$ rpki-client -vvf rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/1/34352e3136382e36342e302f32322d3234203d3e20323638313338.roa File: 34352e3136382e36342e302f32322d3234203d3e20323638313338.roa (raw, json) Hash identifier: jXn6vxQspubwKAOlQeCGi3XR5a4DSzd0b9tcnHQUdlM= Subject key identifier: BA:3F:CE:78:CE:00:F3:A0:02:13:1C:EA:9B:75:7E:75:E1:D1:A3:C4 Certificate issuer: /CN=B60ED4BAF1002CB172904FB372EB8C72E9276C0D Certificate serial: 58967C60E04D25434C161986042BA7E95945EBA1 Authority key identifier: B6:0E:D4:BA:F1:00:2C:B1:72:90:4F:B3:72:EB:8C:72:E9:27:6C:0D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B60ED4BAF1002CB172904FB372EB8C72E9276C0D.cer Subject info access: rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/1/34352e3136382e36342e302f32322d3234203d3e20323638313338.roa Signing time: Thu 06 Mar 2025 15:33:23 +0000 ROA not before: Thu 06 Mar 2025 15:28:23 +0000 ROA not after: Thu 05 Mar 2026 15:33:23 +0000 asID: 268138 IP address blocks: 45.168.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/1/B60ED4BAF1002CB172904FB372EB8C72E9276C0D.crl rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/1/B60ED4BAF1002CB172904FB372EB8C72E9276C0D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B60ED4BAF1002CB172904FB372EB8C72E9276C0D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 13 Apr 2025 06:25:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:96:7c:60:e0:4d:25:43:4c:16:19:86:04:2b:a7:e9:59:45:eb:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B60ED4BAF1002CB172904FB372EB8C72E9276C0D Validity Not Before: Mar 6 15:28:23 2025 GMT Not After : Mar 5 15:33:23 2026 GMT Subject: CN=BA3FCE78CE00F3A002131CEA9B757E75E1D1A3C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:17:f8:92:df:66:d9:19:34:19:48:a1:ed:94: b1:ad:c1:f8:97:45:e6:6d:01:7a:e9:fd:7a:b9:c7: 82:33:8e:7e:fc:c5:ad:f9:2f:0a:0c:1a:e7:76:7a: e8:4e:19:16:28:81:ec:3e:43:d3:0f:fe:86:4e:70: 0e:53:a0:eb:4e:b2:4c:83:ce:74:10:f7:5a:e4:88: 23:11:a9:50:ad:80:82:49:61:d8:14:09:2b:53:f8: 5d:7e:d1:72:bd:bd:81:8f:93:01:e7:00:55:49:12: 43:b1:bc:f1:05:58:0e:60:d9:ea:29:e0:dd:dc:48: 59:de:87:e9:7d:93:1b:d3:60:aa:a5:e5:8a:25:62: f9:ba:e6:fc:88:0f:ea:91:b1:26:3f:cd:d3:0c:69: 5b:02:c5:02:37:46:a2:2b:26:4f:13:cd:ba:b0:bb: 92:c7:33:65:6b:1a:ef:5d:87:36:2b:5b:e1:70:e4: ab:6f:3b:84:3e:d1:0c:b2:54:4e:2d:54:c6:16:a3: 31:41:82:a5:23:5e:b7:3d:94:1c:11:77:15:af:21: b1:4c:0a:69:09:71:bc:c8:c1:41:4b:68:5c:cf:36: 52:1a:94:07:24:69:96:d6:57:e9:24:e5:f7:8b:77: 51:63:df:d9:c3:5f:7d:83:e7:e5:b4:81:f0:de:be: 2e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:3F:CE:78:CE:00:F3:A0:02:13:1C:EA:9B:75:7E:75:E1:D1:A3:C4 X509v3 Authority Key Identifier: keyid:B6:0E:D4:BA:F1:00:2C:B1:72:90:4F:B3:72:EB:8C:72:E9:27:6C:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/1/B60ED4BAF1002CB172904FB372EB8C72E9276C0D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B60ED4BAF1002CB172904FB372EB8C72E9276C0D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/1/34352e3136382e36342e302f32322d3234203d3e20323638313338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.168.64.0/22 Signature Algorithm: sha256WithRSAEncryption 09:6a:d4:e3:06:a8:4f:70:11:7f:35:79:c6:68:b5:d2:1b:19: 52:1c:1a:18:41:79:f8:f1:37:99:c3:76:73:6d:64:0e:04:b2: c5:64:e0:5b:6a:90:6f:c2:84:47:95:2f:f7:38:92:24:ac:7a: 83:c9:37:83:84:12:c3:dc:1f:ad:5a:fd:0c:ea:7c:b5:80:a3: a0:9b:f3:de:9b:13:73:38:0b:4d:13:3c:55:8c:25:08:14:0d: 27:20:d2:c9:87:23:29:0e:ae:81:c5:5f:19:cc:75:b5:d8:6a: 34:88:e7:2c:68:92:97:7d:c8:d8:76:34:a1:b1:39:07:e8:fe: f0:3f:70:dd:73:fd:47:19:01:3a:b7:90:22:30:64:ed:36:d8: 41:d9:49:7a:7d:1b:a1:9e:9e:bc:b0:3c:b2:46:86:78:11:8b: 77:55:72:f9:b9:4f:f5:18:7d:48:8c:07:d1:13:45:22:2e:ca: e0:b8:22:44:5c:a0:76:05:11:4f:d6:40:38:0c:db:cc:bd:75: 1e:a5:ba:8c:4a:d8:89:1e:bb:06:6d:be:fa:06:31:22:a6:24: 50:a4:90:3a:87:94:eb:36:9c:4a:cd:1d:b8:46:95:72:13:84: 6a:06:32:0a:83:48:c1:c6:e6:20:27:44:ee:b4:77:02:80:3f: d2:c2:fe:4d -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUWJZ8YOBNJUNMFhmGBCun6VlF66EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYwRUQ0QkFGMTAwMkNCMTcyOTA0RkIzNzJFQjhDNzJF OTI3NkMwRDAeFw0yNTAzMDYxNTI4MjNaFw0yNjAzMDUxNTMzMjNaMDMxMTAvBgNV BAMTKEJBM0ZDRTc4Q0UwMEYzQTAwMjEzMUNFQTlCNzU3RTc1RTFEMUEzQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiF/iS32bZGTQZSKHtlLGtwfiX ReZtAXrp/Xq5x4Izjn78xa35LwoMGud2euhOGRYogew+Q9MP/oZOcA5ToOtOskyD znQQ91rkiCMRqVCtgIJJYdgUCStT+F1+0XK9vYGPkwHnAFVJEkOxvPEFWA5g2eop 4N3cSFneh+l9kxvTYKql5YolYvm65vyID+qRsSY/zdMMaVsCxQI3RqIrJk8Tzbqw u5LHM2VrGu9dhzYrW+Fw5KtvO4Q+0QyyVE4tVMYWozFBgqUjXrc9lBwRdxWvIbFM CmkJcbzIwUFLaFzPNlIalAckaZbWV+kk5feLd1Fj39nDX32D5+W0gfDevi6FAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUuj/OeM4A86ACExzqm3V+deHRo8QwHwYDVR0j BBgwFoAUtg7UuvEALLFykE+zcuuMcuknbA0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnZaMmJHdUw0c0QyNnFEekVFSFdTaGJuMWtwaEJ5M2FSOTVmWlhBM2oy aFMvMS9CNjBFRDRCQUYxMDAyQ0IxNzI5MDRGQjM3MkVCOEM3MkU5Mjc2QzBELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I2MEVENEJBRjEwMDJDQjE3 MjkwNEZCMzcyRUI4QzcyRTkyNzZDMEQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJ2WjJiR3VMNHNEMjZxRHpFRUhXU2hibjFrcGhCeTNhUjk1ZlpYQTNqMmhTLzEv MzQzNTJlMzEzNjM4MmUzNjM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM4 MzEzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQCLahAMA0GCSqGSIb3DQEBCwUAA4IBAQAJatTjBqhP cBF/NXnGaLXSGxlSHBoYQXn48TeZw3ZzbWQOBLLFZOBbapBvwoRHlS/3OJIkrHqD yTeDhBLD3B+tWv0M6ny1gKOgm/PemxNzOAtNEzxVjCUIFA0nINLJhyMpDq6BxV8Z zHW12Go0iOcsaJKXfcjYdjShsTkH6P7wP3Ddc/1HGQE6t5AiMGTtNthB2Ul6fRuh np68sDyyRoZ4EYt3VXL5uU/1GH1IjAfRE0UiLsrguCJEXKB2BRFP1kA4DNvMvXUe pbqMStiJHrsGbb76BjEipiRQpJA6h5TrNpxKzR24RpVyE4RqBjIKg0jBxuYgJ0Tu tHcCgD/Swv5N -----END CERTIFICATE-----Generated at Sat Apr 12 19:26:28 2025 by rpki-client