$ rpki-client -vvf rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/3139302e3132342e3234372e302f32342d3234203d3e20323730383630.roa File: 3139302e3132342e3234372e302f32342d3234203d3e20323730383630.roa (raw, json) Hash identifier: CcBSySmTVrGXjBmAZJ2qP+CxFizJEFvF6UAVfbjFZgA= Subject key identifier: 35:E6:45:F0:D5:45:F2:D0:2B:0F:02:7B:07:A7:65:A9:3D:E4:0A:2F Certificate issuer: /CN=91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0 Certificate serial: 6CF7BFB381E08F5C4AFDFE01DAEB706664173B92 Authority key identifier: 91:CB:0D:46:F3:8A:17:C0:F3:AB:C4:9D:94:96:AF:CB:60:EC:C5:C0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.cer Subject info access: rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/3139302e3132342e3234372e302f32342d3234203d3e20323730383630.roa Signing time: Sat 04 Jan 2025 12:28:07 +0000 ROA not before: Sat 04 Jan 2025 12:23:07 +0000 ROA not after: Sat 03 Jan 2026 12:28:07 +0000 asID: 270860 IP address blocks: 190.124.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.crl rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Apr 2025 16:25:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:f7:bf:b3:81:e0:8f:5c:4a:fd:fe:01:da:eb:70:66:64:17:3b:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0 Validity Not Before: Jan 4 12:23:07 2025 GMT Not After : Jan 3 12:28:07 2026 GMT Subject: CN=35E645F0D545F2D02B0F027B07A765A93DE40A2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:13:87:b5:6b:d5:30:6d:4d:a0:f3:6c:70:75: 28:e9:88:94:a3:60:0b:86:8a:09:b6:63:7b:8f:e3: 87:97:09:6f:2e:a5:8d:a6:8e:66:9d:cc:44:5b:20: 23:35:8a:5f:c8:c2:a3:f3:71:01:c7:3f:e6:28:4c: d9:5a:c5:2f:ed:d0:45:a3:62:f7:ee:89:57:1c:cd: 43:dd:67:13:1a:ec:a8:26:9f:55:57:d7:fd:95:e0: c8:91:a2:25:7e:6a:dc:32:aa:1d:e9:64:63:3e:18: 6c:8c:11:5c:14:8b:ea:47:4f:da:83:e1:be:32:59: 6c:1e:54:39:15:cb:3d:ab:1f:d3:d2:f6:5b:fb:4a: b6:d9:cd:61:57:32:66:37:a0:8a:c3:5a:ac:9c:9f: cc:58:f5:d2:61:f9:cf:e6:87:58:f6:63:91:9c:f2: ae:c8:ab:a5:1e:46:ed:f8:6e:d2:e9:6e:4f:c6:85: 36:ab:38:21:32:16:33:a6:b9:35:61:6b:fd:75:7e: c8:ad:b9:d6:33:fa:5a:9b:3d:43:5f:f9:44:b4:0e: 14:25:ae:1a:25:79:33:d0:e8:01:5c:0c:41:00:78: 58:a5:ad:57:bf:26:98:da:16:61:93:5b:d9:29:37: a8:44:ae:a2:ba:7e:77:8c:d2:fb:75:32:62:41:da: a7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:E6:45:F0:D5:45:F2:D0:2B:0F:02:7B:07:A7:65:A9:3D:E4:0A:2F X509v3 Authority Key Identifier: keyid:91:CB:0D:46:F3:8A:17:C0:F3:AB:C4:9D:94:96:AF:CB:60:EC:C5:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/3139302e3132342e3234372e302f32342d3234203d3e20323730383630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.124.247.