$ rpki-client -vvf rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/3230372e3234382e32372e302f32342d3234203d3e20323731333039.roa File: 3230372e3234382e32372e302f32342d3234203d3e20323731333039.roa (raw, json) Hash identifier: f89g/82dVTrrgRFF4fqIve6PAw0wl2SrDdd1BINYWKk= Subject key identifier: DA:17:F1:92:AA:A9:00:E0:24:3A:E5:CB:9D:12:4A:29:70:36:B5:E3 Certificate issuer: /CN=FA8D895DEA10C0D11206F62D5BE38EDB0A317794 Certificate serial: 6260B7494ED4182821F12452B199406FFCFE122D Authority key identifier: FA:8D:89:5D:EA:10:C0:D1:12:06:F6:2D:5B:E3:8E:DB:0A:31:77:94 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA8D895DEA10C0D11206F62D5BE38EDB0A317794.cer Subject info access: rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/3230372e3234382e32372e302f32342d3234203d3e20323731333039.roa Signing time: Fri 24 Jan 2025 18:24:59 +0000 ROA not before: Fri 24 Jan 2025 18:19:59 +0000 ROA not after: Fri 23 Jan 2026 18:24:59 +0000 asID: 271309 IP address blocks: 207.248.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/FA8D895DEA10C0D11206F62D5BE38EDB0A317794.crl rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/FA8D895DEA10C0D11206F62D5BE38EDB0A317794.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA8D895DEA10C0D11206F62D5BE38EDB0A317794.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 18 Feb 2025 17:33:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:60:b7:49:4e:d4:18:28:21:f1:24:52:b1:99:40:6f:fc:fe:12:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA8D895DEA10C0D11206F62D5BE38EDB0A317794 Validity Not Before: Jan 24 18:19:59 2025 GMT Not After : Jan 23 18:24:59 2026 GMT Subject: CN=DA17F192AAA900E0243AE5CB9D124A297036B5E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:45:cc:37:6e:36:81:f6:df:20:85:2a:af:c2: 7a:8e:d7:8c:a0:56:7f:dc:87:69:02:c2:ce:d6:72: 35:6d:75:7f:40:cf:b2:1d:72:20:08:7b:ba:c4:f6: 4e:bb:9b:e1:26:a1:6d:84:93:ca:34:95:78:9b:d5: e3:92:04:65:4a:0e:bd:02:eb:7a:4c:d5:b4:08:e8: b3:f6:af:18:87:ae:f6:5c:ed:ea:9b:41:9e:7a:9e: de:1b:48:e7:e5:86:40:dd:3c:07:fc:c4:d2:b6:47: 22:c4:e0:89:c1:bb:30:82:b4:6e:40:47:f9:55:5c: 76:32:e6:cb:fe:cd:ca:12:af:87:6a:c9:ab:0d:8c: c2:5b:93:1e:bf:7d:d0:fb:98:a3:40:a1:e5:d4:41: 52:3b:a4:c9:bb:fe:96:f4:0b:c6:c6:47:f2:a1:68: 46:f4:89:73:5c:e3:76:89:37:41:11:12:df:60:f6: 4e:1d:ca:45:90:d3:9f:c7:a8:72:4c:e9:d8:e1:eb: e3:20:ff:57:d8:06:a7:97:d3:73:0c:3e:6e:c8:ae: a6:75:f8:77:f1:97:70:24:fb:58:c2:2f:c9:18:a4: 38:45:dd:a2:ed:d2:ff:ac:38:ff:a0:c1:65:ea:45: b8:70:67:61:30:53:cf:94:61:8c:ce:e5:aa:bd:b3: 19:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:17:F1:92:AA:A9:00:E0:24:3A:E5:CB:9D:12:4A:29:70:36:B5:E3 X509v3 Authority Key Identifier: keyid:FA:8D:89:5D:EA:10:C0:D1:12:06:F6:2D:5B:E3:8E:DB:0A:31:77:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/FA8D895DEA10C0D11206F62D5BE38EDB0A317794.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA8D895DEA10C0D11206F62D5BE38EDB0A317794.