTAvBgNV BAMTKEIwMUFDMTMyMjVFMDhCRDBEMDIyMUM4MTVGQTMzNDZGNDc4MzdFM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkEC/Ih8pf/TvjA/bGqT5OkLEp v6r8cfd0unMQZsG/fkwnRjYOt6E5ErwdsrVehdW/zOn569jAW5KNg6w9P2HXEhL9 N6cKJ8mmGEMIqk9bbxhSBEYcCEaE0h6D+0aZN7+xt2ljS9+o4jZPJlFqJJN3rmSE GzjRNEdVpDUWqZh9DC50l+VSYnbm6c9577VoJWC+hyU2P7/ks9swmQ2fWvy6VvXs 5YnD0pAcNWcL4VE/9qqt9lhkY9FNRqNRqI5AxZ6S5Q3UMWh+G9CXbU/igrhq/GZY +XV46G/wC3Gi1RH3QLZ1PV7q1gm14JpU/fLXHx61dw/zoxHd9tBAvTykX60bAgMB AAGjggJYMIICVDAdBgNVHQ4EFgQUsBrBMiXgi9DQIhyBX6M0b0eDfj0wHwYDVR0j BBgwFoAUHCc2t8/Jx+pbnKnU4AKAOWrfE7AwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9ZbzhRZVRidUtaMjU5aTVxU1lqZWVVOG9rS0FLVTZMOFpGdTFHNVdMVDFI LzAvMUMyNzM2QjdDRkM5QzdFQTVCOUNBOUQ0RTAwMjgwMzk2QURGMTNCMC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8xQzI3MzZCN0NGQzlDN0VBNUI5 Q0E5RDRFMDAyODAzOTZBREYxM0IwLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIG CCsGAQUFBzALhoGVcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Z bzhRZVRidUtaMjU5aTVxU1lqZWVVOG9rS0FLVTZMOFpGdTFHNVdMVDFILzAvMzIz ODMwMzQzYTMyMzgzMTM4M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNkM2Uy MDMyMzYzMzM5MzQzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEKBhAMA0GCSqGSIb3DQEBCwUAA4IB AQDZ+ctu4QDOnkIL17U0v0R5frLpSV97fbh5w3Ah6oQfol+3gQM6363lSPuq/3ZD j1L7jhycWzodcf5+91UmHKtYjdruIM3iaun+6U8vYlT1NfG08kh5QoyS2bSarwea jUOdMRpG5iW2Tq2gHThqyCIDXYfQXioyTrT3vF/97RTAl/mjJIOC1ry8xeU8wvQD ueR3E5GXIn2pPl/uo/2OD/cxCh/9+21sHYwUYkGWVgPE40aHHVR1Tvvl6XnsnGeQ Yp/5XmBukNOZQ8Imq3Fph7Cw5I4PwmEjiECFV0+f9yvcD9Rz1jKc3uA5n7YqZSWU jQiI7TQ1PUBQ4/q5WAjjdBvv -----END CERTIFICATE-----Generated at Sat May 3 10:31:36 2025 by rpki-client