$ rpki-client -vvf rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3134332e3230322e3233362e302f32342d3234203d3e20323633363237.roa File: 3134332e3230322e3233362e302f32342d3234203d3e20323633363237.roa (raw, json) Hash identifier: PEgW2vB9uDmRWiCvQjATzU+PPbzv5a7C/cfYOWkvN5Y= Subject key identifier: 37:D2:E0:2F:29:BC:81:2A:40:2E:C2:51:5F:0E:70:F7:A9:2E:C0:AB Certificate issuer: /CN=11A01506231611C87461442475B1401AD5DE38D2 Certificate serial: 786B67EF94FF98004F8DEAC992D8B89CEB553947 Authority key identifier: 11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer Subject info access: rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3134332e3230322e3233362e302f32342d3234203d3e20323633363237.roa Signing time: Tue 25 Mar 2025 20:13:31 +0000 ROA not before: Tue 25 Mar 2025 20:08:31 +0000 ROA not after: Tue 24 Mar 2026 20:13:31 +0000 asID: 263627 IP address blocks: 143.202.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Apr 2025 12:59:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:6b:67:ef:94:ff:98:00:4f:8d:ea:c9:92:d8:b8:9c:eb:55:39:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11A01506231611C87461442475B1401AD5DE38D2 Validity Not Before: Mar 25 20:08:31 2025 GMT Not After : Mar 24 20:13:31 2026 GMT Subject: CN=37D2E02F29BC812A402EC2515F0E70F7A92EC0AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0d:ad:c3:b7:46:89:d9:aa:9c:db:8c:b8:8d: af:23:9b:b9:ac:83:a5:62:a4:72:db:76:b9:34:11: 70:ff:dc:4b:91:be:f0:dc:0a:10:bd:72:bb:85:ac: 2d:c5:df:54:e0:04:c5:cf:92:9d:db:10:52:e3:f3: 46:07:63:46:9b:86:19:51:d1:e2:ca:e4:7d:71:eb: f5:3a:71:76:36:21:72:0e:45:a5:04:a8:15:d2:f9: 15:df:04:e3:61:7a:52:d0:1e:6b:48:2c:38:72:2e: f9:3e:d1:36:4d:37:82:06:7a:fd:d1:e2:8d:83:26: ea:44:f3:bc:8b:42:3b:94:d3:fa:b5:27:86:ef:c9: 02:5b:a8:1e:86:c0:43:9a:1b:f1:ba:ad:85:b8:05: 6f:d5:d6:a9:18:2a:57:21:ef:99:d4:39:b2:41:33: 87:b8:89:b3:01:e0:2f:56:72:48:89:cc:dc:2d:f5: 43:cc:70:51:b9:ef:84:2f:81:05:e7:fb:bb:34:ea: fd:2d:50:5d:62:d5:1c:ba:30:38:88:f3:5d:0c:3f: fc:f1:2e:50:5c:79:5e:84:1e:ba:07:21:38:f6:b4: 53:8c:1e:46:7d:4a:5e:d4:03:09:4e:31:65:cd:ac: 8d:c2:fc:ac:ca:0d:c1:9a:c9:b2:f7:6a:c2:58:bf: d3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:D2:E0:2F:29:BC:81:2A:40:2E:C2:51:5F:0E:70:F7:A9:2E:C0:AB X509v3 Authority Key Identifier: keyid:11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3134332e3230322e3233362e302f32342d3234203d3e20323633363237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.202.236.