$ rpki-client -vvf rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/34352e3136382e3132372e302f32342d3234203d3e20323638303633.roa File: 34352e3136382e3132372e302f32342d3234203d3e20323638303633.roa (raw, json) Hash identifier: k3j7DOUwuEy4uCG5+PncutOTZtJCDibWOBCliSA7VMI= Subject key identifier: 2E:CB:F4:5F:12:C0:82:2F:34:F1:C2:BB:61:E7:E4:10:89:39:58:1F Certificate issuer: /CN=9BBEF1050D0F0E92367C823D2A9C8B46DD90E9C7 Certificate serial: 701E887FE559B5CBD4E20C37E7F4FD77DA3E0D24 Authority key identifier: 9B:BE:F1:05:0D:0F:0E:92:36:7C:82:3D:2A:9C:8B:46:DD:90:E9:C7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BBEF1050D0F0E92367C823D2A9C8B46DD90E9C7.cer Subject info access: rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/34352e3136382e3132372e302f32342d3234203d3e20323638303633.roa Signing time: Wed 05 Mar 2025 21:31:26 +0000 ROA not before: Wed 05 Mar 2025 21:26:26 +0000 ROA not after: Wed 04 Mar 2026 21:31:26 +0000 asID: 268063 IP address blocks: 45.168.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/9BBEF1050D0F0E92367C823D2A9C8B46DD90E9C7.crl rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/9BBEF1050D0F0E92367C823D2A9C8B46DD90E9C7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BBEF1050D0F0E92367C823D2A9C8B46DD90E9C7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 14 Mar 2025 13:17:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:1e:88:7f:e5:59:b5:cb:d4:e2:0c:37:e7:f4:fd:77:da:3e:0d:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BBEF1050D0F0E92367C823D2A9C8B46DD90E9C7 Validity Not Before: Mar 5 21:26:26 2025 GMT Not After : Mar 4 21:31:26 2026 GMT Subject: CN=2ECBF45F12C0822F34F1C2BB61E7E4108939581F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:1d:14:c2:d7:21:33:51:4b:f4:df:88:8d:06: 3e:1a:51:0e:81:23:9b:3f:60:5f:11:4d:34:45:49: f1:63:a0:bc:73:7f:e4:df:31:40:97:5b:a1:f9:56: 2c:60:5b:36:fb:d9:cd:e8:7c:fb:30:04:47:65:48: 10:f4:53:54:8e:ef:54:4a:8c:b6:a8:eb:cb:4a:35: 98:da:1c:1b:8f:60:5f:59:9f:68:6b:14:f1:81:24: 71:67:a9:ba:cd:2c:9b:aa:bd:a6:b8:95:8b:ae:6f: f7:30:c5:19:ad:7d:a2:71:74:f6:0c:b5:9e:70:c1: 59:93:18:08:fc:11:a9:d6:1b:32:d1:2f:fd:12:2f: 24:a8:c1:b5:c2:d0:55:cd:1c:fb:f5:0a:ff:3a:31: 14:46:e9:38:84:6c:16:0f:a9:ae:5b:73:a4:cf:bb: 9b:06:b3:d7:7e:cf:ba:19:5b:cb:cc:8f:d3:6d:b0: 46:c9:e2:56:aa:51:26:8e:76:11:10:26:6c:36:e8: 90:aa:65:d7:a7:0c:ed:38:e4:5c:0d:08:74:9a:23: 5a:76:12:1e:0a:35:30:0c:4f:9e:2e:da:8b:ed:43: 38:f4:95:fe:70:b0:0a:ef:f0:0d:23:e6:9e:92:91: 21:4b:28:81:aa:b7:9d:74:4b:6d:a9:e1:66:68:86: b0:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:CB:F4:5F:12:C0:82:2F:34:F1:C2:BB:61:E7:E4:10:89:39:58:1F X509v3 Authority Key Identifier: keyid:9B:BE:F1:05:0D:0F:0E:92:36:7C:82:3D:2A:9C:8B:46:DD:90:E9:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/9BBEF1050D0F0E92367C823D2A9C8B46DD90E9C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BBEF1050D0F0E92367C823D2A9C8B46DD90E9C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/34352e3136382e3132372e302f32342d3234203d3e20323638303633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.168.127.0/24 Signature Algorithm: sha256WithRSAEncryption 54:53:3d:15:91:e1:9f:29:c9:44:80:bc:2b:e4:84:3a:99:7a: 47:b7:eb:c7:c6:2f:d7:5d:fb:be:f9:e2:48:65:47:dd:7b:37: 54:4d:32:62:a3:25:6c:0a:4a:d4:7c:37:51:a0:e8:6d:c1:de: 49:c1:44:da:b7:ec:32:a6:73:ca:95:8c:3a:1d:10:b9:1b:3a: 48:0f:80:6a:3f:8d:f8:1a:cd:2d:c5:f1:46:ea:fd:86:21:33: 23:19:91:9f:33:85:63:58:94:db:67:d7:7f:3d:32:e4:c4:bb: ee:37:7c:b7:b1:a4:30:32:67:f4:79:60:f4:f8:5f:df:0e:8f: 4d:02:a4:97:05:99:6e:87:fe:09:dd:f3:7d:3d:d3:9e:9b:f5: 05:64:6a:b0:06:39:9f:10:d6:59:37:3a:bf:a0:12:93:0d:7b: 6d:f1:75:d5:b3:2f:43:3b:38:9c:0c:02:82:5e:7e:cf:ca:5a: 39:48:1b:90:89:75:37:cd:6c:de:96:c3:da:42:b0:ef:68:fe: c0:fa:2f:fc:5f:55:1b:85:4b:31:1a:bf:8d:c4:81:4e:56:81: 0f:44:7c:00:fb:22:ed:5e:ac:69:e0:c0:d4:92:fe:37:1e:6e: fd:74:98:1a:f1:7d:e1:6d:b6:93:79:54:ac:95:eb:c6:c6:72: 75:19:45:11 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUcB6If+VZtcvU4gw35/T9d9o+DSQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJCRUYxMDUwRDBGMEU5MjM2N0M4MjNEMkE5QzhCNDZE RDkwRTlDNzAeFw0yNTAzMDUyMTI2MjZaFw0yNjAzMDQyMTMxMjZaMDMxMTAvBgNV BAMTKDJFQ0JGNDVGMTJDMDgyMkYzNEYxQzJCQjYxRTdFNDEwODkzOTU4MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNHRTC1yEzUUv034iNBj4aUQ6B I5s/YF8RTTRFSfFjoLxzf+TfMUCXW6H5VixgWzb72c3ofPswBEdlSBD0U1SO71RK jLao68tKNZjaHBuPYF9Zn2hrFPGBJHFnqbrNLJuqvaa4lYuub/cwxRmtfaJxdPYM tZ5wwVmTGAj8EanWGzLRL/0SLySowbXC0FXNHPv1Cv86MRRG6TiEbBYPqa5bc6TP u5sGs9d+z7oZW8vMj9NtsEbJ4laqUSaOdhEQJmw26JCqZdenDO045FwNCHSaI1p2 Eh4KNTAMT54u2ovtQzj0lf5wsArv8A0j5p6SkSFLKIGqt510S22p4WZohrD1AgMB AAGjggJRMIICTTAdBgNVHQ4EFgQULsv0XxLAgi808cK7YefkEIk5WB8wHwYDVR0j BBgwFoAUm77xBQ0PDpI2fII9KpyLRt2Q6ccwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMzdHcWVRRGFmU2hZWVRtVlhHUVdjekxxOUNIWXRNVGFqWlRrUnNaZ2hR UEovMC85QkJFRjEwNTBEMEYwRTkyMzY3QzgyM0QyQTlDOEI0NkREOTBFOUM3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlCQkVGMTA1MEQwRjBFOTIz NjdDODIzRDJBOUM4QjQ2REQ5MEU5QzcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzM3R3FlUURhZlNoWVlUbVZYR1FXY3pMcTlDSFl0TVRhalpUa1JzWmdoUVBKLzAv MzQzNTJlMzEzNjM4MmUzMTMyMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2 MzgzMDM2MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAAtqH8wDQYJKoZIhvcNAQELBQADggEBAFRTPRWR 4Z8pyUSAvCvkhDqZeke368fGL9dd+7754khlR917N1RNMmKjJWwKStR8N1Gg6G3B 3knBRNq37DKmc8qVjDodELkbOkgPgGo/jfgazS3F8Ubq/YYhMyMZkZ8zhWNYlNtn 1389MuTEu+43fLexpDAyZ/R5YPT4X98Oj00CpJcFmW6H/gnd8309056b9QVkarAG OZ8Q1lk3Or+gEpMNe23xddWzL0M7OJwMAoJefs/KWjlIG5CJdTfNbN6Ww9pCsO9o /sD6L/xfVRuFSzEav43EgU5WgQ9EfAD7Iu1erGngwNSS/jcebv10mBrxfeFttpN5 VKyV68bGcnUZRRE= -----END CERTIFICATE-----Generated at Fri Mar 14 04:45:11 2025 by rpki-client