$ rpki-client -vvf rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0/34352e3136382e3232302e302f32322d3234203d3e20323638303932.roa File: 34352e3136382e3232302e302f32322d3234203d3e20323638303932.roa (raw, json) Hash identifier: ICgQONpVmg94fwKky1QJDk56tBkyV98W22ldUgiv2Zw= Subject key identifier: 38:E6:D6:D0:A6:F7:F7:E6:91:1C:C1:C7:8E:E8:43:2C:C8:B5:F5:8E Certificate issuer: /CN=B99BCBB2975CCC597837197FB941B244052D47D4 Certificate serial: 16E307D71407300F0A332A81FBBEE330F24F0E11 Authority key identifier: B9:9B:CB:B2:97:5C:CC:59:78:37:19:7F:B9:41:B2:44:05:2D:47:D4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B99BCBB2975CCC597837197FB941B244052D47D4.cer Subject info access: rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0/34352e3136382e3232302e302f32322d3234203d3e20323638303932.roa Signing time: Wed 02 Apr 2025 12:16:52 +0000 ROA not before: Wed 02 Apr 2025 12:11:52 +0000 ROA not after: Wed 01 Apr 2026 12:16:52 +0000 asID: 268092 IP address blocks: 45.168.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0/B99BCBB2975CCC597837197FB941B244052D47D4.crl rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0/B99BCBB2975CCC597837197FB941B244052D47D4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B99BCBB2975CCC597837197FB941B244052D47D4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 23 Apr 2025 03:51:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:e3:07:d7:14:07:30:0f:0a:33:2a:81:fb:be:e3:30:f2:4f:0e:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B99BCBB2975CCC597837197FB941B244052D47D4 Validity Not Before: Apr 2 12:11:52 2025 GMT Not After : Apr 1 12:16:52 2026 GMT Subject: CN=38E6D6D0A6F7F7E6911CC1C78EE8432CC8B5F58E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b4:0a:d7:e2:0b:ea:bd:7e:70:6d:d5:86:c9: 58:00:47:fb:d2:a6:d1:71:07:95:24:2c:09:ac:10: be:7b:18:d9:79:15:62:44:f0:40:7f:b6:b4:16:a6: 87:9f:3d:7d:10:83:3b:33:e7:bd:95:1f:17:28:d4: ee:f7:3e:61:c8:4a:25:09:cc:63:01:4b:81:31:e5: fe:22:53:21:0d:ba:d5:b2:36:d6:19:6a:21:23:b5: 03:a0:c3:a2:0f:54:b2:9a:65:40:65:05:a1:d4:89: 46:02:ba:86:70:13:a4:d9:16:9e:53:f6:ff:4c:f2: 9c:8a:e3:97:48:e2:4a:e2:00:7c:47:af:02:9b:41: b9:c2:1a:af:c1:4d:43:2b:3b:1d:4b:31:49:4c:f1: ad:45:56:4b:bd:f8:cf:b9:1c:b7:68:26:5c:b2:15: fc:f6:8d:0a:7d:0c:34:f5:e1:e9:c4:bc:3c:a4:9d: db:5b:f7:c3:9f:15:f2:d9:22:e6:a4:6d:e0:f4:61: 65:72:fd:bb:4d:f4:ec:a2:b1:ad:6c:19:af:e8:04: 09:5e:fe:1f:69:20:9f:10:84:0d:9b:06:e0:ef:fc: bb:9b:bd:d0:1c:a4:c2:e4:0e:0b:91:3d:81:ff:9c: 49:62:c6:14:fd:18:7b:3f:93:98:a4:0e:be:d9:76: 9c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E6:D6:D0:A6:F7:F7:E6:91:1C:C1:C7:8E:E8:43:2C:C8:B5:F5:8E X509v3 Authority Key Identifier: keyid:B9:9B:CB:B2:97:5C:CC:59:78:37:19:7F:B9:41:B2:44:05:2D:47:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0/B99BCBB2975CCC597837197FB941B244052D47D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B99BCBB2975CCC597837197FB941B244052D47D4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0/34352e3136382e3232302e302f32322d3234203d3e20323638303932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.168.220.0/22 Signature Algorithm: sha256WithRSAEncryption 72:88:70:b2:f9:29:4f:ee:8a:eb:b0:46:d9:43:54:65:60:d1: 3e:00:f3:6c:38:f0:ca:57:ed:0a:d2:ab:9a:1e:d1:8c:b6:a1: 70:d2:1f:7a:1f:39:94:b2:db:e8:e3:5c:6f:bb:9f:bf:dd:4b: fd:ca:fc:45:66:e3:c4:ae:7b:b9:3a:42:14:7a:cc:16:d6:5b: 52:90:29:88:4e:3b:13:02:e8:10:0d:6d:7f:c6:7c:f7:a5:3d: b0:a7:cb:3c:93:d8:7e:8a:6a:bd:34:9e:19:e9:fb:bc:4a:86: ce:1d:eb:fe:e5:33:fd:dc:ff:ea:73:0f:d0:93:ae:93:ba:7f: 78:9b:16:41:3c:39:ad:25:20:41:35:e8:bf:7c:a3:3c:3b:31: 46:69:65:88:44:da:0b:c0:7b:ef:2f:de:aa:cd:59:5c:57:84: 53:a1:3d:8c:9b:f6:74:48:31:62:a2:67:e5:7a:3d:a4:43:8b: 05:33:7c:9c:b4:72:cb:02:a4:15:d3:99:2a:aa:48:3d:a2:1b: 24:ad:27:2e:e7:08:83:17:cb:11:93:ce:d4:77:91:fd:19:4e: d5:2c:cd:08:37:df:12:b3:90:e8:42:9d:ac:ef:83:6c:94:92: 7d:36:aa:fa:04:70:1e:71:80:db:92:c3:12:d8:f5:26:c7:3c: e4:8e:4f:c3 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUFuMH1xQHMA8KMyqB+77jMPJPDhEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk5QkNCQjI5NzVDQ0M1OTc4MzcxOTdGQjk0MUIyNDQw NTJENDdENDAeFw0yNTA0MDIxMjExNTJaFw0yNjA0MDExMjE2NTJaMDMxMTAvBgNV BAMTKDM4RTZENkQwQTZGN0Y3RTY5MTFDQzFDNzhFRTg0MzJDQzhCNUY1OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCktArX4gvqvX5wbdWGyVgAR/vS ptFxB5UkLAmsEL57GNl5FWJE8EB/trQWpoefPX0Qgzsz572VHxco1O73PmHISiUJ zGMBS4Ex5f4iUyENutWyNtYZaiEjtQOgw6IPVLKaZUBlBaHUiUYCuoZwE6TZFp5T 9v9M8pyK45dI4kriAHxHrwKbQbnCGq/BTUMrOx1LMUlM8a1FVku9+M+5HLdoJlyy Ffz2jQp9DDT14enEvDykndtb98OfFfLZIuakbeD0YWVy/btN9Oyisa1sGa/oBAle /h9pIJ8QhA2bBuDv/LubvdAcpMLkDguRPYH/nElixhT9GHs/k5ikDr7ZdpzZAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUOObW0Kb39+aRHMHHjuhDLMi19Y4wHwYDVR0j BBgwFoAUuZvLspdczFl4Nxl/uUGyRAUtR9QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1NuYUp3ZmpHWVk1VWVObmdkV012ajRxaFpjdGVSVG1qb0xaU1pnaU43 TEsvMC9COTlCQ0JCMjk3NUNDQzU5NzgzNzE5N0ZCOTQxQjI0NDA1MkQ0N0Q0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5OUJDQkIyOTc1Q0NDNTk3 ODM3MTk3RkI5NDFCMjQ0MDUyRDQ3RDQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNTbmFKd2ZqR1lZNVVlTm5nZFdNdmo0cWhaY3RlUlRtam9MWlNaZ2lON0xLLzAv MzQzNTJlMzEzNjM4MmUzMjMyMzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2 MzgzMDM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAItqNwwDQYJKoZIhvcNAQELBQADggEBAHKIcLL5 KU/uiuuwRtlDVGVg0T4A82w48MpX7QrSq5oe0Yy2oXDSH3ofOZSy2+jjXG+7n7/d S/3K/EVm48Sue7k6QhR6zBbWW1KQKYhOOxMC6BANbX/GfPelPbCnyzyT2H6Kar00 nhnp+7xKhs4d6/7lM/3c/+pzD9CTrpO6f3ibFkE8Oa0lIEE16L98ozw7MUZpZYhE 2gvAe+8v3qrNWVxXhFOhPYyb9nRIMWKiZ+V6PaRDiwUzfJy0cssCpBXTmSqqSD2i GyStJy7nCIMXyxGTztR3kf0ZTtUszQg33xKzkOhCnazvg2yUkn02qvoEcB5xgNuS wxLY9SbHPOSOT8M= -----END CERTIFICATE-----Generated at Tue Apr 22 16:01:01 2025 by rpki-client