$ rpki-client -vvf rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/34352e3136382e3135392e302f32342d3234203d3e20323638313031.roa File: 34352e3136382e3135392e302f32342d3234203d3e20323638313031.roa (raw, json) Hash identifier: fs3BckbzOX/q1KQL0Np6JrkaWn3HpGHvKSrI0LKgiNQ= Subject key identifier: A3:3A:AC:0F:3C:1B:89:05:60:9D:1A:AE:8E:AC:EF:EC:23:A5:E3:12 Certificate issuer: /CN=912EC49C89BDC1DCBECB52C922BE4EC94D79882A Certificate serial: 23ED578B463320168B6A9B006031ECC2D3FE442F Authority key identifier: 91:2E:C4:9C:89:BD:C1:DC:BE:CB:52:C9:22:BE:4E:C9:4D:79:88:2A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.cer Subject info access: rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/34352e3136382e3135392e302f32342d3234203d3e20323638313031.roa Signing time: Tue 03 Jun 2025 22:00:00 +0000 ROA not before: Tue 03 Jun 2025 21:55:00 +0000 ROA not after: Tue 02 Jun 2026 22:00:00 +0000 asID: 268101 IP address blocks: 45.168.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.crl rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 10 Jun 2025 03:42:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:ed:57:8b:46:33:20:16:8b:6a:9b:00:60:31:ec:c2:d3:fe:44:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=912EC49C89BDC1DCBECB52C922BE4EC94D79882A Validity Not Before: Jun 3 21:55:00 2025 GMT Not After : Jun 2 22:00:00 2026 GMT Subject: CN=A33AAC0F3C1B8905609D1AAE8EACEFEC23A5E312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f9:26:34:aa:93:42:af:ea:c6:47:59:30:20: 0f:cb:65:46:95:4d:2b:27:bb:59:10:5a:49:fd:9b: 2b:e5:51:7e:9f:12:82:a3:4a:a7:a0:0e:68:fb:d8: a1:48:72:d2:24:bb:27:01:53:5f:c2:48:03:db:ba: ce:e9:17:e0:34:71:16:42:10:c2:1a:42:db:7f:03: 2c:d7:1f:a9:26:97:21:6d:70:05:86:e8:94:8d:70: d1:93:a8:76:c4:9b:cd:87:01:db:a3:ba:ed:6e:3a: 0b:08:fe:ea:45:96:d7:df:9d:7e:81:8e:ba:6a:e6: 50:c0:2c:f5:68:2c:77:59:19:63:2f:77:93:4c:3d: d4:34:1d:90:ff:a2:c3:43:71:96:b4:2a:84:35:f0: f8:83:ac:15:62:27:ec:6a:7a:3f:f1:b0:15:a3:57: 91:9d:36:5f:ca:9b:91:dd:ae:8b:16:1e:e4:15:71: e0:a7:c0:a4:68:73:00:6a:b4:02:5a:b9:cf:27:3d: 76:b3:0a:e7:d8:0b:8f:8b:7e:9a:ac:79:a4:cf:83: 54:2b:04:21:53:b8:58:38:4e:3a:ae:20:a4:70:22: 5b:20:f6:48:29:9f:42:22:09:b2:7a:4d:6f:13:ea: c3:dc:f9:cd:59:36:2d:fc:95:4a:29:1b:c4:1f:d6: fb:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:3A:AC:0F:3C:1B:89:05:60:9D:1A:AE:8E:AC:EF:EC:23:A5:E3:12 X509v3 Authority Key Identifier: keyid:91:2E:C4:9C:89:BD:C1:DC:BE:CB:52:C9:22:BE:4E:C9:4D:79:88:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/34352e3136382e3135392e302f32342d3234203d3e20323638313031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.168.159.0/24 Signature