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:28:4a:6c:4e:0e:55:a2:67:0c:90:4f:ff:d1:cf:a0:ba:65: b8:5b:d0:0b:08:cf:86:f1:73:a5:d0:09:74:b4:6c:d0:ab:5f: 0d:9d:5f:f1:f2:31:f7:ae:f0:af:63:d3:6f:dc:d5:ac:b7:45: 7c:d4:ab:e8:97:d4:94:a3:2c:1e:2a:2b:48:69:24:22:6e:82: 4b:de:24:37:02:22:ba:c1:d3:e5:07:bf:43:f5:92:be:98:aa: e9:dc:6c:6a:3a:03:05:04:9d:8f:d6:51:02:73:03:53:eb:09: 74:8f:8a:27:a8:eb:cb:05:75:04:2f:bf:b3:f9:97:62:2c:08: 92:e0:86:80:d3:a5:8d:80:37:fc:0a:60:67:7b:26:84:b0:a6: 03:fa:54:63:2a:71:71:77:e9:aa:d8:b6:38:f5:6d:c7:7d:9e: 3c:c0:c3:83:85:12:46:aa:47:06:32:85:ba:7a:87:1d:72:28: c8:d5:e4:fe:69:05:a8:76:f9:13:b9:db:db:6f:4b:ff:e8:ac: 7b:77:94:3d:ff:dd:28:56:59:36:3c:7e:a5:b8:e8:4d:71:8d: 41:eb:6c:44:cc:1d:c1:5e:12:a9:16:57:cc:9e:ab:14:09:60: a2:5d:94:28:24:55:4e:e4:59:c5:92:21:fb:4a:58:42:27:f3: 56:9a:f3:c5 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUbPe/s4Hgj1xK/f4B2utwZmQXO5IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFDQjBENDZGMzhBMTdDMEYzQUJDNDlEOTQ5NkFGQ0I2 MEVDQzVDMDAeFw0yNTAxMDQxMjIzMDdaFw0yNjAxMDMxMjI4MDdaMDMxMTAvBgNV BAMTKDM1RTY0NUYwRDU0NUYyRDAyQjBGMDI3QjA3QTc2NUE5M0RFNDBBMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRE4e1a9UwbU2g82xwdSjpiJSj YAuGigm2Y3uP44eXCW8upY2mjmadzERbICM1il/IwqPzcQHHP+YoTNlaxS/t0EWj YvfuiVcczUPdZxMa7Kgmn1VX1/2V4MiRoiV+atwyqh3pZGM+GGyMEVwUi+pHT9qD 4b4yWWweVDkVyz2rH9PS9lv7SrbZzWFXMmY3oIrDWqycn8xY9dJh+c/mh1j2Y5Gc 8q7Iq6UeRu34btLpbk/GhTarOCEyFjOmuTVha/11fsitudYz+lqbPUNf+US0DhQl rholeTPQ6AFcDEEAeFilrVe/JpjaFmGTW9kpN6hErqK6fneM0vt1MmJB2qdHAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUNeZF8NVF8tArDwJ7B6dlqT3kCi8wHwYDVR0j BBgwFoAUkcsNRvOKF8Dzq8SdlJavy2DsxcAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2JOSjJLanJQaWplYXRiUHdGclExeWlQZXEyUkN3NnY5VEVpbnRXZ0hO QkwvMC85MUNCMEQ0NkYzOEExN0MwRjNBQkM0OUQ5NDk2QUZDQjYwRUNDNUMwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxQ0IwRDQ2RjM4QTE3QzBG M0FCQzQ5RDk0OTZBRkNCNjBFQ0M1QzAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNiTkoyS2pyUGlqZWF0YlB3RnJRMXlpUGVxMlJDdzZ2OVRFaW50V2dITkJMLzAv MzEzOTMwMmUzMTMyMzQyZTMyMzQzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy MzczMDM4MzYzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL589zANBgkqhkiG9w0BAQsFAAOCAQEACyhK bE4OVaJnDJBP/9HPoLpluFvQCwjPhvFzpdAJdLRs0KtfDZ1f8fIx967wr2PTb9zV rLdFfNSr6JfUlKMsHiorSGkkIm6CS94kNwIiusHT5Qe/Q/WSvpiq6dxsajoDBQSd j9ZRAnMDU+sJdI+KJ6jrywV1BC+/s/mXYiwIkuCGgNOljYA3/ApgZ3smhLCmA/pU YypxcXfpqti2OPVtx32ePMDDg4USRqpHBjKFunqHHXIoyNXk/mkFqHb5E7nb229L /+ise3eUPf/dKFZZNjx+pbjoTXGNQetsRMwdwV4SqRZXzJ6rFAlgol2UKCRVTuRZ xZIh+0pYQifzVprzxQ== -----END CERTIFICATE-----Generated at Tue Apr 22 02:16:12 2025 by rpki-client