$ rpki-client -vvf rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137342e302f32332d3233203d3e20323633393131.roa File: 3133382e3230342e3137342e302f32332d3233203d3e20323633393131.roa (raw, json) Hash identifier: fUVzjxbCYkQsYHGoBVdanJJYpdVT0cBcZPQxWyQ0p94= Subject key identifier: 9A:49:F7:B8:37:5D:05:C3:7E:A9:E6:D1:8D:E5:D8:3B:6F:E1:BD:4E Certificate issuer: /CN=1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC Certificate serial: 6AF71876F709DD5565AE7EE78665DEE8BE8983C8 Authority key identifier: 1B:82:7C:9E:BC:31:D4:8D:C1:0A:B5:2A:CE:52:BF:27:C8:9E:90:AC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC.cer Subject info access: rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137342e302f32332d3233203d3e20323633393131.roa Signing time: Mon 03 Feb 2025 20:58:36 +0000 ROA not before: Mon 03 Feb 2025 20:53:36 +0000 ROA not after: Mon 02 Feb 2026 20:58:36 +0000 asID: 263911 IP address blocks: 138.204.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC.crl rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Apr 2025 18:15:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:f7:18:76:f7:09:dd:55:65:ae:7e:e7:86:65:de:e8:be:89:83:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC Validity Not Before: Feb 3 20:53:36 2025 GMT Not After : Feb 2 20:58:36 2026 GMT Subject: CN=9A49F7B8375D05C37EA9E6D18DE5D83B6FE1BD4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b4:d5:b0:bf:37:ae:68:67:67:9a:6e:20:00: d2:82:fe:ad:5c:9c:ba:bb:e4:e9:c0:89:05:7d:e2: e2:28:25:89:75:80:8c:7c:11:fa:8c:39:37:0e:80: a5:46:5a:0c:cf:bb:37:43:c5:76:fc:ec:4e:c8:d0: cb:88:49:35:03:43:cc:21:24:6d:e0:c7:a1:64:c7: 5b:14:a5:fc:bb:ba:8a:6d:4c:91:d8:43:dc:d1:41: eb:7f:94:b6:53:ba:57:2c:28:f6:01:dc:8e:de:f5: 10:47:9c:b2:85:9f:c9:02:c6:15:8b:f4:41:59:93: 49:3d:3d:61:ad:ea:5e:db:82:3d:08:ef:4d:14:fd: aa:72:d0:54:61:1d:9e:9e:81:50:b8:97:96:27:d0: c9:a6:d0:bb:e8:e4:b3:c5:9e:9d:30:22:63:fa:8e: cf:40:89:5d:02:45:fe:ef:92:da:a1:d1:7e:7d:21: f6:35:d5:5c:7d:88:8f:2b:80:9c:d2:c7:55:c2:c3: 5c:8e:10:83:09:74:7c:26:e1:b3:04:08:5e:eb:c3: 35:e0:2f:f6:b5:6e:37:c9:10:ad:d2:77:60:ef:84: 6c:26:a7:78:cf:a5:4b:45:80:32:28:90:ea:ad:1d: 94:9c:a3:a7:44:2f:cc:07:ea:5f:76:7a:7d:39:96: fb:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:49:F7:B8:37:5D:05:C3:7E:A9:E6:D1:8D:E5:D8:3B:6F:E1:BD:4E X509v3 Authority Key Identifier: keyid:1B:82:7C:9E:BC:31:D4:8D:C1:0A:B5:2A:CE:52:BF:27:C8:9E:90:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137342e302f32332d3233203d3e20323633393131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.204.174.0/23 Signature Algorithm: sha256WithRSAEncryption 