$ rpki-client -vvf rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/323830343a316332343a3a2f33322d3438203d3e203238363730.roa File: 323830343a316332343a3a2f33322d3438203d3e203238363730.roa (raw, json) Hash identifier: u6Bl3fA34g9rPNzODEuV4lckihjVaBSlIuK474RZ3Lw= Subject key identifier: 4B:29:F4:AE:75:26:88:2B:0D:76:D4:3C:AF:6E:ED:87:7B:D2:8E:62 Certificate issuer: /CN=4E7EB31B6D4532D1C10444DB3B88D1F6D002F236 Certificate serial: 1A6957AE6E2475D771465EB2B85A93C349704954 Authority key identifier: 4E:7E:B3:1B:6D:45:32:D1:C1:04:44:DB:3B:88:D1:F6:D0:02:F2:36 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.cer Subject info access: rsync://rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/323830343a316332343a3a2f33322d3438203d3e203238363730.roa Signing time: Tue 01 Jul 2025 15:46:35 +0000 ROA not before: Tue 01 Jul 2025 15:41:35 +0000 ROA not after: Tue 30 Jun 2026 15:46:35 +0000 asID: 28670 IP address blocks: 2804:1c24::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.crl rsync://rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 04 Jul 2025 00:23:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:69:57:ae:6e:24:75:d7:71:46:5e:b2:b8:5a:93:c3:49:70:49:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E7EB31B6D4532D1C10444DB3B88D1F6D002F236 Validity Not Before: Jul 1 15:41:35 2025 GMT Not After : Jun 30 15:46:35 2026 GMT Subject: CN=4B29F4AE7526882B0D76D43CAF6EED877BD28E62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d6:d1:3c:f8:75:8e:a1:09:9b:b7:5b:90:68: d6:63:2e:3f:99:48:f5:ef:93:21:99:25:da:5b:dd: de:95:9d:df:f0:2b:53:84:9f:f2:fc:8f:d5:8d:17: e3:10:50:e9:e5:a7:1e:2f:6e:e5:4b:ab:43:a8:2f: 6c:1f:d2:95:6c:8d:95:34:43:06:50:01:e7:a5:cf: 6f:c8:33:a8:52:87:20:8f:c2:43:4c:e4:39:56:55: 52:84:a7:49:ea:2e:21:fb:0e:53:b8:62:8b:d1:58: b6:55:4b:1c:be:c1:4f:a0:3c:ba:77:3c:de:1c:56: f0:69:31:35:bb:a0:41:3b:e6:c8:b3:74:02:0c:e9: 71:30:44:eb:32:78:32:f7:7a:29:c8:b0:2d:fc:ba: 46:f7:62:bf:99:c7:c8:12:6b:3d:87:d3:0f:d1:9a: ba:77:2b:b2:1e:fc:c7:4f:ca:01:40:a2:65:ed:91: 37:4d:17:d2:c8:aa:9e:1f:75:42:b8:c0:13:2c:53: fd:38:37:fe:f2:c0:c9:e5:d8:15:2e:b9:f2:b8:50: a6:00:69:88:04:d6:99:f7:7e:56:ab:e5:0e:61:84: be:e3:02:1e:aa:eb:b9:24:06:21:7c:db:f1:46:d9: 34:f6:1a:3a:7c:56:7d:06:dc:94:4f:80:d0:f8:83: c9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:29:F4:AE:75:26:88:2B:0D:76:D4:3C:AF:6E:ED:87:7B:D2:8E:62 X509v3 Authority Key Identifier: keyid:4E:7E:B3:1B:6D:45:32:D1:C1:04:44:DB:3B:88:D1:F6:D0:02:F2:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/323830343a316332343a3a2f33322d3438203d3e203238363730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:1c24::/32 Signature