$ rpki-client -vvf rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3134332e3230322e3233362e302f32322d3232203d3e20323633363237.roa File: 3134332e3230322e3233362e302f32322d3232203d3e20323633363237.roa (raw, json) Hash identifier: yR/Ab0BG0fruSzp7ivOe/JTF6CF5eEl1hXsiRdyN6lM= Subject key identifier: DD:55:6C:E2:39:7D:74:DB:ED:FF:65:A0:A6:6D:7C:4C:CB:D1:A4:A0 Certificate issuer: /CN=11A01506231611C87461442475B1401AD5DE38D2 Certificate serial: 3CDECF8A4306D8838B015B79439A6DF5D95FF2F6 Authority key identifier: 11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer Subject info access: rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3134332e3230322e3233362e302f32322d3232203d3e20323633363237.roa Signing time: Tue 25 Mar 2025 20:13:30 +0000 ROA not before: Tue 25 Mar 2025 20:08:30 +0000 ROA not after: Tue 24 Mar 2026 20:13:30 +0000 asID: 263627 IP address blocks: 143.202.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Apr 2025 12:59:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:de:cf:8a:43:06:d8:83:8b:01:5b:79:43:9a:6d:f5:d9:5f:f2:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11A01506231611C87461442475B1401AD5DE38D2 Validity Not Before: Mar 25 20:08:30 2025 GMT Not After : Mar 24 20:13:30 2026 GMT Subject: CN=DD556CE2397D74DBEDFF65A0A66D7C4CCBD1A4A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a3:fd:c8:46:67:6d:61:21:36:fc:42:62:aa: e9:74:53:54:73:df:e0:98:69:87:ee:87:b5:0d:d4: 1c:c6:f6:92:e8:ed:42:ec:cf:bb:44:64:aa:a9:8c: 4b:3b:2f:20:5d:cf:10:9c:3e:d3:24:1a:f4:c3:2a: 71:b7:13:97:8c:af:d4:4f:62:85:51:01:cf:6a:7c: 08:2b:17:2d:2b:74:88:ab:3b:78:3c:c8:3d:69:20: 8d:33:13:b0:ed:f4:23:a7:d0:3c:66:4e:a9:98:6d: d5:6f:1b:c8:bb:7c:12:90:ed:28:23:8b:d5:e4:90: 66:ed:33:92:61:68:94:f1:d9:4a:39:02:9d:8e:88: c6:60:c2:95:72:d1:f8:4c:4d:20:f2:56:1c:66:8a: e5:e5:30:34:a0:d4:c1:1e:5f:c0:02:85:3a:e4:97: 83:cb:6d:96:e2:1a:8d:ce:dd:e7:76:e0:e5:0a:f6: 17:0a:95:e1:ea:69:73:e3:37:c2:b7:36:f5:bc:4c: 9f:98:7e:18:96:12:e2:72:f2:c7:37:0d:95:04:9e: c9:6e:ed:2a:33:3c:e8:82:bc:44:ce:e1:ae:c4:e4: 14:0a:2c:e4:c7:27:43:5f:d2:83:3f:c8:38:aa:08: 28:26:5a:bf:80:18:70:ac:cb:6f:df:6f:c9:0c:1a: 9f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:55:6C:E2:39:7D:74:DB:ED:FF:65:A0:A6:6D:7C:4C:CB:D1:A4:A0 X509v3 Authority Key Identifier: keyid:11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3134332e3230322e3233362e302f32322d3232203d3e20323633363237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.202.236.0/22 Signature Algorithm: sha256WithRSAEncryption 8a:49:f0:d8:25:f0:a2:b7:a4:9f:4e:56:c4:c7:ce:da:ac:9c: 