$ rpki-client -vvf rpki-repo.registro.br/repo/4Gx4s2B43gUjdtkLQwuEpaQuvG5BXwUEnWKwDEQNnnLo/0/3230312e3138322e3134342e302f32322d3234203d3e20323637353339.roa File: 3230312e3138322e3134342e302f32322d3234203d3e20323637353339.roa (raw, json) Hash identifier: hFRV97wA8T/QDnmF7Ijr8alWrMcuht4PcO84oSwDwus= Subject key identifier: 41:CE:61:47:35:C4:4B:BC:D8:E7:AA:CD:8C:F3:AA:7F:B7:DC:35:70 Certificate issuer: /CN=9BE84B7DCA4CACC2C9FCD8CB3F9EB4F2AE3067AF Certificate serial: 3406E399612264F33C9F1A0BB7FA28E611536AEA Authority key identifier: 9B:E8:4B:7D:CA:4C:AC:C2:C9:FC:D8:CB:3F:9E:B4:F2:AE:30:67:AF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BE84B7DCA4CACC2C9FCD8CB3F9EB4F2AE3067AF.cer Subject info access: rsync://rpki-repo.registro.br/repo/4Gx4s2B43gUjdtkLQwuEpaQuvG5BXwUEnWKwDEQNnnLo/0/3230312e3138322e3134342e302f32322d3234203d3e20323637353339.roa Signing time: Fri 28 Mar 2025 16:10:45 +0000 ROA not before: Fri 28 Mar 2025 16:05:45 +0000 ROA not after: Fri 27 Mar 2026 16:10:45 +0000 asID: 267539 IP address blocks: 201.182.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4Gx4s2B43gUjdtkLQwuEpaQuvG5BXwUEnWKwDEQNnnLo/0/9BE84B7DCA4CACC2C9FCD8CB3F9EB4F2AE3067AF.crl rsync://rpki-repo.registro.br/repo/4Gx4s2B43gUjdtkLQwuEpaQuvG5BXwUEnWKwDEQNnnLo/0/9BE84B7DCA4CACC2C9FCD8CB3F9EB4F2AE3067AF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BE84B7DCA4CACC2C9FCD8CB3F9EB4F2AE3067AF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 13 Apr 2025 16:33:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:06:e3:99:61:22:64:f3:3c:9f:1a:0b:b7:fa:28:e6:11:53:6a:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BE84B7DCA4CACC2C9FCD8CB3F9EB4F2AE3067AF Validity Not Before: Mar 28 16:05:45 2025 GMT Not After : Mar 27 16:10:45 2026 GMT Subject: CN=41CE614735C44BBCD8E7AACD8CF3AA7FB7DC3570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:64:6a:df:5b:03:8a:0c:ff:fe:32:58:c5:25: 7f:58:03:94:30:70:e6:9e:86:2b:a7:9d:df:1c:91: d0:3e:86:89:f3:c9:29:17:96:16:b5:ef:ac:b8:77: 7b:1f:c2:c8:de:a5:4d:98:5c:7c:2c:f8:68:44:3d: 9c:e4:3c:58:a2:53:85:51:92:25:d5:02:8f:8e:2a: 1c:2e:10:05:83:a9:f0:d0:48:cc:be:f4:a5:06:38: af:33:9d:06:3c:85:1c:1d:0a:8b:88:7e:e2:78:98: f1:f2:50:ff:5f:59:6d:5e:3e:82:fb:d3:53:ec:0a: 12:4c:14:d9:c5:42:89:57:b9:1c:da:90:ca:0f:29: 15:58:e1:80:22:72:3f:fd:61:06:45:6f:29:e9:a4: d1:dd:e0:68:77:25:be:28:01:c1:33:f1:66:a8:d1: b1:97:2d:f9:2b:7d:db:47:b7:69:14:2e:b2:df:34: 3d:61:80:56:5f:e1:6c:87:5a:a6:29:7f:2c:28:bf: bb:b4:bd:76:ee:5c:9a:c1:91:23:e1:62:5c:5b:06: f3:a9:54:8e:15:20:fb:4e:8d:ca:98:57:87:28:8f: be:b3:e0:35:03:47:4c:10:d4:3a:98:85:d1:19:d7: ae:05:51:40:f1:98:56:6c:5a:18:6d:6a:f0:b7:7b: f5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:CE:61:47:35:C4:4B:BC:D8:E7:AA:CD:8C:F3:AA:7F:B7:DC:35:70 X509v3 Authority Key Identifier: keyid:9B:E8:4B:7D:CA:4C:AC:C2:C9:FC:D8:CB:3F:9E:B4:F2:AE:30:67:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4Gx4s2B43gUjdtkLQwuEpaQuvG5BXwUEnWKwDEQNnnLo/0/9BE84B7DCA4CACC2C9FCD8CB3F9EB4F2AE3067AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BE84B7DCA4CACC2C9FCD8CB3F9EB4F2AE3067AF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Gx4s2B43gUjdtkLQwuEpaQuvG5BXwUEnWKwDEQNnnLo/0/3230312e3138322e3134342e302f32322d3234203d3e20323637353339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.182.144.0/22 Signature Algorithm: sha256WithRSAEncryption 03:fd:b8:ea:d2:5b:fa:91:b4:c3:c5:b1:13:6a:56:ab:dc:78: 77:59:ce:88:25:1c:69:d9:21:0f:ae:77:d0:92:dd:66:33:05: 37:01:80:3c:68:ed:2f:01:2b:36:31:3f:1e:d4:92:81:70:1c: 07:d5:71:6d:33:f0:81:d9:19:70:1a:02:b6:0a:ed:dd:47:1f: 97:1c:ea:e9:dc:c2:c0:78:32:5d:0b:ce:32:e2:1a:6c:29:63: 0c:9c:f4:5e:b4:40:a0:b0:a3:d5:9d:17:33:9a:33:5f:68:83: ee:ef:ab:d8:af:4f:ab:9a:59:2d:2b:32:f2:34:10:29:c5:74: 44:0d:f8:2f:8d:6e:54:0b:bc:f4:0f:fe:d8:01:59:3b:8b:c3: cf:00:c6:90:cf:0f:cc:96:06:e9:7d:5c:ab:08:32:18:c3:b0: e6:da:26:6e:57:21:c1:a0:89:db:a4:e8:69:ce:37:e3:99:3a: bc:6b:8f:fd:e7:d4:0f:7f:fb:e0:ee:33:39:f2:9a:06:a7:c6: cf:59:b4:08:b7:ff:72:a7:b7:72:61:30:8e:6c:92:04:ea:b6: d3:cd:c7:a1:6a:73:83:fb:5d:bd:83:03:cd:1f:6e:61:30:14: 7f:31:53:48:a7:15:73:d0:0d:5e:fc:8c:9a:48:7b:db:4c:05: 87:a7:d1:77 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUNAbjmWEiZPM8nxoLt/oo5hFTauowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJFODRCN0RDQTRDQUNDMkM5RkNEOENCM0Y5RUI0RjJB RTMwNjdBRjAeFw0yNTAzMjgxNjA1NDVaFw0yNjAzMjcxNjEwNDVaMDMxMTAvBgNV BAMTKDQxQ0U2MTQ3MzVDNDRCQkNEOEU3QUFDRDhDRjNBQTdGQjdEQzM1NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPZGrfWwOKDP/+MljFJX9YA5Qw cOaehiunnd8ckdA+honzySkXlha176y4d3sfwsjepU2YXHws+GhEPZzkPFiiU4VR kiXVAo+OKhwuEAWDqfDQSMy+9KUGOK8znQY8hRwdCouIfuJ4mPHyUP9fWW1ePoL7 01PsChJMFNnFQolXuRzakMoPKRVY4YAicj/9YQZFbynppNHd4Gh3Jb4oAcEz8Wao 0bGXLfkrfdtHt2kULrLfND1hgFZf4WyHWqYpfywov7u0vXbuXJrBkSPhYlxbBvOp VI4VIPtOjcqYV4coj76z4DUDR0wQ1DqYhdEZ164FUUDxmFZsWhhtavC3e/WDAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUQc5hRzXES7zY56rNjPOqf7fcNXAwHwYDVR0j BBgwFoAUm+hLfcpMrMLJ/NjLP5608q4wZ68wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEd4NHMyQjQzZ1VqZHRrTFF3dUVwYVF1dkc1Qlh3VUVuV0t3REVRTm5u TG8vMC85QkU4NEI3RENBNENBQ0MyQzlGQ0Q4Q0IzRjlFQjRGMkFFMzA2N0FGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlCRTg0QjdEQ0E0Q0FDQzJD OUZDRDhDQjNGOUVCNEYyQUUzMDY3QUYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzRHeDRzMkI0M2dVamR0a0xRd3VFcGFRdXZHNUJYd1VFbldLd0RFUU5ubkxvLzAv MzIzMDMxMmUzMTM4MzIyZTMxMzQzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy MzYzNzM1MzMzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAsm2kDANBgkqhkiG9w0BAQsFAAOCAQEAA/24 6tJb+pG0w8WxE2pWq9x4d1nOiCUcadkhD6530JLdZjMFNwGAPGjtLwErNjE/HtSS gXAcB9VxbTPwgdkZcBoCtgrt3Ucflxzq6dzCwHgyXQvOMuIabCljDJz0XrRAoLCj 1Z0XM5ozX2iD7u+r2K9Pq5pZLSsy8jQQKcV0RA34L41uVAu89A/+2AFZO4vDzwDG kM8PzJYG6X1cqwgyGMOw5tomblchwaCJ26Toac4345k6vGuP/efUD3/74O4zOfKa BqfGz1m0CLf/cqe3cmEwjmySBOq2083HoWpzg/tdvYMDzR9uYTAUfzFTSKcVc9AN XvyMmkh720wFh6fRdw== -----END CERTIFICATE-----Generated at Sat Apr 12 21:38:08 2025 by rpki-client