$ rpki-client -vvf rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/323830343a313266633a663030303a3a2f33362d3336203d3e20323633353038.roa File: 323830343a313266633a663030303a3a2f33362d3336203d3e20323633353038.roa (raw, json) Hash identifier: 2s8cx4yE3ePCw4vkIvHqBeoZU2/iWiup+ihLnIVjosk= Subject key identifier: 71:30:F7:2E:62:37:4D:14:B8:17:1B:AF:8B:BB:10:AB:6C:41:A6:2F Certificate issuer: /CN=028CDE0E764AA87F51C83E2608B8562B72B4E204 Certificate serial: 1319590CBC43CA6C9B43EE82BAF5CF35625DBEEF Authority key identifier: 02:8C:DE:0E:76:4A:A8:7F:51:C8:3E:26:08:B8:56:2B:72:B4:E2:04 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer Subject info access: rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/323830343a313266633a663030303a3a2f33362d3336203d3e20323633353038.roa Signing time: Thu 27 Feb 2025 15:59:26 +0000 ROA not before: Thu 27 Feb 2025 15:54:26 +0000 ROA not after: Thu 26 Feb 2026 15:59:26 +0000 asID: 263508 IP address blocks: 2804:12fc:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.crl rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 11:58:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:19:59:0c:bc:43:ca:6c:9b:43:ee:82:ba:f5:cf:35:62:5d:be:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=028CDE0E764AA87F51C83E2608B8562B72B4E204 Validity Not Before: Feb 27 15:54:26 2025 GMT Not After : Feb 26 15:59:26 2026 GMT Subject: CN=7130F72E62374D14B8171BAF8BBB10AB6C41A62F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4a:47:f7:30:a1:27:78:ca:c2:f0:9a:4b:98: d0:7d:7c:04:3b:86:df:7b:02:83:f8:60:e6:25:ed: 72:c3:cf:6a:49:f5:1c:84:50:9e:cd:ae:02:d0:53: 27:43:27:2d:a9:d6:67:15:04:f3:11:48:ac:8c:06: f1:17:f9:ff:57:b8:76:22:6c:12:ff:83:da:6a:a0: b8:ba:87:0a:6d:4d:b5:d4:e9:6d:ef:ec:64:1b:64: 93:ad:ba:5f:a0:45:1d:c7:2c:40:41:7a:66:20:73: 46:8d:34:41:8c:65:17:a9:5d:fe:15:7a:f2:44:77: 6f:3f:a8:99:a5:a1:67:7d:15:ed:46:ba:a0:59:c8: a7:72:af:8b:b5:37:cc:f9:34:b1:ce:4b:f8:1c:dc: f4:f1:56:74:2b:82:b5:12:eb:c7:ee:a4:30:78:97: a0:06:44:aa:e5:b0:26:8b:ac:40:05:aa:50:33:e0: 89:2f:73:68:13:cc:cd:9c:2a:18:c8:ae:3c:8e:0a: 6a:38:32:d9:c8:62:10:d2:58:42:84:32:4a:52:1b: 9b:a5:82:fe:e1:97:6d:f7:0a:a5:aa:f3:1a:28:03: 08:11:8c:50:8b:0d:4b:c3:06:95:35:ad:9b:9a:8f: 88:1b:e2:62:02:9f:14:57:ed:fc:df:57:e9:3a:1a: 1c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:30:F7:2E:62:37:4D:14:B8:17:1B:AF:8B:BB:10:AB:6C:41:A6:2F X509v3 Authority Key Identifier: keyid:02:8C:DE:0E:76:4A:A8:7F:51:C8:3E:26:08:B8:56:2B:72:B4:E2:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/323830343a313266633a663030303a3a2f33362d3336203d3e20323633353038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:12fc:f000::/36 Signature Algorithm: