$ rpki-client -vvf rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/3139302e3132342e3234362e302f32342d3234203d3e20323730383630.roa File: 3139302e3132342e3234362e302f32342d3234203d3e20323730383630.roa (raw, json) Hash identifier: ouWOBSiTWgfnPLxBeA+7q0eMzrly3oy5U/Yxyh/uQG8= Subject key identifier: 33:77:83:78:1F:B1:52:BF:0F:D8:9B:61:54:7E:E2:04:F3:07:82:5C Certificate issuer: /CN=91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0 Certificate serial: 4CF479FCC30D04F1718CD53874D62896EC30E4A1 Authority key identifier: 91:CB:0D:46:F3:8A:17:C0:F3:AB:C4:9D:94:96:AF:CB:60:EC:C5:C0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.cer Subject info access: rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/3139302e3132342e3234362e302f32342d3234203d3e20323730383630.roa Signing time: Sat 04 Jan 2025 12:28:10 +0000 ROA not before: Sat 04 Jan 2025 12:23:10 +0000 ROA not after: Sat 03 Jan 2026 12:28:10 +0000 asID: 270860 IP address blocks: 190.124.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.crl rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 18 Apr 2025 19:40:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:f4:79:fc:c3:0d:04:f1:71:8c:d5:38:74:d6:28:96:ec:30:e4:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0 Validity Not Before: Jan 4 12:23:10 2025 GMT Not After : Jan 3 12:28:10 2026 GMT Subject: CN=337783781FB152BF0FD89B61547EE204F307825C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:cb:46:2d:6a:4c:8b:81:44:46:7e:57:08:a2: 61:e9:8c:e0:66:69:40:94:57:63:a1:34:64:37:83: 71:58:86:f2:79:a2:9b:d1:7b:04:16:ae:42:c0:3b: 99:17:2b:65:bf:2a:1e:9b:f6:70:0f:63:af:0e:95: bf:47:24:02:22:61:a4:5b:41:48:a1:ea:98:0f:8e: 8b:f8:86:1f:cd:39:dc:57:a0:e3:c9:4d:41:ea:f9: 84:a8:75:58:80:dd:a8:e7:58:49:d2:03:41:f8:ef: 98:b8:c8:f2:77:48:52:b6:c1:e3:f1:b9:51:d9:5f: 66:3a:7e:d6:7c:2b:8a:85:06:49:ae:f6:2a:91:58: 2c:b7:6e:3e:90:67:9f:62:73:9d:bd:00:2b:9f:e9: 9b:ae:ed:5f:30:1c:58:05:cc:a6:24:8a:12:a6:3f: 92:02:94:15:3a:d6:e9:61:a1:d8:9a:06:06:a3:72: e5:42:2c:28:a4:39:aa:28:11:ea:94:22:9a:b3:07: b1:e7:b2:f3:e1:c5:b9:9e:9d:64:44:91:38:d9:5c: 20:9f:bb:04:e4:a5:09:cf:ee:b5:07:61:3e:03:86: 75:c4:73:a0:15:c5:46:f7:14:e9:b9:71:38:8a:b5: 17:2c:02:ae:48:48:9e:63:25:ab:2a:a7:57:b5:c2: 9a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:77:83:78:1F:B1:52:BF:0F:D8:9B:61:54:7E:E2:04:F3:07:82:5C X509v3 Authority Key Identifier: keyid:91:CB:0D:46:F3:8A:17:C0:F3:AB:C4:9D:94:96:AF:CB:60:EC:C5:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/3139302e3132342e3234362e302f32342d3234203d3e20323730383630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.124.246.