$ rpki-client -vvf rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/1/3136382e3138312e3132362e302f32342d3234203d3e20323635333536.roa File: 3136382e3138312e3132362e302f32342d3234203d3e20323635333536.roa (raw, json) Hash identifier: B16+n7wfRQ+1Sg3SOZmSk1zoHA13Vs/SCQzalT7Gl/U= Subject key identifier: CE:05:D2:17:81:13:37:95:10:45:6F:79:AA:ED:A8:44:C3:52:BE:33 Certificate issuer: /CN=E3FD3AAEB422FCD9BB429CEA04FB06B5778EC8BC Certificate serial: 451375BD285534968AEB21FC8AE4FC5E05D389EE Authority key identifier: E3:FD:3A:AE:B4:22:FC:D9:BB:42:9C:EA:04:FB:06:B5:77:8E:C8:BC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3FD3AAEB422FCD9BB429CEA04FB06B5778EC8BC.cer Subject info access: rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/1/3136382e3138312e3132362e302f32342d3234203d3e20323635333536.roa Signing time: Thu 06 Mar 2025 07:04:16 +0000 ROA not before: Thu 06 Mar 2025 06:59:16 +0000 ROA not after: Thu 05 Mar 2026 07:04:16 +0000 asID: 265356 IP address blocks: 168.181.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/1/E3FD3AAEB422FCD9BB429CEA04FB06B5778EC8BC.crl rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/1/E3FD3AAEB422FCD9BB429CEA04FB06B5778EC8BC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3FD3AAEB422FCD9BB429CEA04FB06B5778EC8BC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 19 Apr 2025 06:47:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:13:75:bd:28:55:34:96:8a:eb:21:fc:8a:e4:fc:5e:05:d3:89:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3FD3AAEB422FCD9BB429CEA04FB06B5778EC8BC Validity Not Before: Mar 6 06:59:16 2025 GMT Not After : Mar 5 07:04:16 2026 GMT Subject: CN=CE05D2178113379510456F79AAEDA844C352BE33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:3a:78:f4:fd:5d:c5:f6:2d:95:4a:13:70:10: 95:e6:09:9d:a5:bc:4b:e4:0f:b0:22:eb:97:9a:b9: bc:2d:40:71:db:76:7e:62:fb:6f:cc:38:50:b1:d0: 5e:92:68:18:26:a5:f0:f0:c0:42:f3:00:09:84:7e: ff:eb:1a:de:f7:18:7c:73:af:51:d4:11:93:e8:69: 03:01:2e:31:63:5e:02:05:c0:6c:ea:d1:31:87:02: 00:87:1e:01:09:cd:ac:37:8b:a5:a5:ee:1f:5b:66: 64:0b:38:18:0b:82:bc:76:1c:39:c3:54:ac:39:b1: d5:43:20:36:fa:a9:61:c3:3c:d8:87:8d:13:f6:ec: a2:7a:26:af:47:23:4e:aa:77:8c:6e:3d:7e:78:04: cb:ff:a1:56:64:94:67:e0:7a:34:0c:90:90:4e:36: ad:d0:da:f1:98:d1:94:0b:02:7f:f0:e3:43:42:80: d6:f1:8d:24:6b:29:80:e1:de:05:9a:64:49:cd:bf: 5e:56:ab:0b:93:38:83:42:1f:d5:1c:63:13:ee:ea: 77:28:3f:9a:18:20:bc:39:ff:57:61:19:db:51:a9: 75:ad:79:db:41:35:c3:d2:0e:16:cb:95:2e:97:d8: 8c:e7:be:a4:56:4c:fd:74:ba:c6:07:ef:b9:b6:ca: 7b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:05:D2:17:81:13:37:95:10:45:6F:79:AA:ED:A8:44:C3:52:BE:33 X509v3 Authority Key Identifier: keyid:E3:FD:3A:AE:B4:22:FC:D9:BB:42:9C:EA:04:FB:06:B5:77:8E:C8:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/1/E3FD3AAEB422FCD9BB429CEA04FB06B5778EC8BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3FD3AAEB422FCD9BB429CEA04FB06B5778EC8BC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/1/3136382e3138312e3132362e302f32342d3234203d3e20323635333536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.181.126.0/24 Signature Algorithm: sha256WithRSAEncryption 97:24:6d:31:8f:16:6b:68:fa:4f:0a:17:9b:82:dc:61:9e:ae: 15:7a:4d:bc:85:a8:1f:c7:7a:71:fc:a7:b5:07:95:ef:3d:d8: fc:d7:f0:75:c3:1d:43:b5:a0:c9:72:46:94:4e:31:e0:94:d6: 26:9b:8b:86:fe:e1:3a:b1:8a:bf:a4:5e:55:39:ad:80:70:64: 8d:bd:c3:6c:f9:8f:f8:06:09:a2:41:f9:0f:b7:96:0e:b7:e7: 74:6b:46:f4:be:24:22:6c:63:31:86:9b:0a:db:4d:43:99:e6: 44:97:d1:b7:d4:61:d1:04:9c:ef:34:8a:f4:8e:ba:f5:db:5c: 06:84:94:ba:4d:f8:20:26:e4:0b:f0:f5:37:5c:17:80:c7:09: 77:0a:57:df:72:fc:9e:0f:10:bb:8b:f6:cd:a9:1f:bb:d0:74: 20:4e:87:fc:bf:4d:23:95:b4:d7:ab:80:fd:e0:35:76:0f:25: 72:17:b3:27:d2:c3:53:8c:03:12:e9:c0:b7:e8:e3:e1:4b:cc: 71:2d:89:90:94:5c:c7:51:e0:e8:4d:4e:85:b1:5a:09:20:85: f1:f5:ec:c1:06:39:03:4e:cc:ff:47:b8:25:07:27:00:ec:61: 30:57:8c:79:ef:e5:4c:0d:2a:65:c5:53:da:4a:1c:3d:a7:59: 7c:f0:1b:a7 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIURRN1vShVNJaK6yH8iuT8XgXTie4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTNGRDNBQUVCNDIyRkNEOUJCNDI5Q0VBMDRGQjA2QjU3 NzhFQzhCQzAeFw0yNTAzMDYwNjU5MTZaFw0yNjAzMDUwNzA0MTZaMDMxMTAvBgNV BAMTKENFMDVEMjE3ODExMzM3OTUxMDQ1NkY3OUFBRURBODQ0QzM1MkJFMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfOnj0/V3F9i2VShNwEJXmCZ2l vEvkD7Ai65eaubwtQHHbdn5i+2/MOFCx0F6SaBgmpfDwwELzAAmEfv/rGt73GHxz r1HUEZPoaQMBLjFjXgIFwGzq0TGHAgCHHgEJzaw3i6Wl7h9bZmQLOBgLgrx2HDnD VKw5sdVDIDb6qWHDPNiHjRP27KJ6Jq9HI06qd4xuPX54BMv/oVZklGfgejQMkJBO Nq3Q2vGY0ZQLAn/w40NCgNbxjSRrKYDh3gWaZEnNv15WqwuTOINCH9UcYxPu6nco P5oYILw5/1dhGdtRqXWtedtBNcPSDhbLlS6X2IznvqRWTP10usYH77m2ynv3AgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUzgXSF4ETN5UQRW95qu2oRMNSvjMwHwYDVR0j BBgwFoAU4/06rrQi/Nm7QpzqBPsGtXeOyLwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNjJlSFo0ZlNLNnZOUUdkTndOWGliWk1SWEthVW1aVmZFbXQxRXJUdVRX RXovMS9FM0ZEM0FBRUI0MjJGQ0Q5QkI0MjlDRUEwNEZCMDZCNTc3OEVDOEJDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UzRkQzQUFFQjQyMkZDRDlC QjQyOUNFQTA0RkIwNkI1Nzc4RUM4QkMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzYyZUhaNGZTSzZ2TlFHZE53TlhpYlpNUlhLYVVtWlZmRW10MUVyVHVUV0V6LzEv MzEzNjM4MmUzMTM4MzEyZTMxMzIzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy MzYzNTMzMzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKi1fjANBgkqhkiG9w0BAQsFAAOCAQEAlyRt MY8Wa2j6TwoXm4LcYZ6uFXpNvIWoH8d6cfyntQeV7z3Y/NfwdcMdQ7WgyXJGlE4x 4JTWJpuLhv7hOrGKv6ReVTmtgHBkjb3DbPmP+AYJokH5D7eWDrfndGtG9L4kImxj MYabCttNQ5nmRJfRt9Rh0QSc7zSK9I669dtcBoSUuk34ICbkC/D1N1wXgMcJdwpX 33L8ng8Qu4v2zakfu9B0IE6H/L9NI5W016uA/eA1dg8lchezJ9LDU4wDEunAt+jj 4UvMcS2JkJRcx1Hg6E1OhbFaCSCF8fXswQY5A07M/0e4JQcnAOxhMFeMee/lTA0q ZcVT2kocPadZfPAbpw== -----END CERTIFICATE-----Generated at Fri Apr 18 12:38:33 2025 by rpki-client