$ rpki-client -vvf rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/34352e3137352e3232382e302f32332d3233203d3e20323638393133.roa File: 34352e3137352e3232382e302f32332d3233203d3e20323638393133.roa (raw, json) Hash identifier: I4lnOLHJxZjbb3Rjorlm2O4yGEV8irB1EDwevjkQU7A= Subject key identifier: 4C:A6:50:30:1B:5A:E0:98:0D:0F:49:F8:E5:78:96:DC:29:70:E2:36 Certificate issuer: /CN=3CFEE2C21A17314AD0CFFC520FD817D14B4140D1 Certificate serial: 56664E75BFF745BB31ADE93AB8CD8C2AC8E97C3A Authority key identifier: 3C:FE:E2:C2:1A:17:31:4A:D0:CF:FC:52:0F:D8:17:D1:4B:41:40:D1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer Subject info access: rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/34352e3137352e3232382e302f32332d3233203d3e20323638393133.roa Signing time: Thu 06 Mar 2025 15:09:42 +0000 ROA not before: Thu 06 Mar 2025 15:04:42 +0000 ROA not after: Thu 05 Mar 2026 15:09:42 +0000 asID: 268913 IP address blocks: 45.175.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 23 Apr 2025 16:24:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:66:4e:75:bf:f7:45:bb:31:ad:e9:3a:b8:cd:8c:2a:c8:e9:7c:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CFEE2C21A17314AD0CFFC520FD817D14B4140D1 Validity Not Before: Mar 6 15:04:42 2025 GMT Not After : Mar 5 15:09:42 2026 GMT Subject: CN=4CA650301B5AE0980D0F49F8E57896DC2970E236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d2:37:04:81:2d:a1:5d:e5:5a:41:e7:92:ea: 80:5d:18:79:57:ea:dd:f4:2f:16:14:60:78:1d:97: 7c:41:4d:b2:2b:c4:7a:72:d9:c5:4a:a4:69:ba:28: db:de:7c:b4:e9:42:20:8c:67:88:09:ed:4e:a7:4c: 32:1b:db:3e:ce:e4:16:fd:96:6b:a3:41:d7:08:84: 35:05:85:2b:96:d4:b9:37:4c:fc:e1:73:4c:34:c9: f6:aa:1e:7c:1d:6d:96:c6:a9:db:db:68:35:67:8a: b9:04:0f:38:1c:be:4f:7a:07:1d:df:5e:ef:4e:1f: 0e:ca:d8:1a:99:99:43:14:c7:7a:7f:30:cf:bb:ae: 37:67:cf:7c:a2:2b:9c:46:30:94:db:32:47:3c:aa: 02:39:a8:8e:41:d4:58:47:f8:a8:17:a9:a4:83:9f: 71:6f:0f:33:fe:20:35:ad:b0:9d:0c:b6:23:f0:bd: 5b:d5:ef:23:fb:07:c4:14:43:69:34:95:35:16:88: b1:83:6d:d0:0b:21:d1:25:26:83:69:af:80:0a:bb: d3:55:44:23:77:85:b8:4f:4c:20:ed:79:25:67:ec: 6e:f8:80:06:76:d2:1e:b8:02:35:e1:85:e8:1c:60: 0c:ed:64:3b:31:27:5f:c2:eb:d7:4d:6e:c5:c0:dd: 27:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:A6:50:30:1B:5A:E0:98:0D:0F:49:F8:E5:78:96:DC:29:70:E2:36 X509v3 Authority Key Identifier: keyid:3C:FE:E2:C2:1A:17:31:4A:D0:CF:FC:52:0F:D8:17:D1:4B:41:40:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/34352e3137352e3232382e302f32332d3233203d3e20323638393133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.175.228.0/23 Signature Algorithm: sha256WithRSAEncryption