$ rpki-client -vvf rpki-repo.registro.br/repo/2CoJMWfwoZHGpjCuNS4seRHQJEJSEo2pk9HS4efPVvt7/0/323830343a316161343a3a2f33322d3334203d3e203631383733.roa File: 323830343a316161343a3a2f33322d3334203d3e203631383733.roa (raw, json) Hash identifier: 8sIH0ZelYmsVoQtiez4w+0drrJ+3+rUc+jsPodUrlso= Subject key identifier: CE:A4:4B:5C:F0:03:0D:3E:33:E9:7D:47:E3:FB:F1:C6:79:7E:4C:E9 Certificate issuer: /CN=F8FCC9D0A386F207C9FD886E269D8F44B338578D Certificate serial: 7544778E58F93564BCDBDC99B5290CA163AB3ED8 Authority key identifier: F8:FC:C9:D0:A3:86:F2:07:C9:FD:88:6E:26:9D:8F:44:B3:38:57:8D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8FCC9D0A386F207C9FD886E269D8F44B338578D.cer Subject info access: rsync://rpki-repo.registro.br/repo/2CoJMWfwoZHGpjCuNS4seRHQJEJSEo2pk9HS4efPVvt7/0/323830343a316161343a3a2f33322d3334203d3e203631383733.roa Signing time: Mon 23 Jun 2025 13:20:41 +0000 ROA not before: Mon 23 Jun 2025 13:15:41 +0000 ROA not after: Mon 22 Jun 2026 13:20:41 +0000 asID: 61873 IP address blocks: 2804:1aa4::/32 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2CoJMWfwoZHGpjCuNS4seRHQJEJSEo2pk9HS4efPVvt7/0/F8FCC9D0A386F207C9FD886E269D8F44B338578D.crl rsync://rpki-repo.registro.br/repo/2CoJMWfwoZHGpjCuNS4seRHQJEJSEo2pk9HS4efPVvt7/0/F8FCC9D0A386F207C9FD886E269D8F44B338578D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8FCC9D0A386F207C9FD886E269D8F44B338578D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 02 Jul 2025 13:56:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:44:77:8e:58:f9:35:64:bc:db:dc:99:b5:29:0c:a1:63:ab:3e:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8FCC9D0A386F207C9FD886E269D8F44B338578D Validity Not Before: Jun 23 13:15:41 2025 GMT Not After : Jun 22 13:20:41 2026 GMT Subject: CN=CEA44B5CF0030D3E33E97D47E3FBF1C6797E4CE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b4:50:59:0e:90:06:fe:6e:c9:b1:22:e9:f8: 56:17:7b:a0:ef:7c:dd:f6:77:09:a0:56:c2:6a:85: 7e:6c:44:0e:b8:c0:87:ef:8d:c3:ff:a5:7c:4b:51: a9:67:d2:84:1c:89:95:1c:2f:64:4a:82:59:af:a2: 5c:1e:c1:b0:15:23:ee:cb:b2:63:16:e5:81:00:83: 5f:99:00:f3:9b:09:bb:20:f7:60:f0:bf:4f:19:6c: 6e:8d:45:9e:66:e9:ea:c2:31:2b:b8:d4:2c:f1:ad: b2:8a:dc:9c:db:6e:2f:ba:49:e9:5a:23:8a:eb:81: 99:f6:d3:26:83:9b:b8:22:a2:1c:b4:50:29:bb:7e: 60:40:1a:5c:62:41:da:d5:f0:1a:50:43:4b:37:c5: 53:f2:b8:50:1a:bc:61:d8:0b:7d:aa:75:32:d5:b0: 98:02:09:db:cc:33:b1:6e:3c:5a:ff:3f:4e:53:0e: e9:60:e2:1d:40:b0:69:a3:40:20:85:e0:e8:41:db: 38:90:c3:66:56:28:70:c1:e7:19:72:2e:cf:80:a7: 87:c2:96:1b:f8:7a:42:40:61:47:bd:65:4b:71:c5: 80:08:1b:ce:2a:6e:6a:04:18:02:7d:83:43:c2:21: ee:72:cc:ba:fb:03:9e:1b:f3:2c:d2:06:5e:9c:0b: 08:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:A4:4B:5C:F0:03:0D:3E:33:E9:7D:47:E3:FB:F1:C6:79:7E:4C:E9 X509v3 Authority Key Identifier: