$ rpki-client -vvf rpki-repo.registro.br/repo/22PvtXpQutRKvxkUY8Y7ekqiX3MHzkPbm9WCFjoWWxDK/0/3136382e3232372e33372e302f32342d3234203d3e20323733333333.roa File: 3136382e3232372e33372e302f32342d3234203d3e20323733333333.roa (raw, json) Hash identifier: 7IPqhHefhQmDlRlmrjGp4s+06JWxasFEzzwIuTMra38= Subject key identifier: E7:5F:2D:B1:A2:B4:7C:D7:FC:77:00:54:A3:08:37:E8:39:BA:AD:9E Certificate issuer: /CN=70C0B50747FC1E7BE87716B663F0AA749E426EE1 Certificate serial: 3EEE04071DE9904A3B8DAD1DEFDCB8BBE1AEC81C Authority key identifier: 70:C0:B5:07:47:FC:1E:7B:E8:77:16:B6:63:F0:AA:74:9E:42:6E:E1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70C0B50747FC1E7BE87716B663F0AA749E426EE1.cer Subject info access: rsync://rpki-repo.registro.br/repo/22PvtXpQutRKvxkUY8Y7ekqiX3MHzkPbm9WCFjoWWxDK/0/3136382e3232372e33372e302f32342d3234203d3e20323733333333.roa Signing time: Tue 01 Apr 2025 15:58:54 +0000 ROA not before: Tue 01 Apr 2025 15:53:54 +0000 ROA not after: Tue 31 Mar 2026 15:58:54 +0000 asID: 273333 IP address blocks: 168.227.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/22PvtXpQutRKvxkUY8Y7ekqiX3MHzkPbm9WCFjoWWxDK/0/70C0B50747FC1E7BE87716B663F0AA749E426EE1.crl rsync://rpki-repo.registro.br/repo/22PvtXpQutRKvxkUY8Y7ekqiX3MHzkPbm9WCFjoWWxDK/0/70C0B50747FC1E7BE87716B663F0AA749E426EE1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70C0B50747FC1E7BE87716B663F0AA749E426EE1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 23 Apr 2025 18:57:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:ee:04:07:1d:e9:90:4a:3b:8d:ad:1d:ef:dc:b8:bb:e1:ae:c8:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70C0B50747FC1E7BE87716B663F0AA749E426EE1 Validity Not Before: Apr 1 15:53:54 2025 GMT Not After : Mar 31 15:58:54 2026 GMT Subject: CN=E75F2DB1A2B47CD7FC770054A30837E839BAAD9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:3b:17:f6:ff:53:5d:82:f4:33:d5:bc:15:6b: 96:0f:1a:37:23:1e:ea:0f:ad:a8:d4:f1:4a:5d:e1: c0:db:26:9d:fb:bd:42:87:12:4b:04:97:9a:ff:b9: 77:05:15:78:0a:e4:ec:ec:e5:47:e4:9f:9a:5b:5c: c6:2b:b1:f1:1d:99:04:e1:a2:98:f6:57:83:e6:c1: f5:cc:20:db:b5:94:2e:76:cc:9f:39:47:4d:51:6c: 4c:3b:7d:27:81:ea:68:1e:4c:33:d3:94:af:ee:14: 39:cc:4a:b9:71:7e:85:6b:3d:b1:01:86:58:2f:21: f4:b4:b8:19:7f:70:fb:46:79:e3:b8:51:ff:51:89: 23:b5:ec:e2:ee:09:af:39:80:97:6b:06:1c:d2:62: d6:da:62:f3:72:62:68:6e:87:ea:09:e4:b1:82:d9: 20:db:96:b9:cd:d7:36:62:6b:a6:7b:93:59:45:c5: 2a:4a:4c:58:04:93:3e:b2:00:cf:fd:52:71:ac:06: 7c:ce:ed:ea:9c:c3:c3:59:1a:b2:42:49:1b:fa:bd: 65:77:34:93:22:6a:ff:5d:6a:a3:18:d4:65:c8:59: 22:24:2f:ec:e0:d0:63:a6:33:ae:e3:61:80:72:2b: b9:00:43:c3:21:d0:86:0f:91:a1:e6:d6:0b:b0:29: 4f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:5F:2D:B1:A2:B4:7C:D7:FC:77:00:54:A3:08:37:E8:39:BA:AD:9E X509v3 Authority Key Identifier: keyid:70:C0:B5:07:47:FC:1E:7B:E8:77:16:B6:63:F0:AA:74:9E:42:6E:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/22PvtXpQutRKvxkUY8Y7ekqiX3MHzkPbm9WCFjoWWxDK/0/70C0B50747FC1E7BE87716B663F0AA749E426EE1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70C0B50747FC1E7BE87716B663F0AA749E426EE1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/22PvtXpQutRKvxkUY8Y7ekqiX3MHzkPbm9WCFjoWWxDK/0/3136382e3232372e33372e302f32342d3234203d3e20323733333333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.227.37.0/24 Signature Algorithm: sha256WithRSAEncryption 87:31:a5:ee:51:e6:57:3f:93:12:1b:9b:7d:13:24:48:54:2f: 22:4d:91:87:f3:48:2f:22:3a:89:74:ee:be:ae:1c:66:3c:cc: e5:a5:dd:a4:ad:8c:7d:e7:80:81:74:43:4d:1e:3a:b3:46:27: c5:40:9d:0b:f2:2d:07:2d:9c:d9:35:30:66:3a:5d:68:e3:37: 8c:cc:be:bf:3c:ef:e3:36:85:68:60:11:f7:42:d1:04:2d:c8: 4e:5b:f5:12:e4:76:90:a1:f5:0f:bc:e3:be:29:dd:8d:b7:b2: 91:07:a3:cd:b3:a9:7d:13:8a:c4:ad:e1:cb:6a:c3:5e:ea:f3: 42:4d:62:1b:9b:16:7a:b1:bf:cf:65:0b:86:26:a1:42:59:3a: d8:bc:c1:54:6d:08:f6:f1:ed:86:d4:01:17:5d:7c:81:61:1d: 19:b1:c7:ec:6f:2a:eb:35:c3:c0:d8:0b:d1:2b:4d:8b:00:16: 72:2d:63:2a:5e:f6:d9:ef:da:0f:16:b1:cb:7e:2a:d6:8c:dd: 9e:25:e3:58:70:e4:f7:a9:e5:c0:2d:5b:c8:9e:99:7b:28:cc: 5d:a0:4e:fd:ac:95:e1:dc:61:87:9a:22:7d:4f:bf:98:d6:b4: 37:64:16:b4:d6:65:1e:19:b0:85:9c:3d:59:02:30:cd:ca:dd: 2d:2a:2a:b5 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUPu4EBx3pkEo7ja0d79y4u+GuyBwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBDMEI1MDc0N0ZDMUU3QkU4NzcxNkI2NjNGMEFBNzQ5 RTQyNkVFMTAeFw0yNTA0MDExNTUzNTRaFw0yNjAzMzExNTU4NTRaMDMxMTAvBgNV BAMTKEU3NUYyREIxQTJCNDdDRDdGQzc3MDA1NEEzMDgzN0U4MzlCQUFEOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwOxf2/1NdgvQz1bwVa5YPGjcj HuoPrajU8Upd4cDbJp37vUKHEksEl5r/uXcFFXgK5Ozs5Ufkn5pbXMYrsfEdmQTh opj2V4PmwfXMINu1lC52zJ85R01RbEw7fSeB6mgeTDPTlK/uFDnMSrlxfoVrPbEB hlgvIfS0uBl/cPtGeeO4Uf9RiSO17OLuCa85gJdrBhzSYtbaYvNyYmhuh+oJ5LGC 2SDblrnN1zZia6Z7k1lFxSpKTFgEkz6yAM/9UnGsBnzO7eqcw8NZGrJCSRv6vWV3 NJMiav9daqMY1GXIWSIkL+zg0GOmM67jYYByK7kAQ8Mh0IYPkaHm1guwKU89AgMB AAGjggJRMIICTTAdBgNVHQ4EFgQU518tsaK0fNf8dwBUowg36Dm6rZ4wHwYDVR0j BBgwFoAUcMC1B0f8Hnvodxa2Y/CqdJ5CbuEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMjJQdnRYcFF1dFJLdnhrVVk4WTdla3FpWDNNSHprUGJtOVdDRmpvV1d4 REsvMC83MEMwQjUwNzQ3RkMxRTdCRTg3NzE2QjY2M0YwQUE3NDlFNDI2RUUxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcwQzBCNTA3NDdGQzFFN0JF ODc3MTZCNjYzRjBBQTc0OUU0MjZFRTEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzIyUHZ0WHBRdXRSS3Z4a1VZOFk3ZWtxaVgzTUh6a1BibTlXQ0Zqb1dXeERLLzAv MzEzNjM4MmUzMjMyMzcyZTMzMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3 MzMzMzMzMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACo4yUwDQYJKoZIhvcNAQELBQADggEBAIcxpe5R 5lc/kxIbm30TJEhULyJNkYfzSC8iOol07r6uHGY8zOWl3aStjH3ngIF0Q00eOrNG J8VAnQvyLQctnNk1MGY6XWjjN4zMvr887+M2hWhgEfdC0QQtyE5b9RLkdpCh9Q+8 474p3Y23spEHo82zqX0TisSt4ctqw17q80JNYhubFnqxv89lC4YmoUJZOti8wVRt CPbx7YbUARddfIFhHRmxx+xvKus1w8DYC9ErTYsAFnItYype9tnv2g8Wsct+KtaM 3Z4l41hw5Pep5cAtW8iemXsozF2gTv2sleHcYYeaIn1Pv5jWtDdkFrTWZR4ZsIWc PVkCMM3K3S0qKrU= -----END CERTIFICATE-----Generated at Wed Apr 23 05:08:49 2025 by rpki-client