$ rpki-client -vvf rpki-repo.registro.br/repo/8m3QbtovZfUDXHE2uBtBKB4vHcm3hGBmShjmwRDrgqeR/1/3133312e3139362e3137322e302f32322d3234203d3e203239383032.roa File: 3133312e3139362e3137322e302f32322d3234203d3e203239383032.roa (raw, json) Hash identifier: 0CRnHKy3OI+EH3Scn8wlb9lWdzI1CKnXN4zHFxGVc/s= Subject key identifier: AA:E2:0C:56:99:56:66:05:92:69:AC:32:35:42:54:15:DC:A8:97:03 Certificate issuer: /CN=2A583FEEEEFA7D0F82CFF832874A83CDDD2144A3 Certificate serial: 71B1E75DAAADF5CBCBE8240A16F44EB8539BE4AD Authority key identifier: 2A:58:3F:EE:EE:FA:7D:0F:82:CF:F8:32:87:4A:83:CD:DD:21:44:A3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A583FEEEEFA7D0F82CFF832874A83CDDD2144A3.cer Subject info access: rsync://rpki-repo.registro.br/repo/8m3QbtovZfUDXHE2uBtBKB4vHcm3hGBmShjmwRDrgqeR/1/3133312e3139362e3137322e302f32322d3234203d3e203239383032.roa Signing time: Wed 03 Apr 2024 19:00:01 +0000 ROA not before: Wed 03 Apr 2024 18:55:01 +0000 ROA not after: Thu 03 Apr 2025 19:00:01 +0000 asID: 29802 IP address blocks: 131.196.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8m3QbtovZfUDXHE2uBtBKB4vHcm3hGBmShjmwRDrgqeR/1/2A583FEEEEFA7D0F82CFF832874A83CDDD2144A3.crl rsync://rpki-repo.registro.br/repo/8m3QbtovZfUDXHE2uBtBKB4vHcm3hGBmShjmwRDrgqeR/1/2A583FEEEEFA7D0F82CFF832874A83CDDD2144A3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A583FEEEEFA7D0F82CFF832874A83CDDD2144A3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 01 May 2024 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:b1:e7:5d:aa:ad:f5:cb:cb:e8:24:0a:16:f4:4e:b8:53:9b:e4:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A583FEEEEFA7D0F82CFF832874A83CDDD2144A3 Validity Not Before: Apr 3 18:55:01 2024 GMT Not After : Apr 3 19:00:01 2025 GMT Subject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ubject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:af:d4:48:59:54:27:01:a6:ef:9f:8f:7c:bf: 8a:00:18:96:a4:ae:3a:a3:ff:8a:b8:5b:76:44:82: f1:9d:11:30:7e:26:15:50:9a:fb:69:9d:89:52:55: bc:75:72:9e:7b:18:0f:f4:92:b3:43:f0:73:4d:40: 01:ea:08:0d:72:c7:9f:3b:0f:79:c8:23:42:be:59: 36:6f:b9:08:c8:cb:b9:a1:1a:b6:a9:79:a5:e8:3d: 47:d6:cd:42:f2:c3:6f:84:f3:de:ba:57:f5:11:0b: dd:18:f1:8a:57:46:4c:4a:c1:23:4d:6e:97:17:df: e1:af:47:d1:02:f9:2d:a0:36:36:57:6d:c7:3d:21: a7:86:fb:cb:37:60:04:16:8a:fc:77:c5:d9:33:68: 02:b6:25:73:8b:04:79:14:cb:1e:c9:5a:61:25:aa: 4b:2f:e0:29:dc:d7:b9:d6:53:74:2d:04:b8:ab:dd: f4:7a:ab:1e:ba:ac:b3:64:44:4a:09:d1:9d:52:ef: 02:93:a9:77:ce:e4:4b:07:9c:c5:fd:08:3a:ee:1f: a3:a7:0b:a2:e5:c1:3a:bc:7f:4c:a3:47:5a:31:8f: 49:3e:f2:e7:5e:ab:23:b4:2f:0f:b6:e0:3f:7b:ef: 78:56:8f:a5:7e:49:5a:32:76:07:f6:c8:6b:d6:36: 5f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E2:0C:56:99:56:66:05:92:69:AC:32:35:42:54:15:DC:A8:97:03 X509v3 Authority Key Identifier: keyid:2A:58:3F:EE:EE:FA:7D:0F:82:CF:F8:32:87:4A:83:CD:DD:21:44:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8m3QbtovZfUDXHE2uBtBKB4vHcm3hGBmShjmwRDrgqeR/1/2A583FEEEEFA7D0F82CFF832874A83CDDD2144A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A583FEEEEFA7D0F82CFF832874A83CDDD2144A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8m3QbtovZfUDXHE2uBtBKB4vHcm3hGBmShjmwRDrgqeR/1/3133312e3139362e3137322e302f32322d3234203d3e203239383032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.196.172.0/22 Signature Algorithm: sha256WithRSAEncryption 