$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a363030643a3a2f34382d3438203d3e203532373036.roa File: 323830343a6337303a363030643a3a2f34382d3438203d3e203532373036.roa (raw, json) Hash identifier: 3Q61+nVEW1XVsVfuqpnvuIZSsgSc/w86PXu5Nhva1D8= Subject key identifier: D3:6A:C3:BD:C0:24:FB:0A:9E:44:DA:84:9B:FA:EB:9D:ED:E2:F2:D0 Certificate issuer: /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6 Certificate serial: 2A5C8B6239E684F905EFDBEE1EEBA2EE20950E55 Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer Subject info access: rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a363030643a3a2f34382d3438203d3e203532373036.roa Signing time: Thu 20 Mar 2025 20:07:50 +0000 ROA not before: Thu 20 Mar 2025 20:02:50 +0000 ROA not after: Thu 19 Mar 2026 20:07:50 +0000 asID: 52706 IP address blocks: 2804:c70:600d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 15 May 2025 01:49:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:5c:8b:62:39:e6:84:f9:05:ef:db:ee:1e:eb:a2:ee:20:95:0e:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6 Validity Not Before: Mar 20 20:02:50 2025 GMT Not After : Mar 19 20:07:50 2026 GMT Subject: CN=D36AC3BDC024FB0A9E44DA849BFAEB9DEDE2F2D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0d:21:e4:60:bf:30:72:dd:c5:db:c9:c0:c1: 83:8b:c8:c2:90:71:41:be:47:05:a5:e3:c2:04:65: 6c:4d:6b:5f:1a:e2:a6:e4:a9:2f:a7:4e:1c:3c:20: 46:8f:1f:65:98:a4:b5:f7:89:60:02:0b:e9:25:84: 25:c4:1b:87:75:b9:8d:5b:88:ae:fa:a8:4e:66:7e: 25:a8:9f:c0:a9:a0:1e:7d:0a:a2:28:cd:47:1d:c6: 1b:99:aa:1c:6d:5d:56:2d:bb:4b:1c:4d:2f:9d:5d: d3:d6:00:46:3a:f3:d3:e6:98:83:03:2a:38:9e:be: 0c:b7:a2:79:8f:36:a8:a9:4f:9b:3e:f1:ca:ca:83: 95:02:33:30:e4:ab:a4:75:49:7f:f9:b0:e7:5d:1d: 2b:19:b3:c6:1c:1b:48:f5:39:b4:c3:f7:a8:a4:13: 35:dc:47:53:2d:3e:0e:06:7d:a1:32:10:a9:17:99: 80:a9:d8:21:f4:3b:1c:d7:ff:3a:93:77:c3:e4:f2: 51:8f:a2:ab:bf:4c:75:94:4b:9d:0a:bc:f8:ab:55: 55:e3:c0:d6:fa:76:5b:fd:76:f9:80:e1:13:7c:43: f6:65:1f:81:08:df:1c:dc:8e:b4:43:a4:34:a3:48: c6:96:b9:d7:c0:ed:26:3f:e8:6c:46:f6:b7:4c:77: bf:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:6A:C3:BD:C0:24:FB:0A:9E:44:DA:84:9B:FA:EB:9D:ED:E2:F2:D0 X509v3 Authority Key Identifier: keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a363030643a3a2f34382d3438203d3e203532373036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:c70:600d::/48 Signature Algorithm: sha256WithRSAEncryption 92:ec:1b:a4:64:d2:58:d3:23:db:24:40:81:2b:87:76:bf:e7: b8:e3:9b:ab:54:a5:af:34:46:58:c6:ee:ce:39:8a:33:2f:38: 