12:b1:18:58:d8:b3:e9:8e:ea:2f:88:b1:59:d2:93:ef:a2:45: 94:36:b2:f0:14:37:37:81:b0:7c:7e:28:ed:32:8a:b4:6c:31: 84:78:1a:2f:13:ad:0f:a8:2c:54:c6:55:b5:98:86:51:8c:24: 94:36:18:34:e5:8d:f6:98:0f:63:82:fe:99:63:8c:98:9f:6f: 09:7e:04:30:d7:70:64:0f:9e:ba:a8:bf:75:b8:57:c9:d9:ad: 4d:30:0e:6f:82:58:1c:cc:72:91:bc:c8:9d:9d:ef:fd:39:a0: 38:60:47:ef:ea:e4:58:05:d3:81:3a:6c:7a:cd:17:0c:e0:bd: 09:5c:ca:8d:e6:80:81:3c:1d:15:45:03:43:a8:08:50:21:25: b6:9d:05:7a:b9:89:0b:a9:26:a5:f9:75:bd:8e:66:f6:cb:72: 54:99:39:c3:90:88:28:da:40:3f:19:e3:89:84:7d:da:97:75: 10:d0:67:b4:bf:5a:06:2d:e9:f7:c2:20:c0:f4:5b:b3:32:50: d5:d6:67:7b:1a:9e:cb:13:30:ac:0d:44:b1:26:b9:04:88:42: 29:7b:5a:36:ed:06:8a:e9:2a:bc:e7:62:7b:a9:9b:9c:6b:77: 69:36:fe:f0 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUPN7PikMG2IOLAVt5Q5pt9dlf8vYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFBMDE1MDYyMzE2MTFDODc0NjE0NDI0NzVCMTQwMUFE NURFMzhEMjAeFw0yNTAzMjUyMDA4MzBaFw0yNjAzMjQyMDEzMzBaMDMxMTAvBgNV BAMTKERENTU2Q0UyMzk3RDc0REJFREZGNjVBMEE2NkQ3QzRDQ0JEMUE0QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDco/3IRmdtYSE2/EJiqul0U1Rz 3+CYaYfuh7UN1BzG9pLo7ULsz7tEZKqpjEs7LyBdzxCcPtMkGvTDKnG3E5eMr9RP YoVRAc9qfAgrFy0rdIirO3g8yD1pII0zE7Dt9COn0DxmTqmYbdVvG8i7fBKQ7Sgj i9XkkGbtM5JhaJTx2Uo5Ap2OiMZgwpVy0fhMTSDyVhxmiuXlMDSg1MEeX8AChTrk l4PLbZbiGo3O3ed24OUK9hcKleHqaXPjN8K3NvW8TJ+YfhiWEuJy8sc3DZUEnslu 7SozPOiCvETO4a7E5BQKLOTHJ0Nf0oM/yDiqCCgmWr+AGHCsy2/fb8kMGp+PAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQU3VVs4jl9dNvt/2Wgpm18TMvRpKAwHwYDVR0j BBgwFoAUEaAVBiMWEch0YUQkdbFAGtXeONIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM3lqR2FYcGpoUG5ERVhoUnE4aDhkUVQ4dTNxYnZDempTbVRWdjN4VEx6 V2kvMC8xMUEwMTUwNjIzMTYxMUM4NzQ2MTQ0MjQ3NUIxNDAxQUQ1REUzOEQyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzExQTAxNTA2MjMxNjExQzg3 NDYxNDQyNDc1QjE0MDFBRDVERTM4RDIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzN5akdhWHBqaFBuREVYaFJxOGg4ZFFUOHUzcWJ2Q3pqU21UVnYzeFRMeldpLzAv MzEzNDMzMmUzMjMwMzIyZTMyMzMzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy MzYzMzM2MzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAo/K7DANBgkqhkiG9w0BAQsFAAOCAQEAiknw 2CXworekn05WxMfO2qycErEYWNiz6Y7qL4ixWdKT76JFlDay8BQ3N4GwfH4o7TKK tGwxhHgaLxOtD6gsVMZVtZiGUYwklDYYNOWN9pgPY4L+mWOMmJ9vCX4EMNdwZA+e uqi/dbhXydmtTTAOb4JYHMxykbzInZ3v/TmgOGBH7+rkWAXTgTpses0XDOC9CVzK jeaAgTwdFUUDQ6gIUCEltp0FermJC6kmpfl1vY5m9styVJk5w5CIKNpAPxnjiYR9 2pd1ENBntL9aBi3p98IgwPRbszJQ1dZnexqeyxMwrA1EsSa5BIhCKXtaNu0Giukq vOdie6mbnGt3aTb+8A== -----END CERTIFICATE-----Generated at Mon Apr 7 04:56:17 2025 by rpki-client