$ rpki-client -vvf rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/34352e3136322e33362e302f32322d3234203d3e20323638343934.roa File: 34352e3136322e33362e302f32322d3234203d3e20323638343934.roa (raw, json) Hash identifier: 308U9YuTQinc/6h6pROcQyW/yhUpaoAEuJenvQ6ZLxc= Subject key identifier: 45:08:2B:57:0C:C9:3A:88:02:0D:B1:45:04:98:26:40:D7:17:B6:EA Certificate issuer: /CN=67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B Certificate serial: 6A98575CF58EA0E3E4E154A8480DE396EFD1F709 Authority key identifier: 67:21:0E:55:22:F5:15:3F:DA:7A:73:E4:EE:2B:30:0B:C0:CC:9A:0B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.cer Subject info access: rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/34352e3136322e33362e302f32322d3234203d3e20323638343934.roa Signing time: Wed 05 Mar 2025 19:00:06 +0000 ROA not before: Wed 05 Mar 2025 18:55:06 +0000 ROA not after: Wed 04 Mar 2026 19:00:06 +0000 asID: 268494 IP address blocks: 45.162.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.crl rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Apr 2025 13:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:98:57:5c:f5:8e:a0:e3:e4:e1:54:a8:48:0d:e3:96:ef:d1:f7:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B Validity Not Before: Mar 5 18:55:06 2025 GMT Not After : Mar 4 19:00:06 2026 GMT Subject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ubject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:5f:2b:ec:a7:a9:7d:6b:46:3e:43:1f:4e:4b: e5:12:09:54:ba:41:49:14:69:ab:72:48:3e:0c:45: 0c:af:8f:d2:da:cf:2e:db:09:db:13:75:d1:1a:28: df:4a:6b:c3:a1:11:12:6b:9a:7e:c4:ba:23:83:85: f4:20:a5:3b:b0:fa:6f:81:2a:98:34:08:50:40:c1: 7d:df:e5:2d:f0:36:fd:45:df:cf:e9:bf:b8:3e:26: 2c:61:ec:d2:7e:e0:24:9b:70:93:e9:d4:59:39:7f: 6c:cb:3d:af:76:53:7d:46:f7:4a:6b:f6:39:d9:2b: 60:28:e1:f5:71:ba:c5:33:e5:d9:4a:59:57:57:df: f6:c9:20:07:39:1f:3b:89:51:02:5f:81:08:4e:74: c9:14:fc:68:93:0e:70:58:a2:5c:50:ac:e9:5e:3f: 72:49:88:5b:98:fd:b2:44:93:29:6e:4c:ba:b9:14: 6e:f0:c8:b6:76:ab:56:7b:81:0d:f9:ce:7c:24:1a: 8e:5e:25:5a:b1:4a:9a:fe:55:0e:64:25:8b:93:ab: 3b:8e:4a:51:be:21:94:fa:d1:54:9b:6e:a7:c2:e9: f5:d1:a1:dc:e3:9a:e6:10:64:44:49:b1:72:93:2d: 4b:b9:ea:e4:5a:76:af:3d:d0:ef:bc:38:9d:55:94: cd:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:08:2B:57:0C:C9:3A:88:02:0D:B1:45:04:98:26:40:D7:17:B6:EA X509v3 Authority Key Identifier: keyid:67:21:0E:55:22:F5:15:3F:DA:7A:73:E4:EE:2B:30:0B:C0:CC:9A:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/34352e3136322e33362e302f32322d3234203d3e20323638343934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.162.36.0/22 Signature Algorithm: sha256WithRSAEncryption 94:de:39:91:18:63:ec:75:4d:f8:95:b4:cf:38:aa:4d:7a:e8: c0:3e:ab:65:94:bd:7b:a1:49:e2:a4:26:b6:90:47:e6:d1:2b: 93:a4:a0:cf:fe:68:2f:86:f2:aa:0f:ac:9a:57:d4:d3:45:0f: 9a:f8:ce:19:6d:39:7d:98:72:8a:10:c6:9a:5c:d1:cb:d5:24: c3:95:9d:e3:c3:f3:b1:fa:55:29:e4:51:0d:8e:30:aa:86:95: 32:90:d7:ba:2e:c4:5e:61:c1:43:b6:f3:7e:d3:3c:2c:55:cb: 