$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/323830343a313039343a313030303a3a2f34302d3430203d3e20323633363431.roa File: 323830343a313039343a313030303a3a2f34302d3430203d3e20323633363431.roa (raw, json) Hash identifier: DlTrmBVi4RHQwbH9c3mgQpVgqpFDCQduBQc+oipRA6U= Subject key identifier: DC:A6:0B:43:F7:E4:BB:E5:D9:11:01:84:25:34:BF:FE:01:8B:D0:BB Certificate issuer: /CN=68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F Certificate serial: 68E26D77C88B9812C2B353425E221304E0BAAA03 Authority key identifier: 68:D2:D3:D7:C2:F7:A7:3F:8D:5D:22:BC:53:0D:02:F8:A3:64:46:1F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.cer Subject info access: rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/323830343a313039343a313030303a3a2f34302d3430203d3e20323633363431.roa Signing time: Mon 30 Jun 2025 01:10:21 +0000 ROA not before: Mon 30 Jun 2025 01:05:21 +0000 ROA not after: Mon 29 Jun 2026 01:10:21 +0000 asID: 263641 IP address blocks: 2804:1094:1000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.crl rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Jul 2025 11:20:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:e2:6d:77:c8:8b:98:12:c2:b3:53:42:5e:22:13:04:e0:ba:aa:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F Validity Not Before: Jun 30 01:05:21 2025 GMT Not After : Jun 29 01:10:21 2026 GMT Subject: CN=DCA60B43F7E4BBE5D91101842534BFFE018BD0BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:07:65:93:1d:c5:03:02:66:ae:c0:30:9f:d0: 77:39:38:ff:eb:f9:10:15:e7:5f:11:c7:c7:03:18: ba:cb:62:7b:b7:5c:7e:bf:4c:7a:07:8c:ff:62:2e: d8:b3:3a:67:cf:1f:c2:17:cd:54:e1:d0:87:07:b8: fb:a7:22:76:21:d3:c0:e0:6a:c2:df:cd:db:65:3c: ab:5e:2f:0e:32:2c:ea:8c:d7:ca:14:08:ec:ca:2f: 90:95:76:95:49:83:b3:49:98:33:a1:05:8c:06:22: d7:3d:a5:80:04:37:1c:ae:4a:d7:a4:20:86:a0:8c: a1:c9:e8:4c:65:6b:45:7d:b6:0d:4e:f8:f8:a5:d2: db:81:91:77:54:c2:66:dd:f8:f9:63:5a:42:f5:8c: e3:45:c6:bc:11:53:d6:65:39:48:65:dc:a6:ea:20: d6:c1:60:55:c9:59:a4:15:0e:a9:07:55:3c:d5:f6: bf:53:5e:fa:f8:8a:fa:8d:6a:84:72:b6:82:e6:e4: ac:f9:9c:f4:ef:3f:ef:f5:f0:fb:68:8d:b6:46:cd: b8:29:7a:52:22:be:e6:ca:f2:01:74:43:30:75:e9: 3b:00:74:24:61:aa:06:91:fc:56:5f:52:da:dc:f2: 7d:2a:fe:7e:d2:da:1e:9e:a7:d8:6c:82:a7:79:bb: 51:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:A6:0B:43:F7:E4:BB:E5:D9:11:01:84:25:34:BF:FE:01:8B:D0:BB X509v3 Authority Key Identifier: keyid:68:D2:D3:D7:C2:F7:A7:3F:8D:5D:22:BC:53:0D:02:F8:A3:64:46:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/323830343a313039343a313030303a3a2f34302d3430203d3e20323633363431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:1094:1000::/40 Signature Algorithm: