$ rpki-client -vvf rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/34352e3136382e3132342e302f32342d3234203d3e20323638303633.roa File: 34352e3136382e3132342e302f32342d3234203d3e20323638303633.roa (raw, json) Hash identifier: RLj5B6bb/WWvzsdXpRvcupzFyWnCTGh1L787NYA0Ksw= Subject key identifier: 4C:BC:8F:B3:29:3E:4C:20:8F:01:10:2B:FF:8F:23:C4:AC:4E:4E:E1 Certificate issuer: /CN=9BBEF1050D0F0E92367C823D2A9C8B46DD90E9C7 Certificate serial: 2E2FAC164D4A97833233F8AF716F9E76D155FD01 Authority key identifier: 9B:BE:F1:05:0D:0F:0E:92:36:7C:82:3D:2A:9C:8B:46:DD:90:E9:C7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BBEF1050D0F0E92367C823D2A9C8B46DD90E9C7.cer Subject info access: rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/34352e3136382e3132342e302f32342d3234203d3e20323638303633.roa Signing time: Wed 05 Mar 2025 21:31:26 +0000 ROA not before: Wed 05 Mar 2025 21:26:26 +0000 ROA not after: Wed 04 Mar 2026 21:31:26 +0000 asID: 268063 IP address blocks: 45.168.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/9BBEF1050D0F0E92367C823D2A9C8B46DD90E9C7.crl rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/9BBEF1050D0F0E92367C823D2A9C8B46DD90E9C7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BBEF1050D0F0E92367C823D2A9C8B46DD90E9C7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 14 Mar 2025 13:17:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:2f:ac:16:4d:4a:97:83:32:33:f8:af:71:6f:9e:76:d1:55:fd:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BBEF1050D0F0E92367C823D2A9C8B46DD90E9C7 Validity Not Before: Mar 5 21:26:26 2025 GMT Not After : Mar 4 21:31:26 2026 GMT Subject: CN=4CBC8FB3293E4C208F01102BFF8F23C4AC4E4EE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ae:1a:18:aa:10:31:fd:d1:21:c7:b6:b3:57: a1:e6:dd:9e:fb:b1:01:da:72:f5:53:ab:c4:60:ca: a6:aa:77:eb:1e:fb:32:28:60:0d:74:08:ca:82:c7: 9f:31:37:ad:9a:9c:91:ca:c6:df:e7:ee:6a:9b:19: 2e:cf:b4:4a:eb:7c:4e:35:8a:7b:6a:7c:9c:52:c9: da:df:76:69:a3:42:f7:69:30:47:06:fc:8a:ad:c3: 71:63:a5:98:45:83:88:a5:7a:e9:9f:ea:5b:00:8e: a1:fd:26:1d:8f:c0:94:fc:0f:3b:8d:8d:94:b2:4d: 4d:b4:52:27:b1:a1:5b:fa:52:32:27:e6:18:71:79: f7:d6:80:0c:2f:7f:95:e7:51:88:05:0a:b2:a6:36: 86:22:fb:57:ec:da:c3:2d:aa:27:9c:a4:e7:ec:68: cd:24:7d:06:03:7d:d3:00:3e:6a:a0:a6:b9:af:77: e7:36:87:86:76:91:5f:ba:57:b5:f0:f0:3b:09:e7: 9a:bb:14:03:6c:f5:75:89:b2:0f:59:98:fe:95:d4: fa:17:1f:7f:42:88:ef:f0:36:98:f2:ab:55:df:dd: 9e:a7:4a:d7:d1:29:b3:7a:2e:ce:9b:71:1c:01:e7: 3d:8a:1b:05:8c:a3:09:dd:26:5e:bb:0a:21:bc:1a: ce:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:BC:8F:B3:29:3E:4C:20:8F:01:10:2B:FF:8F:23:C4:AC:4E:4E:E1 X509v3 Authority Key Identifier: keyid:9B:BE:F1:05:0D:0F:0E:92:36:7C:82:3D:2A:9C:8B:46:DD:90:E9:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/9BBEF1050D0F0E92367C823D2A9C8B46DD90E9C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BBEF1050D0F0E92367C823D2A9C8B46DD90E9C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/34352e3136382e3132342e302f32342d3234203d3e20323638303633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.168.124.