keyid:F8:FC:C9:D0:A3:86:F2:07:C9:FD:88:6E:26:9D:8F:44:B3:38:57:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2CoJMWfwoZHGpjCuNS4seRHQJEJSEo2pk9HS4efPVvt7/0/F8FCC9D0A386F207C9FD886E269D8F44B338578D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8FCC9D0A386F207C9FD886E269D8F44B338578D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2CoJMWfwoZHGpjCuNS4seRHQJEJSEo2pk9HS4efPVvt7/0/323830343a316161343a3a2f33322d3334203d3e203631383733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:1aa4::/32 Signature Algorithm: sha256WithRSAEncryption 0a:43:fa:bf:f6:f1:d6:40:8e:e4:53:d0:86:e0:1a:13:a3:d6: 23:c0:8a:11:d0:32:0c:46:1e:ed:2f:83:1b:a7:fe:81:da:21: e0:5c:57:77:62:79:71:fb:86:49:8e:bb:fc:11:b5:43:e8:5e: a3:b6:94:36:c7:f7:87:e8:49:c7:cf:af:ed:87:03:90:a2:15: c7:72:eb:8d:90:f8:b4:7d:83:d3:5f:48:fa:12:4a:0c:25:7f: fb:b1:f5:90:f7:cd:0c:28:ed:4d:59:9b:3c:51:6f:bc:fa:1a: 57:b9:de:4d:c3:97:8f:e0:d9:02:67:a2:87:c7:ad:b3:11:85: 6c:cf:19:97:98:09:26:80:a9:e4:37:66:5c:b0:af:f1:3d:bc: d4:d0:a7:28:d2:bb:8a:6d:ec:cf:00:a0:fb:d4:07:33:7b:eb: 9e:00:fd:c0:d7:cc:93:16:f6:81:4f:57:bc:a7:f2:e6:4f:7c: 49:2c:fd:44:8e:5b:ca:21:b1:b3:19:f3:59:fc:c8:68:6a:08: ae:de:2a:cc:b5:59:9c:f9:98:2c:ed:72:41:ba:9c:0f:80:4b: 6d:71:2d:15:fb:50:64:f8:b4:be:9f:7c:68:fe:46:ad:19:26: 4f:98:b0:66:48:5d:1f:09:1a:1f:33:e5:ca:53:4e:d5:f7:9c: c7:98:6c:8c -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIUdUR3jlj5NWS829yZtSkMoWOrPtgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhGQ0M5RDBBMzg2RjIwN0M5RkQ4ODZFMjY5RDhGNDRC MzM4NTc4RDAeFw0yNTA2MjMxMzE1NDFaFw0yNjA2MjIxMzIwNDFaMDMxMTAvBgNV BAMTKENFQTQ0QjVDRjAwMzBEM0UzM0U5N0Q0N0UzRkJGMUM2Nzk3RTRDRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOtFBZDpAG/m7JsSLp+FYXe6Dv fN32dwmgVsJqhX5sRA64wIfvjcP/pXxLUaln0oQciZUcL2RKglmvolwewbAVI+7L smMW5YEAg1+ZAPObCbsg92Dwv08ZbG6NRZ5m6erCMSu41CzxrbKK3Jzbbi+6Sela I4rrgZn20yaDm7giohy0UCm7fmBAGlxiQdrV8BpQQ0s3xVPyuFAavGHYC32qdTLV sJgCCdvMM7FuPFr/P05TDulg4h1AsGmjQCCF4OhB2ziQw2ZWKHDB5xlyLs+Ap4fC lhv4ekJAYUe9ZUtxxYAIG84qbmoEGAJ9g0PCIe5yzLr7A54b8yzSBl6cCwiLAgMB AAGjggJOMIICSjAdBgNVHQ4EFgQUzqRLXPADDT4z6X1H4/vxxnl+TOkwHwYDVR0j BBgwFoAU+PzJ0KOG8gfJ/YhuJp2PRLM4V40wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkNvSk1XZndvWkhHcGpDdU5TNHNlUkhRSkVKU0VvMnBrOUhTNGVmUFZ2 dDcvMC9GOEZDQzlEMEEzODZGMjA3QzlGRDg4NkUyNjlEOEY0NEIzMzg1NzhELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y4RkNDOUQwQTM4NkYyMDdD OUZEODg2RTI2OUQ4RjQ0QjMzODU3OEQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJDb0pNV2Z3b1pIR3BqQ3VOUzRzZVJIUUpFSlNFbzJwazlIUzRlZlBWdnQ3LzAv MzIzODMwMzQzYTMxNjE2MTM0M2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzYzMTM4 MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB /wQRMA8wDQQCAAIwBwMFACgEGqQwDQYJKoZIhvcNAQELBQADggEBAApD+r/28dZA juRT0IbgGhOj1iPAihHQMgxGHu0vgxun/oHaIeBcV3dieXH7hkmOu/wRtUPoXqO2 lDbH94foScfPr+2HA5CiFcdy642Q+LR9g9NfSPoSSgwlf/ux9ZD3zQwo7U1ZmzxR b7z6Gle53k3Dl4/g2QJnoofHrbMRhWzPGZeYCSaAqeQ3Zlywr/E9vNTQpyjSu4pt 7M8AoPvUBzN7654A/cDXzJMW9oFPV7yn8uZPfEks/USOW8ohsbMZ81n8yGhqCK7e Ksy1WZz5mCztckG6nA+AS21xLRX7UGT4tL6ffGj+Rq0ZJk+YsGZIXR8JGh8z5cpT TtX3nMeYbIw= -----END CERTIFICATE-----Generated at Tue Jul 1 15:27:30 2025 by rpki-client