$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS262726.roa File: AS262726.roa (raw, json) Hash identifier: hpNAmkAS5AiacYekCiGjhwoD7zmkkhiOOGNA1iiUZxE= Subject key identifier: 37:3B:7A:E4:D0:76:C1:57:6B:E4:4A:1E:69:CE:5D:97:39:9B:C0:91 Certificate issuer: /CN=5DD0CAD6FE5DD02B053D6B01DBD53A598BD350BF Certificate serial: 35E50E7B456132A83523BD04581473F4A8DCC69E Authority key identifier: 5D:D0:CA:D6:FE:5D:D0:2B:05:3D:6B:01:DB:D5:3A:59:8B:D3:50:BF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DD0CAD6FE5DD02B053D6B01DBD53A598BD350BF.cer Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS262726.roa Signing time: Wed 10 Apr 2024 19:52:55 +0000 ROA not before: Wed 10 Apr 2024 19:47:55 +0000 ROA not after: Wed 09 Apr 2025 19:52:55 +0000 asID: 262726 IP address blocks: 168.227.108.0/22 maxlen: 22 168.227.109.0/24 maxlen: 24 168.227.110.0/24 maxlen: 24 168.227.111.0/24 maxlen: 24 170.82.92.0/22 maxlen: 22 170.82.92.0/23 maxlen: 23 170.82.93.0/24 maxlen: 24 170.82.94.0/23 maxlen: 23 170.82.95.0/24 maxlen: 24 186.192.16.0/20 maxlen: 20 186.192.16.0/21 maxlen: 21 186.192.17.0/24 maxlen: 24 186.192.18.0/23 maxlen: 23 186.192.19.0/24 maxlen: 24 186.192.20.0/23 maxlen: 23 186.192.21.0/24 maxlen: 24 186.192.22.0/24 maxlen: 24 186.192.23.0/24 maxlen: 24 186.192.24.0/22 maxlen: 22 186.192.24.0/23 maxlen: 23 186.192.25.0/24 maxlen: 24 186.192.26.0/23 maxlen: 23 186.192.27.0/24 maxlen: 24 186.192.28.0/22 maxlen: 22 186.192.29.0/24 maxlen: 24 186.192.30.0/24 maxlen: 24 186.192.31.0/24 maxlen: 24 191.241.40.0/21 maxlen: 21 191.241.40.0/22 maxlen: 22 191.241.41.0/24 maxlen: 24 191.241.42.0/24 maxlen: 24 191.241.43.0/24 maxlen: 24 191.241.44.0/22 maxlen: 22 191.241.45.0/24 maxlen: 24 191.241.46.0/23 maxlen: 23 2804:54:c::/48 maxlen: 48 2804:54:1001::/48 maxlen: 48 2804:54:1002::/48 maxlen: 48 2804:54:1e00::/40 maxlen: 40 2804:54:1f00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/5DD0CAD6FE5DD02B053D6B01DBD53A598BD350BF.crl rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/5DD0CAD6FE5DD02B053D6B01DBD53A598BD350BF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DD0CAD6FE5DD02B053D6B01DBD53A598BD350BF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 30 Jun 2024 03:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:e5:0e:7b:45:61:32:a8:35:23:bd:04:58:14:73:f4:a8:dc:c6:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DD0CAD6FE5DD02B053D6B01DBD53A598BD350BF Validity Not Before: Apr 10 19:47:55 2024 GMT Not After : Apr 9 19:52:55 2025 GMT Subject: CN=373B7AE4D076C1576BE44A1E69CE5D97399BC091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:eb:29:d9:d2:1f:84:fe:42:c6:de:f9:d0:31: 03:4f:87:54:19:f9:4b:6b:0e:b5:6a:a2:88:88:5c: 0a:61:b6:d2:81:7e:e2:24:11:5f:02:99:c9:fc:56: e1:77:cf:5d:e0:69:8b:ea:4d:37:ee:a4:bb:cb:25: 9a:f2:93:cd:3a:65:39:31:f9:1e:a6:80:d6:a7:55: 8a:e0:86:40:85:45:d7:74:22:22:10:05:7e:a6:3a: c9:b4:93:4f:0a:ed:94:39:f7:f2:11:77:93:7c:36: c3:81:b5:9c:4c:34:d0:74:a3:dc:34:26:62:98:a0: c8:50:2a:10:82:c9:06:39:7a:66:b6:89:9e:29:6f: d0:2b:62:3f:2f:b4:7f:84:b1:93:1e:61:1e:8b:7f: b4:a5:82:f0:a0:d8:d1:5f:63:91:92:cb:19:5c:94: f7:84:bc:8a:a6:af:be:1c:57:b4:ee:bc:ed:27:cb: a8:28:f4:e6:de:e2:1e:d5:f9:aa:a5:56:19:3e:19: 16:cb:30:5b:37:34:5a:e3:1b:d2:85:6c:c3:6a:35: d8:61:8e:07:5d:c6:98:85:7d:9e:9b:81:36:96:be: f3:83:6f:8f:0b:d2:1b:b6:01:1c:83:1a:70:cd:4d: 10:b8:dc:06:71:45:2c:98:72:ad:dd:f8:94:f6:23: 69:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:3B:7A:E4:D0:76:C1:57:6B:E4:4A:1E:69:CE:5D:97:39:9B:C0:91 X509v3 Authority Key Identifier: keyid:5D:D0:CA:D6:FE:5D:D0:2B:05:3D:6B:01:DB:D5:3A:59:8B:D3:50:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/5DD0CAD6FE5DD02B053D6B01DBD53A598BD350BF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DD0CAD6FE5DD02B053D6B01DBD53A598BD350BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS262726.