$ rpki-client -vvf rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/3133382e39372e3131362e302f32322d3234203d3e20323634313632.roa File: 3133382e39372e3131362e302f32322d3234203d3e20323634313632.roa (raw, json) Hash identifier: YCZYJk7BIYIWi+Bj9zrw8S66GD21rmq819KeTapTsa4= Subject key identifier: 1B:FA:66:6B:01:83:69:EE:1A:CD:1A:76:6E:B3:D0:BE:86:78:A4:28 Certificate issuer: /CN=1EC190957ABC0EC0432EF48C9BCB45C81982D3E7 Certificate serial: 7046A8B5255BD472C15238F181A0BD0F9B194B25 Authority key identifier: 1E:C1:90:95:7A:BC:0E:C0:43:2E:F4:8C:9B:CB:45:C8:19:82:D3:E7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EC190957ABC0EC0432EF48C9BCB45C81982D3E7.cer Subject info access: rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/3133382e39372e3131362e302f32322d3234203d3e20323634313632.roa Signing time: Wed 05 Feb 2025 19:21:46 +0000 ROA not before: Wed 05 Feb 2025 19:16:46 +0000 ROA not after: Wed 04 Feb 2026 19:21:46 +0000 asID: 264162 IP address blocks: 138.97.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/1EC190957ABC0EC0432EF48C9BCB45C81982D3E7.crl rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/1EC190957ABC0EC0432EF48C9BCB45C81982D3E7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EC190957ABC0EC0432EF48C9BCB45C81982D3E7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Apr 2025 05:27:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:46:a8:b5:25:5b:d4:72:c1:52:38:f1:81:a0:bd:0f:9b:19:4b:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EC190957ABC0EC0432EF48C9BCB45C81982D3E7 Validity Not Before: Feb 5 19:16:46 2025 GMT Not After : Feb 4 19:21:46 2026 GMT Subject: CN=1BFA666B018369EE1ACD1A766EB3D0BE8678A428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:40:b0:df:b6:d1:e7:f3:37:7e:9c:1a:d2:ab: 5c:26:f7:d0:09:40:9b:f2:a5:d4:9d:49:b0:fc:c4: 1c:2f:4f:a1:24:8d:5d:0c:6a:c7:f0:75:cb:d5:eb: 6f:f7:ac:b5:35:a8:21:af:fa:c1:28:f1:81:23:bc: 12:92:fd:eb:71:55:4e:30:ea:d2:01:90:71:87:8c: 5f:fb:13:49:f6:a6:4c:07:dc:84:91:47:12:53:1a: 33:d8:ad:8f:b2:46:75:86:30:24:d6:49:48:8d:16: 49:35:6c:cd:f7:50:ea:a2:0a:85:3b:e8:e5:38:82: ac:dc:a1:89:61:27:87:64:c2:74:e9:da:a3:5c:e4: 71:b2:a2:31:60:ab:17:d9:3e:aa:01:4a:d4:70:4c: 54:00:da:b9:35:66:b4:e2:55:ce:a7:f1:38:41:dc: 34:4c:d4:28:5a:92:58:74:d4:d1:3a:98:0d:76:e2: 72:f5:0d:78:ec:2a:ae:17:fe:67:b4:cc:70:cd:23: ca:fc:ec:c2:60:9f:d8:7b:0d:ba:81:75:9b:4a:23: ce:bd:d8:45:71:64:b6:be:80:2d:7d:1d:06:d1:35: 96:39:ac:94:c5:b0:f1:ff:2a:ff:0a:09:e4:20:bd: 2c:10:b4:e4:c7:f2:62:22:ff:d3:77:c1:26:e8:14: 9e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:FA:66:6B:01:83:69:EE:1A:CD:1A:76:6E:B3:D0:BE:86:78:A4:28 X509v3 Authority Key Identifier: