$ rpki-client -vvf rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/1/3133382e39342e3136382e302f32332d3233203d3e20323730383736.roa File: 3133382e39342e3136382e302f32332d3233203d3e20323730383736.roa (raw, json) Hash identifier: XFnmyki1soPq6XskQ7CzqbpeZ1D2esYxzotNmxRX1zA= Subject key identifier: 6A:A2:53:60:C3:75:5D:7C:9D:5F:F9:D7:17:04:11:30:E9:5E:9F:27 Certificate issuer: /CN=AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83 Certificate serial: 37D80CF1781CE426B8F56FC64638D44A40159167 Authority key identifier: AE:59:A4:8B:AA:81:6C:14:CB:96:DA:B0:CA:10:6B:59:B3:B8:DC:83 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83.cer Subject info access: rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/1/3133382e39342e3136382e302f32332d3233203d3e20323730383736.roa Signing time: Thu 06 Mar 2025 06:43:03 +0000 ROA not before: Thu 06 Mar 2025 06:38:03 +0000 ROA not after: Thu 05 Mar 2026 06:43:03 +0000 asID: 270876 IP address blocks: 138.94.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/1/AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83.crl rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/1/AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 19 Apr 2025 05:12:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:d8:0c:f1:78:1c:e4:26:b8:f5:6f:c6:46:38:d4:4a:40:15:91:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83 Validity Not Before: Mar 6 06:38:03 2025 GMT Not After : Mar 5 06:43:03 2026 GMT Subject: CN=6AA25360C3755D7C9D5FF9D717041130E95E9F27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7c:f8:a7:42:31:dd:53:32:60:7e:5a:14:b5: 28:4c:99:13:1f:f3:56:ac:27:dd:53:8b:90:35:c9: e5:31:09:9b:e7:31:f0:1b:e4:1b:7d:b3:1c:5a:3a: 30:a0:6f:5a:72:69:91:02:50:83:61:56:dc:80:87: 88:3e:8e:4b:b8:d2:bf:e5:1a:1d:56:b8:d6:1d:26: 03:36:1d:f2:94:c6:0d:09:0d:3d:c2:d9:be:f3:ee: 62:c5:6a:d1:e0:62:01:43:e9:c2:09:99:23:02:b1: b7:cf:63:3e:d9:c0:40:72:72:f0:bb:f5:49:ea:0e: e0:69:b2:69:9f:ec:9c:36:1e:65:ab:f7:4a:4f:49: 0d:e6:ab:86:60:fd:26:ae:98:7a:59:82:25:f3:2c: 44:35:69:e2:03:86:a2:c4:53:69:5c:a2:f3:63:56: da:ef:f4:7f:c5:a0:bb:15:78:b5:d3:d8:2f:ac:60: fc:8f:23:bb:6a:12:e6:19:f4:d2:6a:89:d3:52:07: cc:5c:0e:b6:0c:2a:42:08:98:bd:83:f9:37:6e:3d: 9c:23:8d:ed:17:ed:03:55:3e:0f:ba:54:ba:ad:b9: 2a:d0:41:f6:8a:af:05:7c:68:45:85:c5:a4:b0:65: 47:34:f6:7a:63:b0:e2:ce:b9:c7:ab:e7:9a:c8:18: a7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:A2:53:60:C3:75:5D:7C:9D:5F:F9:D7:17:04:11:30:E9:5E:9F:27 X509v3 Authority Key Identifier: keyid:AE:59:A4:8B:AA:81:6C:14:CB:96:DA:B0:CA:10:6B:59:B3:B8:DC:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/1/AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/1/3133382e39342e3136382e302f32332d3233203d3e20323730383736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.94.168.0/23 