$ rpki-client -vvf rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/323830343a313266633a333530303a3a2f34302d3430203d3e20323633353038.roa File: 323830343a313266633a333530303a3a2f34302d3430203d3e20323633353038.roa (raw, json) Hash identifier: exrVGzFM4PQs3Ow7UrlVVMgucqy67jpegHReK+dCAAI= Subject key identifier: 42:B1:C9:5D:34:81:B5:65:60:3F:35:4F:25:7C:C3:85:53:E1:06:11 Certificate issuer: /CN=028CDE0E764AA87F51C83E2608B8562B72B4E204 Certificate serial: 6728BC43E44FCBE474197793A8D9110F7D44BCF3 Authority key identifier: 02:8C:DE:0E:76:4A:A8:7F:51:C8:3E:26:08:B8:56:2B:72:B4:E2:04 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer Subject info access: rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/323830343a313266633a333530303a3a2f34302d3430203d3e20323633353038.roa Signing time: Thu 27 Feb 2025 15:59:14 +0000 ROA not before: Thu 27 Feb 2025 15:54:14 +0000 ROA not after: Thu 26 Feb 2026 15:59:14 +0000 asID: 263508 IP address blocks: 2804:12fc:3500::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.crl rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 11:58:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:28:bc:43:e4:4f:cb:e4:74:19:77:93:a8:d9:11:0f:7d:44:bc:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=028CDE0E764AA87F51C83E2608B8562B72B4E204 Validity Not Before: Feb 27 15:54:14 2025 GMT Not After : Feb 26 15:59:14 2026 GMT Subject: CN=42B1C95D3481B565603F354F257CC38553E10611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ba:09:da:7c:04:d1:f0:5d:f2:57:b4:45:ca: b6:e4:eb:2f:22:a6:44:94:5f:06:e1:92:dc:cd:9d: fa:ec:26:e8:9a:40:18:19:b8:8e:34:40:ac:2d:df: 02:2a:d5:78:ac:7f:c1:5c:7a:2d:76:11:d4:c2:54: 2a:88:cf:af:dd:13:9b:89:db:58:74:a4:75:d8:00: b1:1a:c8:bc:01:c8:47:ca:d1:6c:0b:cf:46:ba:95: ca:86:1e:95:43:60:88:b5:9c:f0:c2:95:4d:83:a4: 06:41:e2:f6:19:e6:66:d0:14:d5:3b:2a:e1:1c:a6: ec:24:83:d5:2e:3d:1e:4b:60:c5:13:a3:a2:1b:97: e6:2b:56:65:95:1d:7d:0e:9c:d1:72:69:ae:18:46: 5c:f4:28:25:a3:49:9b:95:b9:dd:37:8f:a6:ad:16: c5:c6:9b:2f:28:25:25:20:b6:78:5c:bf:8f:c0:ca: 7d:b8:66:07:23:81:2f:6c:53:64:93:21:86:a6:ee: 7b:b0:45:20:98:21:a4:8a:f5:13:26:c5:ec:cb:cf: 38:db:7b:6f:38:81:f6:5c:8d:80:68:70:67:55:a4: 91:a7:1d:38:03:88:d2:6c:6f:a8:4e:76:31:38:64: 8e:06:24:7f:30:73:06:d9:f2:bf:68:e8:aa:04:b1: 25:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:B1:C9:5D:34:81:B5:65:60:3F:35:4F:25:7C:C3:85:53:E1:06:11 X509v3 Authority Key Identifier: keyid:02:8C:DE:0E:76:4A:A8:7F:51:C8:3E:26:08:B8:56:2B:72:B4:E2:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/323830343a313266633a333530303a3a2f34302d3430203d3e20323633353038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:12fc:3500::/40 Signature