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:b3:96:25:06:65:de:a0:db:fc:cd:36:55:98:7c:91:e8:dc: c8:dd:79:e5:8c:61:fc:ab:93:a1:56:4d:07:b5:70:ab:9a:3d: 12:4b:e4:bc:b3:6c:87:23:b1:63:55:26:6f:50:73:8e:81:d4: 09:d6:fc:5a:0a:f1:63:11:df:4f:40:e3:ba:f0:3e:c5:c0:40: 7b:90:6f:a1:d3:81:8b:0a:bd:3f:72:8e:90:7d:12:7b:c6:cb: d0:e7:dc:4e:4c:a3:04:4b:4d:ef:f6:22:ac:37:75:78:e3:f7: 9b:28:ca:33:86:ea:35:bc:c1:7b:47:b8:3f:7f:4e:78:01:33: 91:5d:6f:1f:8a:e9:63:72:92:8f:83:7e:bf:53:1b:d3:93:a2: 58:6c:00:88:7f:6d:6d:dc:4c:c9:6d:2e:a8:85:58:d0:2c:8f: 06:f3:89:cd:01:19:b0:9a:30:59:d4:2e:7d:e3:4d:7b:31:f5: 01:1c:f7:50:84:e6:ff:de:d4:97:84:a7:2c:b9:76:4e:3f:13: 8a:e9:ed:75:5e:29:ec:46:cf:86:60:57:d3:44:22:d8:5e:29: 48:81:83:ea:67:be:ab:16:1e:83:b6:21:12:c9:0b:43:59:cf: b0:a0:d3:5f:7e:e4:a1:92:22:bf:db:f2:61:ac:39:e5:3e:66: bc:5e:be:da -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUTPR5/MMNBPFxjNU4dNYoluww5KEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFDQjBENDZGMzhBMTdDMEYzQUJDNDlEOTQ5NkFGQ0I2 MEVDQzVDMDAeFw0yNTAxMDQxMjIzMTBaFw0yNjAxMDMxMjI4MTBaMDMxMTAvBgNV BAMTKDMzNzc4Mzc4MUZCMTUyQkYwRkQ4OUI2MTU0N0VFMjA0RjMwNzgyNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDky0YtakyLgURGflcIomHpjOBm aUCUV2OhNGQ3g3FYhvJ5opvRewQWrkLAO5kXK2W/Kh6b9nAPY68Olb9HJAIiYaRb QUih6pgPjov4hh/NOdxXoOPJTUHq+YSodViA3ajnWEnSA0H475i4yPJ3SFK2wePx uVHZX2Y6ftZ8K4qFBkmu9iqRWCy3bj6QZ59ic529ACuf6Zuu7V8wHFgFzKYkihKm P5IClBU61ulhodiaBgajcuVCLCikOaooEeqUIpqzB7HnsvPhxbmenWREkTjZXCCf uwTkpQnP7rUHYT4DhnXEc6AVxUb3FOm5cTiKtRcsAq5ISJ5jJasqp1e1wpqZAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUM3eDeB+xUr8P2JthVH7iBPMHglwwHwYDVR0j BBgwFoAUkcsNRvOKF8Dzq8SdlJavy2DsxcAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2JOSjJLanJQaWplYXRiUHdGclExeWlQZXEyUkN3NnY5VEVpbnRXZ0hO QkwvMC85MUNCMEQ0NkYzOEExN0MwRjNBQkM0OUQ5NDk2QUZDQjYwRUNDNUMwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxQ0IwRDQ2RjM4QTE3QzBG M0FCQzQ5RDk0OTZBRkNCNjBFQ0M1QzAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNiTkoyS2pyUGlqZWF0YlB3RnJRMXlpUGVxMlJDdzZ2OVRFaW50V2dITkJMLzAv MzEzOTMwMmUzMTMyMzQyZTMyMzQzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy MzczMDM4MzYzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL589jANBgkqhkiG9w0BAQsFAAOCAQEAPrOW JQZl3qDb/M02VZh8kejcyN155Yxh/KuToVZNB7Vwq5o9EkvkvLNshyOxY1Umb1Bz joHUCdb8WgrxYxHfT0DjuvA+xcBAe5BvodOBiwq9P3KOkH0Se8bL0OfcTkyjBEtN 7/YirDd1eOP3myjKM4bqNbzBe0e4P39OeAEzkV1vH4rpY3KSj4N+v1Mb05OiWGwA iH9tbdxMyW0uqIVY0CyPBvOJzQEZsJowWdQufeNNezH1ARz3UITm/97Ul4SnLLl2 Tj8TiuntdV4p7EbPhmBX00Qi2F4pSIGD6me+qxYeg7YhEskLQ1nPsKDTX37koZIi v9vyYaw55T5mvF6+2g== -----END CERTIFICATE-----Generated at Fri Apr 18 11:17:07 2025 by rpki-client