$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137302e38312e322e302f32342d3234203d3e20323632323936.roa File: 3137302e38312e322e302f32342d3234203d3e20323632323936.roa (raw, json) Hash identifier: wXYU5fGtP2XQ4Rwbm+T56xyg85I1J+3Hp9W6BdWOmUI= Subject key identifier: 45:FE:A2:A7:D4:AE:1C:BC:E2:C9:51:C6:DC:77:92:DF:6F:DE:E4:0A Certificate issuer: /CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990 Certificate serial: 40FAE7BFAC3D903503E8D1D190DBCA7F6773F384 Authority key identifier: 6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer Subject info access: rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137302e38312e322e302f32342d3234203d3e20323632323936.roa Signing time: Mon 31 Mar 2025 17:57:33 +0000 ROA not before: Mon 31 Mar 2025 17:52:33 +0000 ROA not after: Mon 30 Mar 2026 17:57:33 +0000 asID: 262296 IP address blocks: 170.81.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Apr 2025 22:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:fa:e7:bf:ac:3d:90:35:03:e8:d1:d1:90:db:ca:7f:67:73:f3:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990 Validity Not Before: Mar 31 17:52:33 2025 GMT Not After : Mar 30 17:57:33 2026 GMT Subject: CN=45FEA2A7D4AE1CBCE2C951C6DC7792DF6FDEE40A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4c:a2:3e:95:58:38:16:ef:e4:fa:94:2b:2d: d7:13:61:94:26:73:99:a9:89:bb:a2:4c:86:16:c3: 01:62:e0:87:4a:ee:04:bd:6a:4d:59:ef:04:94:c7: 4d:cd:01:cb:af:97:e5:b4:fb:e5:b0:ec:ee:93:27: 92:cd:55:98:27:3d:c6:d7:99:9b:1e:c8:bd:01:92: ed:91:04:b7:a6:99:a4:8f:af:28:03:e6:4c:e7:70: 19:3b:cd:1a:b3:35:fe:d9:0f:72:58:fb:92:da:72: 6a:43:da:34:ea:9e:8a:76:fd:0d:41:65:7d:d3:68: a5:6e:35:ac:b1:af:4b:1d:d0:45:f7:a6:b4:e0:3d: 1d:8d:00:d8:45:46:b8:5b:ec:1a:a7:fe:09:3f:d4: 9a:bf:99:b6:92:f4:eb:73:b4:31:fc:0b:e1:32:8e: 75:e8:b8:9e:9d:58:1f:eb:76:0e:c2:09:3d:5b:d9: 62:d3:b3:17:85:55:11:f6:f0:14:12:dd:d3:9a:49: e3:6e:4d:6c:58:73:23:84:d1:51:27:c6:76:17:64: d2:73:64:79:d3:92:bc:6b:8e:90:f8:5e:fa:41:c0: 60:e6:72:37:6e:58:f3:80:d8:0e:82:52:04:67:69: 65:a4:98:e5:58:71:a6:79:88:9c:a7:9c:e9:d1:16: ff:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:FE:A2:A7:D4:AE:1C:BC:E2:C9:51:C6:DC:77:92:DF:6F:DE:E4:0A X509v3 Authority Key Identifier: keyid:6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137302e38312e322e302f32342d3234203d3e20323632323936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.81.2.