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:8d:f8:67:bc:a9:2e:6b:09:d8:bf:1d:1c:78:06:22:e7:52: fd:db:62:25:bb:5b:79:be:bf:52:68:be:04:5f:45:6f:79:cf: 24:88:51:25:0d:db:4f:fb:d9:7b:53:7d:a3:5f:fb:6f:21:31: 99:fb:6c:fc:c5:f2:81:28:11:3d:37:9b:55:94:9c:de:41:8f: 3d:ba:7f:72:f5:09:bd:1e:2b:3e:15:27:ef:05:61:9f:fc:72: 7a:fa:07:1c:76:6a:db:99:fb:f0:84:13:8f:90:42:01:34:3e: 2e:1d:c8:9c:0e:60:57:13:45:25:0c:5f:eb:1a:da:85:25:31: ff:eb:a3:4d:d4:76:d3:c4:34:75:ec:73:f3:21:77:dd:76:d2: b3:f8:62:7c:b3:bf:7c:8a:7f:30:f9:9d:80:54:16:a0:63:30: 9c:45:86:d5:09:29:60:c7:04:af:d7:82:a8:b2:32:34:e9:85: 0e:10:ba:29:e4:6b:cb:c8:6b:3c:a0:9f:6b:84:d5:d6:6c:84: 54:64:5a:ab:36:ed:03:ae:da:3e:2c:7b:a5:a5:23:c8:bd:7c: 31:66:1b:71:a8:71:a8:57:04:54:d8:4f:53:51:01:6b:c9:ab: 27:86:ce:6d:6a:c6:0b:52:90:b5:cf:83:f9:56:8f:e4:f6:6c: 67:a4:d5:fa -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUeGtn75T/mABPjerJkti4nOtVOUcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFBMDE1MDYyMzE2MTFDODc0NjE0NDI0NzVCMTQwMUFE NURFMzhEMjAeFw0yNTAzMjUyMDA4MzFaFw0yNjAzMjQyMDEzMzFaMDMxMTAvBgNV BAMTKDM3RDJFMDJGMjlCQzgxMkE0MDJFQzI1MTVGMEU3MEY3QTkyRUMwQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMDa3Dt0aJ2aqc24y4ja8jm7ms g6VipHLbdrk0EXD/3EuRvvDcChC9cruFrC3F31TgBMXPkp3bEFLj80YHY0abhhlR 0eLK5H1x6/U6cXY2IXIORaUEqBXS+RXfBONhelLQHmtILDhyLvk+0TZNN4IGev3R 4o2DJupE87yLQjuU0/q1J4bvyQJbqB6GwEOaG/G6rYW4BW/V1qkYKlch75nUObJB M4e4ibMB4C9WckiJzNwt9UPMcFG574QvgQXn+7s06v0tUF1i1Ry6MDiI810MP/zx LlBceV6EHroHITj2tFOMHkZ9Sl7UAwlOMWXNrI3C/KzKDcGaybL3asJYv9NfAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUN9LgLym8gSpALsJRXw5w96kuwKswHwYDVR0j BBgwFoAUEaAVBiMWEch0YUQkdbFAGtXeONIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM3lqR2FYcGpoUG5ERVhoUnE4aDhkUVQ4dTNxYnZDempTbVRWdjN4VEx6 V2kvMC8xMUEwMTUwNjIzMTYxMUM4NzQ2MTQ0MjQ3NUIxNDAxQUQ1REUzOEQyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzExQTAxNTA2MjMxNjExQzg3 NDYxNDQyNDc1QjE0MDFBRDVERTM4RDIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzN5akdhWHBqaFBuREVYaFJxOGg4ZFFUOHUzcWJ2Q3pqU21UVnYzeFRMeldpLzAv MzEzNDMzMmUzMjMwMzIyZTMyMzMzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy MzYzMzM2MzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAI/K7DANBgkqhkiG9w0BAQsFAAOCAQEACo34 Z7ypLmsJ2L8dHHgGIudS/dtiJbtbeb6/Umi+BF9Fb3nPJIhRJQ3bT/vZe1N9o1/7 byExmfts/MXygSgRPTebVZSc3kGPPbp/cvUJvR4rPhUn7wVhn/xyevoHHHZq25n7 8IQTj5BCATQ+Lh3InA5gVxNFJQxf6xrahSUx/+ujTdR208Q0dexz8yF33XbSs/hi fLO/fIp/MPmdgFQWoGMwnEWG1QkpYMcEr9eCqLIyNOmFDhC6KeRry8hrPKCfa4TV 1myEVGRaqzbtA67aPix7paUjyL18MWYbcahxqFcEVNhPU1EBa8mrJ4bObWrGC1KQ tc+D+VaP5PZsZ6TV+g== -----END CERTIFICATE-----Generated at Mon Apr 7 05:01:22 2025 by rpki-client