$ rpki-client -vvf rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/3138362e3233352e36342e302f32302d3234203d3e20323632373235.roa File: 3138362e3233352e36342e302f32302d3234203d3e20323632373235.roa (raw, json) Hash identifier: 1Hkni3TKW3kNQ83mB3nTYeJWQ9mBS7c7zWqWXIg/zDI= Subject key identifier: 3C:62:64:BA:D5:68:54:08:64:DA:1C:C3:C4:3B:C0:AE:44:EF:B9:EA Certificate issuer: /CN=33D99D98BFD993CB7DE4284CD0B834BDAA1FB768 Certificate serial: 7EC77F8DAAEED2594694A8BB00E98DBCABC84394 Authority key identifier: 33:D9:9D:98:BF:D9:93:CB:7D:E4:28:4C:D0:B8:34:BD:AA:1F:B7:68 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer Subject info access: rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/3138362e3233352e36342e302f32302d3234203d3e20323632373235.roa Signing time: Tue 12 Nov 2024 16:18:42 +0000 ROA not before: Tue 12 Nov 2024 16:13:42 +0000 ROA not after: Tue 11 Nov 2025 16:18:42 +0000 asID: 262725 IP address blocks: 186.235.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.crl rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 17 Feb 2025 07:33:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:c7:7f:8d:aa:ee:d2:59:46:94:a8:bb:00:e9:8d:bc:ab:c8:43:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33D99D98BFD993CB7DE4284CD0B834BDAA1FB768 Validity Not Before: Nov 12 16:13:42 2024 GMT Not After : Nov 11 16:18:42 2025 GMT Subject: CN=3C6264BAD568540864DA1CC3C43BC0AE44EFB9EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:8d:0f:ee:9f:0b:c3:07:cb:ff:83:6e:28:9d: 1c:7e:ad:51:65:7d:59:90:94:78:3b:0e:da:55:9c: 46:6c:94:2c:40:02:49:22:29:f1:1f:83:f5:92:49: ba:b2:3c:26:7a:12:f0:d7:05:4c:04:15:d5:82:1d: 01:5a:47:f2:3c:f5:56:41:57:a5:62:db:d1:75:c5: 53:08:25:bd:e3:68:61:de:64:8c:c6:51:f2:b1:cd: 81:af:f3:55:c9:42:3b:69:d6:14:d6:3f:84:59:9b: 4d:45:cf:f8:d3:f6:cd:42:d2:4f:b7:63:ff:57:14: 16:ce:9e:c9:69:69:dd:46:c5:45:1f:ee:e8:cc:31: 95:52:3a:fe:48:c6:60:32:d7:03:09:7b:44:9b:b8: 79:d4:2e:81:42:41:28:fc:1a:de:ce:b9:d4:67:fe: 55:7b:92:96:01:2e:48:6d:ed:9e:51:cc:4a:8e:d5: 18:6c:b4:94:22:38:bc:79:ea:21:db:8d:e9:5c:24: c1:4c:81:bd:c1:08:8e:6c:2c:17:08:e3:75:01:c3: f8:27:1e:15:a4:4b:b4:55:04:3f:d8:c6:c8:53:40: 3a:5e:22:85:0b:db:b3:12:8d:83:6a:f7:b4:ec:f9: 20:54:7e:43:9b:53:3c:db:62:9a:47:64:f3:d4:a0: 08:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:62:64:BA:D5:68:54:08:64:DA:1C:C3:C4:3B:C0:AE:44:EF:B9:EA X509v3 Authority Key Identifier: keyid:33:D9:9D:98:BF:D9:93:CB:7D:E4:28:4C:D0:B8:34:BD:AA:1F:B7:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/3138362e3233352e36342e302f32302d3234203d3e20323632373235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.235.64.0/20 Signature