keyid:1E:C1:90:95:7A:BC:0E:C0:43:2E:F4:8C:9B:CB:45:C8:19:82:D3:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/1EC190957ABC0EC0432EF48C9BCB45C81982D3E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EC190957ABC0EC0432EF48C9BCB45C81982D3E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/3133382e39372e3131362e302f32322d3234203d3e20323634313632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.97.116.0/22 Signature Algorithm: sha256WithRSAEncryption 91:01:41:b1:ed:f6:81:54:41:5d:8b:36:3f:f3:6e:07:a6:4e: 84:e8:12:e2:6f:f4:f5:d7:c6:24:b9:ab:c2:5e:b4:4a:68:72: f3:d7:76:69:6b:30:a4:eb:f5:f9:04:53:71:e4:ba:07:24:9e: 4e:19:55:f8:ea:1d:10:27:90:35:3e:84:e7:c2:6b:90:7b:2d: 82:e2:71:12:de:7f:55:da:53:9c:55:3d:6f:7a:40:b9:5a:6f: 13:ad:19:bf:d9:70:cb:9d:03:9a:ee:0e:9e:6e:86:c4:2b:f2: 15:b5:41:f0:98:73:81:31:4d:0e:e3:b5:bc:1c:b5:0a:a1:fd: 7c:94:c5:04:4c:72:19:68:d7:a4:a8:8b:22:0d:6d:14:fe:38: 44:ff:31:3f:88:d5:de:90:7c:7e:01:ad:e1:db:b8:a2:11:43: e4:e8:7e:b5:da:e0:ee:6d:11:ce:57:86:e4:84:84:0b:3e:58: 9d:89:b3:65:d3:9d:08:73:3c:4c:24:df:32:70:e2:0c:d4:a1: 31:48:95:c0:43:eb:c4:a0:41:a4:4b:5c:87:d8:1f:4a:b6:a7: 3f:d6:36:b6:13:f0:ed:47:45:bc:ee:c3:15:da:76:5c:ca:b1: 22:cb:1d:06:ed:60:64:1b:4a:44:7e:0a:c9:4e:17:8c:36:68: 21:87:8e:13 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUcEaotSVb1HLBUjjxgaC9D5sZSyUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVDMTkwOTU3QUJDMEVDMDQzMkVGNDhDOUJDQjQ1Qzgx OTgyRDNFNzAeFw0yNTAyMDUxOTE2NDZaFw0yNjAyMDQxOTIxNDZaMDMxMTAvBgNV BAMTKDFCRkE2NjZCMDE4MzY5RUUxQUNEMUE3NjZFQjNEMEJFODY3OEE0MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRQLDfttHn8zd+nBrSq1wm99AJ QJvypdSdSbD8xBwvT6EkjV0MasfwdcvV62/3rLU1qCGv+sEo8YEjvBKS/etxVU4w 6tIBkHGHjF/7E0n2pkwH3ISRRxJTGjPYrY+yRnWGMCTWSUiNFkk1bM33UOqiCoU7 6OU4gqzcoYlhJ4dkwnTp2qNc5HGyojFgqxfZPqoBStRwTFQA2rk1ZrTiVc6n8ThB 3DRM1Chaklh01NE6mA124nL1DXjsKq4X/me0zHDNI8r87MJgn9h7DbqBdZtKI869 2EVxZLa+gC19HQbRNZY5rJTFsPH/Kv8KCeQgvSwQtOTH8mIi/9N3wSboFJ4XAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUG/pmawGDae4azRp2brPQvoZ4pCgwHwYDVR0j BBgwFoAUHsGQlXq8DsBDLvSMm8tFyBmC0+cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmRybXAyZHBqMlZLenZHOWZlZGdDeGs3Vm5KcmlmZ0xxQTFCOGJyNmdD U1IvMC8xRUMxOTA5NTdBQkMwRUMwNDMyRUY0OEM5QkNCNDVDODE5ODJEM0U3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFFQzE5MDk1N0FCQzBFQzA0 MzJFRjQ4QzlCQ0I0NUM4MTk4MkQzRTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJkcm1wMmRwajJWS3p2RzlmZWRnQ3hrN1ZuSnJpZmdMcUExQjhicjZnQ1NSLzAv MzEzMzM4MmUzOTM3MmUzMTMxMzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2 MzQzMTM2MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKKYXQwDQYJKoZIhvcNAQELBQADggEBAJEBQbHt 9oFUQV2LNj/zbgemToToEuJv9PXXxiS5q8JetEpocvPXdmlrMKTr9fkEU3Hkugck nk4ZVfjqHRAnkDU+hOfCa5B7LYLicRLef1XaU5xVPW96QLlabxOtGb/ZcMudA5ru Dp5uhsQr8hW1QfCYc4ExTQ7jtbwctQqh/XyUxQRMchlo16SoiyINbRT+OET/MT+I 1d6QfH4BreHbuKIRQ+TofrXa4O5tEc5XhuSEhAs+WJ2Js2XTnQhzPEwk3zJw4gzU oTFIlcBD68SgQaRLXIfYH0q2pz/WNrYT8O1HRbzuwxXadlzKsSLLHQbtYGQbSkR+ CslOF4w2aCGHjhM= -----END CERTIFICATE-----Generated at Sun Apr 6 21:36:48 2025 by rpki-client