a5:b6:61:42:38:12:9e:dd:9d:68:0c:3c:f1:da:8e:ad:63:9f: b0:4a:9e:42:f0:ed:03:dc:34:b1:80:9e:5f:f0:17:44:10:0f: 2a:b1:81:ad:4d:8e:1f:a4:f9:ae:9a:84:3a:dd:42:ab:d2:a8: e9:50:e0:a4:81:2a:4d:aa:e5:eb:35:da:0f:24:80:af:78:c5: a0:72:1b:e9:1c:f2:af:06:fb:28:2e:8d:2e:77:2a:ad:c9:c4: f6:5f:d1:8d:9c:42:b6:c2:2d:f3:41:8f:d9:80:41:69:22:36: 2f:b4:79:01:39:56:30:fc:7c:fd:08:84:20:b1:d2:e6:45:09: 9b:0b:99:81:9d:1f:17:30:60:1a:2d:32:32:f0:b6:4e:43:0e: 96:42:ee:f8:4c:89:d0:ca:b5:5a:d1:bd:40:b7:9c:a2:c2:d2: 28:88:15:54:38:98:b4:6d:0f:bc:21:4d:bd:1b:4e:70:53:a4: 8c:71:9a:ca:e3:33:73:2c:1a:1f:db:9f:a7:13:28:d5:1b:c5: 42:6c:e4:7c:ae:df:d1:5d:ae:12:cd:fc:5f:e5:51:05:c5:3c: 35:91:61:61:cf:49:4b:4a:9a:a4:82:c3:92:e4:9d:45:b2:f6: c2:ab:68:76:84:74:2b:13:a7:95:20:b0:57:ec:f5:93:00:c9: 98:f8:20:4e -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUVmZOdb/3Rbsxrek6uM2MKsjpfDowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NGRUUyQzIxQTE3MzE0QUQwQ0ZGQzUyMEZEODE3RDE0 QjQxNDBEMTAeFw0yNTAzMDYxNTA0NDJaFw0yNjAzMDUxNTA5NDJaMDMxMTAvBgNV BAMTKDRDQTY1MDMwMUI1QUUwOTgwRDBGNDlGOEU1Nzg5NkRDMjk3MEUyMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE0jcEgS2hXeVaQeeS6oBdGHlX 6t30LxYUYHgdl3xBTbIrxHpy2cVKpGm6KNvefLTpQiCMZ4gJ7U6nTDIb2z7O5Bb9 lmujQdcIhDUFhSuW1Lk3TPzhc0w0yfaqHnwdbZbGqdvbaDVnirkEDzgcvk96Bx3f Xu9OHw7K2BqZmUMUx3p/MM+7rjdnz3yiK5xGMJTbMkc8qgI5qI5B1FhH+KgXqaSD n3FvDzP+IDWtsJ0MtiPwvVvV7yP7B8QUQ2k0lTUWiLGDbdALIdElJoNpr4AKu9NV RCN3hbhPTCDteSVn7G74gAZ20h64AjXhhegcYAztZDsxJ1/C69dNbsXA3SdJAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUTKZQMBta4JgND0n45XiW3Clw4jYwHwYDVR0j BBgwFoAUPP7iwhoXMUrQz/xSD9gX0UtBQNEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmNQRG52ZFhraGhkd2thUXh2ZVJHVkVWS1BZSm44V1NrbUY3SEZ0UE5K Z2UvMS8zQ0ZFRTJDMjFBMTczMTRBRDBDRkZDNTIwRkQ4MTdEMTRCNDE0MEQxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDRkVFMkMyMUExNzMxNEFE MENGRkM1MjBGRDgxN0QxNEI0MTQwRDEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJjUERudmRYa2hoZHdrYVF4dmVSR1ZFVktQWUpuOFdTa21GN0hGdFBOSmdlLzEv MzQzNTJlMzEzNzM1MmUzMjMyMzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2 MzgzOTMxMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAEtr+QwDQYJKoZIhvcNAQELBQADggEBAKW2YUI4 Ep7dnWgMPPHajq1jn7BKnkLw7QPcNLGAnl/wF0QQDyqxga1Njh+k+a6ahDrdQqvS qOlQ4KSBKk2q5es12g8kgK94xaByG+kc8q8G+ygujS53Kq3JxPZf0Y2cQrbCLfNB j9mAQWkiNi+0eQE5VjD8fP0IhCCx0uZFCZsLmYGdHxcwYBotMjLwtk5DDpZC7vhM idDKtVrRvUC3nKLC0iiIFVQ4mLRtD7whTb0bTnBTpIxxmsrjM3MsGh/bn6cTKNUb xUJs5Hyu39FdrhLN/F/lUQXFPDWRYWHPSUtKmqSCw5LknUWy9sKraHaEdCsTp5Ug sFfs9ZMAyZj4IE4= -----END CERTIFICATE-----Generated at Tue Apr 22 23:31:40 2025 by rpki-client