$ rpki-client -vvf rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/323830343a363230633a3a2f33322d3332203d3e203238323235.roa File: 323830343a363230633a3a2f33322d3332203d3e203238323235.roa (raw, json) Hash identifier: 3W2JVSrgHcuIlxeQZZ94M9us2bTUnhZKcL6IDOv6B5Y= Subject key identifier: 45:85:68:C3:5A:A8:DE:13:61:DE:57:74:83:85:26:F4:94:E1:31:33 Certificate issuer: /CN=A09DA72952F507E87867658358D81CEFBDB67686 Certificate serial: 651F5272C4596F2EA541DBE5AFF58306EE6CB1B6 Authority key identifier: A0:9D:A7:29:52:F5:07:E8:78:67:65:83:58:D8:1C:EF:BD:B6:76:86 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09DA72952F507E87867658358D81CEFBDB67686.cer Subject info access: rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/323830343a363230633a3a2f33322d3332203d3e203238323235.roa Signing time: Tue 09 Jan 2024 12:56:15 +0000 ROA not before: Tue 09 Jan 2024 12:51:15 +0000 ROA not after: Tue 07 Jan 2025 12:56:15 +0000 asID: 28225 IP address blocks: 2804:620c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/A09DA72952F507E87867658358D81CEFBDB67686.crl rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/A09DA72952F507E87867658358D81CEFBDB67686.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09DA72952F507E87867658358D81CEFBDB67686.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 10 Jan 2024 14:20:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:1f:52:72:c4:59:6f:2e:a5:41:db:e5:af:f5:83:06:ee:6c:b1:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A09DA72952F507E87867658358D81CEFBDB67686 Validity Not Before: Jan 9 12:51:15 2024 GMT Not After : Jan 7 12:56:15 2025 GMT Subject: CN=458568C35AA8DE1361DE5774838526F494E13133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:68:5d:ad:59:17:f6:4a:53:a3:73:d4:2f:78: 23:b1:45:db:fb:2f:31:cf:6b:26:94:13:24:67:3f: 05:31:d3:a9:50:d3:07:59:c7:b0:07:ff:04:dc:14: 4b:cc:31:89:d4:cb:2f:1b:50:71:34:4f:ed:ce:fd: fd:91:33:5f:ff:2d:09:46:c9:78:3f:1e:47:0a:40: 1b:86:62:49:93:71:53:89:06:b8:f6:52:1f:43:02: 0c:3f:38:2f:ff:aa:ca:3f:5f:ac:92:1a:ae:46:ff: bc:51:b1:af:86:27:1f:96:eb:bb:97:80:c1:5f:df: eb:1e:df:d4:2f:99:5c:0a:79:ce:9c:9d:3c:16:31: 51:8e:df:c6:31:2f:a9:64:ff:5b:c6:cc:a2:fe:9a: 77:fd:0e:82:62:3b:6f:11:d7:d4:bf:e8:90:3d:4a: 35:93:cf:c6:ea:62:c4:f6:8b:68:94:75:34:0c:8a: f4:a6:32:a0:cf:3c:de:ec:29:b6:36:39:b1:b6:ca: fc:99:e5:fa:a2:52:fe:3a:ac:ac:09:99:0a:fb:4a: 64:4b:4c:58:e1:8a:50:93:ad:f5:42:90:df:74:f5: 5f:98:b7:4e:34:6c:8b:28:df:05:78:c0:ff:93:07: 87:27:63:ec:93:f3:e5:c8:ab:16:b0:bf:43:47:1d: ef:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:85:68:C3:5A:A8:DE:13:61:DE:57:74:83:85:26:F4:94:E1:31:33 X509v3 Authority Key Identifier: keyid:A0:9D:A7:29:52:F5:07:E8:78:67:65:83:58:D8:1C:EF:BD:B6:76:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/A09DA72952F507E87867658358D81CEFBDB67686.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09DA72952F507E87867658358D81CEFBDB67686.