Signature Algorithm: sha256WithRSAEncryption c4:ac:e8:a7:8d:b2:f2:52:b0:e0:7b:c0:19:6d:47:12:e1:c6: 68:08:c3:79:4d:12:9f:45:21:77:3e:2a:c1:6f:a4:1f:5b:e8: 28:c5:b3:55:50:b8:b9:b5:1d:57:62:bc:49:25:48:85:4a:93: 94:f1:6e:42:25:8e:80:68:e3:97:a0:89:7a:9f:f4:f5:b5:94: bf:fb:4f:a1:2c:0d:e2:ac:95:d9:79:35:b1:f3:d0:34:86:10: e3:59:e7:03:c0:66:eb:39:55:90:8a:54:99:4a:0f:9d:61:66: 93:2b:e9:e1:f0:90:bd:a5:6f:a2:89:c7:0e:7e:ca:81:c9:54: 81:c7:ee:c1:1a:83:63:da:d8:67:d0:34:6c:00:40:29:f4:89: 1c:73:bc:98:0f:b4:99:07:47:ce:f1:ab:aa:68:4a:76:93:a1: 60:06:5e:db:fd:e7:b2:d0:95:50:a7:bb:42:43:60:38:d8:1a: c8:6b:6f:c4:f9:64:f9:38:59:06:1f:60:3b:ae:aa:a7:59:07: 5e:23:8c:32:5c:a7:91:fd:1e:ab:c0:5e:13:37:75:d3:39:2c: 77:e4:f5:6c:80:82:ea:c8:5d:2f:0a:ec:b0:8e:58:54:63:00: 9b:1d:bf:1e:ca:b1:ff:39:43:3e:87:5b:48:3a:e7:1c:32:26: 53:3b:ca:ca -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUN9gM8Xgc5Ca49W/GRjjUSkAVkWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU1OUE0OEJBQTgxNkMxNENCOTZEQUIwQ0ExMDZCNTlC M0I4REM4MzAeFw0yNTAzMDYwNjM4MDNaFw0yNjAzMDUwNjQzMDNaMDMxMTAvBgNV BAMTKDZBQTI1MzYwQzM3NTVEN0M5RDVGRjlENzE3MDQxMTMwRTk1RTlGMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVfPinQjHdUzJgfloUtShMmRMf 81asJ91Ti5A1yeUxCZvnMfAb5Bt9sxxaOjCgb1pyaZECUINhVtyAh4g+jku40r/l Gh1WuNYdJgM2HfKUxg0JDT3C2b7z7mLFatHgYgFD6cIJmSMCsbfPYz7ZwEBycvC7 9UnqDuBpsmmf7Jw2HmWr90pPSQ3mq4Zg/SaumHpZgiXzLEQ1aeIDhqLEU2lcovNj Vtrv9H/FoLsVeLXT2C+sYPyPI7tqEuYZ9NJqidNSB8xcDrYMKkIImL2D+TduPZwj je0X7QNVPg+6VLqtuSrQQfaKrwV8aEWFxaSwZUc09npjsOLOucer55rIGKexAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUaqJTYMN1XXydX/nXFwQRMOlenycwHwYDVR0j BBgwFoAUrlmki6qBbBTLltqwyhBrWbO43IMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlA3eUNtbmlOQ3lXWjlaWW9GVm5Ic3ZWNndXckdMWjFtb2NCcFVFV1pS Q1EvMS9BRTU5QTQ4QkFBODE2QzE0Q0I5NkRBQjBDQTEwNkI1OUIzQjhEQzgzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FFNTlBNDhCQUE4MTZDMTRD Qjk2REFCMENBMTA2QjU5QjNCOERDODMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJQN3lDbW5pTkN5V1o5WllvRlZuSHN2VjZ3V3JHTFoxbW9jQnBVRVdaUkNRLzEv MzEzMzM4MmUzOTM0MmUzMTM2MzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM3 MzAzODM3MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGKXqgwDQYJKoZIhvcNAQELBQADggEBAMSs6KeN svJSsOB7wBltRxLhxmgIw3lNEp9FIXc+KsFvpB9b6CjFs1VQuLm1HVdivEklSIVK k5TxbkIljoBo45egiXqf9PW1lL/7T6EsDeKsldl5NbHz0DSGEONZ5wPAZus5VZCK VJlKD51hZpMr6eHwkL2lb6KJxw5+yoHJVIHH7sEag2Pa2GfQNGwAQCn0iRxzvJgP tJkHR87xq6poSnaToWAGXtv957LQlVCnu0JDYDjYGshrb8T5ZPk4WQYfYDuuqqdZ B14jjDJcp5H9HqvAXhM3ddM5LHfk9WyAgurIXS8K7LCOWFRjAJsdvx7Ksf85Qz6H W0g65xwyJlM7yso= -----END CERTIFICATE-----Generated at Fri Apr 18 18:18:19 2025 by rpki-client