Algorithm: sha256WithRSAEncryption 8e:51:d0:bc:c6:fa:64:45:94:48:a0:0f:a1:ea:28:e5:47:b4: 6d:7a:3d:bf:0b:d5:1c:1c:22:dd:18:26:67:02:b1:fa:a3:38: 26:16:df:0a:1d:40:24:b8:49:93:4d:6c:d0:d4:7a:ec:96:46: c1:d2:59:7f:7b:5c:fc:cb:c8:37:2c:ad:71:19:22:62:82:97: db:1b:54:10:6b:bd:0f:2f:e4:b9:3d:26:0f:78:f9:de:5f:e0: 56:0d:cd:8f:85:35:7c:a9:e5:d1:5b:ec:d8:fe:13:0a:47:d1: ed:1c:dc:8f:5b:82:2b:f6:b4:be:54:9e:f4:fa:c5:37:be:bb: 55:1d:b2:60:61:93:41:37:98:f2:55:ce:3d:4e:0f:b9:6b:7e: 73:d6:d9:8c:0f:b8:7d:05:62:f6:ac:e3:ad:85:af:de:1b:7e: 54:89:4f:0a:95:a1:3a:f3:b3:88:33:d0:18:20:26:ba:fd:ca: 04:68:51:1c:98:15:48:cb:49:7b:06:f5:5b:57:9a:b5:fc:0b: 85:8d:35:9f:c2:18:78:dd:3d:2b:21:71:fb:58:21:69:bc:88: 6c:46:01:54:a2:d6:9a:51:e7:a1:15:bb:3f:94:01:4a:e0:02: 3d:cd:13:23:ab:3b:4f:c1:dc:c2:ab:5b:f0:3e:0c:f5:b0:4b: 67:25:ba:63 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUfsd/jaru0llGlKi7AOmNvKvIQ5QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEOTlEOThCRkQ5OTNDQjdERTQyODRDRDBCODM0QkRB QTFGQjc2ODAeFw0yNDExMTIxNjEzNDJaFw0yNTExMTExNjE4NDJaMDMxMTAvBgNV BAMTKDNDNjI2NEJBRDU2ODU0MDg2NERBMUNDM0M0M0JDMEFFNDRFRkI5RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIjQ/unwvDB8v/g24onRx+rVFl fVmQlHg7DtpVnEZslCxAAkkiKfEfg/WSSbqyPCZ6EvDXBUwEFdWCHQFaR/I89VZB V6Vi29F1xVMIJb3jaGHeZIzGUfKxzYGv81XJQjtp1hTWP4RZm01Fz/jT9s1C0k+3 Y/9XFBbOnslpad1GxUUf7ujMMZVSOv5IxmAy1wMJe0SbuHnULoFCQSj8Gt7OudRn /lV7kpYBLkht7Z5RzEqO1RhstJQiOLx56iHbjelcJMFMgb3BCI5sLBcI43UBw/gn HhWkS7RVBD/YxshTQDpeIoUL27MSjYNq97Ts+SBUfkObUzzbYppHZPPUoAjXAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUPGJkutVoVAhk2hzDxDvArkTvueowHwYDVR0j BBgwFoAUM9mdmL/Zk8t95ChM0Lg0vaoft2gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0tYa2FuMVAxeGM3Sk5KanRQZUxUbXNHR1F0OGlmUnRWWlBZVHVyaTNO VVIvMC8zM0Q5OUQ5OEJGRDk5M0NCN0RFNDI4NENEMEI4MzRCREFBMUZCNzY4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzRDk5RDk4QkZEOTkzQ0I3 REU0Mjg0Q0QwQjgzNEJEQUExRkI3NjguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNLWGthbjFQMXhjN0pOSmp0UGVMVG1zR0dRdDhpZlJ0VlpQWVR1cmkzTlVSLzAv MzEzODM2MmUzMjMzMzUyZTM2MzQyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM2 MzIzNzMyMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAS660AwDQYJKoZIhvcNAQELBQADggEBAI5R0LzG +mRFlEigD6HqKOVHtG16Pb8L1RwcIt0YJmcCsfqjOCYW3wodQCS4SZNNbNDUeuyW RsHSWX97XPzLyDcsrXEZImKCl9sbVBBrvQ8v5Lk9Jg94+d5f4FYNzY+FNXyp5dFb 7Nj+EwpH0e0c3I9bgiv2tL5UnvT6xTe+u1UdsmBhk0E3mPJVzj1OD7lrfnPW2YwP uH0FYvas462Fr94bflSJTwqVoTrzs4gz0BggJrr9ygRoURyYFUjLSXsG9VtXmrX8 C4WNNZ/CGHjdPSshcftYIWm8iGxGAVSi1ppR56EVuz+UAUrgAj3NEyOrO0/B3MKr W/A+DPWwS2clumM= -----END CERTIFICATE-----Generated at Sun Feb 16 22:20:59 2025 by rpki-client