$ rpki-client -vvf rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/323830343a356131303a633030303a3a2f33342d3334203d3e20323638373436.roa File: 323830343a356131303a633030303a3a2f33342d3334203d3e20323638373436.roa (raw, json) Hash identifier: uGa8BvVdgNVRCLBg4wR8Pq33J74mOGX8HfRNkiJruKM= Subject key identifier: 10:8F:22:EC:D3:DA:AC:C3:5F:1C:F5:E9:F0:42:40:AC:B1:03:EF:97 Certificate issuer: /CN=99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB Certificate serial: 308611664697FDC9B1C9327637D4B4ABC0A5F5D6 Authority key identifier: 99:C7:D5:12:A3:F6:D8:10:68:EF:1D:E7:FA:99:2C:3E:C4:11:C3:DB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.cer Subject info access: rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/323830343a356131303a633030303a3a2f33342d3334203d3e20323638373436.roa Signing time: Mon 05 May 2025 12:28:10 +0000 ROA not before: Mon 05 May 2025 12:23:10 +0000 ROA not after: Mon 04 May 2026 12:28:10 +0000 asID: 268746 IP address blocks: 2804:5a10:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.crl rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 May 2025 10:41:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:86:11:66:46:97:fd:c9:b1:c9:32:76:37:d4:b4:ab:c0:a5:f5:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB Validity Not Before: May 5 12:23:10 2025 GMT Not After : May 4 12:28:10 2026 GMT Subject: CN=108F22ECD3DAACC35F1CF5E9F04240ACB103EF97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:86:6f:93:9a:d2:71:f4:a7:df:be:7b:95:60: ca:1c:0f:40:4d:bc:74:68:01:3d:45:5e:02:99:2e: 62:50:e6:13:12:34:c4:79:9d:db:35:37:1a:7e:5d: 0f:dd:01:e2:d0:27:03:78:65:17:11:00:4d:9d:d6: f9:03:ee:1a:b4:1e:97:1d:33:96:d6:57:17:5a:8f: 28:9a:5e:01:8e:a9:45:6d:19:b6:3f:5d:16:be:10: 2c:12:3f:85:83:7b:fc:64:c9:fc:7e:f7:9a:66:10: ab:e4:9b:72:9c:58:d0:b1:91:71:e1:ff:75:97:57: 71:2e:9c:d5:75:71:6d:4a:4e:6b:d1:9c:da:27:f4: 59:fa:e8:d1:07:c2:93:fe:02:de:3f:9a:a4:1b:0c: 71:f2:f4:ff:ac:46:f5:59:cd:fd:2e:a7:67:77:12: 28:23:78:72:7d:27:40:11:05:02:46:b6:83:f5:cd: 84:2c:5a:6a:2a:2a:27:13:32:92:5a:dd:51:4e:7a: 5d:60:48:6c:16:6e:e8:10:1d:d2:a5:09:3a:65:a1: 6b:ab:0a:28:db:ca:d8:a6:9e:66:e5:a6:56:2e:cb: ce:a4:c3:9a:77:be:72:d3:84:a9:3d:8a:dd:00:e2: bd:16:a3:99:32:1e:b1:b6:3b:8c:57:85:96:89:2c: b5:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:8F:22:EC:D3:DA:AC:C3:5F:1C:F5:E9:F0:42:40:AC:B1:03:EF:97 X509v3 Authority Key Identifier: keyid:99:C7:D5:12:A3:F6:D8:10:68:EF:1D:E7:FA:99:2C:3E:C4:11:C3:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/323830343a356131303a633030303a3a2f33342d3334203d3e20323638373436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:5a10:c000::/34 Signature Algorithm: sha256WithRSAEncryption 