$ rpki-client -vvf rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3136382e3139372e3131322e302f32322d3234203d3e203532353733.roa File: 3136382e3139372e3131322e302f32322d3234203d3e203532353733.roa (raw, json) Hash identifier: 6R8lbmXUYzk9rHzGECDSJqor1vHGJp+xnDA8Vs5gV+c= Subject key identifier: BA:AA:1F:BD:FC:D0:87:E3:AF:62:20:D7:C2:65:29:FD:E2:58:B2:1B Certificate issuer: /CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7 Certificate serial: 64D3B8E18C2E7FB3AB2E57803DACB09378C3D942 Authority key identifier: D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer Subject info access: rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3136382e3139372e3131322e302f32322d3234203d3e203532353733.roa Signing time: Wed 19 Feb 2025 13:03:17 +0000 ROA not before: Wed 19 Feb 2025 12:58:17 +0000 ROA not after: Wed 18 Feb 2026 13:03:17 +0000 asID: 52573 IP address blocks: 168.197.112.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 19 Apr 2025 06:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:d3:b8:e1:8c:2e:7f:b3:ab:2e:57:80:3d:ac:b0:93:78:c3:d9:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7 Validity Not Before: Feb 19 12:58:17 2025 GMT Not After : Feb 18 13:03:17 2026 GMT Subject: CN=BAAA1FBDFCD087E3AF6220D7C26529FDE258B21B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c0:aa:68:fb:63:9e:f0:79:ea:30:df:19:24: a8:e9:4d:07:39:e9:5b:5d:a3:a2:2e:41:fd:63:5f: c0:fb:34:24:bc:e9:d6:09:ba:06:52:07:ea:d5:40: 96:00:8a:33:01:03:db:0a:15:65:bf:02:38:c7:e2: e8:ae:1c:84:ba:a1:52:67:60:bb:89:50:06:51:26: 87:02:51:a3:c8:3a:3d:de:71:14:4e:33:bb:41:24: a8:e5:96:11:de:a0:7d:f9:f2:a2:dc:0e:bf:e7:bd: 58:ad:e3:33:ef:cf:19:6d:20:65:f8:50:8e:aa:2a: 53:dd:25:71:5c:e1:e1:eb:f2:22:db:cf:f8:dc:5c: 95:f4:7f:80:95:b6:0a:e5:f0:79:2b:eb:34:a0:75: bf:c1:69:54:6d:71:50:b2:31:d9:a8:b2:13:4b:d4: be:72:dd:ba:4c:89:09:d5:1f:cf:66:ee:be:8f:22: 79:41:4e:5a:01:fa:b5:22:f7:c4:33:32:41:8c:12: c2:6d:5b:ae:a6:e4:73:2c:6d:c0:5d:78:07:ec:04: 84:8f:ff:c9:8d:91:38:e9:95:de:ec:ea:24:c3:f5: e4:28:da:ee:26:ce:a1:35:ce:0d:2e:a6:b4:53:c4: 53:13:a9:16:64:7f:60:ce:76:08:a8:63:6d:2b:00: e5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:AA:1F:BD:FC:D0:87:E3:AF:62:20:D7:C2:65:29:FD:E2:58:B2:1B X509v3 Authority Key Identifier: keyid:D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3136382e3139372e3131322e302f32322d3234203d3e203532353733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.197.112.0/22 Signature Algorithm: sha256WithRSAEncryption 76:ca:15:bd:b6:51:dd:b9:24:22:b5:94:4f:84:31:da:54:11: 