$ rpki-client -vvf rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/323830343a333732633a633030303a3a2f33342d3334203d3e20323636333934.roa File: 323830343a333732633a633030303a3a2f33342d3334203d3e20323636333934.roa (raw, json) Hash identifier: Ix8eRWQHyNaG97EzmFL826uIb8NIHHIOcqYAMs0HL9w= Subject key identifier: 5B:A6:67:FE:87:4A:17:56:FE:CF:79:CC:CD:9F:F1:3F:B6:5F:9F:B4 Certificate issuer: /CN=11B1E8E1007047F5F5019E6E48EAC9CDFDE9A805 Certificate serial: 7D5239866607064B738080EB49D4EB901AA47FFB Authority key identifier: 11:B1:E8:E1:00:70:47:F5:F5:01:9E:6E:48:EA:C9:CD:FD:E9:A8:05 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11B1E8E1007047F5F5019E6E48EAC9CDFDE9A805.cer Subject info access: rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/323830343a333732633a633030303a3a2f33342d3334203d3e20323636333934.roa Signing time: Fri 11 Jul 2025 19:53:04 +0000 ROA not before: Fri 11 Jul 2025 19:48:04 +0000 ROA not after: Fri 10 Jul 2026 19:53:04 +0000 asID: 266394 IP address blocks: 2804:372c:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/11B1E8E1007047F5F5019E6E48EAC9CDFDE9A805.crl rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/11B1E8E1007047F5F5019E6E48EAC9CDFDE9A805.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11B1E8E1007047F5F5019E6E48EAC9CDFDE9A805.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 13 Jul 2025 13:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:52:39:86:66:07:06:4b:73:80:80:eb:49:d4:eb:90:1a:a4:7f:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11B1E8E1007047F5F5019E6E48EAC9CDFDE9A805 Validity Not Before: Jul 11 19:48:04 2025 GMT Not After : Jul 10 19:53:04 2026 GMT Subject: CN=5BA667FE874A1756FECF79CCCD9FF13FB65F9FB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:9f:46:87:86:4a:d1:7a:57:45:b5:f0:33:67: 85:bb:b2:ed:a6:77:11:04:ef:12:62:71:9d:60:e4: e0:68:b5:90:b9:78:00:ab:19:26:ec:0f:74:65:de: 69:7d:17:74:ca:de:34:14:45:d7:b3:71:c4:ee:6d: 32:d7:08:37:f0:a1:c8:05:8c:65:19:dd:88:c5:df: 49:0c:16:79:7b:3c:3d:51:79:81:5c:1c:a0:f2:b6: 60:b0:d0:4b:db:21:18:47:ee:eb:6b:02:c3:3e:f5: b6:6a:42:18:6d:29:b3:4d:bc:7f:b7:df:2e:c2:ef: 26:dd:7c:4e:5a:b5:ee:71:eb:c8:d2:25:25:55:4e: ee:a1:09:1c:3b:3b:61:2a:f1:ac:c6:dc:08:cb:03: f7:2a:8b:65:f6:33:02:a0:0a:cb:06:6e:ff:20:d2: 9c:17:c8:33:8e:9b:23:ba:3a:9b:8a:00:1f:c5:c7: 60:0a:24:62:2f:56:fe:43:3e:17:4c:56:92:e3:07: e0:2a:36:ca:1a:a4:aa:1f:f8:ac:9e:a0:16:bc:c9: 99:8d:ae:2c:ef:70:e2:69:e1:4d:37:dd:33:d3:0b: a0:db:69:d1:e7:4e:fd:05:90:fb:6b:57:32:a7:11: b9:51:71:dd:b1:03:3c:d6:32:db:0e:d7:63:72:b8: 9a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:A6:67:FE:87:4A:17:56:FE:CF:79:CC:CD:9F:F1:3F:B6:5F:9F:B4 X509v3 Authority Key Identifier: keyid:11:B1:E8:E1:00:70:47:F5:F5:01:9E:6E:48:EA:C9:CD:FD:E9:A8:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/11B1E8E1007047F5F5019E6E48EAC9CDFDE9A805.