Algorithm: sha256WithRSAEncryption 61:33:65:4a:1a:02:77:88:e8:61:67:92:df:6b:b1:ac:1b:0a: 77:66:e0:60:20:8b:0e:a5:23:bc:1e:1a:c5:2e:31:9a:c0:1f: 69:82:51:f3:02:74:6f:90:ac:a7:06:b7:91:0c:da:8f:a3:72: 58:67:6b:83:27:f9:0b:96:5d:26:75:8b:a1:95:53:c3:cf:c7: 90:5f:6e:77:74:69:cf:1d:0e:c2:06:c9:d7:ac:95:3a:96:d5: d9:fc:0b:8a:82:b8:d7:e2:9e:4c:10:48:23:12:5d:17:af:1d: 0b:6d:a0:be:9e:b6:3f:a9:8b:53:13:1d:d7:aa:4e:9d:73:2e: 2d:1c:85:21:10:0d:f4:44:2b:41:17:1a:3b:e9:76:61:2e:77: f2:b3:e2:55:88:fc:65:44:b0:0f:14:5a:b8:06:9d:b1:e3:d2: 52:fb:1f:7a:be:43:c3:be:7f:77:d3:47:9c:02:ec:51:dc:3e: f3:98:57:f0:a4:7b:8b:e2:ce:48:83:82:6b:a7:e9:00:ae:f5: 12:78:29:3d:6f:95:28:78:de:21:08:8d:a8:a5:92:53:10:c4: 4e:3c:83:85:0a:a2:d1:d6:de:cc:7e:d8:79:c0:58:a0:8f:64: b5:da:06:05:b1:0c:b2:4a:ca:ee:e1:22:de:92:b9:27:6f:38: c4:69:76:e7 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIUGmlXrm4kdddxRl6yuFqTw0lwSVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEU3RUIzMUI2RDQ1MzJEMUMxMDQ0NERCM0I4OEQxRjZE MDAyRjIzNjAeFw0yNTA3MDExNTQxMzVaFw0yNjA2MzAxNTQ2MzVaMDMxMTAvBgNV BAMTKDRCMjlGNEFFNzUyNjg4MkIwRDc2RDQzQ0FGNkVFRDg3N0JEMjhFNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO1tE8+HWOoQmbt1uQaNZjLj+Z SPXvkyGZJdpb3d6Vnd/wK1OEn/L8j9WNF+MQUOnlpx4vbuVLq0OoL2wf0pVsjZU0 QwZQAeelz2/IM6hShyCPwkNM5DlWVVKEp0nqLiH7DlO4YovRWLZVSxy+wU+gPLp3 PN4cVvBpMTW7oEE75sizdAIM6XEwROsyeDL3einIsC38ukb3Yr+Zx8gSaz2H0w/R mrp3K7Ie/MdPygFAomXtkTdNF9LIqp4fdUK4wBMsU/04N/7ywMnl2BUuufK4UKYA aYgE1pn3flar5Q5hhL7jAh6q67kkBiF82/FG2TT2Gjp8Vn0G3JRPgND4g8lpAgMB AAGjggJOMIICSjAdBgNVHQ4EFgQUSyn0rnUmiCsNdtQ8r27th3vSjmIwHwYDVR0j BBgwFoAUTn6zG21FMtHBBETbO4jR9tAC8jYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNnJXenhZc2NqaFRqUkw5R2FVWDNGbVR6aXp2em5CZVNSTEc3aTYyRm5a UEwvMC80RTdFQjMxQjZENDUzMkQxQzEwNDQ0REIzQjg4RDFGNkQwMDJGMjM2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRFN0VCMzFCNkQ0NTMyRDFD MTA0NDREQjNCODhEMUY2RDAwMkYyMzYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzZyV3p4WXNjamhUalJMOUdhVVgzRm1Ueml6dnpuQmVTUkxHN2k2MkZuWlBMLzAv MzIzODMwMzQzYTMxNjMzMjM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzODM2 MzczMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB /wQRMA8wDQQCAAIwBwMFACgEHCQwDQYJKoZIhvcNAQELBQADggEBAGEzZUoaAneI 6GFnkt9rsawbCndm4GAgiw6lI7weGsUuMZrAH2mCUfMCdG+QrKcGt5EM2o+jclhn a4Mn+QuWXSZ1i6GVU8PPx5Bfbnd0ac8dDsIGydeslTqW1dn8C4qCuNfinkwQSCMS XRevHQttoL6etj+pi1MTHdeqTp1zLi0chSEQDfREK0EXGjvpdmEud/Kz4lWI/GVE sA8UWrgGnbHj0lL7H3q+Q8O+f3fTR5wC7FHcPvOYV/Cke4vizkiDgmun6QCu9RJ4 KT1vlSh43iEIjailklMQxE48g4UKotHW3sx+2HnAWKCPZLXaBgWxDLJKyu7hIt6S uSdvOMRpduc= -----END CERTIFICATE-----Generated at Thu Jul 3 10:03:12 2025 by rpki-client