$ rpki-client -vvf rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/323830343a343635343a343030303a3a2f33342d3334203d3e20323636393833.roa File: 323830343a343635343a343030303a3a2f33342d3334203d3e20323636393833.roa (raw, json) Hash identifier: hAb7oOtS5cQjxbGqNiEr5Myh2BbgNZT6iaD/wQxN+/Q= Subject key identifier: F7:F6:F1:54:C1:01:64:55:47:3A:B9:D3:B7:D4:DC:91:E5:02:DC:0C Certificate issuer: /CN=3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F Certificate serial: 0A6328B40CA54DAA111A155B1C5D8E19704A2D0F Authority key identifier: 3D:C3:91:5B:16:1F:2F:1D:4A:EF:DF:6B:F5:81:EE:C0:95:B3:D6:0F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F.cer Subject info access: rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/323830343a343635343a343030303a3a2f33342d3334203d3e20323636393833.roa Signing time: Tue 06 May 2025 12:25:36 +0000 ROA not before: Tue 06 May 2025 12:20:36 +0000 ROA not after: Tue 05 May 2026 12:25:36 +0000 asID: 266983 IP address blocks: 2804:4654:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F.crl rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 May 2025 22:15:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:63:28:b4:0c:a5:4d:aa:11:1a:15:5b:1c:5d:8e:19:70:4a:2d:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F Validity Not Before: May 6 12:20:36 2025 GMT Not After : May 5 12:25:36 2026 GMT Subject: CN=F7F6F154C1016455473AB9D3B7D4DC91E502DC0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ec:c3:e7:f4:b9:ea:fa:2b:5c:7d:0c:30:be: ab:14:14:4b:a5:5c:b1:4c:27:b5:3c:88:0f:77:6e: b9:34:4e:06:8b:d9:2f:4e:e7:e4:66:53:17:f8:67: 03:4e:3c:6b:87:ed:89:b6:d8:5b:4f:33:d1:ba:1b: 17:d6:d4:8b:58:3e:43:dd:58:be:af:fd:f2:dc:37: ab:e8:55:64:7e:18:e7:9b:4b:d7:7a:c8:88:db:ec: d8:56:d5:ff:70:9d:f8:b9:58:8f:89:a0:f7:83:99: f2:61:5d:d4:0b:f2:b3:ce:d2:c7:59:c9:77:27:eb: 38:6e:60:b4:dc:f7:44:a2:b4:88:f2:06:92:cb:0b: 63:7d:40:74:91:fb:bf:98:e3:f4:e8:33:26:d3:24: c3:a6:64:42:ec:d4:44:1e:34:ec:b7:51:b2:fe:d0: 54:36:77:21:1d:8b:f3:1c:b5:3e:89:76:43:5e:45: 2b:c4:9a:9c:f5:99:3d:40:e5:fc:a7:7a:7a:bd:87: 89:e6:91:c3:f4:ab:00:3d:6e:ec:a2:a1:2d:b1:61: d2:db:28:1f:20:cb:9e:87:27:7d:2b:a5:f7:b0:9b: 1a:85:ca:52:18:5f:19:1d:fd:2c:61:8d:6c:5a:45: 26:0b:20:08:06:ed:76:d5:f5:a9:18:5e:1c:67:f6: c9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:F6:F1:54:C1:01:64:55:47:3A:B9:D3:B7:D4:DC:91:E5:02:DC:0C X509v3 Authority Key Identifier: keyid:3D:C3:91:5B:16:1F:2F:1D:4A:EF:DF:6B:F5:81:EE:C0:95:B3:D6:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/323830343a343635343a343030303a3a2f33342d3334203d3e20323636393833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:4654:4000::/34 