$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS53224.roa File: AS53224.roa (raw, json) Hash identifier: m6eBWax/b8frViPsnCrIUR1FX7mrMhPGYKHOeQPWt8c= Subject key identifier: DF:36:69:B8:04:B5:85:7C:19:1D:9C:AC:29:CA:C1:0F:5F:18:35:9B Certificate issuer: /CN=5DD0CAD6FE5DD02B053D6B01DBD53A598BD350BF Certificate serial: 20C6BAC0FB5F5E463A96DBF160FFAB51FF7F205A Authority key identifier: 5D:D0:CA:D6:FE:5D:D0:2B:05:3D:6B:01:DB:D5:3A:59:8B:D3:50:BF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DD0CAD6FE5DD02B053D6B01DBD53A598BD350BF.cer Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS53224.roa Signing time: Wed 10 Apr 2024 02:17:13 +0000 ROA not before: Wed 10 Apr 2024 02:12:13 +0000 ROA not after: Wed 09 Apr 2025 02:17:13 +0000 asID: 53224 IP address blocks: 186.193.96.0/20 maxlen: 20 186.193.103.0/24 maxlen: 24 186.193.104.0/24 maxlen: 24 186.208.208.0/21 maxlen: 21 186.208.209.0/24 maxlen: 24 186.208.210.0/23 maxlen: 23 186.208.211.0/24 maxlen: 24 186.208.214.0/24 maxlen: 24 186.208.215.0/24 maxlen: 24 186.251.112.0/22 maxlen: 22 186.251.113.0/24 maxlen: 24 186.251.114.0/24 maxlen: 24 186.251.115.0/24 maxlen: 24 186.251.117.0/24 maxlen: 24 186.251.118.0/24 maxlen: 24 186.251.119.0/24 maxlen: 24 187.86.96.0/20 maxlen: 20 187.86.97.0/24 maxlen: 24 187.86.98.0/24 maxlen: 24 187.86.99.0/24 maxlen: 24 187.86.100.0/24 maxlen: 24 187.86.101.0/24 maxlen: 24 187.86.110.0/24 maxlen: 24 189.45.16.0/20 maxlen: 20 200.233.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/5DD0CAD6FE5DD02B053D6B01DBD53A598BD350BF.crl rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/5DD0CAD6FE5DD02B053D6B01DBD53A598BD350BF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DD0CAD6FE5DD02B053D6B01DBD53A598BD350BF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 30 Jun 2024 03:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:c6:ba:c0:fb:5f:5e:46:3a:96:db:f1:60:ff:ab:51:ff:7f:20:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DD0CAD6FE5DD02B053D6B01DBD53A598BD350BF Validity Not Before: Apr 10 02:12:13 2024 GMT Not After : Apr 9 02:17:13 2025 GMT Subject: CN=DF3669B804B5857C191D9CAC29CAC10F5F18359B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:13:11:bc:67:5e:20:fa:6c:0e:2a:53:88:e4: 01:4e:a6:b5:89:04:77:78:6f:e0:85:9f:3a:e2:ff: ec:d3:66:c1:9d:e5:a2:b1:e7:83:03:cf:05:fb:88: 5b:e7:3c:2a:1f:a8:93:af:5d:7f:b5:d9:f3:e4:e6: 58:56:02:06:f7:70:32:d6:af:a1:5d:62:e5:70:c0: bb:f6:4b:ec:96:62:30:17:c4:5d:bd:c0:7c:5d:67: 82:76:71:7c:75:1b:ae:cb:b3:d0:31:74:ad:5c:19: cd:49:8d:76:ea:aa:7a:46:45:72:a7:a9:6f:9a:aa: 8d:84:c9:62:c2:f7:f9:2b:a7:c9:2c:0f:db:1c:9d: dc:cf:7e:59:ab:77:7b:13:d7:aa:d5:ac:d1:2c:53: 39:cd:d7:b9:48:53:cd:38:c4:72:76:53:90:c1:7a: 63:10:8c:88:88:32:f5:11:8c:8c:75:92:10:4f:11: 6c:02:31:e8:09:16:05:42:ec:5f:5e:6a:11:ca:34: 0f:9e:a2:97:c3:40:48:09:19:95:ce:30:ef:40:c2: 64:59:b1:a3:a1:e5:5b:f9:e9:53:4d:37:98:a0:a5: a4:01:66:9d:36:80:47:88:ab:fd:f2:40:b1:92:96: bc:fd:0d:d3:38:db:57:2c:51:56:88:b9:ea:ba:2d: b9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:36:69:B8:04:B5:85:7C:19:1D:9C:AC:29:CA:C1:0F:5F:18:35:9B X509v3 Authority Key Identifier: keyid:5D:D0:CA:D6:FE:5D:D0:2B:05:3D:6B:01:DB:D5:3A:59:8B:D3:50:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/5DD0CAD6FE5DD02B053D6B01DBD53A598BD350BF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DD0CAD6FE5DD02B053D6B01DBD53A598BD350BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS53224.