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11B1E8E1007047F5F5019E6E48EAC9CDFDE9A805.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/323830343a333732633a633030303a3a2f33342d3334203d3e20323636333934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:372c:c000::/34 Signature Algorithm: sha256WithRSAEncryption 40:77:eb:2c:74:36:c5:0f:0f:3d:49:19:79:0a:cc:68:5f:1e: e5:ca:76:0c:ac:ef:19:cd:0e:8d:d6:38:71:d8:7b:1f:c9:01: 1a:bd:5d:3f:bd:08:51:5c:58:d0:cf:d4:16:e3:07:f0:a0:4a: 50:a2:36:50:31:fe:80:cf:21:fe:80:69:a4:a2:65:53:6f:70: b1:25:91:02:3e:a1:d5:ad:e0:08:c9:c3:b2:d4:ba:6b:99:b4: 0b:28:23:65:07:5c:7c:38:28:f4:21:1e:72:fa:e3:5f:72:6b: e6:62:50:fa:b9:a6:2a:d4:94:26:70:ed:ac:15:89:38:b2:a4: 76:34:c2:d4:94:86:7f:7d:16:d4:6e:d1:77:37:f8:6a:ad:48: d4:22:7e:b3:ca:bc:62:4f:23:29:6c:b6:cd:d4:2e:48:b4:29: 86:c2:b9:b9:57:17:54:0c:45:0a:69:d2:be:b5:71:cc:ef:7f: 62:18:f9:ee:6d:a1:a6:83:74:a4:9c:2d:33:76:18:2e:19:a7: 5c:96:f5:34:84:91:59:2b:53:4a:56:f7:80:7b:0e:cd:80:07: 8a:a0:e0:b7:21:12:36:13:6b:a8:8e:ce:26:cb:7d:9c:22:8e: 7b:d4:9f:a4:70:ac:06:7c:bf:79:71:62:d0:8c:63:d7:04:31: 39:c2:58:7d -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUfVI5hmYHBktzgIDrSdTrkBqkf/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFCMUU4RTEwMDcwNDdGNUY1MDE5RTZFNDhFQUM5Q0RG REU5QTgwNTAeFw0yNTA3MTExOTQ4MDRaFw0yNjA3MTAxOTUzMDRaMDMxMTAvBgNV BAMTKDVCQTY2N0ZFODc0QTE3NTZGRUNGNzlDQ0NEOUZGMTNGQjY1RjlGQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzn0aHhkrReldFtfAzZ4W7su2m dxEE7xJicZ1g5OBotZC5eACrGSbsD3Rl3ml9F3TK3jQURdezccTubTLXCDfwocgF jGUZ3YjF30kMFnl7PD1ReYFcHKDytmCw0EvbIRhH7utrAsM+9bZqQhhtKbNNvH+3 3y7C7ybdfE5ate5x68jSJSVVTu6hCRw7O2Eq8azG3AjLA/cqi2X2MwKgCssGbv8g 0pwXyDOOmyO6OpuKAB/Fx2AKJGIvVv5DPhdMVpLjB+AqNsoapKof+KyeoBa8yZmN rizvcOJp4U033TPTC6DbadHnTv0FkPtrVzKnEblRcd2xAzzWMtsO12NyuJrVAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUW6Zn/odKF1b+z3nMzZ/xP7Zfn7QwHwYDVR0j BBgwFoAUEbHo4QBwR/X1AZ5uSOrJzf3pqAUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkRmdTRrYTE2NU5ZbVNVMTdYaXgzVGFWRldxbjM4WWJ1dGN4REFQWkNM QWYvMC8xMUIxRThFMTAwNzA0N0Y1RjUwMTlFNkU0OEVBQzlDREZERTlBODA1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzExQjFFOEUxMDA3MDQ3RjVG NTAxOUU2RTQ4RUFDOUNERkRFOUE4MDUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJEZnU0a2ExNjVOWW1TVTE3WGl4M1RhVkZXcW4zOFlidXRjeERBUFpDTEFmLzAv MzIzODMwMzQzYTMzMzczMjYzM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzYzNjMzMzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigENyzAMA0GCSqGSIb3DQEBCwUA A4IBAQBAd+ssdDbFDw89SRl5CsxoXx7lynYMrO8ZzQ6N1jhx2HsfyQEavV0/vQhR XFjQz9QW4wfwoEpQojZQMf6AzyH+gGmkomVTb3CxJZECPqHVreAIycOy1LprmbQL KCNlB1x8OCj0IR5y+uNfcmvmYlD6uaYq1JQmcO2sFYk4sqR2NMLUlIZ/fRbUbtF3 N/hqrUjUIn6zyrxiTyMpbLbN1C5ItCmGwrm5VxdUDEUKadK+tXHM739iGPnubaGm g3SknC0zdhguGadclvU0hJFZK1NKVveAew7NgAeKoOC3IRI2E2uojs4my32cIo57 1J+kcKwGfL95cWLQjGPXBDE5wlh9 -----END CERTIFICATE-----Generated at Sat Jul 12 17:21:03 2025 by rpki-client