sha256WithRSAEncryption 24:af:28:10:1c:5f:3d:b8:07:d8:a5:25:94:b5:b1:5e:73:11: bb:1c:1b:22:3c:20:b4:5b:01:eb:74:22:18:32:57:38:c9:88: b2:34:3d:f5:85:fb:32:b8:85:d0:0c:7b:9e:c9:fe:13:bd:16: e8:ed:66:b0:3f:74:2e:27:de:70:30:7b:f9:d3:d0:58:29:c2: a9:5e:f5:fa:13:d7:22:ba:b6:56:c3:d1:c6:9b:2e:d2:ef:52: 2a:f8:7a:41:95:01:a0:2c:40:f1:87:43:23:75:88:3e:54:66: 2c:a5:0b:13:a6:f1:64:b1:5c:88:16:fb:27:f5:37:85:6d:a9: 77:6d:b2:48:dc:de:f8:3e:08:b7:51:f7:90:94:26:5e:e5:d8: d1:f2:02:7a:b5:d5:79:ef:91:0a:de:c5:f8:12:35:b5:33:9d: 6e:a3:27:da:d9:77:f7:4c:30:c5:48:b6:da:7d:e2:45:db:b3: 32:2d:c7:57:60:2d:b3:45:16:9d:b8:0c:03:4c:9a:1a:4c:2b: 06:ec:c9:41:39:48:df:35:54:66:a9:50:ac:c6:45:35:13:b1: ed:06:88:61:1a:c9:c7:c3:4c:44:f2:f7:5c:75:a8:78:8d:08: c5:09:14:b1:df:d7:34:b5:74:91:d2:e0:e2:15:6f:1c:8d:78: 76:39:3c:c7 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUaOJtd8iLmBLCs1NCXiITBOC6qgMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhEMkQzRDdDMkY3QTczRjhENUQyMkJDNTMwRDAyRjhB MzY0NDYxRjAeFw0yNTA2MzAwMTA1MjFaFw0yNjA2MjkwMTEwMjFaMDMxMTAvBgNV BAMTKERDQTYwQjQzRjdFNEJCRTVEOTExMDE4NDI1MzRCRkZFMDE4QkQwQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1B2WTHcUDAmauwDCf0Hc5OP/r +RAV518Rx8cDGLrLYnu3XH6/THoHjP9iLtizOmfPH8IXzVTh0IcHuPunInYh08Dg asLfzdtlPKteLw4yLOqM18oUCOzKL5CVdpVJg7NJmDOhBYwGItc9pYAENxyuStek IIagjKHJ6Exla0V9tg1O+Pil0tuBkXdUwmbd+PljWkL1jONFxrwRU9ZlOUhl3Kbq INbBYFXJWaQVDqkHVTzV9r9TXvr4ivqNaoRytoLm5Kz5nPTvP+/18PtojbZGzbgp elIivubK8gF0QzB16TsAdCRhqgaR/FZfUtrc8n0q/n7S2h6ep9hsgqd5u1EDAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQU3KYLQ/fku+XZEQGEJTS//gGL0LswHwYDVR0j BBgwFoAUaNLT18L3pz+NXSK8Uw0C+KNkRh8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0p2d3hCS01vcVBFNXVuektGNlJ4c3UxY0J4YTVQWkFGYlBwdVNIRnhm a2EvMC82OEQyRDNEN0MyRjdBNzNGOEQ1RDIyQkM1MzBEMDJGOEEzNjQ0NjFGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4RDJEM0Q3QzJGN0E3M0Y4 RDVEMjJCQzUzMEQwMkY4QTM2NDQ2MUYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NKdnd4QktNb3FQRTV1bnpLRjZSeHN1MWNCeGE1UFpBRmJQcHVTSEZ4ZmthLzAv MzIzODMwMzQzYTMxMzAzOTM0M2EzMTMwMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk M2UyMDMyMzYzMzM2MzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEEJQQMA0GCSqGSIb3DQEBCwUA A4IBAQAkrygQHF89uAfYpSWUtbFecxG7HBsiPCC0WwHrdCIYMlc4yYiyND31hfsy uIXQDHueyf4TvRbo7WawP3QuJ95wMHv509BYKcKpXvX6E9ciurZWw9HGmy7S71Iq +HpBlQGgLEDxh0MjdYg+VGYspQsTpvFksVyIFvsn9TeFbal3bbJI3N74Pgi3UfeQ lCZe5djR8gJ6tdV575EK3sX4EjW1M51uoyfa2Xf3TDDFSLbafeJF27MyLcdXYC2z RRaduAwDTJoaTCsG7MlBOUjfNVRmqVCsxkU1E7HtBohhGsnHw0xE8vdcdah4jQjF CRSx39c0tXSR0uDiFW8cjXh2OTzH -----END CERTIFICATE-----Generated at Fri Jul 4 14:31:39 2025 by rpki-client