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/3230372e3234382e32372e302f32342d3234203d3e20323731333039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 207.248.27.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:af:fc:95:18:14:82:4a:8d:e2:83:2d:94:cf:ef:3a:07:93: c8:ce:02:3b:59:95:89:13:f2:1d:10:99:23:be:8b:b3:c0:41: cb:60:15:00:4e:1d:f7:bf:c5:8d:46:e6:ce:45:77:0d:47:c7: 16:eb:80:fa:76:b3:02:7c:3e:a9:e1:6f:32:d0:2e:a0:47:c5: 34:fa:17:77:29:e9:93:f2:69:cc:30:e8:48:7f:42:31:6a:36: 6f:0e:98:4c:35:ae:18:6c:be:a7:bd:d3:36:fe:cc:2d:05:c0: 80:77:6f:d7:e8:13:8b:e3:39:98:5f:fb:0c:03:4c:76:ee:af: 48:a4:5f:96:10:e3:e2:d3:7f:37:c6:2c:43:fe:26:48:96:18: 25:26:b9:56:47:18:e0:8b:a5:d4:cd:31:75:f9:54:bf:27:6d: 11:23:33:91:fe:c6:ca:29:b6:9c:3b:b9:74:b9:47:54:17:ab: 1e:dd:6d:e6:1b:5e:6a:93:6a:8d:dc:34:10:95:c8:bf:e8:98: 61:b2:a0:b3:df:6d:a0:8c:b5:6e:f1:5e:6d:46:ed:e6:70:48: 29:44:39:76:e5:dc:ff:d3:9d:2d:71:1a:c9:f7:ce:ad:99:4c: 15:d0:7d:53:b1:ba:62:0d:4e:bb:ef:ed:cb:d9:82:26:5a:93: fd:63:66:12 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUYmC3SU7UGCgh8SRSsZlAb/z+Ei0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE4RDg5NURFQTEwQzBEMTEyMDZGNjJENUJFMzhFREIw QTMxNzc5NDAeFw0yNTAxMjQxODE5NTlaFw0yNjAxMjMxODI0NTlaMDMxMTAvBgNV BAMTKERBMTdGMTkyQUFBOTAwRTAyNDNBRTVDQjlEMTI0QTI5NzAzNkI1RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Rcw3bjaB9t8ghSqvwnqO14yg Vn/ch2kCws7WcjVtdX9Az7IdciAIe7rE9k67m+EmoW2Ek8o0lXib1eOSBGVKDr0C 63pM1bQI6LP2rxiHrvZc7eqbQZ56nt4bSOflhkDdPAf8xNK2RyLE4InBuzCCtG5A R/lVXHYy5sv+zcoSr4dqyasNjMJbkx6/fdD7mKNAoeXUQVI7pMm7/pb0C8bGR/Kh aEb0iXNc43aJN0EREt9g9k4dykWQ05/HqHJM6djh6+Mg/1fYBqeX03MMPm7IrqZ1 +Hfxl3Ak+1jCL8kYpDhF3aLt0v+sOP+gwWXqRbhwZ2EwU8+UYYzO5aq9sxkvAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQU2hfxkqqpAOAkOuXLnRJKKXA2teMwHwYDVR0j BBgwFoAU+o2JXeoQwNESBvYtW+OO2woxd5QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNFQyWUJtYVR6enhFR2VRQ1BHdzRpczhjc2RLSDlvN3NORXBCd290Nk1u YmYvMC9GQThEODk1REVBMTBDMEQxMTIwNkY2MkQ1QkUzOEVEQjBBMzE3Nzk0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZBOEQ4OTVERUExMEMwRDEx MjA2RjYyRDVCRTM4RURCMEEzMTc3OTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzRUMllCbWFUenp4RUdlUUNQR3c0aXM4Y3NkS0g5bzdzTkVwQndvdDZNbmJmLzAv MzIzMDM3MmUzMjM0MzgyZTMyMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3 MzEzMzMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADP+BswDQYJKoZIhvcNAQELBQADggEBAH+v/JUY FIJKjeKDLZTP7zoHk8jOAjtZlYkT8h0QmSO+i7PAQctgFQBOHfe/xY1G5s5Fdw1H xxbrgPp2swJ8PqnhbzLQLqBHxTT6F3cp6ZPyacww6Eh/QjFqNm8OmEw1rhhsvqe9 0zb+zC0FwIB3b9foE4vjOZhf+wwDTHbur0ikX5YQ4+LTfzfGLEP+JkiWGCUmuVZH GOCLpdTNMXX5VL8nbREjM5H+xsoptpw7uXS5R1QXqx7dbeYbXmqTao3cNBCVyL/o mGGyoLPfbaCMtW7xXm1G7eZwSClEOXbl3P/TnS1xGsn3zq2ZTBXQfVOxumINTrvv 7cvZgiZak/1jZhI= -----END CERTIFICATE-----Generated at Tue Feb 18 13:48:26 2025 by rpki-client