Algorithm: sha256WithRSAEncryption 92:0b:0a:f2:56:d3:ad:cf:69:ee:3f:5a:5f:1a:2e:24:1e:90: 46:fc:d8:b6:23:6a:92:b2:99:88:c0:ea:62:ad:df:11:11:23: 12:c0:c8:63:7e:7a:53:23:f3:ee:bb:b7:d3:84:e8:75:0f:ec: 48:8c:3d:96:a0:3f:a9:10:2b:76:aa:65:3c:75:6a:a0:f7:72: 1a:df:44:6a:26:a9:f0:86:2e:a5:3b:cc:e8:44:8c:70:8f:f7: 71:d0:94:9c:47:d0:45:b6:d3:70:33:59:82:05:18:02:6b:1a: 63:ce:36:2e:af:82:75:47:3f:53:78:fd:f0:06:46:25:4c:ef: 93:cd:4d:5e:8c:a6:c6:c2:b7:c3:41:d8:85:70:38:3b:fc:17: 20:eb:4d:8e:4e:44:0f:f0:4a:b9:02:93:72:ce:a7:5d:9c:ae: 6a:33:e3:d2:cb:0d:ce:58:fd:1f:45:07:0b:f3:02:6d:7d:dc: 1d:16:77:9f:71:67:08:1b:b5:72:5f:ef:e1:6e:8f:c5:29:88: fa:34:d9:b0:30:5e:d6:db:1d:68:de:aa:15:23:aa:bb:a0:30: 6f:fe:74:6a:56:82:bf:ba:07:09:73:d7:b0:c2:72:22:7f:e8: 87:9f:ba:6f:eb:71:a4:ad:7c:97:1d:89:ca:75:ed:95:d2:26: 4e:f6:10:47 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUI+1Xi0YzIBaLapsAYDHswtP+RC8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTEyRUM0OUM4OUJEQzFEQ0JFQ0I1MkM5MjJCRTRFQzk0 RDc5ODgyQTAeFw0yNTA2MDMyMTU1MDBaFw0yNjA2MDIyMjAwMDBaMDMxMTAvBgNV BAMTKEEzM0FBQzBGM0MxQjg5MDU2MDlEMUFBRThFQUNFRkVDMjNBNUUzMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw+SY0qpNCr+rGR1kwIA/LZUaV TSsnu1kQWkn9myvlUX6fEoKjSqegDmj72KFIctIkuycBU1/CSAPbus7pF+A0cRZC EMIaQtt/AyzXH6kmlyFtcAWG6JSNcNGTqHbEm82HAdujuu1uOgsI/upFltffnX6B jrpq5lDALPVoLHdZGWMvd5NMPdQ0HZD/osNDcZa0KoQ18PiDrBViJ+xqej/xsBWj V5GdNl/Km5HdrosWHuQVceCnwKRocwBqtAJauc8nPXazCufYC4+LfpqseaTPg1Qr BCFTuFg4TjquIKRwIlsg9kgpn0IiCbJ6TW8T6sPc+c1ZNi38lUopG8Qf1vuBAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUozqsDzwbiQVgnRqujqzv7COl4xIwHwYDVR0j BBgwFoAUkS7EnIm9wdy+y1LJIr5OyU15iCowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNVJqVmFhMllOc3ZTeTI1WVR2TG52dTF1U2VTUGRLclNOMjdOWEN1cUpL TlgvMS85MTJFQzQ5Qzg5QkRDMURDQkVDQjUyQzkyMkJFNEVDOTRENzk4ODJBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxMkVDNDlDODlCREMxRENC RUNCNTJDOTIyQkU0RUM5NEQ3OTg4MkEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzVSalZhYTJZTnN2U3kyNVlUdkxudnUxdVNlU1BkS3JTTjI3TlhDdXFKS05YLzEv MzQzNTJlMzEzNjM4MmUzMTM1MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2 MzgzMTMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAAtqJ8wDQYJKoZIhvcNAQELBQADggEBAJILCvJW 063Pae4/Wl8aLiQekEb82LYjapKymYjA6mKt3xERIxLAyGN+elMj8+67t9OE6HUP 7EiMPZagP6kQK3aqZTx1aqD3chrfRGomqfCGLqU7zOhEjHCP93HQlJxH0EW203Az WYIFGAJrGmPONi6vgnVHP1N4/fAGRiVM75PNTV6MpsbCt8NB2IVwODv8FyDrTY5O RA/wSrkCk3LOp12crmoz49LLDc5Y/R9FBwvzAm193B0Wd59xZwgbtXJf7+Fuj8Up iPo02bAwXtbbHWjeqhUjqrugMG/+dGpWgr+6Bwlz17DCciJ/6Iefum/rcaStfJcd icp17ZXSJk72EEc= -----END CERTIFICATE-----Generated at Mon Jun 9 04:54:37 2025 by rpki-client