$ rpki-client -vvf rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/323830343a313737383a363030303a3a2f33352d3335203d3e20323633313436.roa File: 323830343a313737383a363030303a3a2f33352d3335203d3e20323633313436.roa (raw, json) Hash identifier: NgE+tHJHIjcMDDVT+Aa6tiz5qhQAiMRza+Vlys9OO8A= Subject key identifier: B5:F6:A2:DC:2D:2A:CF:57:12:EA:98:1D:6C:E0:6A:D7:56:FF:D6:7B Certificate issuer: /CN=E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493 Certificate serial: 1C3F9CF9AC054E39F8813DE21BAF5C7EB43D7824 Authority key identifier: E6:FA:E3:A7:A7:90:29:B5:F5:3F:2E:1A:94:0B:19:4F:E9:B3:F4:93 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer Subject info access: rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/323830343a313737383a363030303a3a2f33352d3335203d3e20323633313436.roa Signing time: Thu 06 Mar 2025 08:20:28 +0000 ROA not before: Thu 06 Mar 2025 08:15:28 +0000 ROA not after: Thu 05 Mar 2026 08:20:28 +0000 asID: 263146 IP address blocks: 2804:1778:6000::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.crl rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 22:25:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:3f:9c:f9:ac:05:4e:39:f8:81:3d:e2:1b:af:5c:7e:b4:3d:78:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493 Validity Not Before: Mar 6 08:15:28 2025 GMT Not After : Mar 5 08:20:28 2026 GMT Subject: CN=B5F6A2DC2D2ACF5712EA981D6CE06AD756FFD67B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:90:59:1f:a4:23:70:37:c9:d1:84:b7:2a:b5: 39:af:c8:af:12:de:23:88:5a:74:38:9e:46:28:d9: 7f:f2:e2:e8:ec:36:fb:ea:81:18:4b:62:de:ba:19: fc:41:fc:df:5b:db:82:de:16:e6:47:18:4f:0f:59: 32:85:f2:88:82:1c:e3:5e:9b:5a:f2:4c:c8:6c:68: e6:b7:ed:ca:c8:e7:47:90:2c:ff:4b:91:e9:b6:99: af:52:7d:3f:e8:17:4d:69:d3:af:30:ba:2b:97:f1: 63:3e:c8:82:59:ac:04:43:d0:3e:72:fe:0c:60:4a: 37:8c:4d:bc:70:48:50:d7:2c:6b:45:ef:1e:c8:71: 8b:96:7e:b8:4b:0b:87:b3:98:c2:d9:44:09:ff:b5: cb:fa:a5:d6:e1:d5:50:a8:af:ba:f3:1c:1d:76:53: bb:9a:65:c7:85:ec:ad:a6:0c:80:da:65:8e:21:76: 9c:a5:64:73:26:22:35:1f:7b:12:1f:f3:03:a9:9c: 1a:a6:47:88:cc:c6:fa:9f:d9:ab:58:79:a0:a1:3f: 4b:bc:a9:83:38:de:e9:8d:c6:09:59:3e:30:25:28: 6a:9a:9e:f1:fa:83:fc:fb:a9:93:0b:ad:5e:5b:1e: 47:9a:b4:ca:9e:fe:76:cc:56:8c:54:ca:3e:33:ab: b4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:F6:A2:DC:2D:2A:CF:57:12:EA:98:1D:6C:E0:6A:D7:56:FF:D6:7B X509v3 Authority Key Identifier: keyid:E6:FA:E3:A7:A7:90:29:B5:F5:3F:2E:1A:94:0B:19:4F:E9:B3:F4:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/323830343a313737383a363030303a3a2f33352d3335203d3e20323633313436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:1778:6000::/35 Signature Algorithm: sha256WithRSAEncryption 63:8d:74:d9:0f:52:1b:e3:e7:27:db:c4:63:b9:e8:95:19:6e: 03:64:16:80:1f:09:10:d9:7a:01:86:85:63:bd:6b:93:0c:bd: 34:5e:31:43:aa:18:07:2f:58:33:d0:6e:43:e4:a8:25:1f:dd: 6b:f8:f7:69:43:6b:64:ad:f9:4f:ab:c9:98:bb:fa:29:c8:90: 5d:5d:af:99:35:97:da:a0:1c:cc:2d:78:37:f2:41:96:89:4a: ae:cd:15:e8:01:d5:f3:91:58:f1:2c:45:d4:59:56:4b:9a:f2: cf:4b:61:10:5e:09:4b:3c:f5:e1:00:3e:08:f0:f3:0c:13:15: 9a:84:ea:21:df:22:2c:b0:7f:19:d9:a0:69:80:1a:0a:fb:e4: 1f:a2:0b:2e:2c:23:c2:52:a8:48:81:38:a8:ce:98:ae:23:ac: 05:e3:1f:6d:29:1e:ba:33:b0:66:21:58:80:d5:d7:10:e2:e3: fa:c9:83:9a:56:3c:ff:fc:04:d5:c5:e7:60:7b:84:4d:62:8f: 9d:b0:04:85:9e:f2:0d:49:59:6d:c2:13:7b:c6:28:c7:f9:10: 62:96:21:3f:ce:d0:2c:f4:11:d3:6d:3a:e3:43:96:85:f1:76: 5c:cc:10:67:8e:85:03:da:97:f2:62:66:ea:d6:a3:ea:ca:05: 99:d2:2f:c6 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUHD+c+awFTjn4gT3iG69cfrQ9eCQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTZGQUUzQTdBNzkwMjlCNUY1M0YyRTFBOTQwQjE5NEZF OUIzRjQ5MzAeFw0yNTAzMDYwODE1MjhaFw0yNjAzMDUwODIwMjhaMDMxMTAvBgNV BAMTKEI1RjZBMkRDMkQyQUNGNTcxMkVBOTgxRDZDRTA2QUQ3NTZGRkQ2N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXkFkfpCNwN8nRhLcqtTmvyK8S 3iOIWnQ4nkYo2X/y4ujsNvvqgRhLYt66GfxB/N9b24LeFuZHGE8PWTKF8oiCHONe m1ryTMhsaOa37crI50eQLP9Lkem2ma9SfT/oF01p068wuiuX8WM+yIJZrARD0D5y /gxgSjeMTbxwSFDXLGtF7x7IcYuWfrhLC4ezmMLZRAn/tcv6pdbh1VCor7rzHB12 U7uaZceF7K2mDIDaZY4hdpylZHMmIjUfexIf8wOpnBqmR4jMxvqf2atYeaChP0u8 qYM43umNxglZPjAlKGqanvH6g/z7qZMLrV5bHkeatMqe/nbMVoxUyj4zq7RFAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUtfai3C0qz1cS6pgdbOBq11b/1nswHwYDVR0j BBgwFoAU5vrjp6eQKbX1Py4alAsZT+mz9JMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN05SZFFOYURVYlQ3RDF0Z29TeFJuaEw5MVp5SzZFU1dHS1ZHU2huSHhX Z1AvMS9FNkZBRTNBN0E3OTAyOUI1RjUzRjJFMUE5NDBCMTk0RkU5QjNGNDkzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U2RkFFM0E3QTc5MDI5QjVG NTNGMkUxQTk0MEIxOTRGRTlCM0Y0OTMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzdOUmRRTmFEVWJUN0QxdGdvU3hSbmhMOTFaeUs2RVNXR0tWR1Nobkh4V2dQLzEv MzIzODMwMzQzYTMxMzczNzM4M2EzNjMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk M2UyMDMyMzYzMzMxMzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSgEF3hgMA0GCSqGSIb3DQEBCwUA A4IBAQBjjXTZD1Ib4+cn28RjueiVGW4DZBaAHwkQ2XoBhoVjvWuTDL00XjFDqhgH L1gz0G5D5KglH91r+PdpQ2tkrflPq8mYu/opyJBdXa+ZNZfaoBzMLXg38kGWiUqu zRXoAdXzkVjxLEXUWVZLmvLPS2EQXglLPPXhAD4I8PMMExWahOoh3yIssH8Z2aBp gBoK++QfogsuLCPCUqhIgTiozpiuI6wF4x9tKR66M7BmIViA1dcQ4uP6yYOaVjz/ /ATVxedge4RNYo+dsASFnvINSVltwhN7xijH+RBiliE/ztAs9BHTbTrjQ5aF8XZc zBBnjoUD2pfyYmbq1qPqygWZ0i/G -----END CERTIFICATE-----Generated at Mon Apr 28 22:47:58 2025 by rpki-client on console.sobornost.net