$ rpki-client -vvf rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/323830343a323539633a626130303a3a2f34302d3430203d3e203532373732.roa File: 323830343a323539633a626130303a3a2f34302d3430203d3e203532373732.roa (raw, json) Hash identifier: I0tPiS/C+mNosKTubcjUSJlraIeJAuVaVZQDDmxBGQ4= Subject key identifier: D9:69:92:E3:5D:1D:38:87:62:30:92:35:3F:50:D3:E8:1B:92:29:01 Certificate issuer: /CN=9CE70F913E9137B352592B7A2C075D2EA9F4269D Certificate serial: 0FEDFB0080C8FFB3E1C87E26B43E15E68FABF770 Authority key identifier: 9C:E7:0F:91:3E:91:37:B3:52:59:2B:7A:2C:07:5D:2E:A9:F4:26:9D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CE70F913E9137B352592B7A2C075D2EA9F4269D.cer Subject info access: rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/323830343a323539633a626130303a3a2f34302d3430203d3e203532373732.roa Signing time: Thu 08 May 2025 18:30:36 +0000 ROA not before: Thu 08 May 2025 18:25:36 +0000 ROA not after: Thu 07 May 2026 18:30:36 +0000 asID: 52772 IP address blocks: 2804:259c:ba00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/9CE70F913E9137B352592B7A2C075D2EA9F4269D.crl rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/9CE70F913E9137B352592B7A2C075D2EA9F4269D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CE70F913E9137B352592B7A2C075D2EA9F4269D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 15 May 2025 02:15:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:ed:fb:00:80:c8:ff:b3:e1:c8:7e:26:b4:3e:15:e6:8f:ab:f7:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CE70F913E9137B352592B7A2C075D2EA9F4269D Validity Not Before: May 8 18:25:36 2025 GMT Not After : May 7 18:30:36 2026 GMT Subject: CN=D96992E35D1D3887623092353F50D3E81B922901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a8:c1:51:30:44:3e:c9:35:33:e0:01:8b:91: 6f:92:c6:5c:8d:a2:8b:4e:bd:a3:8d:7e:1a:e3:a3: fe:b2:66:b0:43:69:f3:f0:3c:c9:1b:e4:46:8f:41: 15:2b:83:11:af:a4:f1:87:c2:d0:e1:43:9f:51:c5: ac:62:ee:93:5d:70:6c:ea:24:ea:36:4f:c1:dd:4a: d2:94:69:66:f5:32:f0:be:f6:9d:1f:75:14:f0:d4: 2d:79:40:94:2f:44:ad:6c:ab:62:ca:c6:a7:f3:45: db:ad:dc:07:63:c9:09:4c:68:2f:5b:32:a1:bc:17: bc:6b:5c:60:54:9e:ba:53:50:4e:dd:5c:93:c7:3c: 30:06:e6:5b:d9:15:52:71:2a:b6:32:44:32:45:28: 44:8e:02:eb:b7:f1:c8:17:7c:15:5c:7c:bd:69:73: ed:e4:66:ef:d8:59:2d:fc:8e:44:d1:24:df:69:c2: ae:51:9c:d8:ee:ab:a2:91:a7:f1:f3:2a:ae:ba:73: 89:67:49:fa:5d:4d:c4:1b:32:84:7a:a9:ed:ff:89: cb:d7:a6:79:de:60:32:1a:9c:18:71:d6:87:83:78: b6:6f:54:a9:49:c8:d0:55:23:93:13:4b:e1:73:71: 57:43:8a:4d:dd:2a:e8:81:6f:50:29:8f:07:43:98: d9:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:69:92:E3:5D:1D:38:87:62:30:92:35:3F:50:D3:E8:1B:92:29:01 X509v3 Authority Key Identifier: