$ rpki-client -vvf rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/323830343a6433383a3a2f33322d3438203d3e203533313538.roa File: 323830343a6433383a3a2f33322d3438203d3e203533313538.roa (raw, json) Hash identifier: ITX9zf4dR+WNiA0LigOZZoVUW70WV9yvBVhLZO4GzXk= Subject key identifier: DE:DD:96:16:E6:AE:66:D9:44:62:CB:96:9B:46:96:55:2A:36:9F:2B Certificate issuer: /CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717 Certificate serial: 1BD9466CDA56A37865FAF2050476C38DCF46F83A Authority key identifier: 3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer Subject info access: rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/323830343a6433383a3a2f33322d3438203d3e203533313538.roa Signing time: Fri 20 Dec 2024 14:57:35 +0000 ROA not before: Fri 20 Dec 2024 14:52:35 +0000 ROA not after: Fri 19 Dec 2025 14:57:35 +0000 asID: 53158 IP address blocks: 2804:d38::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Apr 2025 06:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:d9:46:6c:da:56:a3:78:65:fa:f2:05:04:76:c3:8d:cf:46:f8:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717 Validity Not Before: Dec 20 14:52:35 2024 GMT Not After : Dec 19 14:57:35 2025 GMT Subject: CN=DEDD9616E6AE66D94462CB969B4696552A369F2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:88:eb:05:a6:3a:52:46:68:bf:cc:9a:4c:24: f8:18:8c:dd:cd:5d:8b:a4:94:31:e7:08:77:58:70: 0e:1d:34:3c:f5:e7:19:92:d6:06:7b:af:19:16:46: 4d:40:5d:26:9c:2a:a6:fc:a4:6e:ec:5c:05:5c:8c: af:96:66:90:73:82:d4:57:e7:57:80:7d:a8:20:72: eb:fd:5e:2a:a8:35:ba:dd:b7:7b:63:df:9c:54:dd: e2:83:00:9d:bb:21:74:f4:1e:ab:af:df:ba:c8:02: 73:69:86:b5:c7:0e:40:34:68:f6:7d:1a:51:26:0b: 72:f8:53:2e:ba:11:1d:6b:e8:33:34:5f:9d:04:9a: 2f:b4:ab:73:34:2b:69:4a:e1:d0:6a:12:e2:7a:fe: 2f:61:7e:0a:3e:b8:9f:6f:63:6f:71:45:6e:24:0a: 69:a5:fd:70:73:5f:38:cc:a4:4e:8e:cc:cd:a2:41: 96:28:7a:01:0b:1e:a9:98:38:cd:c3:bd:31:87:f9: ce:42:2c:d5:35:a0:bf:d3:53:7f:ac:f8:ef:38:8b: fa:52:96:f1:65:8a:6a:56:72:b3:5d:91:41:b7:72: aa:c0:c4:ce:55:7a:8f:28:28:1b:2d:c1:fe:0e:a9: 03:bf:e9:78:fe:23:b1:5c:c2:85:2c:8c:77:05:c1: 02:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:DD:96:16:E6:AE:66:D9:44:62:CB:96:9B:46:96:55:2A:36:9F:2B X509v3 Authority Key Identifier: keyid:3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/323830343a6433383a3a2f33322d3438203d3e203533313538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:d38::/32 Signature Algorithm: sha256WithRSAEncryption ab:b2:b5:68:58:1f:26:88:e4:a8:6e:41:32:13:d1:76:7d:b1: 72:ec:18:10:c5:fe:16:00:45:4d:44:a7:b6:6c:7d:c1:4f:25: 