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:e5:5e:8d:36:5a:4b:7b:90:c6:c5:e7:c0:88:36:36:49:d9: e8:d7:c6:f8:9d:19:f3:c5:fc:d5:3b:57:9b:c2:6b:99:f9:b7: c9:51:fd:88:f3:48:80:c6:f0:86:4e:27:47:1a:32:7d:51:73: 18:ab:ad:a5:05:57:c7:d2:cb:a9:73:dc:8f:19:7b:01:db:de: b1:4f:d7:1d:e3:19:b8:6a:d4:ff:e2:4a:85:9b:e8:1f:71:29: d4:b8:09:04:7b:a9:ef:fb:dc:c3:6d:81:f2:0e:68:bf:c8:a9: fc:a7:00:67:94:af:19:d8:97:61:03:8b:87:e3:e9:52:b2:a5: 8f:4e:93:16:a6:17:0e:e7:06:f3:68:c1:cb:19:91:05:94:38: fa:e3:9d:f4:34:96:78:8e:b6:6f:e4:25:82:33:ed:db:11:3e: af:5d:2b:50:3b:11:55:3a:5b:3b:81:41:03:eb:7d:fd:4b:f8: 08:ea:7a:97:2d:19:7b:97:70:d9:e2:00:dc:29:14:08:1f:d1: a4:30:32:17:cf:30:64:c3:04:92:7a:1b:d4:b3:51:ea:d3:0b: 77:23:72:e8:67:cb:ea:f3:0f:be:6b:98:9a:ae:b9:56:90:0e: 24:68:a1:90:d3:f2:08:90:70:d6:82:38:66:78:05:0d:cf:97: 8d:06:5f:a2 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIULi+sFk1Kl4MyM/ivcW+edtFV/QEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJCRUYxMDUwRDBGMEU5MjM2N0M4MjNEMkE5QzhCNDZE RDkwRTlDNzAeFw0yNTAzMDUyMTI2MjZaFw0yNjAzMDQyMTMxMjZaMDMxMTAvBgNV BAMTKDRDQkM4RkIzMjkzRTRDMjA4RjAxMTAyQkZGOEYyM0M0QUM0RTRFRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7rhoYqhAx/dEhx7azV6Hm3Z77 sQHacvVTq8Rgyqaqd+se+zIoYA10CMqCx58xN62anJHKxt/n7mqbGS7PtErrfE41 intqfJxSydrfdmmjQvdpMEcG/Iqtw3FjpZhFg4ileumf6lsAjqH9Jh2PwJT8DzuN jZSyTU20UiexoVv6UjIn5hhxeffWgAwvf5XnUYgFCrKmNoYi+1fs2sMtqiecpOfs aM0kfQYDfdMAPmqgprmvd+c2h4Z2kV+6V7Xw8DsJ55q7FANs9XWJsg9ZmP6V1PoX H39CiO/wNpjyq1Xf3Z6nStfRKbN6Ls6bcRwB5z2KGwWMowndJl67CiG8Gs6lAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUTLyPsyk+TCCPARAr/48jxKxOTuEwHwYDVR0j BBgwFoAUm77xBQ0PDpI2fII9KpyLRt2Q6ccwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMzdHcWVRRGFmU2hZWVRtVlhHUVdjekxxOUNIWXRNVGFqWlRrUnNaZ2hR UEovMC85QkJFRjEwNTBEMEYwRTkyMzY3QzgyM0QyQTlDOEI0NkREOTBFOUM3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlCQkVGMTA1MEQwRjBFOTIz NjdDODIzRDJBOUM4QjQ2REQ5MEU5QzcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzM3R3FlUURhZlNoWVlUbVZYR1FXY3pMcTlDSFl0TVRhalpUa1JzWmdoUVBKLzAv MzQzNTJlMzEzNjM4MmUzMTMyMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2 MzgzMDM2MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAAtqHwwDQYJKoZIhvcNAQELBQADggEBAH7lXo02 Wkt7kMbF58CINjZJ2ejXxvidGfPF/NU7V5vCa5n5t8lR/YjzSIDG8IZOJ0caMn1R cxirraUFV8fSy6lz3I8ZewHb3rFP1x3jGbhq1P/iSoWb6B9xKdS4CQR7qe/73MNt gfIOaL/IqfynAGeUrxnYl2EDi4fj6VKypY9OkxamFw7nBvNowcsZkQWUOPrjnfQ0 lniOtm/kJYIz7dsRPq9dK1A7EVU6WzuBQQPrff1L+AjqepctGXuXcNniANwpFAgf 0aQwMhfPMGTDBJJ6G9SzUerTC3cjcuhny+rzD75rmJquuVaQDiRooZDT8giQcNaC OGZ4BQ3Pl40GX6I= -----END CERTIFICATE-----Generated at Fri Mar 14 04:43:55 2025 by rpki-client