Algorithm: sha256WithRSAEncryption 11:10:82:60:b6:2e:b7:16:23:2f:f8:6f:40:c3:76:bf:d9:73: 49:e5:d7:14:81:a7:6a:7e:bb:5a:90:a6:d9:c9:e6:d1:85:c6: de:4a:cc:80:ad:1c:6c:45:c8:62:eb:60:06:bf:a1:04:ab:8a: 40:0e:32:54:d7:3e:d7:6a:1d:b1:7b:7d:51:b9:cf:12:07:ec: ae:6b:6e:ae:62:88:e7:e4:ec:43:87:05:6c:34:d7:50:d7:f1: a9:b9:f7:da:b0:dd:86:25:21:aa:11:5b:77:87:03:4a:a4:18: 50:2f:52:c1:ff:8c:64:bb:91:58:68:38:b0:e3:8a:19:17:71: c6:40:ec:e3:4b:d3:9d:f2:8b:60:4e:88:5d:ef:30:f4:30:6e: 62:f6:0b:c3:99:4b:13:6b:aa:2c:3a:90:df:9e:55:ff:b3:3b: 50:f0:00:dc:b6:b3:3a:e1:cc:24:d9:ff:f8:d6:ca:b5:05:08: 92:46:6a:f9:45:4e:1e:7a:c6:9e:f3:85:bf:cd:15:7e:53:be: c8:3f:4b:55:9a:54:2a:35:2a:3d:04:aa:ff:91:a6:5b:a7:67: e0:27:2d:c2:54:0a:28:98:e5:61:a9:a4:eb:04:83:c7:c0:b8: 9d:8c:6c:a7:3d:6f:3c:04:d8:ad:5d:bb:1c:32:7a:52:14:aa: e0:2b:34:5b -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUZyi8Q+RPy+R0GXeTqNkRD31EvPMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI4Q0RFMEU3NjRBQTg3RjUxQzgzRTI2MDhCODU2MkI3 MkI0RTIwNDAeFw0yNTAyMjcxNTU0MTRaFw0yNjAyMjYxNTU5MTRaMDMxMTAvBgNV BAMTKDQyQjFDOTVEMzQ4MUI1NjU2MDNGMzU0RjI1N0NDMzg1NTNFMTA2MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYugnafATR8F3yV7RFyrbk6y8i pkSUXwbhktzNnfrsJuiaQBgZuI40QKwt3wIq1Xisf8Fcei12EdTCVCqIz6/dE5uJ 21h0pHXYALEayLwByEfK0WwLz0a6lcqGHpVDYIi1nPDClU2DpAZB4vYZ5mbQFNU7 KuEcpuwkg9UuPR5LYMUTo6Ibl+YrVmWVHX0OnNFyaa4YRlz0KCWjSZuVud03j6at FsXGmy8oJSUgtnhcv4/Ayn24ZgcjgS9sU2STIYam7nuwRSCYIaSK9RMmxezLzzjb e284gfZcjYBocGdVpJGnHTgDiNJsb6hOdjE4ZI4GJH8wcwbZ8r9o6KoEsSXVAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUQrHJXTSBtWVgPzVPJXzDhVPhBhEwHwYDVR0j BBgwFoAUAozeDnZKqH9RyD4mCLhWK3K04gQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN3p0UG43emNTOURlSHlraVhQRGVSYThNNk1FWjZQM3gyNXRzWnlWRDVD Vm4vMC8wMjhDREUwRTc2NEFBODdGNTFDODNFMjYwOEI4NTYyQjcyQjRFMjA0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAyOENERTBFNzY0QUE4N0Y1 MUM4M0UyNjA4Qjg1NjJCNzJCNEUyMDQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzd6dFBuN3pjUzlEZUh5a2lYUERlUmE4TTZNRVo2UDN4MjV0c1p5VkQ1Q1ZuLzAv MzIzODMwMzQzYTMxMzI2NjYzM2EzMzM1MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk M2UyMDMyMzYzMzM1MzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEEvw1MA0GCSqGSIb3DQEBCwUA A4IBAQAREIJgti63FiMv+G9Aw3a/2XNJ5dcUgadqfrtakKbZyebRhcbeSsyArRxs Rchi62AGv6EEq4pADjJU1z7Xah2xe31Ruc8SB+yua26uYojn5OxDhwVsNNdQ1/Gp uffasN2GJSGqEVt3hwNKpBhQL1LB/4xku5FYaDiw44oZF3HGQOzjS9Od8otgTohd 7zD0MG5i9gvDmUsTa6osOpDfnlX/sztQ8ADctrM64cwk2f/41sq1BQiSRmr5RU4e esae84W/zRV+U77IP0tVmlQqNSo9BKr/kaZbp2fgJy3CVAoomOVhqaTrBIPHwLid jGynPW88BNitXbscMnpSFKrgKzRb -----END CERTIFICATE-----Generated at Mon Apr 28 13:04:56 2025 by rpki-client on console.sobornost.net