$ rpki-client -vvf rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/323830343a353130343a3330303a3a2f34302d3430203d3e20323638343235.roa File: 323830343a353130343a3330303a3a2f34302d3430203d3e20323638343235.roa (raw, json) Hash identifier: oTsWtwKr6AsKcKSiIACkui8/r4KI48XlfXRbN5Ph0B0= Subject key identifier: E5:D9:D0:E9:30:3E:54:E0:34:87:D8:60:87:05:E2:0B:9B:2E:AF:28 Certificate issuer: /CN=E968F08C3BD0A821112BDBD86914ED5964A1FF29 Certificate serial: 143B5261225A845858D487B2A416A0805CB659D3 Authority key identifier: E9:68:F0:8C:3B:D0:A8:21:11:2B:DB:D8:69:14:ED:59:64:A1:FF:29 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E968F08C3BD0A821112BDBD86914ED5964A1FF29.cer Subject info access: rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/323830343a353130343a3330303a3a2f34302d3430203d3e20323638343235.roa Signing time: Tue 06 May 2025 18:38:12 +0000 ROA not before: Tue 06 May 2025 18:33:12 +0000 ROA not after: Tue 05 May 2026 18:38:12 +0000 asID: 268425 IP address blocks: 2804:5104:300::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/E968F08C3BD0A821112BDBD86914ED5964A1FF29.crl rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/E968F08C3BD0A821112BDBD86914ED5964A1FF29.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E968F08C3BD0A821112BDBD86914ED5964A1FF29.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 14 May 2025 02:49:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:3b:52:61:22:5a:84:58:58:d4:87:b2:a4:16:a0:80:5c:b6:59:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E968F08C3BD0A821112BDBD86914ED5964A1FF29 Validity Not Before: May 6 18:33:12 2025 GMT Not After : May 5 18:38:12 2026 GMT Subject: CN=E5D9D0E9303E54E03487D8608705E20B9B2EAF28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8f:e0:1d:de:64:bb:ad:2a:6d:f0:16:01:48: b3:43:32:d1:32:f4:73:85:c8:07:bd:73:f3:1a:95: ee:b6:16:95:c7:cf:92:49:91:15:73:1a:ef:69:5a: cc:54:65:d4:73:6a:2f:36:54:1e:44:5d:38:37:8c: 83:94:21:27:64:f2:67:49:c9:44:00:d7:94:85:ce: 5b:ac:38:f2:ec:69:c1:78:2d:0e:b1:08:4c:97:ed: 5b:e9:23:d9:10:62:10:88:d6:0c:59:20:65:30:35: ec:89:70:e0:bd:da:49:8e:b2:0f:a0:ed:ae:36:72: 65:1b:fe:eb:7d:ae:27:20:0e:63:a7:e3:da:1b:4e: ee:ee:0f:c4:f5:92:32:83:30:d8:0a:9f:93:95:ac: 1c:b2:62:f0:83:91:38:7a:9a:fd:8d:59:07:63:a9: 06:ac:2a:d7:b7:7d:0a:2a:b5:6e:dc:5f:73:2d:2f: df:fd:04:b4:d6:7a:da:02:92:81:f5:bf:22:82:f3: 73:2c:61:21:be:24:6c:b2:58:66:c5:04:18:62:fb: 89:e8:12:56:04:d5:e1:96:1e:88:bd:32:14:a4:a7: f1:70:e3:29:e3:60:9e:b0:27:c2:e3:02:0a:8e:65: be:f5:f5:0a:7b:f0:ea:a6:1a:87:b9:73:8a:78:4e: da:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:D9:D0:E9:30:3E:54:E0:34:87:D8:60:87:05:E2:0B:9B:2E:AF:28 X509v3 Authority Key Identifier: keyid:E9:68:F0:8C:3B:D0:A8:21:11:2B:DB:D8:69:14:ED:59:64:A1:FF:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/E968F08C3BD0A821112BDBD86914ED5964A1FF29.