$ rpki-client -vvf rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/3139302e3131312e3136382e302f32322d3234203d3e20323730343138.roa File: 3139302e3131312e3136382e302f32322d3234203d3e20323730343138.roa (raw, json) Hash identifier: mJq4dFqiva5H7E/DVQTNnmaU+jNCkwWuNtHA92VtrOU= Subject key identifier: D2:A1:86:FF:4F:04:E6:B4:41:10:39:42:B0:5B:A3:F7:91:1E:32:69 Certificate issuer: /CN=CDEF1FD6690DCCED5205338EE0BC7D0E188DE842 Certificate serial: 2BA0BEDD65AF52173810149A77D0213BE75BACE7 Authority key identifier: CD:EF:1F:D6:69:0D:CC:ED:52:05:33:8E:E0:BC:7D:0E:18:8D:E8:42 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.cer Subject info access: rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/3139302e3131312e3136382e302f32322d3234203d3e20323730343138.roa Signing time: Mon 20 Jan 2025 15:05:14 +0000 ROA not before: Mon 20 Jan 2025 15:00:14 +0000 ROA not after: Mon 19 Jan 2026 15:05:14 +0000 asID: 270418 IP address blocks: 190.111.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.crl rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 13 Apr 2025 20:24:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:a0:be:dd:65:af:52:17:38:10:14:9a:77:d0:21:3b:e7:5b:ac:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDEF1FD6690DCCED5205338EE0BC7D0E188DE842 Validity Not Before: Jan 20 15:00:14 2025 GMT Not After : Jan 19 15:05:14 2026 GMT Subject: CN=D2A186FF4F04E6B441103942B05BA3F7911E3269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a3:9e:f9:91:5d:76:2b:25:34:7e:42:5d:72: 2e:2f:81:e5:0f:27:d3:92:81:ec:f5:8a:22:c5:c8: 2c:41:21:fc:7b:fc:fb:c5:71:e1:7e:1d:2f:66:1a: 5e:fd:07:45:7f:d8:a8:1d:37:94:a5:13:ec:6c:d6: 33:ab:81:54:78:a2:49:34:27:02:7d:ff:6f:dd:22: fb:6e:0c:5b:fd:fe:c3:90:eb:63:e2:3e:aa:90:36: e4:51:77:43:35:e0:c1:af:2f:e5:2f:6f:20:cc:5e: 39:90:ab:0c:ed:18:bd:73:8a:31:76:82:23:4a:21: bc:1e:e2:f0:06:b0:0c:52:fd:20:65:68:c6:14:27: b5:b6:37:d6:40:4f:4a:d8:fe:5e:05:d7:57:f5:25: 23:d0:9b:a3:8d:39:b0:6a:ac:d5:94:c5:9e:5a:f6: ab:f5:1e:f7:1e:86:3b:a3:7b:e2:83:a0:85:6e:b2: 5c:a2:d0:1e:03:e4:92:97:62:79:e2:ec:20:b6:89: 0a:d1:0d:f1:c2:2c:df:6f:a9:48:bb:73:46:ba:a8: db:22:bf:b0:46:fc:d8:0e:2f:73:39:aa:57:b9:1f: 7a:4e:96:ce:b9:55:b3:f9:4d:97:eb:1e:e4:e9:44: f2:3d:3e:ae:08:f5:aa:a5:d3:1d:b9:43:91:31:6c: 81:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:A1:86:FF:4F:04:E6:B4:41:10:39:42:B0:5B:A3:F7:91:1E:32:69 X509v3 Authority Key Identifier: keyid:CD:EF:1F:D6:69:0D:CC:ED:52:05:33:8E:E0:BC:7D:0E:18:8D:E8:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/3139302e3131312e3136382e302f32322d3234203d3e20323730343138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.111.168.0/22 Signature