keyid:9C:E7:0F:91:3E:91:37:B3:52:59:2B:7A:2C:07:5D:2E:A9:F4:26:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/9CE70F913E9137B352592B7A2C075D2EA9F4269D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CE70F913E9137B352592B7A2C075D2EA9F4269D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/323830343a323539633a626130303a3a2f34302d3430203d3e203532373732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:259c:ba00::/40 Signature Algorithm: sha256WithRSAEncryption a8:00:5f:80:ec:3b:23:b9:35:c4:a5:33:d0:7a:e0:33:07:96: 7d:4c:44:83:3a:21:dc:5a:dd:59:4b:5d:33:79:74:90:dd:3a: bf:8b:41:ce:23:9b:93:d1:ab:2e:95:dc:9c:4c:a3:d5:93:5c: 43:09:31:56:e3:fa:16:1e:44:af:5c:1f:e2:c5:6b:4d:78:ca: 78:e2:6b:76:66:61:b3:94:e8:50:74:06:e2:29:6b:bb:a8:44: 65:82:6b:f0:37:11:38:3a:a4:01:fc:e9:ec:4e:31:3f:8b:9a: 76:4a:ca:18:bb:ac:2c:6f:60:ab:de:ec:da:9c:b7:2c:88:41: 34:53:4e:00:3e:5d:7e:ef:86:4d:51:17:1f:14:13:4b:d3:e4: 85:c4:15:5e:d6:75:e3:78:84:a6:e9:f7:83:15:93:85:a1:94: d6:85:a7:8c:5a:69:6c:f6:ab:f4:97:4f:ca:c9:e2:9d:ed:0a: 8a:80:12:7c:b3:70:8e:60:5a:e2:f6:dd:67:64:29:4b:c7:38: a4:b5:55:f1:26:d6:a9:eb:55:8a:59:e8:bf:80:53:b2:61:e8: d8:96:25:a3:df:b8:11:af:1d:69:fe:bb:f1:bd:5a:13:75:ae: 0f:7f:99:b9:79:53:d7:2c:06:c3:e1:48:6e:7c:9d:35:a0:51: 0d:70:ad:c6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUD+37AIDI/7PhyH4mtD4V5o+r93AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNFNzBGOTEzRTkxMzdCMzUyNTkyQjdBMkMwNzVEMkVB OUY0MjY5RDAeFw0yNTA1MDgxODI1MzZaFw0yNjA1MDcxODMwMzZaMDMxMTAvBgNV BAMTKEQ5Njk5MkUzNUQxRDM4ODc2MjMwOTIzNTNGNTBEM0U4MUI5MjI5MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiqMFRMEQ+yTUz4AGLkW+SxlyN ootOvaONfhrjo/6yZrBDafPwPMkb5EaPQRUrgxGvpPGHwtDhQ59Rxaxi7pNdcGzq JOo2T8HdStKUaWb1MvC+9p0fdRTw1C15QJQvRK1sq2LKxqfzRdut3AdjyQlMaC9b MqG8F7xrXGBUnrpTUE7dXJPHPDAG5lvZFVJxKrYyRDJFKESOAuu38cgXfBVcfL1p c+3kZu/YWS38jkTRJN9pwq5RnNjuq6KRp/HzKq66c4lnSfpdTcQbMoR6qe3/icvX pnneYDIanBhx1oeDeLZvVKlJyNBVI5MTS+FzcVdDik3dKuiBb1ApjwdDmNlRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2WmS410dOIdiMJI1P1DT6BuSKQEwHwYDVR0j BBgwFoAUnOcPkT6RN7NSWSt6LAddLqn0Jp0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDN4NHB3cmprSHY4Mm0xZ3hUS25wdjhKNXg0U0NKZk1iVUt5TldpUGR4 VGYvMC85Q0U3MEY5MTNFOTEzN0IzNTI1OTJCN0EyQzA3NUQyRUE5RjQyNjlELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDRTcwRjkxM0U5MTM3QjM1 MjU5MkI3QTJDMDc1RDJFQTlGNDI2OUQuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0QzeDRwd3Jqa0h2ODJtMWd4VEtucHY4SjV4NFNDSmZNYlVLeU5XaVBkeFRmLzAv MzIzODMwMzQzYTMyMzUzOTYzM2E2MjYxMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk M2UyMDM1MzIzNzM3MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBCWcujANBgkqhkiG9w0BAQsFAAOC AQEAqABfgOw7I7k1xKUz0HrgMweWfUxEgzoh3FrdWUtdM3l0kN06v4tBziObk9Gr LpXcnEyj1ZNcQwkxVuP6Fh5Er1wf4sVrTXjKeOJrdmZhs5ToUHQG4ilru6hEZYJr 8DcRODqkAfzp7E4xP4uadkrKGLusLG9gq97s2py3LIhBNFNOAD5dfu+GTVEXHxQT S9PkhcQVXtZ143iEpun3gxWThaGU1oWnjFppbPar9JdPysnine0KioASfLNwjmBa 4vbdZ2QpS8c4pLVV8SbWqetVilnov4BTsmHo2JYlo9+4Ea8daf678b1aE3WuD3+Z uXlT1ywGw+FIbnydNaBRDXCtxg== -----END CERTIFICATE-----Generated at Wed May 14 08:32:28 2025 by rpki-client