7d:68:52:c4:4a:00:00:8c:a3:fd:13:07:40:70:a6:4b:5a:b4: f5:df:ec:a9:ce:6c:bc:dd:d5:62:6d:cb:fc:64:f0:58:8a:55: 63:86:8a:92:48:f2:46:2f:99:9a:c2:96:65:6b:07:6b:1b:27: 5a:5a:fc:45:91:2d:bc:3c:6a:f7:df:15:4e:03:4b:02:51:fc: 26:28:7d:84:fc:16:35:04:64:52:15:51:7d:c8:0b:61:7d:63: d6:c8:06:33:0a:ee:60:44:06:0c:1c:8b:48:8d:1e:71:ef:0b: 11:cd:0d:b1:d4:a7:02:7f:17:75:3e:82:bb:7b:ed:3b:37:c3: f0:db:56:14:96:c3:7c:af:41:c7:f6:bb:b5:b4:93:92:b7:54: 75:3f:40:33:e0:62:bf:5f:c7:fc:75:c4:3f:b2:1e:66:6a:23: 12:26:84:c2:b4:ef:2a:66:0b:59:86:ff:d1:88:ae:4b:0d:1d: 5e:67:cd:8c:71:b9:7c:0b:a7:0e:57:a5:7a:dd:7d:ae:39:31: 85:f0:de:71:05:73:3e:c9:9f:f7:02:37:2e:1f:8c:62:be:26: 51:ac:01:e6 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgIUG9lGbNpWo3hl+vIFBHbDjc9G+DowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I2MEMwM0MwODM0OTg0NTcwRTU4REI5QkRFNUQzREQ5 NzZCMDcxNzAeFw0yNDEyMjAxNDUyMzVaFw0yNTEyMTkxNDU3MzVaMDMxMTAvBgNV BAMTKERFREQ5NjE2RTZBRTY2RDk0NDYyQ0I5NjlCNDY5NjU1MkEzNjlGMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDciOsFpjpSRmi/zJpMJPgYjN3N XYuklDHnCHdYcA4dNDz15xmS1gZ7rxkWRk1AXSacKqb8pG7sXAVcjK+WZpBzgtRX 51eAfaggcuv9XiqoNbrdt3tj35xU3eKDAJ27IXT0Hquv37rIAnNphrXHDkA0aPZ9 GlEmC3L4Uy66ER1r6DM0X50Emi+0q3M0K2lK4dBqEuJ6/i9hfgo+uJ9vY29xRW4k Cmml/XBzXzjMpE6OzM2iQZYoegELHqmYOM3DvTGH+c5CLNU1oL/TU3+s+O84i/pS lvFlimpWcrNdkUG3cqrAxM5Veo8oKBstwf4OqQO/6Xj+I7FcwoUsjHcFwQJXAgMB AAGjggJJMIICRTAdBgNVHQ4EFgQU3t2WFuauZtlEYsuWm0aWVSo2nyswHwYDVR0j BBgwFoAUO2DAPAg0mEVw5Y25veXT3ZdrBxcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9nRVdUOGE0R2VjczJmWTU2cVFkOWkxVXJLVG5lZHlxTFpzUmVZanVYdzRl LzAvM0I2MEMwM0MwODM0OTg0NTcwRTU4REI5QkRFNUQzREQ5NzZCMDcxNy5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8zQjYwQzAzQzA4MzQ5ODQ1NzBF NThEQjlCREU1RDNERDk3NkIwNzE3LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQG CCsGAQUFBzALhoGHcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9n RVdUOGE0R2VjczJmWTU2cVFkOWkxVXJLVG5lZHlxTFpzUmVZanVYdzRlLzAvMzIz ODMwMzQzYTY0MzMzODNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzMzMTM1Mzgu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAP MA0EAgACMAcDBQAoBA04MA0GCSqGSIb3DQEBCwUAA4IBAQCrsrVoWB8miOSobkEy E9F2fbFy7BgQxf4WAEVNRKe2bH3BTyV9aFLESgAAjKP9EwdAcKZLWrT13+ypzmy8 3dVibcv8ZPBYilVjhoqSSPJGL5mawpZlawdrGydaWvxFkS28PGr33xVOA0sCUfwm KH2E/BY1BGRSFVF9yAthfWPWyAYzCu5gRAYMHItIjR5x7wsRzQ2x1KcCfxd1PoK7 e+07N8Pw21YUlsN8r0HH9ru1tJOSt1R1P0Az4GK/X8f8dcQ/sh5maiMSJoTCtO8q ZgtZhv/RiK5LDR1eZ82Mcbl8C6cOV6V63X2uOTGF8N5xBXM+yZ/3AjcuH4xiviZR rAHm -----END CERTIFICATE-----Generated at Sun Apr 27 10:26:57 2025 by rpki-client on console.sobornost.net