Algorithm: sha256WithRSAEncryption 08:4d:03:7a:04:1a:27:52:6c:b5:ad:e5:a5:97:87:88:1e:59: b9:70:5a:59:f1:80:84:09:e2:c8:8f:2a:e1:0c:21:51:72:89: b4:da:58:98:43:5f:2d:f5:99:df:9f:63:74:46:90:fe:26:a3: 5f:61:f7:f8:2c:4f:55:47:b0:23:23:f1:18:62:f5:eb:0a:1c: c2:85:c4:26:12:88:39:e7:8c:c2:86:b2:ac:72:30:5f:39:13: 84:aa:a5:c9:98:be:45:44:29:fd:35:b0:de:54:1a:fa:0e:92: bc:87:d6:6b:5e:59:51:29:dd:53:14:67:2d:de:0c:cb:6b:25: f7:d0:78:8e:73:fa:0c:83:1b:4e:99:1b:1f:f9:1a:a8:f2:05: 2b:01:9f:b8:9d:7f:03:f1:b1:64:91:ee:2c:d6:01:75:b7:37: 63:07:6f:bb:3b:db:6e:62:a4:52:c3:5d:12:4d:e5:25:4e:48: cb:0c:4b:b8:ab:92:51:61:a5:0b:4f:1b:89:2b:e1:17:82:2d: 78:04:a0:2b:2f:9c:b6:dd:29:5f:6d:1e:23:f2:af:85:47:b8: 71:79:5c:f1:9c:f1:65:11:de:30:a7:33:3b:13:24:c5:4b:37: 4a:e0:b5:d3:36:93:1a:8b:b0:1a:a7:8a:cd:72:a0:54:3c:da: 1c:9f:83:4e -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUK6C+3WWvUhc4EBSad9AhO+dbrOcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RFRjFGRDY2OTBEQ0NFRDUyMDUzMzhFRTBCQzdEMEUx ODhERTg0MjAeFw0yNTAxMjAxNTAwMTRaFw0yNjAxMTkxNTA1MTRaMDMxMTAvBgNV BAMTKEQyQTE4NkZGNEYwNEU2QjQ0MTEwMzk0MkIwNUJBM0Y3OTExRTMyNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCko575kV12KyU0fkJdci4vgeUP J9OSgez1iiLFyCxBIfx7/PvFceF+HS9mGl79B0V/2KgdN5SlE+xs1jOrgVR4okk0 JwJ9/2/dIvtuDFv9/sOQ62PiPqqQNuRRd0M14MGvL+UvbyDMXjmQqwztGL1zijF2 giNKIbwe4vAGsAxS/SBlaMYUJ7W2N9ZAT0rY/l4F11f1JSPQm6ONObBqrNWUxZ5a 9qv1Hvcehjuje+KDoIVuslyi0B4D5JKXYnni7CC2iQrRDfHCLN9vqUi7c0a6qNsi v7BG/NgOL3M5qle5H3pOls65VbP5TZfrHuTpRPI9Pq4I9aql0x25Q5ExbIFHAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQU0qGG/08E5rRBEDlCsFuj95EeMmkwHwYDVR0j BBgwFoAUze8f1mkNzO1SBTOO4Lx9DhiN6EIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNUsxQjVEaU1zaHBDdHh3empXVTlXeGN5UkRaRzJ4SjhESkdyeXFCTDZ5 YUcvMC9DREVGMUZENjY5MERDQ0VENTIwNTMzOEVFMEJDN0QwRTE4OERFODQyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NERUYxRkQ2NjkwRENDRUQ1 MjA1MzM4RUUwQkM3RDBFMTg4REU4NDIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzVLMUI1RGlNc2hwQ3R4d3pqV1U5V3hjeVJEWkcyeEo4REpHcnlxQkw2eWFHLzAv MzEzOTMwMmUzMTMxMzEyZTMxMzYzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy MzczMDM0MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAr5vqDANBgkqhkiG9w0BAQsFAAOCAQEACE0D egQaJ1Jsta3lpZeHiB5ZuXBaWfGAhAniyI8q4QwhUXKJtNpYmENfLfWZ359jdEaQ /iajX2H3+CxPVUewIyPxGGL16wocwoXEJhKIOeeMwoayrHIwXzkThKqlyZi+RUQp /TWw3lQa+g6SvIfWa15ZUSndUxRnLd4My2sl99B4jnP6DIMbTpkbH/kaqPIFKwGf uJ1/A/GxZJHuLNYBdbc3YwdvuzvbbmKkUsNdEk3lJU5IywxLuKuSUWGlC08biSvh F4IteASgKy+ctt0pX20eI/KvhUe4cXlc8ZzxZRHeMKczOxMkxUs3SuC10zaTGouw GqeKzXKgVDzaHJ+DTg== -----END CERTIFICATE-----Generated at Sun Apr 13 00:16:57 2025 by rpki-client