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.193.96.0/20 186.208.208.0/21 186.251.112.0/22 186.251.117.0-186.251.119.255 187.86.96.0/20 189.45.16.0/20 200.233.84.0/24 Signature Algorithm: sha256WithRSAEncryption c5:71:4d:31:47:bc:45:a0:b6:e7:28:96:a8:3d:02:f7:4e:1d: ac:db:9b:87:f8:35:4b:47:48:3c:fa:1e:8a:f4:69:5d:7a:da: 35:18:18:b1:d3:76:fb:f1:26:ff:d9:d4:3b:1e:1b:c7:9e:1c: 97:9c:3f:0c:5b:7d:90:bc:b9:21:9e:af:27:f3:ad:7a:08:ce: d1:f1:ef:0d:b3:63:a2:c3:b6:00:11:0c:4e:cd:68:52:8b:98: 81:01:e5:78:03:af:e2:00:c2:dc:0c:78:ce:a8:ef:96:81:4d: 33:dd:d7:21:85:a0:74:b2:2c:ea:15:bb:7d:fb:7f:aa:20:de: c0:39:28:ed:d3:62:a8:5c:a0:61:88:f8:60:b8:34:b7:cc:f6: 26:51:96:7c:f1:c0:95:0e:c8:62:17:e5:70:42:76:79:17:b2: 33:da:d4:af:50:ec:77:a5:68:78:a9:59:c2:94:dc:0c:60:5f: 84:9f:77:93:78:e0:2e:e7:47:4b:99:87:6e:a1:2f:1c:a5:99: 27:33:c5:1d:02:93:c9:55:f8:aa:4f:c4:98:c5:42:13:8d:5b: 06:1b:6a:73:88:e7:70:0a:6e:4f:89:a5:3e:f5:7f:aa:05:4c: 7f:cf:a3:56:7e:28:4c:5f:93:13:7e:86:2a:ba:8a:9b:97:ec: 9e:42:b2:8a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUIMa6wPtfXkY6ltvxYP+rUf9/IFowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUREMENBRDZGRTVERDAyQjA1M0Q2QjAxREJENTNBNTk4 QkQzNTBCRjAeFw0yNDA0MTAwMjEyMTNaFw0yNTA0MDkwMjE3MTNaMDMxMTAvBgNV BAMTKERGMzY2OUI4MDRCNTg1N0MxOTFEOUNBQzI5Q0FDMTBGNUYxODM1OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuExG8Z14g+mwOKlOI5AFOprWJ BHd4b+CFnzri/+zTZsGd5aKx54MDzwX7iFvnPCofqJOvXX+12fPk5lhWAgb3cDLW r6FdYuVwwLv2S+yWYjAXxF29wHxdZ4J2cXx1G67Ls9AxdK1cGc1JjXbqqnpGRXKn qW+aqo2EyWLC9/krp8ksD9scndzPflmrd3sT16rVrNEsUznN17lIU804xHJ2U5DB emMQjIiIMvURjIx1khBPEWwCMegJFgVC7F9eahHKNA+eopfDQEgJGZXOMO9AwmRZ saOh5Vv56VNNN5igpaQBZp02gEeIq/3yQLGSlrz9DdM421csUVaIueq6LblTAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU3zZpuAS1hXwZHZysKcrBD18YNZswHwYDVR0j BBgwFoAUXdDK1v5d0CsFPWsB29U6WYvTUL8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF ZUIvMC81REQwQ0FENkZFNUREMDJCMDUzRDZCMDFEQkQ1M0E1OThCRDM1MEJGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVERDBDQUQ2RkU1REQwMkIw NTNENkIwMURCRDUzQTU5OEJEMzUwQkYuY2VyMHkGCCsGAQUFBwELBG0wazBpBggr BgEFBQcwC4ZdcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8yZEdB UEpQNjVlZmVDVFVhODRodzVSR1JiWkdQVzJxUnlUdmdhaGdqeEVlQi8wL0FTNTMy MjQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwSwYIKwYBBQUHAQcBAf8E PDA6MDgEAgABMDIDBAS6wWADBAO60NADBAK6+3AwDAMEALr7dQMEA7r7cAMEBLtW YAMEBL0tEAMEAMjpVDANBgkqhkiG9w0BAQsFAAOCAQEAxXFNMUe8RaC25yiWqD0C 904drNubh/g1S0dIPPoeivRpXXraNRgYsdN2+/Em/9nUOx4bx54cl5w/DFt9kLy5 IZ6vJ/OtegjO0fHvDbNjosO2ABEMTs1oUouYgQHleAOv4gDC3Ax4zqjvloFNM93X IYWgdLIs6hW7fft/qiDewDko7dNiqFygYYj4YLg0t8z2JlGWfPHAlQ7IYhflcEJ2 eReyM9rUr1Dsd6VoeKlZwpTcDGBfhJ93k3jgLudHS5mHbqEvHKWZJzPFHQKTyVX4 qk/EmMVCE41bBhtqc4jncApuT4mlPvV/qgVMf8+jVn4oTF+TE36GKrqKm5fsnkKy ig== -----END CERTIFICATE-----Generated at Sat Jun 29 03:28:34 2024 by rpki-client on console-ams.rpki-client.org