5e:08:2f:ea:fd:2e:cf:4d:54:67:48:87:19:43:80:86:74:8b: ec:ed:ef:38:d9:e3:1c:9f:ee:44:14:f9:b5:63:0d:1f:ed:ed: aa:ad:37:a6:df:60:e5:90:9f:6b:12:a5:e1:b2:12:9f:46:f4: 2f:ea:b7:49:f6:15:c4:68:74:86:07:15:38:a9:7c:c3:00:60: 7f:06:db:84:2e:dd:2a:6c:40:83:14:9a:64:63:88:75:30:47: e1:53:62:12:ac:05:48:16:78:db:f6:49:4a:42:a7:7b:62:15: 6b:26:2c:52:16:9e:24:03:1d:67:cd:81:ff:cb:2d:f2:67:d6: ab:df:69:79:4d:0b:87:49:32:33:a9:5f:50:9d:f3:31:a2:2d: a5:fa:45:08:0f:32:15:70:c2:2a:93:c8:6e:0f:37:ed:de:02: 9a:97:45:3a:f9:a3:3e:93:4b:b8:36:63:99:df:5d:83:c7:ad: 97:98:c3:2d:b2:b7:9b:d0:d9:9e:7f:13:91:6b:c4:19:00:1b: 23:4b:83:03:22:88:65:cc:f1:42:2f:b2:c9:5d:7d:f9:35:47: 50:98:4f:b1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIUKlyLYjnmhPkF79vuHuui7iCVDlUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM1RTU0RjFEMDI2M0I4RTkwM0EwOTI5QTYxMzEzQzhD NUJFOERBNjAeFw0yNTAzMjAyMDAyNTBaFw0yNjAzMTkyMDA3NTBaMDMxMTAvBgNV BAMTKEQzNkFDM0JEQzAyNEZCMEE5RTQ0REE4NDlCRkFFQjlERURFMkYyRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChDSHkYL8wct3F28nAwYOLyMKQ cUG+RwWl48IEZWxNa18a4qbkqS+nThw8IEaPH2WYpLX3iWACC+klhCXEG4d1uY1b iK76qE5mfiWon8CpoB59CqIozUcdxhuZqhxtXVYtu0scTS+dXdPWAEY689PmmIMD Kjievgy3onmPNqipT5s+8crKg5UCMzDkq6R1SX/5sOddHSsZs8YcG0j1ObTD96ik EzXcR1MtPg4GfaEyEKkXmYCp2CH0OxzX/zqTd8Pk8lGPoqu/THWUS50KvPirVVXj wNb6dlv9dvmA4RN8Q/ZlH4EI3xzcjrRDpDSjSMaWudfA7SY/6GxG9rdMd7+5AgMB AAGjggJYMIICVDAdBgNVHQ4EFgQU02rDvcAk+wqeRNqEm/rrne3i8tAwHwYDVR0j BBgwFoAU415U8dAmO46QOgkpphMTyMW+jaYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEdIYU5yeFVTdUVjUWpuSDNqam0zaEE3cHBuSjZKdDJnRU1VdGdxYXhX MUcvMS9FMzVFNTRGMUQwMjYzQjhFOTAzQTA5MjlBNjEzMTNDOEM1QkU4REE2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UzNUU1NEYxRDAyNjNCOEU5 MDNBMDkyOUE2MTMxM0M4QzVCRThEQTYuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzRHSGFOcnhVU3VFY1FqbkgzamptM2hBN3Bwbko2SnQyZ0VNVXRncWF4VzFHLzEv MzIzODMwMzQzYTYzMzczMDNhMzYzMDMwNjQzYTNhMmYzNDM4MmQzNDM4MjAzZDNl MjAzNTMyMzczMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAQMcGANMA0GCSqGSIb3DQEBCwUAA4IB AQCS7BukZNJY0yPbJECBK4d2v+e445urVKWvNEZYxu7OOYozLzheCC/q/S7PTVRn SIcZQ4CGdIvs7e842eMcn+5EFPm1Yw0f7e2qrTem32DlkJ9rEqXhshKfRvQv6rdJ 9hXEaHSGBxU4qXzDAGB/BtuELt0qbECDFJpkY4h1MEfhU2ISrAVIFnjb9klKQqd7 YhVrJixSFp4kAx1nzYH/yy3yZ9ar32l5TQuHSTIzqV9QnfMxoi2l+kUIDzIVcMIq k8huDzft3gKal0U6+aM+k0u4NmOZ312Dx62XmMMtsreb0NmefxORa8QZABsjS4MD IohlzPFCL7LJXX35NUdQmE+x -----END CERTIFICATE-----Generated at Wed May 14 12:59:18 2025 by rpki-client