$ rpki-client -vvf rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/1/3133312e3232312e3136302e302f32322d3232203d3e20323634343334.roa File: 3133312e3232312e3136302e302f32322d3232203d3e20323634343334.roa (raw, json) Hash identifier: lpobNvcgxtYSmbp+LIo40qwcmHv6Q5ovdSP9yu24PUk= Subject key identifier: 40:DD:EC:DC:21:FF:2B:C5:4A:4B:8E:BC:2B:11:70:E0:5E:F8:17:2E Certificate issuer: /CN=37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3 Certificate serial: 41620AF480B5E29E8E5CA6F44EA718B4FE113ED1 Authority key identifier: 37:B0:CE:78:D8:38:B2:0B:91:5D:43:A1:A6:B7:F4:8D:3A:B1:B2:A3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3.cer Subject info access: rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/1/3133312e3232312e3136302e302f32322d3232203d3e20323634343334.roa Signing time: Thu 06 Mar 2025 04:00:11 +0000 ROA not before: Thu 06 Mar 2025 03:55:11 +0000 ROA not after: Thu 05 Mar 2026 04:00:11 +0000 asID: 264434 IP address blocks: 131.221.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/1/37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3.crl rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/1/37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 14 Apr 2025 20:56:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:62:0a:f4:80:b5:e2:9e:8e:5c:a6:f4:4e:a7:18:b4:fe:11:3e:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3 Validity Not Before: Mar 6 03:55:11 2025 GMT Not After : Mar 5 04:00:11 2026 GMT Subject: CN=40DDECDC21FF2BC54A4B8EBC2B1170E05EF8172E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:58:49:bd:59:87:57:19:c4:a0:34:f0:f7:ab: 46:96:58:aa:fb:e6:2d:83:67:f4:3c:63:92:87:bc: a5:f4:fe:0f:40:d4:15:03:ef:25:b0:ca:53:1b:be: c8:9b:f7:ba:74:dd:45:72:76:17:dc:c6:eb:d3:d8: fc:81:9e:c3:84:1d:33:cd:8f:b1:d1:a2:46:64:3b: 17:97:ff:d1:21:bf:d1:fd:b8:7b:9c:3b:00:ca:86: f2:ea:58:75:17:f3:11:e3:0e:ba:b2:3b:c1:97:34: b7:c0:a9:81:b9:b1:4c:0e:41:c9:98:49:c3:db:ee: 35:68:ab:9e:24:d9:d7:20:51:7e:ea:d8:b8:c2:e9: d6:81:83:6a:cf:58:66:3c:ab:45:be:5b:45:8a:80: aa:c3:94:fc:09:f2:33:52:e8:c0:28:31:1c:f5:c9: bb:34:cf:14:9c:9e:2e:f8:b5:f4:e4:ce:d7:ac:91: 9d:2b:53:e4:d7:a4:9a:15:a9:c4:b9:90:66:7f:6c: 8e:a0:4d:cc:cc:37:49:d5:1c:15:ba:79:95:0e:bd: cb:0b:9c:c9:f0:26:9e:e7:52:68:d5:eb:d3:d0:2b: a5:9e:17:16:be:39:92:1f:e1:1d:43:18:06:0c:d4: 95:66:b0:ca:1d:85:1a:ab:eb:4b:01:24:6e:dc:af: 28:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:DD:EC:DC:21:FF:2B:C5:4A:4B:8E:BC:2B:11:70:E0:5E:F8:17:2E X509v3 Authority Key Identifier: keyid:37:B0:CE:78:D8:38:B2:0B:91:5D:43:A1:A6:B7:F4:8D:3A:B1:B2:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/1/37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/1/3133312e3232312e3136302e302f32322d3232203d3e20323634343334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.221.160.0/22 