41:28:a4:c8:03:13:1a:b9:b3:17:4c:d2:d0:22:93:b8:2d:f9: 29:d3:ec:20:f5:d0:68:cf:e7:63:9b:73:13:a1:88:dd:bb:f8: 5d:ef:14:10:ae:45:04:63:7a:52:9c:29:16:54:77:b4:66:09: 5d:dd:f5:b1:8f:c5:65:ae:df:61:e9:58:2c:28:7c:02:fd:ac: 11:9a:06:d2:bd:60:39:96:63:19:91:67:f8:37:77:f9:a3:7a: 7b:85:82:ca:94:9a:3e:07:5d:6b:9d:70:b3:6b:74:0c:14:66: 3e:61:82:35:32:7e:82:9a:46:3a:24:7d:de:fa:18:8c:0a:88: 16:9a:38:eb:fe:b6:1a:68:d7:b9:ec:63:a5:99:f3:d7:30:66: 79:35:a6:36:3d:0e:e2:26:49:e4:09:56:25:bb:b2:9e:d0:8c: 3b:ec:c0:0f:db:c0:cf:c3:86:82:1f:fd:0d:0b:d1:1f:40:2a: 18:ca:92:42:fb:d6:df:ce:95:ed:25:f1:08:7a:6c:2d:ac:4f: b6:b8:6a:14:67:57:25:9d:0f:1c:c9:29:83:18:62:00:f0:3e: 26:11:78:d1:fb:0e:6b:f9:a8:27:b5:2c:0b:c3:be:5f:5f:d6: 0f:63:f6:e1:9b:2d:9c:58:61:ee:90:11:ca:f6:2b:a8:26:de: 9c:eb:f4:a0 -----BEGIN CERTIFICATE----- MIIHQzCCBiugAwIBAgIUcbHnXaqt9cvL6CQKFvROuFOb5K0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE1ODNGRUVFRUZBN0QwRjgyQ0ZGODMyODc0QTgzQ0RE RDIxNDRBMzAeFw0yNDA0MDMxODU1MDFaFw0yNTA0MDMxOTAwMDFaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTJBRkQ0NDg1OTU0MjcwMUE2 RUY5RjhGN0NCRjhBMDAxODk2QTRBRTNBQTNGRjhBQjg1Qjc2NDQ4MkYxOUQxMTMw N0UyNjE1NTA5QUZCNjk5RDg5NTI1NUJDNzU3MjlFN0IxODBGRjQ5MkIzNDNGMDcz NEQ0MDAxRUEwODBENzJDNzlGM0IwRjc5QzgyMzQyQkU1OTM2NkZCOTA4QzhDQkI5 QTExQUI2QTk3OUE1RTgzRDQ3RDZDRDQyRjJDMzZGODRGM0RFQkE1N0Y1MTEwQkRE MThGMThBNTc0NjRDNEFDMTIzNEQ2RTk3MTdERkUxQUY0N0QxMDJGOTJEQTAzNjM2 NTc2REM3M0QyMUE3ODZGQkNCMzc2MDA0MTY4QUZDNzdDNUQ5MzM2ODAyQjYyNTcz OEIwNDc5MTRDQjFFQzk1QTYxMjVBQTRCMkZFMDI5RENEN0I5RDY1Mzc0MkQwNEI4 QUJEREY0N0FBQjFFQkFBQ0IzNjQ0NDRBMDlEMTlENTJFRjAyOTNBOTc3Q0VFNDRC MDc5Q0M1RkQwODNBRUUxRkEzQTcwQkEyRTVDMTNBQkM3RjRDQTM0NzVBMzE4RjQ5 M0VGMkU3NUVBQjIzQjQyRjBGQjZFMDNGN0JFRjc4NTY4RkE1N0U0OTVBMzI3NjA3 RjZDODZCRDYzNjVGMjcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAoq/USFlUJwGm75+PfL+KABiWpK46o/+KuFt2RILxnREwfiYVUJr7 aZ2JUlW8dXKeexgP9JKzQ/BzTUAB6ggNcsefOw95yCNCvlk2b7kIyMu5oRq2qXml 6D1H1s1C8sNvhPPeulf1EQvdGPGKV0ZMSsEjTW6XF9/hr0fRAvktoDY2V23HPSGn hvvLN2AEFor8d8XZM2gCtiVziwR5FMseyVphJapLL+Ap3Ne51lN0LQS4q930eqse uqyzZERKCdGdUu8Ck6l3zuRLB5zF/Qg67h+jpwui5cE6vH9Mo0daMY9JPvLnXqsj tC8PtuA/e+94Vo+lfklaMnYH9shr1jZfJwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE FKriDFaZVmYFkmmsMjVCVBXcqJcDMB8GA1UdIwQYMBaAFCpYP+7u+n0Pgs/4ModK g83dIUSjMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhtM1FidG92WmZVRFhI RTJ1QnRCS0I0dkhjbTNoR0JtU2hqbXdSRHJncWVSLzEvMkE1ODNGRUVFRUZBN0Qw RjgyQ0ZGODMyODc0QTgzQ0RERDIxNDRBMy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p Y2JyX3JlcG8vMS8yQTU4M0ZFRUVFRkE3RDBGODJDRkY4MzI4NzRBODNDREREMjE0 NEEzLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6 Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84bTNRYnRvdlpmVURYSEUydUJ0 QktCNHZIY20zaEdCbVNoam13UkRyZ3FlUi8xLzMxMzMzMTJlMzEzOTM2MmUzMTM3 MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM5MzgzMDMyLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC g8SsMA0GCSqGSIb3DQEBCwUAA4IBAQBBKKTIAxMaubMXTNLQIpO4Lfkp0+wg9dBo z+djm3MToYjdu/hd7xQQrkUEY3pSnCkWVHe0Zgld3fWxj8Vlrt9h6VgsKHwC/awR mgbSvWA5lmMZkWf4N3f5o3p7hYLKlJo+B11rnXCza3QMFGY+YYI1Mn6CmkY6JH3e +hiMCogWmjjr/rYaaNe57GOlmfPXMGZ5NaY2PQ7iJknkCVYlu7Ke0Iw77MAP28DP w4aCH/0NC9EfQCoYypJC+9bfzpXtJfEIemwtrE+2uGoUZ1clnQ8cySmDGGIA8D4m EXjR+w5r+agntSwLw75fX9YPY/bhmy2cWGHukBHK9iuoJt6c6/Sg -----END CERTIFICATE-----Generated at Tue Apr 30 10:14:04 2024 by rpki-client on console-fra.rpki-client.org