$ rpki-client -vvf rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/3136382e3139372e3130342e302f32342d3234203d3e20323635343737.roa File: 3136382e3139372e3130342e302f32342d3234203d3e20323635343737.roa (raw, json) Hash identifier: Cvdvbo2qpdoGL3ryiclIXzk9TcGdraQ0S/RdDy16jwY= Subject key identifier: 68:E2:A7:56:A3:69:90:62:D6:43:1E:42:B0:40:86:2C:57:93:7E:01 Certificate issuer: /CN=AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3 Certificate serial: 6270BEE00099066F8DC4E445729CF55A63E02FB8 Authority key identifier: AB:9E:E7:D5:65:C0:27:09:75:85:37:AF:EB:7B:B8:3E:C6:AD:2E:D3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer Subject info access: rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/3136382e3139372e3130342e302f32342d3234203d3e20323635343737.roa Signing time: Wed 05 Mar 2025 19:00:09 +0000 ROA not before: Wed 05 Mar 2025 18:55:09 +0000 ROA not after: Wed 04 Mar 2026 19:00:09 +0000 asID: 265477 IP address blocks: 168.197.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.crl rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 23 Apr 2025 02:12:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:70:be:e0:00:99:06:6f:8d:c4:e4:45:72:9c:f5:5a:63:e0:2f:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3 Validity Not Before: Mar 5 18:55:09 2025 GMT Not After : Mar 4 19:00:09 2026 GMT Subject: CN=68E2A756A3699062D6431E42B040862C57937E01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b4:5f:4b:6e:da:a8:f9:3f:6c:c8:6b:df:82: cb:77:3e:bb:d0:5c:bf:23:6a:89:ab:32:19:2f:88: 54:7c:56:91:5c:82:30:e5:68:ab:a1:f5:3e:f9:e1: 58:dd:25:e6:b4:4b:73:6f:aa:1c:87:f1:6e:81:94: 2b:01:09:64:c6:b3:a6:58:d2:bf:ec:b4:a3:de:78: 2c:c9:3e:ff:7d:09:73:af:3c:ab:81:35:0e:23:70: 54:aa:05:4f:2c:f7:5a:b0:db:2d:42:8b:e9:07:a9: c4:62:3f:18:14:46:8e:ae:f7:83:8c:4d:44:8c:95: 65:e6:a2:e5:29:24:63:36:7f:00:da:22:18:ba:16: 5e:5b:2c:b6:73:58:84:f3:03:18:74:b3:82:75:1a: 1e:88:00:45:8a:86:ea:b0:7b:89:1b:7d:50:05:ca: 3f:3d:be:64:9f:bb:d0:44:b4:83:33:72:86:0a:0c: b8:7e:5e:48:80:04:da:54:f7:5f:a7:57:3c:23:f0: 8d:20:aa:17:af:ab:17:69:cd:91:60:2c:62:73:59: 27:fd:42:ef:23:b3:8b:f9:97:b4:58:f6:02:c4:eb: 32:c2:0a:b2:28:8b:dd:c7:78:4f:28:03:e1:ac:88: 9f:fe:de:18:78:78:05:62:3f:d3:48:6e:3d:1d:ac: 47:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:E2:A7:56:A3:69:90:62:D6:43:1E:42:B0:40:86:2C:57:93:7E:01 X509v3 Authority Key Identifier: keyid:AB:9E:E7:D5:65:C0:27:09:75:85:37:AF:EB:7B:B8:3E:C6:AD:2E:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/3136382e3139372e3130342e302f32342d3234203d3e20323635343737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.197.104.0/24 Signature Algorithm: sha256WithRSAEncryption b9:8e:c2:f5:87:56:c0:5e:0b:30:5e:6c:19:0f:81:3b:22:ca: a1:1d:9f:d5:8e:c5:94:ee:98:6b:7d:08:04:88:0f:2a:0a:8e: d1:59:61:7c:ae:bb:78:f6:12:d8:6a:97:4d:2b:a0:4b:2d:e0: d2:1e:af:4c:0c:4c:96:47:ad:0d:ea:a6:f4:2b:46:c1:07:22: 18:9d:7c:62:6b:f9:44:4b:08:e0:58:a9:0c:c4:56:5d:f3:6d: a9:28:cd:42:a9:6f:29:05:62:a9:46:25:16:76:4b:a3:d6:98: d1:27:12:c0:e9:d8:93:fb:5d:5d:ff:b6:32:b9:f8:19:e6:4c: b4:af:66:b7:12:c7:b4:28:ab:85:8f:ab:6b:f5:5c:83:0a:78: 72:d0:86:27:d2:d7:95:e8:48:b0:1b:9e:83:f2:bc:94:12:1d: c9:96:b6:77:35:64:19:81:3f:00:51:4c:f0:0f:de:d8:ad:b3: bd:0a:ba:66:5a:05:a5:9f:73:54:a3:94:d2:3f:dc:cc:2d:06: 1d:d8:a6:c2:26:bb:ce:4a:7c:74:47:36:81:ca:0b:65:27:cd: e7:2d:63:1f:6e:cc:28:3a:15:8d:2f:6e:f5:60:4a:cb:d2:c1: 1f:2c:2c:05:e7:6d:a3:b9:85:7d:e0:b0:00:fd:84:89:b7:ab: bc:70:d4:2e -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUYnC+4ACZBm+NxORFcpz1WmPgL7gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUI5RUU3RDU2NUMwMjcwOTc1ODUzN0FGRUI3QkI4M0VD NkFEMkVEMzAeFw0yNTAzMDUxODU1MDlaFw0yNjAzMDQxOTAwMDlaMDMxMTAvBgNV BAMTKDY4RTJBNzU2QTM2OTkwNjJENjQzMUU0MkIwNDA4NjJDNTc5MzdFMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwtF9Lbtqo+T9syGvfgst3PrvQ XL8jaomrMhkviFR8VpFcgjDlaKuh9T754VjdJea0S3NvqhyH8W6BlCsBCWTGs6ZY 0r/stKPeeCzJPv99CXOvPKuBNQ4jcFSqBU8s91qw2y1Ci+kHqcRiPxgURo6u94OM TUSMlWXmouUpJGM2fwDaIhi6Fl5bLLZzWITzAxh0s4J1Gh6IAEWKhuqwe4kbfVAF yj89vmSfu9BEtIMzcoYKDLh+XkiABNpU91+nVzwj8I0gqhevqxdpzZFgLGJzWSf9 Qu8js4v5l7RY9gLE6zLCCrIoi93HeE8oA+GsiJ/+3hh4eAViP9NIbj0drEcrAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUaOKnVqNpkGLWQx5CsECGLFeTfgEwHwYDVR0j BBgwFoAUq57n1WXAJwl1hTev63u4PsatLtMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlNhcHluV0todW1HTmdIZkVHRFk3SjZDRW9udU54WHp5SEhhQ3ZFdkNj dVkvMS9BQjlFRTdENTY1QzAyNzA5NzU4NTM3QUZFQjdCQjgzRUM2QUQyRUQzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FCOUVFN0Q1NjVDMDI3MDk3 NTg1MzdBRkVCN0JCODNFQzZBRDJFRDMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJTYXB5bldLaHVtR05nSGZFR0RZN0o2Q0VvbnVOeFh6eUhIYUN2RXZDY3VZLzEv MzEzNjM4MmUzMTM5MzcyZTMxMzAzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy MzYzNTM0MzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjFaDANBgkqhkiG9w0BAQsFAAOCAQEAuY7C 9YdWwF4LMF5sGQ+BOyLKoR2f1Y7FlO6Ya30IBIgPKgqO0VlhfK67ePYS2GqXTSug Sy3g0h6vTAxMlketDeqm9CtGwQciGJ18Ymv5REsI4FipDMRWXfNtqSjNQqlvKQVi qUYlFnZLo9aY0ScSwOnYk/tdXf+2Mrn4GeZMtK9mtxLHtCirhY+ra/Vcgwp4ctCG J9LXlehIsBueg/K8lBIdyZa2dzVkGYE/AFFM8A/e2K2zvQq6ZloFpZ9zVKOU0j/c zC0GHdimwia7zkp8dEc2gcoLZSfN5y1jH27MKDoVjS9u9WBKy9LBHywsBedto7mF feCwAP2EibervHDULg== -----END CERTIFICATE-----Generated at Tue Apr 22 15:55:28 2025 by rpki-client