$ rpki-client -vvf rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/323830343a313266633a373030303a3a2f33362d3336203d3e20323633353038.roa File: 323830343a313266633a373030303a3a2f33362d3336203d3e20323633353038.roa (raw, json) Hash identifier: tx8nXVMlsWh7soi0Uuh876uliOoNjFVU3cLmEeaxYCg= Subject key identifier: 2E:C6:D9:D6:4F:AB:20:FF:64:B3:B8:B2:4E:68:9B:DD:D5:74:F2:34 Certificate issuer: /CN=028CDE0E764AA87F51C83E2608B8562B72B4E204 Certificate serial: 530EFBEDC8762BEBA171AA84BFF91BA9217BB903 Authority key identifier: 02:8C:DE:0E:76:4A:A8:7F:51:C8:3E:26:08:B8:56:2B:72:B4:E2:04 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer Subject info access: rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/323830343a313266633a373030303a3a2f33362d3336203d3e20323633353038.roa Signing time: Thu 27 Feb 2025 15:59:22 +0000 ROA not before: Thu 27 Feb 2025 15:54:22 +0000 ROA not after: Thu 26 Feb 2026 15:59:22 +0000 asID: 263508 IP address blocks: 2804:12fc:7000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.crl rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 11:58:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:0e:fb:ed:c8:76:2b:eb:a1:71:aa:84:bf:f9:1b:a9:21:7b:b9:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=028CDE0E764AA87F51C83E2608B8562B72B4E204 Validity Not Before: Feb 27 15:54:22 2025 GMT Not After : Feb 26 15:59:22 2026 GMT Subject: CN=2EC6D9D64FAB20FF64B3B8B24E689BDDD574F234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0b:46:5c:54:fb:1a:3d:09:0d:20:f8:d9:72: f6:cf:9e:ac:c4:42:d8:73:41:ea:66:66:ed:9c:72: 8b:2f:8f:ee:2d:d4:3b:8e:b5:0b:b5:28:0e:24:37: fd:e1:bc:9d:8c:77:67:64:b9:a9:9c:b4:7d:ab:9d: a9:d5:ea:6a:b1:9a:53:48:5a:77:3e:2d:32:db:4d: dd:1e:dd:ba:c6:01:55:c9:e0:c3:da:83:c0:49:a0: 62:f8:41:65:be:34:82:38:97:96:e3:3e:3b:a5:4a: e3:12:58:7a:d9:90:c2:7a:69:25:c4:e6:38:ab:e9: 5e:2b:78:89:90:75:68:fa:0a:65:02:74:64:31:eb: 70:6f:d8:a9:9d:ed:b3:17:63:ab:69:86:96:c5:b8: e0:c4:57:1f:a0:a5:2a:80:e3:6a:a7:03:96:61:d9: cb:ed:b2:4c:17:84:70:04:4f:6a:7c:51:56:1f:8a: b9:a1:76:f1:72:85:14:ce:64:43:d2:ad:e8:85:dc: 88:64:f7:2c:6c:78:23:79:4c:59:74:a1:86:bb:82: 75:ec:dc:cf:46:79:59:5d:8f:b5:fa:71:0d:18:f0: ac:24:60:cb:f0:0a:34:fe:8e:4e:8a:91:d8:c9:75: 8d:12:5d:86:70:88:be:1f:71:98:9d:6e:7c:4a:06: 28:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:C6:D9:D6:4F:AB:20:FF:64:B3:B8:B2:4E:68:9B:DD:D5:74:F2:34 X509v3 Authority Key Identifier: keyid:02:8C:DE:0E:76:4A:A8:7F:51:C8:3E:26:08:B8:56:2B:72:B4:E2:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/323830343a313266633a373030303a3a2f33362d3336203d3e20323633353038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:12fc:7000::/36 Signature