$ rpki-client -vvf rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/323830343a356131303a3a2f33332d3333203d3e20323638373436.roa File: 323830343a356131303a3a2f33332d3333203d3e20323638373436.roa (raw, json) Hash identifier: 1AIFQRQn2YIWx1cDJzVnTH93/fo7mUQfavz3xD/UG9E= Subject key identifier: 02:83:F3:B7:4F:D3:04:7E:30:84:6F:D1:C4:1A:92:71:A2:41:8F:5D Certificate issuer: /CN=99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB Certificate serial: 6CC63AB4C1D1D095575316CBF8B1BDE71F4018AC Authority key identifier: 99:C7:D5:12:A3:F6:D8:10:68:EF:1D:E7:FA:99:2C:3E:C4:11:C3:DB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.cer Subject info access: rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/323830343a356131303a3a2f33332d3333203d3e20323638373436.roa Signing time: Mon 05 May 2025 12:28:09 +0000 ROA not before: Mon 05 May 2025 12:23:09 +0000 ROA not after: Mon 04 May 2026 12:28:09 +0000 asID: 268746 IP address blocks: 2804:5a10::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.crl rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 May 2025 10:41:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:c6:3a:b4:c1:d1:d0:95:57:53:16:cb:f8:b1:bd:e7:1f:40:18:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB Validity Not Before: May 5 12:23:09 2025 GMT Not After : May 4 12:28:09 2026 GMT Subject: CN=0283F3B74FD3047E30846FD1C41A9271A2418F5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c3:17:54:cd:c1:2d:4c:bc:cb:06:cb:cf:b1: 0a:8f:3d:68:e2:9d:d7:e3:21:89:1c:0d:e0:9d:cd: de:70:6c:bc:54:79:34:5b:27:08:49:42:58:86:98: a1:a5:f4:86:51:6b:23:6b:1d:ff:d5:6f:b7:1f:02: c3:90:17:5d:60:d2:4d:cc:9b:52:f8:98:f1:e0:8b: 0a:9e:62:8b:af:7d:06:76:83:62:84:5c:53:89:84: 20:0e:84:15:67:46:44:fb:ab:55:2d:25:2e:7e:86: cf:f4:7d:5b:7f:b5:fe:48:5c:c2:7b:3e:c5:c8:94: cb:47:f8:d6:61:2c:d2:30:3f:ce:30:7e:9c:96:42: 67:ad:a0:7f:5b:d0:f7:41:ca:58:65:af:82:f1:6a: b9:00:1a:40:a6:33:fb:41:a6:94:d7:c6:3e:01:81: 72:9e:f8:90:57:20:52:e7:fa:65:8e:0a:05:c3:3c: 08:4f:f8:2c:b7:c5:36:a5:d6:2b:69:b5:51:9a:0e: 9b:cd:50:06:6d:8e:f0:69:43:8d:ae:33:4e:be:1e: 10:0e:60:a7:ed:cf:96:5b:48:ad:07:8f:87:20:62: 7f:5f:af:5e:81:73:92:e4:7d:4c:e3:6a:a6:1a:2f: 74:a1:2d:4e:8d:05:b7:6f:81:9c:6b:ad:aa:ce:8f: b0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:83:F3:B7:4F:D3:04:7E:30:84:6F:D1:C4:1A:92:71:A2:41:8F:5D X509v3 Authority Key Identifier: keyid:99:C7:D5:12:A3:F6:D8:10:68:EF:1D:E7:FA:99:2C:3E:C4:11:C3:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/323830343a356131303a3a2f33332d3333203d3e20323638373436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:5a10::/33 Signature Algorithm: sha256WithRSAEncryption 07:9c:14:fd:26:bc:16:0f:75:3b:be:a7:b7:90:06:f2:d4:71: af:82:6c:46:9d:fc:de:1b:e5:f3:2a:04:dc:21:61:92:e2:d7: c9:40:aa:60:ca:5a:38:93:53:b0:9d:30:8e:cf:9a:b4:77:4e: 23:02:aa:75:06:86:fb:88:92:14:d4:b5:bf:74:b6:53:fc:fa: ec:ba:32:71:ee:6d:be:6b:dd:84:5f:a8:59:f9:41:55:e3:86: 16:4c:65:02:a9:ec:df:a7:96:4c:4a:4e:6c:98:6e:73:42:51: 46:f2:bd:89:3a:69:ba:7d:ef:a7:22:1f:ae:5f:b5:1a:81:48: f8:9b:38:11:ab:d1:ea:2a:c0:60:d2:3c:48:df:09:4b:c2:88: a7:42:a4:b0:48:b9:c3:a1:de:30:97:29:7d:47:5b:5e:ee:d8: e7:73:00:e5:9c:6b:2a:a9:ad:58:9b:2a:fb:eb:48:8a:21:be: ad:9d:d1:d6:ea:fb:ee:4d:8d:6a:6d:c3:fc:9f:ff:b4:39:97: 86:c5:51:3f:ad:4f:a4:e9:75:69:36:0d:22:1e:c1:c7:4f:86: b5:bb:54:42:68:a5:46:60:49:76:5f:86:ea:4f:5f:8b:d1:cb: 68:7e:6c:e8:8d:88:d0:24:07:f1:11:d8:49:bd:b0:00:d2:90: 60:54:8d:14 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIUbMY6tMHR0JVXUxbL+LG95x9AGKwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlDN0Q1MTJBM0Y2RDgxMDY4RUYxREU3RkE5OTJDM0VD NDExQzNEQjAeFw0yNTA1MDUxMjIzMDlaFw0yNjA1MDQxMjI4MDlaMDMxMTAvBgNV BAMTKDAyODNGM0I3NEZEMzA0N0UzMDg0NkZEMUM0MUE5MjcxQTI0MThGNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvwxdUzcEtTLzLBsvPsQqPPWji ndfjIYkcDeCdzd5wbLxUeTRbJwhJQliGmKGl9IZRayNrHf/Vb7cfAsOQF11g0k3M m1L4mPHgiwqeYouvfQZ2g2KEXFOJhCAOhBVnRkT7q1UtJS5+hs/0fVt/tf5IXMJ7 PsXIlMtH+NZhLNIwP84wfpyWQmetoH9b0PdBylhlr4LxarkAGkCmM/tBppTXxj4B gXKe+JBXIFLn+mWOCgXDPAhP+Cy3xTal1itptVGaDpvNUAZtjvBpQ42uM06+HhAO YKftz5ZbSK0Hj4cgYn9fr16Bc5LkfUzjaqYaL3ShLU6NBbdvgZxrrarOj7BvAgMB AAGjggJOMIICSjAdBgNVHQ4EFgQUAoPzt0/TBH4whG/RxBqScaJBj10wHwYDVR0j BBgwFoAUmcfVEqP22BBo7x3n+pksPsQRw9swDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9zUW9WWEQzdndQaEhFVGZEbTNSNlozS3BFRmVWTjhGV3Bud2FwaUFLQ3lz LzAvOTlDN0Q1MTJBM0Y2RDgxMDY4RUYxREU3RkE5OTJDM0VDNDExQzNEQi5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS85OUM3RDUxMkEzRjZEODEwNjhF RjFERTdGQTk5MkMzRUM0MTFDM0RCLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9z UW9WWEQzdndQaEhFVGZEbTNSNlozS3BFRmVWTjhGV3Bud2FwaUFLQ3lzLzAvMzIz ODMwMzQzYTM1NjEzMTMwM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM4Mzcz NDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/ BBIwEDAOBAIAAjAIAwYHKARaEAAwDQYJKoZIhvcNAQELBQADggEBAAecFP0mvBYP dTu+p7eQBvLUca+CbEad/N4b5fMqBNwhYZLi18lAqmDKWjiTU7CdMI7PmrR3TiMC qnUGhvuIkhTUtb90tlP8+uy6MnHubb5r3YRfqFn5QVXjhhZMZQKp7N+nlkxKTmyY bnNCUUbyvYk6abp976ciH65ftRqBSPibOBGr0eoqwGDSPEjfCUvCiKdCpLBIucOh 3jCXKX1HW17u2OdzAOWcayqprVibKvvrSIohvq2d0dbq++5NjWptw/yf/7Q5l4bF UT+tT6TpdWk2DSIewcdPhrW7VEJopUZgSXZfhupPX4vRy2h+bOiNiNAkB/ER2Em9 sADSkGBUjRQ= -----END CERTIFICATE-----Generated at Sun May 11 22:02:14 2025 by rpki-client