Signature Algorithm: sha256WithRSAEncryption 65:17:5a:b5:b2:6a:f8:bd:65:fb:a6:2a:6d:c8:49:67:af:74: bc:6e:09:69:bb:46:97:fe:e8:f6:8d:19:97:74:99:b3:27:96: b4:0c:58:23:c9:5e:d4:60:9e:3b:76:97:0a:92:0d:26:1a:d8: 9b:ba:ee:66:b3:59:25:69:c3:b9:56:55:ea:72:c1:08:a4:cc: 6a:19:01:33:43:e1:78:c1:3e:8e:0f:89:61:3e:2d:57:e7:31: c5:dc:61:06:ae:b5:bf:53:c3:13:90:e1:20:03:65:2f:41:e2: 21:06:7d:6d:75:a6:7c:90:b2:eb:9b:96:f2:c6:00:48:9c:ae: c6:e7:bb:4f:d2:0b:87:a2:72:55:88:9b:34:3b:14:d6:fc:a1: 6b:d9:0f:77:74:ab:8f:a6:ad:87:82:88:a0:53:fb:23:66:ed: 9d:bf:42:fe:63:d8:62:a4:07:46:e4:80:93:ac:82:26:0b:4d: e9:85:9a:1f:29:9f:ec:8c:38:73:a6:8b:c6:b6:e1:63:cd:71: 43:32:b6:ce:6a:7a:0a:aa:13:b9:65:13:f1:4b:25:6a:f1:ef: e8:92:64:9c:6e:0f:81:da:cc:e8:93:47:11:ac:53:f8:47:a1: 6d:25:64:6e:b1:31:f2:fd:68:32:6e:47:f8:6a:5c:a4:cd:91: 5b:50:a6:e0 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUQWIK9IC14p6OXKb0TqcYtP4RPtEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdCMENFNzhEODM4QjIwQjkxNUQ0M0ExQTZCN0Y0OEQz QUIxQjJBMzAeFw0yNTAzMDYwMzU1MTFaFw0yNjAzMDUwNDAwMTFaMDMxMTAvBgNV BAMTKDQwRERFQ0RDMjFGRjJCQzU0QTRCOEVCQzJCMTE3MEUwNUVGODE3MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTWEm9WYdXGcSgNPD3q0aWWKr7 5i2DZ/Q8Y5KHvKX0/g9A1BUD7yWwylMbvsib97p03UVydhfcxuvT2PyBnsOEHTPN j7HRokZkOxeX/9Ehv9H9uHucOwDKhvLqWHUX8xHjDrqyO8GXNLfAqYG5sUwOQcmY ScPb7jVoq54k2dcgUX7q2LjC6daBg2rPWGY8q0W+W0WKgKrDlPwJ8jNS6MAoMRz1 ybs0zxScni74tfTkzteskZ0rU+TXpJoVqcS5kGZ/bI6gTczMN0nVHBW6eZUOvcsL nMnwJp7nUmjV69PQK6WeFxa+OZIf4R1DGAYM1JVmsModhRqr60sBJG7cryhrAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUQN3s3CH/K8VKS468KxFw4F74Fy4wHwYDVR0j BBgwFoAUN7DOeNg4sguRXUOhprf0jTqxsqMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNkZkcUJlNWN5Q1g3ZXFoOWI5ZFJyaWZ5Wll1NldxUENyelp3NEJMVGJD Q0cvMS8zN0IwQ0U3OEQ4MzhCMjBCOTE1RDQzQTFBNkI3RjQ4RDNBQjFCMkEzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM3QjBDRTc4RDgzOEIyMEI5 MTVENDNBMUE2QjdGNDhEM0FCMUIyQTMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzZGZHFCZTVjeUNYN2VxaDliOWRScmlmeVpZdTZXcVBDcnpadzRCTFRiQ0NHLzEv MzEzMzMxMmUzMjMyMzEyZTMxMzYzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy MzYzNDM0MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoPdoDANBgkqhkiG9w0BAQsFAAOCAQEAZRda tbJq+L1l+6YqbchJZ690vG4JabtGl/7o9o0Zl3SZsyeWtAxYI8le1GCeO3aXCpIN JhrYm7ruZrNZJWnDuVZV6nLBCKTMahkBM0PheME+jg+JYT4tV+cxxdxhBq61v1PD E5DhIANlL0HiIQZ9bXWmfJCy65uW8sYASJyuxue7T9ILh6JyVYibNDsU1vyha9kP d3Srj6ath4KIoFP7I2btnb9C/mPYYqQHRuSAk6yCJgtN6YWaHymf7Iw4c6aLxrbh Y81xQzK2zmp6CqoTuWUT8UslavHv6JJknG4PgdrM6JNHEaxT+EehbSVkbrEx8v1o Mm5H+GpcpM2RW1Cm4A== -----END CERTIFICATE-----Generated at Mon Apr 14 02:34:32 2025 by rpki-client