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:06:fb:a5:2f:c1:88:a1:3f:70:a9:a2:6f:4f:8f:8f:89:53: 41:0c:ee:38:af:b0:ab:57:42:2f:24:b7:4a:f4:40:3f:8c:05: 0e:d7:9a:89:55:b8:ad:0b:15:c5:69:9f:2b:f9:3d:49:5e:1a: 9c:1b:dd:94:48:ef:52:b8:cc:26:18:19:a4:0f:07:f1:ac:c3: 9c:ed:8c:d7:c8:48:ce:0d:f9:45:78:0b:a1:5b:5f:18:75:f2: bc:bb:8d:30:ec:11:46:1b:6a:41:3b:dd:a3:d4:49:5d:6e:9c: ea:2b:96:be:1a:60:f7:52:1a:09:8a:d5:6e:31:c6:4e:f6:c8: 54:cf:55:0a:5d:65:35:d6:6a:68:48:fe:b1:56:ff:46:99:02: 7d:6f:3f:78:54:54:89:d6:4f:1a:42:c5:d3:38:5c:df:18:3a: 4b:ec:07:dc:e3:51:b5:3e:c7:dd:cd:76:b6:c0:be:8b:f0:07: e0:d1:f0:7d:72:a5:a7:38:e5:17:16:5b:bc:6b:94:0c:b1:a4: 11:5c:b8:18:67:28:6b:ad:78:01:a3:cb:05:49:45:3d:11:ef: eb:a0:60:fb:9c:38:10:27:9a:65:8d:6d:48:85:82:c0:47:01: 8f:44:0a:3a:43:61:45:58:3c:9a:6c:e3:03:89:01:0b:6a:78: a6:d1:7c:f0 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUQPrnv6w9kDUD6NHRkNvKf2dz84QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEzMzJFNEJDRTcxMUFBOEI5QTgwRkM2M0NGODIzREZC NEYwQjk5MDAeFw0yNTAzMzExNzUyMzNaFw0yNjAzMzAxNzU3MzNaMDMxMTAvBgNV BAMTKDQ1RkVBMkE3RDRBRTFDQkNFMkM5NTFDNkRDNzc5MkRGNkZERUU0MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzTKI+lVg4Fu/k+pQrLdcTYZQm c5mpibuiTIYWwwFi4IdK7gS9ak1Z7wSUx03NAcuvl+W0++Ww7O6TJ5LNVZgnPcbX mZseyL0Bku2RBLemmaSPrygD5kzncBk7zRqzNf7ZD3JY+5LacmpD2jTqnop2/Q1B ZX3TaKVuNayxr0sd0EX3prTgPR2NANhFRrhb7Bqn/gk/1Jq/mbaS9OtztDH8C+Ey jnXouJ6dWB/rdg7CCT1b2WLTsxeFVRH28BQS3dOaSeNuTWxYcyOE0VEnxnYXZNJz ZHnTkrxrjpD4XvpBwGDmcjduWPOA2A6CUgRnaWWkmOVYcaZ5iJynnOnRFv8fAgMB AAGjggJNMIICSTAdBgNVHQ4EFgQURf6ip9SuHLziyVHG3HeS32/e5AowHwYDVR0j BBgwFoAUajMuS85xGqi5qA/GPPgj37TwuZAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM05NNm55eVpEUldSUjcxSjJjeHg2eFJzVlh5MktqMWtBR1k2b0NnZ0xp eTcvMC82QTMzMkU0QkNFNzExQUE4QjlBODBGQzYzQ0Y4MjNERkI0RjBCOTkwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZBMzMyRTRCQ0U3MTFBQThC OUE4MEZDNjNDRjgyM0RGQjRGMEI5OTAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNOTTZueXlaRFJXUlI3MUoyY3h4NnhSc1ZYeTJLajFrQUdZNm9DZ2dMaXk3LzAv MzEzNzMwMmUzODMxMmUzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMjMy MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB /wQQMA4wDAQCAAEwBgMEAKpRAjANBgkqhkiG9w0BAQsFAAOCAQEADwb7pS/BiKE/ cKmib0+Pj4lTQQzuOK+wq1dCLyS3SvRAP4wFDteaiVW4rQsVxWmfK/k9SV4anBvd lEjvUrjMJhgZpA8H8azDnO2M18hIzg35RXgLoVtfGHXyvLuNMOwRRhtqQTvdo9RJ XW6c6iuWvhpg91IaCYrVbjHGTvbIVM9VCl1lNdZqaEj+sVb/RpkCfW8/eFRUidZP GkLF0zhc3xg6S+wH3ONRtT7H3c12tsC+i/AH4NHwfXKlpzjlFxZbvGuUDLGkEVy4 GGcoa614AaPLBUlFPRHv66Bg+5w4ECeaZY1tSIWCwEcBj0QKOkNhRVg8mmzjA4kB C2p4ptF88A== -----END CERTIFICATE-----Generated at Mon Apr 7 06:55:03 2025 by rpki-client