$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3137302e3234342e3232312e302f32342d3234203d3e20323633323633.roa File: 3137302e3234342e3232312e302f32342d3234203d3e20323633323633.roa (raw, json) Hash identifier: e1e8+sbx+e6V2CpJ9d2Q3etizaVYQbQV3LiXXeQh4ks= Subject key identifier: A7:51:D7:AE:6C:4B:E1:EC:F3:E8:C9:D6:96:0A:99:0F:78:60:F2:10 Certificate issuer: /CN=CE2D1BC8B26735E9068E8833320A9FDEB04E69CD Certificate serial: 4AF6DFBE512985ED1CE2DC38B41BFE8F7069D50C Authority key identifier: CE:2D:1B:C8:B2:67:35:E9:06:8E:88:33:32:0A:9F:DE:B0:4E:69:CD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer Subject info access: rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3137302e3234342e3232312e302f32342d3234203d3e20323633323633.roa Signing time: Thu 06 Mar 2025 08:00:28 +0000 ROA not before: Thu 06 Mar 2025 07:55:28 +0000 ROA not after: Thu 05 Mar 2026 08:00:28 +0000 asID: 263263 IP address blocks: 170.244.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.crl rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 11 Apr 2025 21:28:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:f6:df:be:51:29:85:ed:1c:e2:dc:38:b4:1b:fe:8f:70:69:d5:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE2D1BC8B26735E9068E8833320A9FDEB04E69CD Validity Not Before: Mar 6 07:55:28 2025 GMT Not After : Mar 5 08:00:28 2026 GMT Subject: CN=A751D7AE6C4BE1ECF3E8C9D6960A990F7860F210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ef:be:07:af:fa:dd:74:44:74:90:7b:a7:fa: 73:43:f2:78:6b:42:a2:90:3a:78:9f:ad:37:50:19: f3:4d:ce:93:b3:d5:4c:13:17:65:61:5e:10:35:d4: 95:16:86:43:24:95:b7:28:0b:0a:9d:6f:5d:8f:0a: 8a:37:73:23:81:9d:6a:84:e9:67:71:fb:1b:b6:9d: f8:75:48:90:45:82:46:5b:14:6c:a8:cb:fa:ae:3c: 7a:83:ea:77:95:4b:9e:56:46:8f:f4:55:f3:b2:43: 2a:c4:91:1a:51:e4:5d:97:30:02:ae:b6:15:8b:bf: a5:20:2c:77:14:04:c5:26:fa:1e:13:ba:2e:ed:ec: bf:c1:7e:86:c2:87:52:d7:8a:cf:a9:43:6d:09:08: 40:2b:ae:66:f7:84:07:a8:80:d7:8a:03:41:39:dd: 7c:7e:f8:4c:a1:18:8e:3c:1c:29:4a:eb:1f:f2:cf: 1a:fd:21:cb:af:47:6f:af:d9:64:24:32:b0:1a:26: 58:33:a9:38:ed:b1:fb:81:ee:fb:6d:af:3d:ab:92: 69:94:9f:6b:58:ee:88:23:be:4c:b2:ab:96:23:b4: 02:f3:18:1c:f5:d0:48:fc:2e:19:3f:15:4a:bd:d1: f9:73:59:2e:9b:2e:d5:b8:62:f3:16:33:35:4d:70: 86:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:51:D7:AE:6C:4B:E1:EC:F3:E8:C9:D6:96:0A:99:0F:78:60:F2:10 X509v3 Authority Key Identifier: keyid:CE:2D:1B:C8:B2:67:35:E9:06:8E:88:33:32:0A:9F:DE:B0:4E:69:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3137302e3234342e3232312e302f32342d3234203d3e20323633323633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.244.221.