$ rpki-client -vvf rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/3136382e3139352e32382e302f32332d3233203d3e20323635343235.roa File: 3136382e3139352e32382e302f32332d3233203d3e20323635343235.roa (raw, json) Hash identifier: vc5HIanI94CfVniPYOnoR6bba67e09mRWoDfM9Ixh6g= Subject key identifier: 45:AF:6B:56:7C:49:9E:2E:86:78:B3:12:B9:D7:9E:EE:12:EC:2C:22 Certificate issuer: /CN=0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9 Certificate serial: 1ACE0BACD39ECA86D64AB2CBF981A3B031C394 Authority key identifier: 0B:06:D3:BD:42:AE:29:5F:17:CF:52:D5:8A:5B:A3:0B:CE:91:BF:F9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer Subject info access: rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/3136382e3139352e32382e302f32332d3233203d3e20323635343235.roa Signing time: Wed 05 Mar 2025 19:00:00 +0000 ROA not before: Wed 05 Mar 2025 18:55:00 +0000 ROA not after: Wed 04 Mar 2026 19:00:00 +0000 asID: 265425 IP address blocks: 168.195.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.crl rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 11 Apr 2025 09:30:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:ce:0b:ac:d3:9e:ca:86:d6:4a:b2:cb:f9:81:a3:b0:31:c3:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9 Validity Not Before: Mar 5 18:55:00 2025 GMT Not After : Mar 4 19:00:00 2026 GMT Subject: CN=45AF6B567C499E2E8678B312B9D79EEE12EC2C22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9f:23:62:d1:95:f2:b7:87:2e:07:b9:1f:c3: 3e:32:0a:25:56:80:6b:3e:77:dd:6f:24:b3:9a:08: 88:f9:20:44:05:91:9b:22:06:f0:d5:a2:b9:75:22: de:db:6a:25:55:e0:43:bc:58:80:19:6c:92:6b:3f: cf:8b:0d:7a:c5:73:93:ae:a4:46:83:89:dd:c2:1f: 59:45:90:85:95:a8:e0:bf:6c:80:ec:f0:92:e1:e9: fa:ae:0f:4e:9d:99:77:ae:72:31:45:1c:b4:46:fd: 5a:95:3f:76:fb:e1:34:9e:34:99:b3:fa:67:8a:c3: 60:f5:fb:eb:5c:dc:13:44:4e:f4:4a:b1:ec:39:0a: 09:92:fc:d2:68:fa:eb:b9:d0:f9:94:51:7f:f0:34: 16:07:d4:fb:d8:20:de:d2:c4:31:d3:13:a9:87:76: a1:fb:f9:0a:11:f3:b2:b7:90:12:4d:3e:77:29:40: 16:f7:47:b0:84:3d:6c:5c:21:18:af:25:a8:5f:6b: da:16:8a:7a:cd:e5:51:de:92:2c:fe:74:fd:61:60: 3d:16:f1:3c:af:94:47:ff:4c:b0:e9:6b:3e:3a:3d: bf:ff:52:a8:d6:08:4c:1a:87:d6:31:ac:14:d3:a1: 3c:dc:cc:62:0c:b6:d0:e4:27:ee:75:3c:f4:7d:6f: d5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:AF:6B:56:7C:49:9E:2E:86:78:B3:12:B9:D7:9E:EE:12:EC:2C:22 X509v3 Authority Key Identifier: keyid:0B:06:D3:BD:42:AE:29:5F:17:CF:52:D5:8A:5B:A3:0B:CE:91:BF:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/3136382e3139352e32382e302f32332d3233203d3e20323635343235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.195.28.0/23 Signature Algorithm: sha256WithRSAEncryption 