52:b7:9e:ec:1d:8d:08:79:81:4e:e9:d6:13:69:de:9b:d0:9c: b4:d0:ad:a6:f8:52:36:41:cb:05:59:51:95:ee:fb:79:ee:25: 30:ef:97:cf:61:cb:dc:6f:9c:c3:d5:e3:40:0c:02:b9:e0:ed: 7c:6f:29:a9:39:4b:81:64:e2:ac:a4:32:08:a2:72:25:db:67: e4:48:5f:71:6e:4b:a6:3a:5e:a1:cb:df:22:05:07:8e:f7:42: 74:65:e6:a6:68:b4:4a:0d:94:2f:9d:ac:d7:a3:b3:f3:ce:09: b6:3f:e1:76:8e:83:96:90:43:3e:78:bc:8e:72:fe:ba:b5:88: bf:74:9c:e8:14:9c:1d:b3:ff:fb:7b:22:37:cc:a4:f1:21:14: 9c:d0:67:a9 -----BEGIN CERTIFICATE----- MIIHQTCCBimgAwIBAgIUaphXXPWOoOPk4VSoSA3jlu/R9wkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjcyMTBFNTUyMkY1MTUzRkRBN0E3M0U0RUUyQjMwMEJD MENDOUEwQjAeFw0yNTAzMDUxODU1MDZaFw0yNjAzMDQxOTAwMDZaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREU1RjJCRUNBN0E5N0Q2QjQ2 M0U0MzFGNEU0QkU1MTIwOTU0QkE0MTQ5MTQ2OUFCNzI0ODNFMEM0NTBDQUY4RkQy REFDRjJFREIwOURCMTM3NUQxMUEyOERGNEE2QkMzQTExMTEyNkI5QTdFQzRCQTIz ODM4NUY0MjBBNTNCQjBGQTZGODEyQTk4MzQwODUwNDBDMTdEREZFNTJERjAzNkZE NDVERkNGRTlCRkI4M0UyNjJDNjFFQ0QyN0VFMDI0OUI3MDkzRTlENDU5Mzk3RjZD Q0IzREFGNzY1MzdENDZGNzRBNkJGNjM5RDkyQjYwMjhFMUY1NzFCQUM1MzNFNUQ5 NEE1OTU3NTdERkY2QzkyMDA3MzkxRjNCODk1MTAyNUY4MTA4NEU3NEM5MTRGQzY4 OTMwRTcwNThBMjVDNTBBQ0U5NUUzRjcyNDk4ODVCOThGREIyNDQ5MzI5NkU0Q0JB QjkxNDZFRjBDOEI2NzZBQjU2N0I4MTBERjlDRTdDMjQxQThFNUUyNTVBQjE0QTlB RkU1NTBFNjQyNThCOTNBQjNCOEU0QTUxQkUyMTk0RkFEMTU0OUI2RUE3QzJFOUY1 RDFBMURDRTM5QUU2MTA2NDQ0NDlCMTcyOTMyRDRCQjlFQUU0NUE3NkFGM0REMEVG QkMzODlENTU5NENEREQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEA3l8r7KepfWtGPkMfTkvlEglUukFJFGmrckg+DEUMr4/S2s8u2wnb E3XRGijfSmvDoRESa5p+xLojg4X0IKU7sPpvgSqYNAhQQMF93+Ut8Db9Rd/P6b+4 PiYsYezSfuAkm3CT6dRZOX9syz2vdlN9RvdKa/Y52StgKOH1cbrFM+XZSllXV9/2 ySAHOR87iVECX4EITnTJFPxokw5wWKJcUKzpXj9ySYhbmP2yRJMpbky6uRRu8Mi2 dqtWe4EN+c58JBqOXiVasUqa/lUOZCWLk6s7jkpRviGU+tFUm26nwun10aHc45rm EGRESbFyky1LuerkWnavPdDvvDidVZTN3QIDAQABo4ICTzCCAkswHQYDVR0OBBYE FEUIK1cMyTqIAg2xRQSYJkDXF7bqMB8GA1UdIwQYMBaAFGchDlUi9RU/2npz5O4r MAvAzJoLMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzI4UnhOYnZLREVTUkdO RDlmbk1wVlFFMmtwN1FUYXc1QWVVSE1nZVFEOVQ2LzEvNjcyMTBFNTUyMkY1MTUz RkRBN0E3M0U0RUUyQjMwMEJDMENDOUEwQi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p Y2JyX3JlcG8vMS82NzIxMEU1NTIyRjUxNTNGREE3QTczRTRFRTJCMzAwQkMwQ0M5 QTBCLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6 Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8yOFJ4TmJ2S0RFU1JHTkQ5Zm5N cFZRRTJrcDdRVGF3NUFlVUhNZ2VRRDlUNi8xLzM0MzUyZTMxMzYzMjJlMzMzNjJl MzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzODM0MzkzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2i JDANBgkqhkiG9w0BAQsFAAOCAQEAlN45kRhj7HVN+JW0zziqTXrowD6rZZS9e6FJ 4qQmtpBH5tErk6Sgz/5oL4byqg+smlfU00UPmvjOGW05fZhyihDGmlzRy9Ukw5Wd 48PzsfpVKeRRDY4wqoaVMpDXui7EXmHBQ7bzftM8LFXLUree7B2NCHmBTunWE2ne m9CctNCtpvhSNkHLBVlRle77ee4lMO+Xz2HL3G+cw9XjQAwCueDtfG8pqTlLgWTi rKQyCKJyJdtn5EhfcW5LpjpeocvfIgUHjvdCdGXmpmi0Sg2UL52s16Oz884Jtj/h do6DlpBDPni8jnL+urWIv3Sc6BScHbP/+3siN8yk8SEUnNBnqQ== -----END CERTIFICATE-----Generated at Mon Apr 21 20:43:23 2025 by rpki-client