05:45:9a:02:e6:42:e1:c9:6e:f7:36:94:40:0a:68:d3:56:cf: 66:48:4e:ab:21:94:a9:e8:d1:0a:c5:dc:d4:23:53:52:cc:9b: 03:e4:05:27:79:01:d8:72:bb:6b:6c:0e:79:cf:74:82:38:98: f5:a5:a2:86:54:8a:38:ec:10:a6:eb:3b:be:47:c1:0c:b8:dc: 44:13:b7:65:50:c2:db:4d:e4:f2:00:b8:e9:8e:70:55:a9:e4: ef:3d:b6:11:b3:db:f8:08:f0:23:6d:b3:34:74:f9:a2:c6:d5: 51:e8:31:b8:6a:f6:4d:98:c0:d8:d0:ba:00:fe:74:94:b9:b2: bd:41:f1:bd:05:87:5a:5f:d6:67:35:32:17:14:c2:c0:72:c1: 67:57:09:08:4b:07:22:36:5b:fa:27:9e:ce:b2:c0:2d:b9:87: 8f:b0:93:86:3c:1f:1c:28:29:e8:80:24:e0:b4:bc:d3:ba:dc: c2:5d:15:50:29:31:aa:f0:81:56:1e:68:e6:c6:a3:d7:53:5d: 91:ca:4f:a1:fc:93:0f:f8:a5:43:5b:40:02:5e:6d:89:5a:2e: 88:d7:10:18:c0:fe:36:f5:d2:7c:8a:2c:b2:84:36:29:a6:09: 5a:ec:b6:fa:cb:28:fa:1c:f6:a0:58:b2:11:61:c1:1f:85:02: 13:f4:8c:75 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUavcYdvcJ3VVlrn7nhmXe6L6Jg8gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI4MjdDOUVCQzMxRDQ4REMxMEFCNTJBQ0U1MkJGMjdD ODlFOTBBQzAeFw0yNTAyMDMyMDUzMzZaFw0yNjAyMDIyMDU4MzZaMDMxMTAvBgNV BAMTKDlBNDlGN0I4Mzc1RDA1QzM3RUE5RTZEMThERTVEODNCNkZFMUJENEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCatNWwvzeuaGdnmm4gANKC/q1c nLq75OnAiQV94uIoJYl1gIx8EfqMOTcOgKVGWgzPuzdDxXb87E7I0MuISTUDQ8wh JG3gx6Fkx1sUpfy7uoptTJHYQ9zRQet/lLZTulcsKPYB3I7e9RBHnLKFn8kCxhWL 9EFZk0k9PWGt6l7bgj0I700U/apy0FRhHZ6egVC4l5Yn0Mmm0Lvo5LPFnp0wImP6 js9AiV0CRf7vktqh0X59IfY11Vx9iI8rgJzSx1XCw1yOEIMJdHwm4bMECF7rwzXg L/a1bjfJEK3Sd2DvhGwmp3jPpUtFgDIokOqtHZSco6dEL8wH6l92en05lvtLAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUmkn3uDddBcN+qebRjeXYO2/hvU4wHwYDVR0j BBgwFoAUG4J8nrwx1I3BCrUqzlK/J8iekKwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM29YUkFxd3dIRmYyaXdZam5adENCamFrWnQxNlMydlB4Yjk0d2NCcnNT clgvMC8xQjgyN0M5RUJDMzFENDhEQzEwQUI1MkFDRTUyQkYyN0M4OUU5MEFDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCODI3QzlFQkMzMUQ0OERD MTBBQjUyQUNFNTJCRjI3Qzg5RTkwQUMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNvWFJBcXd3SEZmMml3WWpuWnRDQmpha1p0MTZTMnZQeGI5NHdjQnJzU3JYLzAv MzEzMzM4MmUzMjMwMzQyZTMxMzczNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy MzYzMzM5MzEzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAYrMrjANBgkqhkiG9w0BAQsFAAOCAQEABUWa AuZC4clu9zaUQApo01bPZkhOqyGUqejRCsXc1CNTUsybA+QFJ3kB2HK7a2wOec90 gjiY9aWihlSKOOwQpus7vkfBDLjcRBO3ZVDC203k8gC46Y5wVank7z22EbPb+Ajw I22zNHT5osbVUegxuGr2TZjA2NC6AP50lLmyvUHxvQWHWl/WZzUyFxTCwHLBZ1cJ CEsHIjZb+ieezrLALbmHj7CThjwfHCgp6IAk4LS807rcwl0VUCkxqvCBVh5o5saj 11NdkcpPofyTD/ilQ1tAAl5tiVouiNcQGMD+NvXSfIossoQ2KaYJWuy2+sso+hz2 oFiyEWHBH4UCE/SMdQ== -----END CERTIFICATE-----Generated at Mon Apr 7 06:57:07 2025 by rpki-client