$ rpki-client -vvf rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/34352e3136382e3135362e302f32332d3233203d3e20323638313031.roa File: 34352e3136382e3135362e302f32332d3233203d3e20323638313031.roa (raw, json) Hash identifier: WZGmv6pHsaV1DRCTZ2F95tLwHZJ1m6GjJulXptsw2bY= Subject key identifier: C3:3B:D5:36:87:8D:48:C8:61:F9:FC:B6:59:32:65:A2:27:A6:59:6B Certificate issuer: /CN=912EC49C89BDC1DCBECB52C922BE4EC94D79882A Certificate serial: 54A699431E4783E5807CB11A78AA09EC25E9F7C2 Authority key identifier: 91:2E:C4:9C:89:BD:C1:DC:BE:CB:52:C9:22:BE:4E:C9:4D:79:88:2A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.cer Subject info access: rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/34352e3136382e3135362e302f32332d3233203d3e20323638313031.roa Signing time: Wed 05 Mar 2025 19:00:07 +0000 ROA not before: Wed 05 Mar 2025 18:55:07 +0000 ROA not after: Wed 04 Mar 2026 19:00:07 +0000 asID: 268101 IP address blocks: 45.168.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.crl rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Apr 2025 10:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:a6:99:43:1e:47:83:e5:80:7c:b1:1a:78:aa:09:ec:25:e9:f7:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=912EC49C89BDC1DCBECB52C922BE4EC94D79882A Validity Not Before: Mar 5 18:55:07 2025 GMT Not After : Mar 4 19:00:07 2026 GMT Subject: CN=C33BD536878D48C861F9FCB6593265A227A6596B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:04:f1:79:94:3c:3d:4c:78:d3:7b:fe:be:f3: 86:61:fb:e5:f2:cb:f1:00:06:82:35:4f:07:1b:48: a7:0e:9b:83:16:32:07:52:b0:a6:b2:58:cb:ce:ca: d6:7d:5f:d9:6b:f0:29:1d:d1:ea:cd:4c:d2:2f:d1: 19:05:01:4e:ed:5d:9b:c4:04:e0:80:82:a8:05:2b: 45:a8:9d:fd:3f:df:75:79:cf:61:a4:3c:e5:db:57: 66:88:5a:11:fc:f8:10:02:51:0e:ea:3c:da:26:70: b4:9e:50:e6:ab:42:44:04:ca:78:8d:ec:bb:22:38: 97:95:80:52:d6:f9:ed:ec:35:83:2a:f0:48:dd:af: 9c:51:dc:34:81:80:80:ce:26:64:fc:24:de:b5:5e: a9:51:d5:a5:32:80:e9:ec:c8:39:b4:bb:34:9f:59: 0d:22:79:8b:78:af:81:8c:7d:0e:2a:ed:5b:55:5a: 05:41:ec:3f:5e:a8:df:36:32:cb:15:a7:68:90:b4: 04:b2:66:24:07:6a:aa:b4:34:8d:85:d8:20:62:93: 3e:4c:49:fa:16:f2:9c:cd:52:26:12:11:fa:ea:83: 6c:c7:67:d2:59:17:88:d9:df:d2:6b:91:f1:e1:3f: cd:fa:ff:c3:c7:b3:27:41:5a:f2:92:c4:36:de:00: d0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:3B:D5:36:87:8D:48:C8:61:F9:FC:B6:59:32:65:A2:27:A6:59:6B X509v3 Authority Key Identifier: keyid:91:2E:C4:9C:89:BD:C1:DC:BE:CB:52:C9:22:BE:4E:C9:4D:79:88:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/34352e3136382e3135362e302f32332d3233203d3e20323638313031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.168.156.0/23 Signature