sha256WithRSAEncryption 9a:1a:59:19:ee:99:f8:38:29:05:82:0c:de:fa:07:4d:e2:03: 22:9c:54:bc:b1:b4:fd:77:fd:cc:3a:09:40:64:7c:03:22:56: aa:c8:73:dc:79:5f:a3:b9:63:1d:05:33:46:bf:6d:ac:87:36: 88:71:52:34:e4:c6:80:a0:f2:b3:9e:0c:02:ee:e8:49:10:f4: f6:ca:3e:ae:a9:6e:47:c4:5c:29:f3:49:3e:f3:ca:7d:98:22: 0f:20:3a:40:94:65:4b:54:52:58:5f:cc:a0:16:72:a6:e4:76: 7a:06:b5:1c:63:8d:d0:ff:03:75:74:de:28:cf:70:e3:65:50: 17:3a:4a:11:b3:df:7a:34:8b:53:7d:a8:92:b7:be:52:01:23: 95:5f:fa:4a:48:ad:21:1c:da:cd:e5:f8:24:85:6d:33:8f:9e: 6b:35:dd:ec:90:e8:c6:01:a1:1f:a5:e3:47:d3:b2:6b:37:8d: 2e:4c:8c:c7:3c:49:d3:5f:28:80:63:7b:fd:f9:6e:8c:d0:92: 68:63:10:47:7d:fe:53:29:08:87:85:35:5a:cf:eb:bf:9a:41: af:4f:80:ff:12:c2:da:7c:c5:be:87:66:5d:b2:8f:a7:39:77: 66:f0:a9:3d:89:02:2d:1a:0c:2d:52:60:91:f0:3d:98:b6:87: b5:ef:8d:33 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUExlZDLxDymybQ+6CuvXPNWJdvu8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI4Q0RFMEU3NjRBQTg3RjUxQzgzRTI2MDhCODU2MkI3 MkI0RTIwNDAeFw0yNTAyMjcxNTU0MjZaFw0yNjAyMjYxNTU5MjZaMDMxMTAvBgNV BAMTKDcxMzBGNzJFNjIzNzREMTRCODE3MUJBRjhCQkIxMEFCNkM0MUE2MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Skf3MKEneMrC8JpLmNB9fAQ7 ht97AoP4YOYl7XLDz2pJ9RyEUJ7NrgLQUydDJy2p1mcVBPMRSKyMBvEX+f9XuHYi bBL/g9pqoLi6hwptTbXU6W3v7GQbZJOtul+gRR3HLEBBemYgc0aNNEGMZRepXf4V evJEd28/qJmloWd9Fe1GuqBZyKdyr4u1N8z5NLHOS/gc3PTxVnQrgrUS68fupDB4 l6AGRKrlsCaLrEAFqlAz4Ikvc2gTzM2cKhjIrjyOCmo4MtnIYhDSWEKEMkpSG5ul gv7hl233CqWq8xooAwgRjFCLDUvDBpU1rZuaj4gb4mICnxRX7fzfV+k6GhwNAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUcTD3LmI3TRS4Fxuvi7sQq2xBpi8wHwYDVR0j BBgwFoAUAozeDnZKqH9RyD4mCLhWK3K04gQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN3p0UG43emNTOURlSHlraVhQRGVSYThNNk1FWjZQM3gyNXRzWnlWRDVD Vm4vMC8wMjhDREUwRTc2NEFBODdGNTFDODNFMjYwOEI4NTYyQjcyQjRFMjA0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAyOENERTBFNzY0QUE4N0Y1 MUM4M0UyNjA4Qjg1NjJCNzJCNEUyMDQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzd6dFBuN3pjUzlEZUh5a2lYUERlUmE4TTZNRVo2UDN4MjV0c1p5VkQ1Q1ZuLzAv MzIzODMwMzQzYTMxMzI2NjYzM2E2NjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk M2UyMDMyMzYzMzM1MzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEEvzwMA0GCSqGSIb3DQEBCwUA A4IBAQCaGlkZ7pn4OCkFggze+gdN4gMinFS8sbT9d/3MOglAZHwDIlaqyHPceV+j uWMdBTNGv22shzaIcVI05MaAoPKzngwC7uhJEPT2yj6uqW5HxFwp80k+88p9mCIP IDpAlGVLVFJYX8ygFnKm5HZ6BrUcY43Q/wN1dN4oz3DjZVAXOkoRs996NItTfaiS t75SASOVX/pKSK0hHNrN5fgkhW0zj55rNd3skOjGAaEfpeNH07JrN40uTIzHPEnT XyiAY3v9+W6M0JJoYxBHff5TKQiHhTVaz+u/mkGvT4D/EsLafMW+h2Zdso+nOXdm 8Kk9iQItGgwtUmCR8D2Ytoe1740z -----END CERTIFICATE-----Generated at Mon Apr 28 13:04:56 2025 by rpki-client on console.sobornost.net