36:62:50:d8:e3:a1:63:d5:38:14:aa:b1:75:37:a4:a9:75:b8: 99:5e:59:de:28:80:1d:b0:ed:dc:d6:1c:64:7c:4c:81:85:b6: b6:a5:39:2f:ef:27:c6:e1:c6:b1:8a:a2:6c:87:fd:56:fe:7f: 84:3a:1c:94:3b:e0:9e:75:0a:1f:2e:c3:87:6b:0d:87:35:87: 97:c4:5c:b4:3e:3b:3b:b2:25:08:4e:4e:8f:1b:0d:e4:2d:6a: 78:98:ac:60:48:37:93:90:fe:d3:51:b6:f0:65:ae:7f:15:ac: b7:6d:3e:4e:08:b7:db:68:1a:7b:e2:db:3f:25:37:25:28:b2: c7:eb:19:3a:41:97:51:ac:a0:79:d7:97:f7:0e:9a:bc:92:6f: 87:63:00:37:ae:c7:b7:6d:ce:dc:85:2d:8a:c5:fc:28:ef:90: 89:81:3d:37:94:32:5e:28:96:d8:55:10:3b:73:2a:ec:23:89: 45:43:4d:ec:50:4d:58:da:07:5d:d0:ea:84:05:65:d9:6d:47: b8:ba:90:b3:d0:66:b5:4c:42:da:10:9f:46:66:ab:d6:74:25: 6a:9b:91:19:51:aa:37:c1:78:61:4b:93:43:8f:d3:dc:47:5b: a9:28:ab:d5:ca:b7:09:e9:a0:31:b2:c6:b4:47:52:c0:5b:da: 44:05:ad:62 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIUMIYRZkaX/cmxyTJ2N9S0q8Cl9dYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlDN0Q1MTJBM0Y2RDgxMDY4RUYxREU3RkE5OTJDM0VD NDExQzNEQjAeFw0yNTA1MDUxMjIzMTBaFw0yNjA1MDQxMjI4MTBaMDMxMTAvBgNV BAMTKDEwOEYyMkVDRDNEQUFDQzM1RjFDRjVFOUYwNDI0MEFDQjEwM0VGOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAhm+TmtJx9KffvnuVYMocD0BN vHRoAT1FXgKZLmJQ5hMSNMR5nds1Nxp+XQ/dAeLQJwN4ZRcRAE2d1vkD7hq0Hpcd M5bWVxdajyiaXgGOqUVtGbY/XRa+ECwSP4WDe/xkyfx+95pmEKvkm3KcWNCxkXHh /3WXV3EunNV1cW1KTmvRnNon9Fn66NEHwpP+At4/mqQbDHHy9P+sRvVZzf0up2d3 EigjeHJ9J0ARBQJGtoP1zYQsWmoqKicTMpJa3VFOel1gSGwWbugQHdKlCTploWur CijbytimnmblplYuy86kw5p3vnLThKk9it0A4r0Wo5kyHrG2O4xXhZaJLLWzAgMB AAGjggJYMIICVDAdBgNVHQ4EFgQUEI8i7NParMNfHPXp8EJArLED75cwHwYDVR0j BBgwFoAUmcfVEqP22BBo7x3n+pksPsQRw9swDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9zUW9WWEQzdndQaEhFVGZEbTNSNlozS3BFRmVWTjhGV3Bud2FwaUFLQ3lz LzAvOTlDN0Q1MTJBM0Y2RDgxMDY4RUYxREU3RkE5OTJDM0VDNDExQzNEQi5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS85OUM3RDUxMkEzRjZEODEwNjhF RjFERTdGQTk5MkMzRUM0MTFDM0RCLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIG CCsGAQUFBzALhoGVcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9z UW9WWEQzdndQaEhFVGZEbTNSNlozS3BFRmVWTjhGV3Bud2FwaUFLQ3lzLzAvMzIz ODMwMzQzYTM1NjEzMTMwM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNkM2Uy MDMyMzYzODM3MzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEWhDAMA0GCSqGSIb3DQEBCwUAA4IB AQA2YlDY46Fj1TgUqrF1N6SpdbiZXlneKIAdsO3c1hxkfEyBhba2pTkv7yfG4cax iqJsh/1W/n+EOhyUO+CedQofLsOHaw2HNYeXxFy0Pjs7siUITk6PGw3kLWp4mKxg SDeTkP7TUbbwZa5/Fay3bT5OCLfbaBp74ts/JTclKLLH6xk6QZdRrKB515f3Dpq8 km+HYwA3rse3bc7chS2Kxfwo75CJgT03lDJeKJbYVRA7cyrsI4lFQ03sUE1Y2gdd 0OqEBWXZbUe4upCz0Ga1TELaEJ9GZqvWdCVqm5EZUao3wXhhS5NDj9PcR1upKKvV yrcJ6aAxssa0R1LAW9pEBa1i -----END CERTIFICATE-----Generated at Sun May 11 21:58:31 2025 by rpki-client