$ rpki-client -vvf rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/323830343a353764633a383030303a3a2f33342d3334203d3e20323638303931.roa File: 323830343a353764633a383030303a3a2f33342d3334203d3e20323638303931.roa (raw, json) Hash identifier: Nvr4bicixCDJK9lSN0EmOQFMTBz5G8YfJFgKfgqQD08= Subject key identifier: 76:ED:D0:9B:B0:ED:78:98:7E:66:0E:24:40:C4:13:EA:DD:33:A7:96 Certificate issuer: /CN=3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF Certificate serial: 52FF5921E0AB08C6B4F3641AEB835D4E6D2E643E Authority key identifier: 3C:9F:72:B9:D4:E7:CA:7E:EF:4F:D6:EA:F0:70:32:0A:18:60:9E:FF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF.cer Subject info access: rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/323830343a353764633a383030303a3a2f33342d3334203d3e20323638303931.roa Signing time: Fri 14 Feb 2025 17:48:10 +0000 ROA not before: Fri 14 Feb 2025 17:43:10 +0000 ROA not after: Fri 13 Feb 2026 17:48:10 +0000 asID: 268091 IP address blocks: 2804:57dc:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF.crl rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Apr 2025 02:23:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:ff:59:21:e0:ab:08:c6:b4:f3:64:1a:eb:83:5d:4e:6d:2e:64:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF Validity Not Before: Feb 14 17:43:10 2025 GMT Not After : Feb 13 17:48:10 2026 GMT Subject: CN=76EDD09BB0ED78987E660E2440C413EADD33A796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:70:e2:17:fd:e5:74:99:d4:ac:13:36:0d:3a: 56:6e:66:71:2e:67:30:af:c3:b7:08:b4:b5:ce:fc: 59:84:e7:e2:6c:af:2a:e4:ef:c0:71:65:bb:90:86: c2:89:49:97:dd:ec:08:e2:79:60:a5:42:e9:f1:74: 93:b4:ce:9e:92:f6:1b:06:1f:01:6d:23:dc:7a:a9: 6f:f3:92:f3:7d:6a:67:02:c9:3f:a4:8c:ea:53:99: 43:eb:72:45:f7:31:0e:68:6e:14:b1:4a:ac:67:12: 23:a6:1e:db:3f:fc:b8:eb:0a:74:2d:d4:f7:8e:ef: f5:f4:64:af:4d:c8:0d:f7:87:43:75:59:d8:5d:ff: 2e:68:5e:47:36:8d:27:ef:a7:e7:cc:4c:2d:70:ae: f9:3f:46:e6:ca:a2:e3:3f:25:18:0b:5b:7b:93:e6: 8d:f9:ea:14:ea:18:41:72:93:70:21:45:79:19:02: 8c:2a:02:cf:92:40:e0:7f:b2:2e:8c:75:de:64:50: bd:26:c0:f4:ab:e1:fe:f4:18:96:0b:b3:39:1b:86: b4:b1:e7:c8:76:96:e6:c8:62:df:cb:c4:6c:58:51: 8f:af:90:d1:82:f0:a6:2e:89:a5:17:fc:48:dd:c6: 3a:cc:23:68:94:ae:d5:8a:e3:af:62:3a:64:c5:8a: 5d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:ED:D0:9B:B0:ED:78:98:7E:66:0E:24:40:C4:13:EA:DD:33:A7:96 X509v3 Authority Key Identifier: keyid:3C:9F:72:B9:D4:E7:CA:7E:EF:4F:D6:EA:F0:70:32:0A:18:60:9E:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/323830343a353764633a383030303a3a2f33342d3334203d3e20323638303931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:57dc:8000::/34 Signature