21:6a:35:19:02:65:00:c4:7f:b7:7e:7a:63:65:7d:c5:53:fc: a1:5c:2d:ed:d8:88:1e:c0:80:34:0f:ed:11:e9:d2:f0:18:e2: c9:33:62:53:fe:0b:d2:d3:4e:3f:92:a5:5b:39:2a:4c:2c:cf: d9:0f:20:df:45:f0:4f:fc:3a:07:d4:f9:8f:86:46:86:5c:b8: 39:41:d8:e5:ae:e2:71:7a:49:09:4d:e3:ec:09:8f:f3:4b:8d: ed:f0:cb:65:9a:65:7c:2d:39:28:c2:ed:19:33:aa:d3:4e:33: 0e:5f:8e:5c:80:66:e0:b5:ac:3b:37:ba:e9:58:5d:1a:15:e9: 61:7d:f4:a8:1d:5a:64:79:d6:f4:2c:3a:65:ec:bf:8d:ca:88: 22:4d:3b:31:1b:6d:70:0b:0d:06:c2:8f:e5:60:8a:dc:3c:56: 85:e5:e5:c5:5b:c0:48:51:34:3a:4d:6c:bc:f4:ef:69:00:7f: d4:55:9d:1a:e8:24:4e:b2:1f:9f:03:5a:a3:80:97:92:0f:b9: 68:c2:4c:97:9a:ac:ab:27:d0:ed:00:61:73:66:39:35:4d:e7: 1d:85:12:77:ac:69:e6:21:be:96:4b:15:94:42:51:c3:46:60: 3a:15:a7:d3:dc:db:a9:93:15:c5:89:f9:7f:48:e7:99:9a:bf: 8e:e6:1b:48 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgITGs4LrNOeyobWSrLL+YGjsDHDlDANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygwQjA2RDNCRDQyQUUyOTVGMTdDRjUyRDU4QTVCQTMwQkNF OTFCRkY5MB4XDTI1MDMwNTE4NTUwMFoXDTI2MDMwNDE5MDAwMFowMzExMC8GA1UE AxMoNDVBRjZCNTY3QzQ5OUUyRTg2NzhCMzEyQjlENzlFRUUxMkVDMkMyMjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL+fI2LRlfK3hy4HuR/DPjIKJVaA az533W8ks5oIiPkgRAWRmyIG8NWiuXUi3ttqJVXgQ7xYgBlskms/z4sNesVzk66k RoOJ3cIfWUWQhZWo4L9sgOzwkuHp+q4PTp2Zd65yMUUctEb9WpU/dvvhNJ40mbP6 Z4rDYPX761zcE0RO9Eqx7DkKCZL80mj667nQ+ZRRf/A0FgfU+9gg3tLEMdMTqYd2 ofv5ChHzsreQEk0+dylAFvdHsIQ9bFwhGK8lqF9r2haKes3lUd6SLP50/WFgPRbx PK+UR/9MsOlrPjo9v/9SqNYITBqH1jGsFNOhPNzMYgy20OQn7nU89H1v1akCAwEA AaOCAlEwggJNMB0GA1UdDgQWBBRFr2tWfEmeLoZ4sxK5157uEuwsIjAfBgNVHSME GDAWgBQLBtO9Qq4pXxfPUtWKW6MLzpG/+TAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby81RVcxUzVGc2FNSGk0Tm9aOUZ5UXVLeWl5TXhDdVBnNlV4aVA2eDVBN1U0 aC8yLzBCMDZEM0JENDJBRTI5NUYxN0NGNTJENThBNUJBMzBCQ0U5MUJGRjkuY3Js MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvMEIwNkQzQkQ0MkFFMjk1RjE3 Q0Y1MkQ1OEE1QkEzMEJDRTkxQkZGOS5jZXIwga4GCCsGAQUFBwELBIGhMIGeMIGb BggrBgEFBQcwC4aBjnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NUVXMVM1RnNhTUhpNE5vWjlGeVF1S3lpeU14Q3VQZzZVeGlQNng1QTdVNGgvMi8z MTM2MzgyZTMxMzkzNTJlMzIzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYz NTM0MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB BwEB/wQQMA4wDAQCAAEwBgMEAajDHDANBgkqhkiG9w0BAQsFAAOCAQEAIWo1GQJl AMR/t356Y2V9xVP8oVwt7diIHsCANA/tEenS8BjiyTNiU/4L0tNOP5KlWzkqTCzP 2Q8g30XwT/w6B9T5j4ZGhly4OUHY5a7icXpJCU3j7AmP80uN7fDLZZplfC05KMLt GTOq004zDl+OXIBm4LWsOze66VhdGhXpYX30qB1aZHnW9Cw6Zey/jcqIIk07MRtt cAsNBsKP5WCK3DxWheXlxVvASFE0Ok1svPTvaQB/1FWdGugkTrIfnwNao4CXkg+5 aMJMl5qsqyfQ7QBhc2Y5NU3nHYUSd6xp5iG+lksVlEJRw0ZgOhWn09zbqZMVxYn5 f0jnmZq/juYbSA== -----END CERTIFICATE-----Generated at Thu Apr 10 14:10:24 2025 by rpki-client