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.227.108.0/22 170.82.92.0/22 186.192.16.0/20 191.241.40.0/21 IPv6: 2804:54:c::/48 2804:54:1001::-2804:54:1002:ffff:ffff:ffff:ffff:ffff 2804:54:1e00::/39 Signature Algorithm: sha256WithRSAEncryption 9a:56:23:ca:ba:15:de:4b:c8:c2:e5:8a:45:34:7e:c7:ae:c4: 10:8b:41:fd:43:75:da:13:92:20:d6:a6:6e:45:6a:c0:70:c3: a0:57:03:c4:8d:54:cb:c1:14:51:32:76:d6:a1:01:d2:64:b4: eb:b4:e8:7f:13:ef:70:89:df:b8:ff:29:02:5d:78:23:93:57: 78:a5:34:9d:a8:d9:2b:dc:5e:f8:d2:ba:f8:2c:59:50:7a:6e: 05:14:66:49:d0:5e:42:20:0f:80:91:86:b6:99:d9:c8:dd:c7: 41:c4:8e:2e:3b:7a:ba:c8:82:24:7f:67:b4:ff:5b:fd:c0:25: 3b:43:d3:84:d7:4b:18:53:88:0b:b7:6f:af:34:60:9a:7a:69: 75:d2:bc:98:b7:60:4f:63:fe:b5:8a:d9:3c:10:1c:ae:11:31: e7:90:b9:b9:ee:45:b2:54:b0:f1:1b:a3:a2:b7:7e:58:3d:f9: 3a:74:70:94:a8:a6:f2:06:87:29:f7:da:40:5f:92:ab:f7:17: fa:1b:25:a7:c0:ce:a2:23:c3:d3:45:5a:03:70:ce:e9:44:bd: d0:2b:47:5a:19:05:c0:1b:d6:3e:27:34:aa:7a:4d:37:77:63: 2d:65:1d:12:4b:b0:21:d7:51:ee:e9:78:65:da:81:d4:fb:df: 20:50:13:c4 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUNeUOe0VhMqg1I70EWBRz9Kjcxp4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUREMENBRDZGRTVERDAyQjA1M0Q2QjAxREJENTNBNTk4 QkQzNTBCRjAeFw0yNDA0MTAxOTQ3NTVaFw0yNTA0MDkxOTUyNTVaMDMxMTAvBgNV BAMTKDM3M0I3QUU0RDA3NkMxNTc2QkU0NEExRTY5Q0U1RDk3Mzk5QkMwOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG6ynZ0h+E/kLG3vnQMQNPh1QZ +UtrDrVqooiIXAphttKBfuIkEV8Cmcn8VuF3z13gaYvqTTfupLvLJZryk806ZTkx +R6mgNanVYrghkCFRdd0IiIQBX6mOsm0k08K7ZQ59/IRd5N8NsOBtZxMNNB0o9w0 JmKYoMhQKhCCyQY5ema2iZ4pb9ArYj8vtH+EsZMeYR6Lf7SlgvCg2NFfY5GSyxlc lPeEvIqmr74cV7TuvO0ny6go9Obe4h7V+aqlVhk+GRbLMFs3NFrjG9KFbMNqNdhh jgddxpiFfZ6bgTaWvvODb48L0hu2ARyDGnDNTRC43AZxRSyYcq3d+JT2I2kbAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUNzt65NB2wVdr5Eoeac5dlzmbwJEwHwYDVR0j BBgwFoAUXdDK1v5d0CsFPWsB29U6WYvTUL8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF ZUIvMC81REQwQ0FENkZFNUREMDJCMDUzRDZCMDFEQkQ1M0E1OThCRDM1MEJGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVERDBDQUQ2RkU1REQwMkIw NTNENkIwMURCRDUzQTU5OEJEMzUwQkYuY2VyMHoGCCsGAQUFBwELBG4wbDBqBggr BgEFBQcwC4ZecnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8yZEdB UEpQNjVlZmVDVFVhODRodzVSR1JiWkdQVzJxUnlUdmdhaGdqeEVlQi8wL0FTMjYy NzI2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/ BE8wTTAeBAIAATAYAwQCqONsAwQCqlJcAwQEusAQAwQDv/EoMCsEAgACMCUDBwAo BABUAAwwEgMHACgEAFQQAQMHACgEAFQQAgMGASgEAFQeMA0GCSqGSIb3DQEBCwUA A4IBAQCaViPKuhXeS8jC5YpFNH7HrsQQi0H9Q3XaE5Ig1qZuRWrAcMOgVwPEjVTL wRRRMnbWoQHSZLTrtOh/E+9wid+4/ykCXXgjk1d4pTSdqNkr3F740rr4LFlQem4F FGZJ0F5CIA+AkYa2mdnI3cdBxI4uO3q6yIIkf2e0/1v9wCU7Q9OE10sYU4gLt2+v NGCaeml10ryYt2BPY/61itk8EByuETHnkLm57kWyVLDxG6Oit35YPfk6dHCUqKby Bocp99pAX5Kr9xf6GyWnwM6iI8PTRVoDcM7pRL3QK0daGQXAG9Y+JzSqek03d2Mt ZR0SS7Ah11Hu6Xhl2oHU+98gUBPE -----END CERTIFICATE-----Generated at Sat Jun 29 03:28:34 2024 by rpki-client on console-ams.rpki-client.org