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E968F08C3BD0A821112BDBD86914ED5964A1FF29.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/323830343a353130343a3330303a3a2f34302d3430203d3e20323638343235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:5104:300::/40 Signature Algorithm: sha256WithRSAEncryption b6:73:5b:3c:72:0c:a2:b7:06:5d:c1:28:23:d1:33:84:b3:d0: 04:fa:2f:23:f1:01:ac:d9:ec:57:d7:ee:28:64:d7:61:bc:ad: 98:11:68:4c:0f:50:7f:aa:a8:1d:cf:e6:6c:a9:32:88:0c:d9: c4:4c:3d:70:8d:70:9b:4f:c9:bc:ab:75:8a:6e:75:1d:8c:55: 3b:5d:a3:56:78:16:60:46:b8:14:62:eb:e5:96:6c:20:dc:bc: 29:ad:f1:f3:ff:26:2d:c7:b0:de:48:0c:23:f1:e5:94:07:11: 98:ff:9d:74:c2:0d:ed:8e:e4:fb:ec:7f:59:91:2c:d8:53:ab: dd:03:03:58:fb:5e:e2:2a:1d:34:3c:7e:5d:5e:7f:82:9d:6e: 88:ba:a8:e8:7e:48:04:e6:46:d8:ff:4d:83:ae:c0:bf:2c:d2: 40:74:40:47:d8:28:ec:bc:ac:8a:24:c8:0e:a5:75:57:cb:f5: 88:5f:bf:63:b2:61:20:c2:dd:28:e7:ad:40:02:fb:e4:3a:6f: 19:cf:1c:5f:a8:ea:9b:a2:00:d6:bc:8f:f1:ea:a3:dd:7a:30: 5b:08:a3:32:90:2f:eb:b0:cb:75:ce:19:76:9c:fe:b3:3e:8a: 1a:70:a1:49:7e:01:7d:de:f9:b5:72:66:77:2a:5a:a5:93:c7: ef:34:62:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFDtSYSJahFhY1IeypBaggFy2WdMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk2OEYwOEMzQkQwQTgyMTExMkJEQkQ4NjkxNEVENTk2 NEExRkYyOTAeFw0yNTA1MDYxODMzMTJaFw0yNjA1MDUxODM4MTJaMDMxMTAvBgNV BAMTKEU1RDlEMEU5MzAzRTU0RTAzNDg3RDg2MDg3MDVFMjBCOUIyRUFGMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpj+Ad3mS7rSpt8BYBSLNDMtEy 9HOFyAe9c/Male62FpXHz5JJkRVzGu9pWsxUZdRzai82VB5EXTg3jIOUISdk8mdJ yUQA15SFzlusOPLsacF4LQ6xCEyX7VvpI9kQYhCI1gxZIGUwNeyJcOC92kmOsg+g 7a42cmUb/ut9ricgDmOn49obTu7uD8T1kjKDMNgKn5OVrByyYvCDkTh6mv2NWQdj qQasKte3fQoqtW7cX3MtL9/9BLTWetoCkoH1vyKC83MsYSG+JGyyWGbFBBhi+4no ElYE1eGWHoi9MhSkp/Fw4ynjYJ6wJ8LjAgqOZb719Qp78OqmGoe5c4p4TtrdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU5dnQ6TA+VOA0h9hghwXiC5surygwHwYDVR0j BBgwFoAU6WjwjDvQqCERK9vYaRTtWWSh/ykwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlAyVzVUR3liU0Y3QVdXSzlBS2tBZE5Ob0JTVnVmeWp5NjMydXZYU0NN Vk4vMC9FOTY4RjA4QzNCRDBBODIxMTEyQkRCRDg2OTE0RUQ1OTY0QTFGRjI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U5NjhGMDhDM0JEMEE4MjEx MTJCREJEODY5MTRFRDU5NjRBMUZGMjkuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJQMlc1VEd5YlNGN0FXV0s5QUtrQWROTm9CU1Z1ZnlqeTYzMnV2WFNDTVZOLzAv MzIzODMwMzQzYTM1MzEzMDM0M2EzMzMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl MjAzMjM2MzgzNDMyMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBFEEAzANBgkqhkiG9w0BAQsFAAOC AQEAtnNbPHIMorcGXcEoI9EzhLPQBPovI/EBrNnsV9fuKGTXYbytmBFoTA9Qf6qo Hc/mbKkyiAzZxEw9cI1wm0/JvKt1im51HYxVO12jVngWYEa4FGLr5ZZsINy8Ka3x 8/8mLcew3kgMI/HllAcRmP+ddMIN7Y7k++x/WZEs2FOr3QMDWPte4iodNDx+XV5/ gp1uiLqo6H5IBOZG2P9Ng67AvyzSQHRAR9go7LysiiTIDqV1V8v1iF+/Y7JhIMLd KOetQAL75DpvGc8cX6jqm6IA1ryP8eqj3XowWwijMpAv67DLdc4Zdpz+sz6KGnCh SX4Bfd75tXJmdypapZPH7zRi5g== -----END CERTIFICATE-----Generated at Tue May 13 15:09:58 2025 by rpki-client