Algorithm: sha256WithRSAEncryption 1e:07:ac:7f:96:5f:ba:fd:a3:86:9d:35:59:f5:11:86:c2:32: 62:08:2b:a0:c4:1a:fd:af:66:d3:1b:04:65:d3:16:ad:3f:7e: 91:7a:af:14:67:e9:29:ff:52:57:63:f1:62:a5:2e:dc:ec:6d: 4a:c9:80:12:26:1b:f9:6e:e1:3b:4a:5b:c8:eb:01:a5:1b:5d: 2d:15:a3:46:65:e2:78:a4:4f:a8:8c:eb:fa:a8:87:8a:c8:60: 32:e0:6b:fe:57:ab:ab:07:5f:c0:e3:0d:f2:f7:b3:27:0e:13: bc:98:3a:d7:d6:e9:72:2b:44:0b:29:9c:d6:f1:f8:bb:c8:02: 2a:bb:29:9f:ab:b7:e7:01:3f:09:a7:ea:a0:24:5b:bd:36:5f: 84:cb:9d:00:d2:2f:7a:ac:0f:a2:e5:98:71:68:57:94:02:0a: 38:26:66:28:02:f3:93:e7:a7:9b:9a:73:f7:c3:91:c5:a5:7b: 29:69:44:9a:e8:cc:0f:cc:46:dc:47:10:43:bc:95:f3:fd:a4: 53:de:8f:67:77:91:30:2a:78:eb:1a:ae:d4:c6:6d:8a:4f:9e: 8d:5b:02:f7:3d:73:38:ed:49:7b:ac:7b:8b:5c:54:e8:62:00: c1:8e:9c:cb:17:11:00:1f:be:3f:9f:2d:1a:f6:99:a4:fb:57: a9:8e:a3:2c -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUUw777ch2K+uhcaqEv/kbqSF7uQMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI4Q0RFMEU3NjRBQTg3RjUxQzgzRTI2MDhCODU2MkI3 MkI0RTIwNDAeFw0yNTAyMjcxNTU0MjJaFw0yNjAyMjYxNTU5MjJaMDMxMTAvBgNV BAMTKDJFQzZEOUQ2NEZBQjIwRkY2NEIzQjhCMjRFNjg5QkRERDU3NEYyMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/C0ZcVPsaPQkNIPjZcvbPnqzE QthzQepmZu2ccosvj+4t1DuOtQu1KA4kN/3hvJ2Md2dkuamctH2rnanV6mqxmlNI Wnc+LTLbTd0e3brGAVXJ4MPag8BJoGL4QWW+NII4l5bjPjulSuMSWHrZkMJ6aSXE 5jir6V4reImQdWj6CmUCdGQx63Bv2Kmd7bMXY6tphpbFuODEVx+gpSqA42qnA5Zh 2cvtskwXhHAET2p8UVYfirmhdvFyhRTOZEPSreiF3Ihk9yxseCN5TFl0oYa7gnXs 3M9GeVldj7X6cQ0Y8KwkYMvwCjT+jk6KkdjJdY0SXYZwiL4fcZidbnxKBiiFAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQULsbZ1k+rIP9ks7iyTmib3dV08jQwHwYDVR0j BBgwFoAUAozeDnZKqH9RyD4mCLhWK3K04gQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN3p0UG43emNTOURlSHlraVhQRGVSYThNNk1FWjZQM3gyNXRzWnlWRDVD Vm4vMC8wMjhDREUwRTc2NEFBODdGNTFDODNFMjYwOEI4NTYyQjcyQjRFMjA0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAyOENERTBFNzY0QUE4N0Y1 MUM4M0UyNjA4Qjg1NjJCNzJCNEUyMDQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzd6dFBuN3pjUzlEZUh5a2lYUERlUmE4TTZNRVo2UDN4MjV0c1p5VkQ1Q1ZuLzAv MzIzODMwMzQzYTMxMzI2NjYzM2EzNzMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk M2UyMDMyMzYzMzM1MzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEEvxwMA0GCSqGSIb3DQEBCwUA A4IBAQAeB6x/ll+6/aOGnTVZ9RGGwjJiCCugxBr9r2bTGwRl0xatP36Req8UZ+kp /1JXY/FipS7c7G1KyYASJhv5buE7SlvI6wGlG10tFaNGZeJ4pE+ojOv6qIeKyGAy 4Gv+V6urB1/A4w3y97MnDhO8mDrX1ulyK0QLKZzW8fi7yAIquymfq7fnAT8Jp+qg JFu9Nl+Ey50A0i96rA+i5ZhxaFeUAgo4JmYoAvOT56ebmnP3w5HFpXspaUSa6MwP zEbcRxBDvJXz/aRT3o9nd5EwKnjrGq7Uxm2KT56NWwL3PXM47Ul7rHuLXFToYgDB jpzLFxEAH74/ny0a9pmk+1epjqMs -----END CERTIFICATE-----Generated at Mon Apr 28 13:04:56 2025 by rpki-client on console.sobornost.net