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:d6:03:08:e2:72:54:33:44:9f:0b:9b:30:99:4f:ce:af:4d: 10:8f:08:49:5d:95:dd:b6:d0:e5:9a:03:23:51:12:c9:70:cf: e0:65:0b:1c:23:7d:1b:98:80:24:64:02:e8:d3:b0:d7:3f:95: a1:fe:77:30:d8:8a:73:31:97:88:67:e1:c0:26:27:cd:3d:9d: 62:30:bd:79:96:23:af:35:45:89:71:6d:dd:54:64:81:96:3c: 98:49:a5:f3:ee:ff:fd:b4:00:c2:a9:e9:69:70:da:e7:36:e7: 8f:1f:b0:50:b5:ad:8a:94:22:26:da:99:e3:5e:4d:76:9b:1f: 7b:87:96:3b:05:e8:68:19:bd:0d:94:a6:03:e2:d0:97:0f:47: e3:60:36:c0:64:1c:88:4b:b0:9b:f2:63:ae:4d:22:3e:c2:1a: fa:a1:bb:4a:73:12:98:84:b4:fd:a5:84:60:33:4c:b8:87:42: 48:9f:bc:2b:61:9f:eb:46:7a:ec:0f:5a:08:2f:0f:a8:64:cc: 08:27:07:ff:0b:9d:73:c0:44:52:f8:2e:86:8d:c7:73:fe:8c: 24:31:3d:ea:7a:c6:30:6f:8e:a0:34:55:d0:b7:38:71:c5:d3: 30:60:ad:6d:04:9d:b9:d3:f9:0d:19:9c:d2:e3:a6:5c:ff:1b: dc:f4:dc:08 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUSvbfvlEphe0c4tw4tBv+j3Bp1QwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UyRDFCQzhCMjY3MzVFOTA2OEU4ODMzMzIwQTlGREVC MDRFNjlDRDAeFw0yNTAzMDYwNzU1MjhaFw0yNjAzMDUwODAwMjhaMDMxMTAvBgNV BAMTKEE3NTFEN0FFNkM0QkUxRUNGM0U4QzlENjk2MEE5OTBGNzg2MEYyMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp774Hr/rddER0kHun+nND8nhr QqKQOnifrTdQGfNNzpOz1UwTF2VhXhA11JUWhkMklbcoCwqdb12PCoo3cyOBnWqE 6Wdx+xu2nfh1SJBFgkZbFGyoy/quPHqD6neVS55WRo/0VfOyQyrEkRpR5F2XMAKu thWLv6UgLHcUBMUm+h4Tui7t7L/BfobCh1LXis+pQ20JCEArrmb3hAeogNeKA0E5 3Xx++EyhGI48HClK6x/yzxr9IcuvR2+v2WQkMrAaJlgzqTjtsfuB7vttrz2rkmmU n2tY7ogjvkyyq5YjtALzGBz10Ej8Lhk/FUq90flzWS6bLtW4YvMWMzVNcIZ/AgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUp1HXrmxL4ezz6MnWlgqZD3hg8hAwHwYDVR0j BBgwFoAUzi0byLJnNekGjogzMgqf3rBOac0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNDVDVEZuOHdudTRveXNqWUozTFNRZHRLOFBIbnhObTVtRDRWSFl2SDlD aUQvMS9DRTJEMUJDOEIyNjczNUU5MDY4RTg4MzMzMjBBOUZERUIwNEU2OUNELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFMkQxQkM4QjI2NzM1RTkw NjhFODgzMzMyMEE5RkRFQjA0RTY5Q0QuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzQ1Q1RGbjh3bnU0b3lzallKM0xTUWR0SzhQSG54Tm01bUQ0VkhZdkg5Q2lELzEv MzEzNzMwMmUzMjM0MzQyZTMyMzIzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy MzYzMzMyMzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKr03TANBgkqhkiG9w0BAQsFAAOCAQEAf9YD COJyVDNEnwubMJlPzq9NEI8ISV2V3bbQ5ZoDI1ESyXDP4GULHCN9G5iAJGQC6NOw 1z+Vof53MNiKczGXiGfhwCYnzT2dYjC9eZYjrzVFiXFt3VRkgZY8mEml8+7//bQA wqnpaXDa5zbnjx+wULWtipQiJtqZ415Ndpsfe4eWOwXoaBm9DZSmA+LQlw9H42A2 wGQciEuwm/Jjrk0iPsIa+qG7SnMSmIS0/aWEYDNMuIdCSJ+8K2Gf60Z67A9aCC8P qGTMCCcH/wudc8BEUvguho3Hc/6MJDE96nrGMG+OoDRV0Lc4ccXTMGCtbQSdudP5 DRmc0uOmXP8b3PTcCA== -----END CERTIFICATE-----Generated at Fri Apr 11 12:36:48 2025 by rpki-client