69:eb:12:e6:35:9c:01:da:95:03:58:f0:1a:05:fc:11:5d:b1: 90:63:cc:c0:39:d9:5a:1d:35:9b:47:29:6f:6f:fb:dc:ee:aa: 7c:73:fa:78:df:27:73:f5:3f:ae:53:36:d0:d6:3f:ee:d3:10: 46:01:94:cd:42:73:89:86:71:26:d3:e0:ec:8a:7e:c9:7a:02: c6:b1:19:63:0c:3f:48:ed:a3:5f:de:58:fe:77:34:83:e9:60: 3a:ca:a9:ba:fa:54:87:9b:92:26:cb:af:4c:fb:4d:ef:e4:36: 80:1b:db:38:34:54:42:c4:5c:95:2a:6c:d9:95:86:66:90:d0: 9e:25:e6:d4:42:bc:a1:df:2e:f6:ec:3a:fa:1b:fc:9b:c1:97: 10:b8:66:13:0a:a4:47:f6:ad:5d:62:c5:75:65:80:0a:24:92: fd:31:a6:93:d5:9d:04:ec:4c:ee:d9:dd:af:72:a0:58:4f:48: 41:a3:8c:ba:ff:bb:cf:8c:b4:3d:b6:b1:19:76:e0:d3:54:d9: fa:78:2f:1c:46:14:22:c5:ea:a2:6a:96:07:96:2f:a4:eb:7e: f7:3b:ad:5c:6e:0d:ad:61:95:83:21:37:cf:c9:db:a3:60:fb: 46:87:59:b1 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUZNO44Ywuf7OrLleAPaywk3jD2UIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY4NkYyRDFDOEQ2RjBFMTgyMDBEN0JBM0I0RTEzOEE4 NjdFMjVDNzAeFw0yNTAyMTkxMjU4MTdaFw0yNjAyMTgxMzAzMTdaMDMxMTAvBgNV BAMTKEJBQUExRkJERkNEMDg3RTNBRjYyMjBEN0MyNjUyOUZERTI1OEIyMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCewKpo+2Oe8HnqMN8ZJKjpTQc5 6Vtdo6IuQf1jX8D7NCS86dYJugZSB+rVQJYAijMBA9sKFWW/AjjH4uiuHIS6oVJn YLuJUAZRJocCUaPIOj3ecRROM7tBJKjllhHeoH358qLcDr/nvVit4zPvzxltIGX4 UI6qKlPdJXFc4eHr8iLbz/jcXJX0f4CVtgrl8Hkr6zSgdb/BaVRtcVCyMdmoshNL 1L5y3bpMiQnVH89m7r6PInlBTloB+rUi98QzMkGMEsJtW66m5HMsbcBdeAfsBISP /8mNkTjpld7s6iTD9eQo2u4mzqE1zg0uprRTxFMTqRZkf2DOdgioY20rAOXfAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUuqofvfzQh+OvYiDXwmUp/eJYshswHwYDVR0j BBgwFoAU1oby0cjW8OGCANe6O04TioZ+JccwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkpmeWJDaDRQMWZhaHZpUUNQOE5MSDloaDRxU0t1NEdqQkNWR2U4WnZF ZVovMC9ENjg2RjJEMUM4RDZGMEUxODIwMEQ3QkEzQjRFMTM4QTg2N0UyNUM3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q2ODZGMkQxQzhENkYwRTE4 MjAwRDdCQTNCNEUxMzhBODY3RTI1QzcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJKZnliQ2g0UDFmYWh2aVFDUDhOTEg5aGg0cVNLdTRHakJDVkdlOFp2RWVaLzAv MzEzNjM4MmUzMTM5MzcyZTMxMzEzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM1 MzIzNTM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKoxXAwDQYJKoZIhvcNAQELBQADggEBAHbKFb22 Ud25JCK1lE+EMdpUEWnrEuY1nAHalQNY8BoF/BFdsZBjzMA52VodNZtHKW9v+9zu qnxz+njfJ3P1P65TNtDWP+7TEEYBlM1Cc4mGcSbT4OyKfsl6AsaxGWMMP0jto1/e WP53NIPpYDrKqbr6VIebkibLr0z7Te/kNoAb2zg0VELEXJUqbNmVhmaQ0J4l5tRC vKHfLvbsOvob/JvBlxC4ZhMKpEf2rV1ixXVlgAokkv0xppPVnQTsTO7Z3a9yoFhP SEGjjLr/u8+MtD22sRl24NNU2fp4LxxGFCLF6qJqlgeWL6Trfvc7rVxuDa1hlYMh N8/J26Ng+0aHWbE= -----END CERTIFICATE-----Generated at Fri Apr 18 15:34:27 2025 by rpki-client