Algorithm: sha256WithRSAEncryption 65:96:05:95:cb:c7:b2:ac:ba:28:4b:cf:1b:ad:31:1a:a5:8e: 6f:53:7e:ed:77:d6:d2:e2:82:88:53:0d:04:51:41:5d:86:6d: 62:8f:eb:a0:94:3a:f3:9f:35:9a:89:a2:f4:c9:57:cc:76:81: 73:4a:e3:24:32:69:9d:21:3e:34:c2:4a:4a:59:d3:51:8a:92: 6d:40:08:b8:9b:fa:1a:8c:39:bc:3a:95:fd:98:b2:00:43:08: 04:0d:49:93:1e:7f:1e:34:14:17:2f:06:4f:ef:32:11:24:85: a5:c0:a1:02:e7:13:fe:fb:7d:4f:67:94:d3:10:7a:7e:a2:11: 9c:e1:31:ff:41:af:cf:a4:58:d2:44:e5:8f:31:72:51:77:f3: 03:68:2b:b8:ae:ad:91:d5:35:50:43:20:84:8b:76:cf:6f:21: a2:56:7e:8a:c1:18:89:ab:b0:1f:37:70:fc:dd:6b:01:54:b9: c5:79:e0:ac:4d:06:02:e2:8d:5f:07:49:45:1d:2c:fc:b8:db: 85:25:dd:0e:ee:9e:e0:1b:23:63:16:fe:25:5d:6a:0f:f4:57: bd:b9:81:fb:71:ef:e5:d1:09:e5:79:e0:ee:76:bd:cb:c2:57: b5:88:2b:ef:9a:93:76:12:77:79:8a:fc:9b:c4:a7:47:bb:5a: 45:5a:07:e3 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUVKaZQx5Hg+WAfLEaeKoJ7CXp98IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTEyRUM0OUM4OUJEQzFEQ0JFQ0I1MkM5MjJCRTRFQzk0 RDc5ODgyQTAeFw0yNTAzMDUxODU1MDdaFw0yNjAzMDQxOTAwMDdaMDMxMTAvBgNV BAMTKEMzM0JENTM2ODc4RDQ4Qzg2MUY5RkNCNjU5MzI2NUEyMjdBNjU5NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIBPF5lDw9THjTe/6+84Zh++Xy y/EABoI1TwcbSKcOm4MWMgdSsKayWMvOytZ9X9lr8Ckd0erNTNIv0RkFAU7tXZvE BOCAgqgFK0Wonf0/33V5z2GkPOXbV2aIWhH8+BACUQ7qPNomcLSeUOarQkQEyniN 7LsiOJeVgFLW+e3sNYMq8Ejdr5xR3DSBgIDOJmT8JN61XqlR1aUygOnsyDm0uzSf WQ0ieYt4r4GMfQ4q7VtVWgVB7D9eqN82MssVp2iQtASyZiQHaqq0NI2F2CBikz5M SfoW8pzNUiYSEfrqg2zHZ9JZF4jZ39JrkfHhP836/8PHsydBWvKSxDbeANDDAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUwzvVNoeNSMhh+fy2WTJloiemWWswHwYDVR0j BBgwFoAUkS7EnIm9wdy+y1LJIr5OyU15iCowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNVJqVmFhMllOc3ZTeTI1WVR2TG52dTF1U2VTUGRLclNOMjdOWEN1cUpL TlgvMS85MTJFQzQ5Qzg5QkRDMURDQkVDQjUyQzkyMkJFNEVDOTRENzk4ODJBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxMkVDNDlDODlCREMxRENC RUNCNTJDOTIyQkU0RUM5NEQ3OTg4MkEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzVSalZhYTJZTnN2U3kyNVlUdkxudnUxdVNlU1BkS3JTTjI3TlhDdXFKS05YLzEv MzQzNTJlMzEzNjM4MmUzMTM1MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2 MzgzMTMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAEtqJwwDQYJKoZIhvcNAQELBQADggEBAGWWBZXL x7KsuihLzxutMRqljm9Tfu131tLigohTDQRRQV2GbWKP66CUOvOfNZqJovTJV8x2 gXNK4yQyaZ0hPjTCSkpZ01GKkm1ACLib+hqMObw6lf2YsgBDCAQNSZMefx40FBcv Bk/vMhEkhaXAoQLnE/77fU9nlNMQen6iEZzhMf9Br8+kWNJE5Y8xclF38wNoK7iu rZHVNVBDIISLds9vIaJWforBGImrsB83cPzdawFUucV54KxNBgLijV8HSUUdLPy4 24Ul3Q7unuAbI2MW/iVdag/0V725gftx7+XRCeV54O52vcvCV7WIK++ak3YSd3mK /JvEp0e7WkVaB+M= -----END CERTIFICATE-----Generated at Sun Apr 6 11:13:18 2025 by rpki-client