Signature Algorithm: sha256WithRSAEncryption be:a8:f2:24:4c:45:9a:e8:2c:43:7f:6d:8e:2d:27:3d:76:2d: 07:ea:a3:79:0c:e4:3e:6f:66:26:17:4f:ea:09:1f:2e:06:ec: 3d:bb:e8:f4:9b:ef:b5:68:32:c2:52:81:a1:c4:b7:22:45:8f: 42:79:91:6f:d5:85:0a:9a:e7:3c:4f:0a:97:19:b1:13:f3:be: 53:dd:c4:5e:98:60:3e:8c:49:41:26:5d:8b:b4:f0:05:8c:75: 4a:9a:c6:f1:a6:92:94:26:a6:18:27:7e:31:01:d3:ca:19:61: 0c:4b:c9:41:fc:05:3a:3f:53:1c:e4:c4:dc:e1:27:c2:85:32: 70:5a:44:20:ce:03:70:27:7f:d6:a5:81:b7:af:df:22:2c:42: 19:21:01:ae:7b:d8:1a:2e:12:68:5d:24:b5:fe:87:bf:44:8b: 3a:55:fc:dd:d3:a4:45:5e:19:7f:ba:a4:c5:7b:7f:52:19:4f: 58:3a:c5:a4:55:c5:51:01:4f:f3:aa:b7:74:6c:a3:10:c8:93: 99:67:e8:15:26:17:3c:89:27:c9:eb:51:a0:41:7d:34:94:ad: f0:f5:ea:41:75:13:a2:e9:0d:d9:b1:b6:e1:ec:48:0d:3c:7d: 9d:27:59:96:f5:96:92:21:fc:50:0b:b9:8c:00:90:bd:d2:9f: d5:1d:cb:3e -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUCmMotAylTaoRGhVbHF2OGXBKLQ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0RDMzkxNUIxNjFGMkYxRDRBRUZERjZCRjU4MUVFQzA5 NUIzRDYwRjAeFw0yNTA1MDYxMjIwMzZaFw0yNjA1MDUxMjI1MzZaMDMxMTAvBgNV BAMTKEY3RjZGMTU0QzEwMTY0NTU0NzNBQjlEM0I3RDREQzkxRTUwMkRDMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL7MPn9Lnq+itcfQwwvqsUFEul XLFMJ7U8iA93brk0TgaL2S9O5+RmUxf4ZwNOPGuH7Ym22FtPM9G6GxfW1ItYPkPd WL6v/fLcN6voVWR+GOebS9d6yIjb7NhW1f9wnfi5WI+JoPeDmfJhXdQL8rPO0sdZ yXcn6zhuYLTc90SitIjyBpLLC2N9QHSR+7+Y4/ToMybTJMOmZELs1EQeNOy3UbL+ 0FQ2dyEdi/MctT6JdkNeRSvEmpz1mT1A5fynenq9h4nmkcP0qwA9buyioS2xYdLb KB8gy56HJ30rpfewmxqFylIYXxkd/SxhjWxaRSYLIAgG7XbV9akYXhxn9sn9AgMB AAGjggJbMIICVzAdBgNVHQ4EFgQU9/bxVMEBZFVHOrnTt9TckeUC3AwwHwYDVR0j BBgwFoAUPcORWxYfLx1K799r9YHuwJWz1g8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ01KaHRWOE5kbUdYcXRYWnlaTHVoQXdRWmtYTk1vQlBQaTJDN2N4SFlW WWgvMC8zREMzOTE1QjE2MUYyRjFENEFFRkRGNkJGNTgxRUVDMDk1QjNENjBGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNEQzM5MTVCMTYxRjJGMUQ0 QUVGREY2QkY1ODFFRUMwOTVCM0Q2MEYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NNSmh0VjhOZG1HWHF0WFp5Wkx1aEF3UVprWE5Nb0JQUGkyQzdjeEhZVlloLzAv MzIzODMwMzQzYTM0MzYzNTM0M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzYzNjM5MzgzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigERlRAMA0GCSqGSIb3DQEBCwUA A4IBAQC+qPIkTEWa6CxDf22OLSc9di0H6qN5DOQ+b2YmF0/qCR8uBuw9u+j0m++1 aDLCUoGhxLciRY9CeZFv1YUKmuc8TwqXGbET875T3cRemGA+jElBJl2LtPAFjHVK msbxppKUJqYYJ34xAdPKGWEMS8lB/AU6P1Mc5MTc4SfChTJwWkQgzgNwJ3/WpYG3 r98iLEIZIQGue9gaLhJoXSS1/oe/RIs6Vfzd06RFXhl/uqTFe39SGU9YOsWkVcVR AU/zqrd0bKMQyJOZZ+gVJhc8iSfJ61GgQX00lK3w9epBdROi6Q3Zsbbh7EgNPH2d J1mW9ZaSIfxQC7mMAJC90p/VHcs+ -----END CERTIFICATE-----Generated at Mon May 12 12:45:43 2025 by rpki-client