$ rpki-client -vvf rpki-repo.registro.br/repo/43izrA79iDUaUhriYNHo2sLt88gt9AzH3HKb17tvUNXL/0/323830343a343731383a3a2f33322d3332203d3e20323637303331.roa File: 323830343a343731383a3a2f33322d3332203d3e20323637303331.roa (raw, json) Hash identifier: /Z2cc9omTNOA+CEVhULGBr20Fo1R/QLJKW1oSDibwqM= Subject key identifier: 7B:9C:D3:92:F4:79:2A:7D:80:0B:EB:43:15:95:FB:38:A2:FF:4E:13 Certificate issuer: /CN=4AA95AE73AB95BD03B1B2AAF880057D08EC23AC0 Certificate serial: 6E8972DF3B5D8BD987F5EBADF969DC6FA0680419 Authority key identifier: 4A:A9:5A:E7:3A:B9:5B:D0:3B:1B:2A:AF:88:00:57:D0:8E:C2:3A:C0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AA95AE73AB95BD03B1B2AAF880057D08EC23AC0.cer Subject info access: rsync://rpki-repo.registro.br/repo/43izrA79iDUaUhriYNHo2sLt88gt9AzH3HKb17tvUNXL/0/323830343a343731383a3a2f33322d3332203d3e20323637303331.roa Signing time: Tue 17 Jun 2025 20:35:22 +0000 ROA not before: Tue 17 Jun 2025 20:30:22 +0000 ROA not after: Tue 16 Jun 2026 20:35:22 +0000 asID: 267031 IP address blocks: 2804:4718::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/43izrA79iDUaUhriYNHo2sLt88gt9AzH3HKb17tvUNXL/0/4AA95AE73AB95BD03B1B2AAF880057D08EC23AC0.crl rsync://rpki-repo.registro.br/repo/43izrA79iDUaUhriYNHo2sLt88gt9AzH3HKb17tvUNXL/0/4AA95AE73AB95BD03B1B2AAF880057D08EC23AC0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AA95AE73AB95BD03B1B2AAF880057D08EC23AC0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 02 Jul 2025 05:37:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:89:72:df:3b:5d:8b:d9:87:f5:eb:ad:f9:69:dc:6f:a0:68:04:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AA95AE73AB95BD03B1B2AAF880057D08EC23AC0 Validity Not Before: Jun 17 20:30:22 2025 GMT Not After : Jun 16 20:35:22 2026 GMT Subject: CN=7B9CD392F4792A7D800BEB431595FB38A2FF4E13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:dc:29:7c:cb:c4:fa:0a:bc:a6:4f:ee:51:98: 2e:0b:29:ff:3a:f1:7e:94:01:25:02:68:c6:18:05: d3:4b:c9:67:b3:43:cf:a3:08:60:c1:85:09:88:2a: a8:7a:cf:b8:c2:f6:ab:64:48:7f:14:b3:ba:39:95: a7:7f:b1:fd:0c:0e:4a:90:83:b9:1c:f7:3a:ea:b8: 8a:92:49:cc:e2:c1:61:0a:d4:37:f7:16:d3:5c:b9: 09:9c:e8:96:3c:8b:21:f8:10:09:a7:cd:d6:5e:63: 73:74:98:f6:f2:3f:d6:9c:f6:5a:9a:6a:2d:62:d9: 94:28:08:86:f5:6c:5b:97:98:b0:31:98:b0:f8:26: a8:5b:cb:ec:90:ac:8f:03:95:af:7a:63:06:10:de: 86:61:62:71:d9:ab:c6:1f:a6:89:83:a9:d5:d6:12: da:e3:55:7b:7f:51:77:7a:9b:9d:49:ec:7a:66:8c: 95:e9:e8:b9:17:d6:3d:03:55:fa:6d:dd:a0:40:9b: c1:da:82:76:bb:cd:ab:ae:85:07:15:1a:87:64:3b: 34:a5:62:b4:bd:4d:bd:48:84:71:b5:39:54:1e:4c: 34:0b:24:dd:ec:3e:58:f0:c9:7a:4f:ce:b9:31:e7: 23:ba:8c:ed:11:7d:9e:07:23:ef:74:7d:9b:a9:b4: 74:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:9C:D3:92:F4:79:2A:7D:80:0B:EB:43:15:95:FB:38:A2:FF:4E:13 X509v3 Authority Key Identifier: keyid:4A:A9:5A:E7:3A:B9:5B:D0:3B:1B:2A:AF:88:00:57:D0:8E:C2:3A:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/43izrA79iDUaUhriYNHo2sLt88gt9AzH3HKb17tvUNXL/0/4AA95AE73AB95BD03B1B2AAF880057D08EC23AC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AA95AE73AB95BD03B1B2AAF880057D08EC23AC0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/43izrA79iDUaUhriYNHo2sLt88gt9AzH3HKb17tvUNXL/0/323830343a343731383a3a2f33322d3332203d3e20323637303331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:4718::/32 Signature Algorithm: sha256WithRSAEncryption 78:44:f7:f1:cb:25:fc:3e:1f:03:97:c3:5d:c4:e1:9a:17:31: b9:0b:ef:b1:18:e4:c2:aa:b7:7c:07:31:4f:1c:fd:77:41:b7: d6:49:f7:19:e7:49:34:b8:4a:a0:54:59:9a:a7:39:80:6a:70: cb:23:18:11:1e:78:82:64:6b:7a:41:87:62:5f:ac:71:3e:42: 31:73:6a:71:01:1b:3a:83:9e:af:55:5f:3c:c0:c2:de:23:82: 09:e6:60:cd:a3:fb:bf:41:e2:58:5a:2a:2e:bb:66:33:16:ec: 1a:5a:58:7d:de:7e:9c:5d:6f:65:51:d5:32:0d:be:54:99:fe: ef:00:ff:19:54:d7:7d:e4:bf:96:cf:55:62:f3:93:6a:47:43: f6:89:b5:3c:7c:6e:d9:29:92:48:c3:58:3d:01:17:c5:aa:3b: 7f:c4:7a:7c:9d:3e:84:29:06:be:29:50:85:f6:fc:db:d5:b7: a2:d4:43:15:87:ad:42:fe:a7:ac:7b:15:e0:2c:4a:5f:37:03: e5:64:ff:41:11:85:30:c3:db:86:da:10:fb:b6:46:47:f2:8c: 38:9a:90:43:4a:32:91:97:ce:3f:ea:06:89:b1:06:a1:e0:e9: e9:d7:f0:c1:9a:d1:7b:c9:13:0e:9a:51:b8:82:c6:a5:5c:c2: be:8b:2b:d4 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUboly3ztdi9mH9eut+Wncb6BoBBkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFBOTVBRTczQUI5NUJEMDNCMUIyQUFGODgwMDU3RDA4 RUMyM0FDMDAeFw0yNTA2MTcyMDMwMjJaFw0yNjA2MTYyMDM1MjJaMDMxMTAvBgNV BAMTKDdCOUNEMzkyRjQ3OTJBN0Q4MDBCRUI0MzE1OTVGQjM4QTJGRjRFMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz3Cl8y8T6CrymT+5RmC4LKf86 8X6UASUCaMYYBdNLyWezQ8+jCGDBhQmIKqh6z7jC9qtkSH8Us7o5lad/sf0MDkqQ g7kc9zrquIqSScziwWEK1Df3FtNcuQmc6JY8iyH4EAmnzdZeY3N0mPbyP9ac9lqa ai1i2ZQoCIb1bFuXmLAxmLD4Jqhby+yQrI8Dla96YwYQ3oZhYnHZq8YfpomDqdXW EtrjVXt/UXd6m51J7HpmjJXp6LkX1j0DVfpt3aBAm8Hagna7zauuhQcVGodkOzSl YrS9Tb1IhHG1OVQeTDQLJN3sPljwyXpPzrkx5yO6jO0RfZ4HI+90fZuptHRHAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUe5zTkvR5Kn2AC+tDFZX7OKL/ThMwHwYDVR0j BBgwFoAUSqla5zq5W9A7GyqviABX0I7COsAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNDNpenJBNzlpRFVhVWhyaVlOSG8yc0x0ODhndDlBekgzSEtiMTd0dlVO WEwvMC80QUE5NUFFNzNBQjk1QkQwM0IxQjJBQUY4ODAwNTdEMDhFQzIzQUMwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRBQTk1QUU3M0FCOTVCRDAz QjFCMkFBRjg4MDA1N0QwOEVDMjNBQzAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzQzaXpyQTc5aURVYVVocmlZTkhvMnNMdDg4Z3Q5QXpIM0hLYjE3dHZVTlhMLzAv MzIzODMwMzQzYTM0MzczMTM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM3 MzAzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKARHGDANBgkqhkiG9w0BAQsFAAOCAQEAeET38csl /D4fA5fDXcThmhcxuQvvsRjkwqq3fAcxTxz9d0G31kn3GedJNLhKoFRZmqc5gGpw yyMYER54gmRrekGHYl+scT5CMXNqcQEbOoOer1VfPMDC3iOCCeZgzaP7v0HiWFoq LrtmMxbsGlpYfd5+nF1vZVHVMg2+VJn+7wD/GVTXfeS/ls9VYvOTakdD9om1PHxu 2SmSSMNYPQEXxao7f8R6fJ0+hCkGvilQhfb829W3otRDFYetQv6nrHsV4CxKXzcD 5WT/QRGFMMPbhtoQ+7ZGR/KMOJqQQ0oykZfOP+oGibEGoeDp6dfwwZrRe8kTDppR uILGpVzCvosr1A== -----END CERTIFICATE-----Generated at Tue Jul 1 17:06:50 2025 by rpki-client