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/323830343a363230633a3a2f33322d3332203d3e203238323235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:620c::/32 Signature Algorithm: sha256WithRSAEncryption 39:cb:c0:ea:88:8e:f7:38:0d:73:96:28:27:17:65:be:2a:4d: ac:d3:e8:74:1b:30:f0:cb:8a:04:25:7d:ad:09:42:b8:e8:b1: e3:c1:83:72:b3:42:4e:c8:30:9c:77:43:b3:23:95:1a:3d:4a: 57:7d:80:44:b1:1d:70:45:27:d9:c8:f5:63:0f:b9:99:c1:ae: eb:62:ac:69:0d:1f:2a:35:f8:8f:27:1e:65:08:7c:37:50:b6: bd:76:dc:78:0e:d0:0b:6f:ba:47:51:fb:04:28:73:3a:f2:d8: 75:8b:8e:a3:5d:00:8f:3c:3c:56:f6:f5:f1:4e:d6:54:4e:1c: d1:9a:66:aa:31:d0:2a:73:0f:e7:87:53:4b:b7:64:0d:a2:18: 8f:c0:52:f3:9c:07:b2:a5:f9:eb:ed:dc:db:9b:ac:86:c0:b9: cb:3c:85:8d:82:91:9a:60:b1:31:09:d0:21:9f:11:9d:29:a2: 1a:7f:36:f1:9e:ee:25:86:f2:17:7a:a1:ec:28:62:bf:75:48: 16:18:e5:6f:60:4c:c3:2d:8f:11:6c:1f:74:18:49:74:0d:ad: 76:76:18:ca:5d:ef:e9:77:5d:3a:9d:79:57:f8:eb:63:ea:a4: c6:0a:69:45:17:c0:28:a4:92:81:ff:57:62:b4:9d:4d:53:21: 86:af:8f:12 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIUZR9ScsRZby6lQdvlr/WDBu5ssbYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA5REE3Mjk1MkY1MDdFODc4Njc2NTgzNThEODFDRUZC REI2NzY4NjAeFw0yNDAxMDkxMjUxMTVaFw0yNTAxMDcxMjU2MTVaMDMxMTAvBgNV BAMTKDQ1ODU2OEMzNUFBOERFMTM2MURFNTc3NDgzODUyNkY0OTRFMTMxMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAaF2tWRf2SlOjc9QveCOxRdv7 LzHPayaUEyRnPwUx06lQ0wdZx7AH/wTcFEvMMYnUyy8bUHE0T+3O/f2RM1//LQlG yXg/HkcKQBuGYkmTcVOJBrj2Uh9DAgw/OC//qso/X6ySGq5G/7xRsa+GJx+W67uX gMFf3+se39QvmVwKec6cnTwWMVGO38YxL6lk/1vGzKL+mnf9DoJiO28R19S/6JA9 SjWTz8bqYsT2i2iUdTQMivSmMqDPPN7sKbY2ObG2yvyZ5fqiUv46rKwJmQr7SmRL TFjhilCTrfVCkN909V+Yt040bIso3wV4wP+TB4cnY+yT8+XIqxawv0NHHe9VAgMB AAGjggJOMIICSjAdBgNVHQ4EFgQURYVow1qo3hNh3ld0g4Um9JThMTMwHwYDVR0j BBgwFoAUoJ2nKVL1B+h4Z2WDWNgc7722doYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQjhTWFdBdEt5S3ZreTZUdHBxenFoVEdhZzdkTTFrb1kzaHlndjJEYUFY akgvMS9BMDlEQTcyOTUyRjUwN0U4Nzg2NzY1ODM1OEQ4MUNFRkJEQjY3Njg2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0EwOURBNzI5NTJGNTA3RTg3 ODY3NjU4MzU4RDgxQ0VGQkRCNjc2ODYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0I4U1hXQXRLeUt2a3k2VHRwcXpxaFRHYWc3ZE0xa29ZM2h5Z3YyRGFBWGpILzEv MzIzODMwMzQzYTM2MzIzMDYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzODMy MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB /wQRMA8wDQQCAAIwBwMFACgEYgwwDQYJKoZIhvcNAQELBQADggEBADnLwOqIjvc4 DXOWKCcXZb4qTazT6HQbMPDLigQlfa0JQrjosePBg3KzQk7IMJx3Q7MjlRo9Sld9 gESxHXBFJ9nI9WMPuZnBrutirGkNHyo1+I8nHmUIfDdQtr123HgO0AtvukdR+wQo czry2HWLjqNdAI88PFb29fFO1lROHNGaZqox0CpzD+eHU0u3ZA2iGI/AUvOcB7Kl +evt3NubrIbAucs8hY2CkZpgsTEJ0CGfEZ0pohp/NvGe7iWG8hd6oewoYr91SBYY 5W9gTMMtjxFsH3QYSXQNrXZ2GMpd7+l3XTqdeVf462PqpMYKaUUXwCikkoH/V2K0 nU1TIYavjxI= -----END CERTIFICATE-----Generated at Tue Jan 9 15:58:27 2024 by rpki-client on console.sobornost.net