Algorithm: sha256WithRSAEncryption a6:c7:5e:2c:b9:17:fb:b8:8f:95:e2:50:75:82:c7:05:04:74: 4d:98:60:e6:a7:48:4d:d6:5a:28:cd:85:5c:9c:65:8c:11:eb: ed:4e:f6:21:76:5e:ff:b5:d3:fc:fd:b1:b0:da:9d:33:a2:b0: 62:fb:4d:48:8d:8f:7d:b9:a5:11:43:89:cf:f8:87:31:1b:e1: 9d:62:84:00:11:7b:6b:1e:0a:f8:a6:7f:b1:00:53:a3:5e:c0: 22:c2:74:8d:77:1f:64:67:52:0c:2e:96:9c:83:17:a6:12:41: 3c:c8:28:85:b5:52:2c:53:51:b8:e2:f1:26:74:c0:7f:64:19: 4a:02:2e:8c:ca:b4:34:15:c5:47:19:42:c1:5f:8b:6f:6e:37: c4:26:05:87:36:d0:87:05:e3:ad:55:50:f1:43:79:89:6c:f8: aa:af:db:9a:c8:97:24:05:05:fd:db:36:a7:9a:70:b7:8c:f3: c3:76:83:fa:6d:45:32:58:7f:bb:42:7c:3b:7f:02:18:11:38: bf:09:82:cf:61:f2:81:42:05:39:00:e8:82:bd:e0:21:be:f1: 1d:59:78:eb:2e:99:f4:e5:7d:e0:f3:2b:72:20:85:41:61:87: 18:aa:d1:a9:63:76:f9:91:07:5f:b6:9c:11:08:a4:3e:a2:2a: 7b:f5:2a:32 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUUv9ZIeCrCMa082Qa64NdTm0uZD4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M5RjcyQjlENEU3Q0E3RUVGNEZENkVBRjA3MDMyMEEx ODYwOUVGRjAeFw0yNTAyMTQxNzQzMTBaFw0yNjAyMTMxNzQ4MTBaMDMxMTAvBgNV BAMTKDc2RUREMDlCQjBFRDc4OTg3RTY2MEUyNDQwQzQxM0VBREQzM0E3OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDncOIX/eV0mdSsEzYNOlZuZnEu ZzCvw7cItLXO/FmE5+Jsryrk78BxZbuQhsKJSZfd7AjieWClQunxdJO0zp6S9hsG HwFtI9x6qW/zkvN9amcCyT+kjOpTmUPrckX3MQ5obhSxSqxnEiOmHts//LjrCnQt 1PeO7/X0ZK9NyA33h0N1Wdhd/y5oXkc2jSfvp+fMTC1wrvk/RubKouM/JRgLW3uT 5o356hTqGEFyk3AhRXkZAowqAs+SQOB/si6Mdd5kUL0mwPSr4f70GJYLszkbhrSx 58h2lubIYt/LxGxYUY+vkNGC8KYuiaUX/EjdxjrMI2iUrtWK469iOmTFil3VAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUdu3Qm7DteJh+Zg4kQMQT6t0zp5YwHwYDVR0j BBgwFoAUPJ9yudTnyn7vT9bq8HAyChhgnv8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN2E4S1ROYVJMZlMxZ1I5eDQ5cHV1Ymt0OXpuZk1OaHVlS2gyVmVXSzVn RTgvMC8zQzlGNzJCOUQ0RTdDQTdFRUY0RkQ2RUFGMDcwMzIwQTE4NjA5RUZGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDOUY3MkI5RDRFN0NBN0VF RjRGRDZFQUYwNzAzMjBBMTg2MDlFRkYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzdhOEtUTmFSTGZTMWdSOXg0OXB1dWJrdDl6bmZNTmh1ZUtoMlZlV0s1Z0U4LzAv MzIzODMwMzQzYTM1Mzc2NDYzM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzYzODMwMzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEV9yAMA0GCSqGSIb3DQEBCwUA A4IBAQCmx14suRf7uI+V4lB1gscFBHRNmGDmp0hN1loozYVcnGWMEevtTvYhdl7/ tdP8/bGw2p0zorBi+01IjY99uaURQ4nP+IcxG+GdYoQAEXtrHgr4pn+xAFOjXsAi wnSNdx9kZ1IMLpacgxemEkE8yCiFtVIsU1G44vEmdMB/ZBlKAi6MyrQ0FcVHGULB X4tvbjfEJgWHNtCHBeOtVVDxQ3mJbPiqr9uayJckBQX92zanmnC3jPPDdoP6bUUy WH+7Qnw7fwIYETi/CYLPYfKBQgU5AOiCveAhvvEdWXjrLpn05X3g8ytyIIVBYYcY qtGpY3b5kQdftpwRCKQ+oip79Soy -----END CERTIFICATE-----Generated at Sun Apr 27 05:33:53 2025 by rpki-client on console.sobornost.net