$ rpki-client -vvf rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/1/3133312e3232312e3136302e302f32342d3234203d3e20323634343334.roa File: 3133312e3232312e3136302e302f32342d3234203d3e20323634343334.roa (raw, json) Hash identifier: /Ol+nstKOPbAyTlwUldOXDOrGMN75r/88sj46+MnQnw= Subject key identifier: 39:EA:C8:F7:A3:A7:83:E4:7E:9B:BE:64:F2:F8:A3:56:71:67:F0:2B Certificate issuer: /CN=37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3 Certificate serial: 6854F9D7FEB0168D1BCC270EC7A198803A355A23 Authority key identifier: 37:B0:CE:78:D8:38:B2:0B:91:5D:43:A1:A6:B7:F4:8D:3A:B1:B2:A3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3.cer Subject info access: rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/1/3133312e3232312e3136302e302f32342d3234203d3e20323634343334.roa Signing time: Thu 06 Mar 2025 04:00:11 +0000 ROA not before: Thu 06 Mar 2025 03:55:11 +0000 ROA not after: Thu 05 Mar 2026 04:00:11 +0000 asID: 264434 IP address blocks: 131.221.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/1/37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3.crl rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/1/37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 14 Apr 2025 20:56:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:54:f9:d7:fe:b0:16:8d:1b:cc:27:0e:c7:a1:98:80:3a:35:5a:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3 Validity Not Before: Mar 6 03:55:11 2025 GMT Not After : Mar 5 04:00:11 2026 GMT Subject: CN=39EAC8F7A3A783E47E9BBE64F2F8A3567167F02B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8e:cb:1f:dc:db:4f:50:c8:7a:1a:e7:02:79: 5e:10:b9:4c:49:2c:16:7a:55:38:ce:de:da:9a:e4: 1b:f1:db:c0:69:8a:42:a1:42:ae:25:d1:7c:ae:b8: 21:dc:19:e6:6c:6c:f5:ce:89:61:8c:3c:09:84:08: c7:6c:bc:a8:ad:b6:7b:2f:ce:db:66:e4:67:c9:e2: b2:fa:99:65:6f:d3:c8:ff:32:a4:1f:6f:11:f0:07: 2c:e1:bf:1a:37:b6:35:5a:ef:53:40:1a:0b:f4:fb: 09:26:02:3a:12:c6:bc:fc:f3:7e:3f:3f:dc:2a:fb: 65:c8:32:89:17:c4:11:26:60:ca:40:fc:e6:57:6b: 5a:99:7a:11:25:9a:80:ff:ea:55:eb:be:41:6b:35: 8c:85:f5:71:e1:c0:5d:62:38:65:b4:76:c8:11:bd: d7:03:0f:5c:ec:3f:45:75:16:90:34:d9:65:4a:f7: 62:ff:bd:7d:e6:3d:bb:19:30:06:45:5b:5c:22:e1: 9e:f4:bf:56:a9:ae:af:79:c9:3b:d7:ba:98:d4:00: 42:ba:84:c4:8b:2a:56:70:db:0a:73:6c:e7:ed:60: c1:03:eb:c4:07:42:1b:21:d1:f4:71:b3:27:53:aa: 9e:e2:d2:a4:fd:19:95:dd:25:02:47:1e:ed:3d:d3: e2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:EA:C8:F7:A3:A7:83:E4:7E:9B:BE:64:F2:F8:A3:56:71:67:F0:2B X509v3 Authority Key Identifier: keyid:37:B0:CE:78:D8:38:B2:0B:91:5D:43:A1:A6:B7:F4:8D:3A:B1:B2:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/1/37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/1/3133312e3232312e3136302e302f32342d3234203d3e20323634343334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.221.160.0/24 Signature Algorithm: sha256WithRSAEncryption 80:f2:bd:09:01:68:7f:c7:76:d9:ef:6a:70:8a:fa:71:e1:53: 4e:60:ca:75:7e:ed:bb:5a:70:62:52:69:be:29:c7:1c:4b:ef: 99:49:a8:52:37:cc:59:20:1e:78:20:be:7a:fe:a2:ed:4d:b3: 8b:ef:4f:29:08:3b:03:09:a4:e8:79:bb:c2:28:65:da:53:c4: d3:61:9f:ad:95:1e:ce:0b:39:4e:7e:6f:cc:c7:91:da:24:7e: 9f:bf:4b:15:03:03:bd:5a:95:16:8f:ae:1f:0c:98:f7:81:9e: a4:9a:78:50:10:39:19:50:4d:6e:0c:e7:42:51:f4:fb:6b:a5: 06:16:3f:11:93:97:e3:0e:66:1b:8d:bb:6d:7b:58:33:53:0e: c3:97:6c:59:4d:7d:f6:f3:d3:47:d7:83:1b:e6:42:66:8c:7a: 73:4c:7a:c2:bb:ef:fc:10:43:96:5c:6f:cd:6a:1b:f0:04:55: 3b:7d:8e:a3:9b:f2:fc:22:b6:70:42:26:b0:e7:17:bf:f7:01: 7d:80:f9:13:7e:1e:71:ff:ad:45:01:df:2a:68:88:e8:30:7d: 61:e5:ce:ff:94:a5:df:05:44:82:f6:43:89:62:3a:4e:89:2e: 9c:45:63:c9:6f:4c:9b:d5:72:a3:f9:80:f3:96:c8:f2:64:49: 4b:d5:f6:94 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUaFT51/6wFo0bzCcOx6GYgDo1WiMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdCMENFNzhEODM4QjIwQjkxNUQ0M0ExQTZCN0Y0OEQz QUIxQjJBMzAeFw0yNTAzMDYwMzU1MTFaFw0yNjAzMDUwNDAwMTFaMDMxMTAvBgNV BAMTKDM5RUFDOEY3QTNBNzgzRTQ3RTlCQkU2NEYyRjhBMzU2NzE2N0YwMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIjssf3NtPUMh6GucCeV4QuUxJ LBZ6VTjO3tqa5Bvx28BpikKhQq4l0XyuuCHcGeZsbPXOiWGMPAmECMdsvKittnsv zttm5GfJ4rL6mWVv08j/MqQfbxHwByzhvxo3tjVa71NAGgv0+wkmAjoSxrz8834/ P9wq+2XIMokXxBEmYMpA/OZXa1qZehElmoD/6lXrvkFrNYyF9XHhwF1iOGW0dsgR vdcDD1zsP0V1FpA02WVK92L/vX3mPbsZMAZFW1wi4Z70v1aprq95yTvXupjUAEK6 hMSLKlZw2wpzbOftYMED68QHQhsh0fRxsydTqp7i0qT9GZXdJQJHHu090+IdAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUOerI96Ong+R+m75k8vijVnFn8CswHwYDVR0j BBgwFoAUN7DOeNg4sguRXUOhprf0jTqxsqMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNkZkcUJlNWN5Q1g3ZXFoOWI5ZFJyaWZ5Wll1NldxUENyelp3NEJMVGJD Q0cvMS8zN0IwQ0U3OEQ4MzhCMjBCOTE1RDQzQTFBNkI3RjQ4RDNBQjFCMkEzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM3QjBDRTc4RDgzOEIyMEI5 MTVENDNBMUE2QjdGNDhEM0FCMUIyQTMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzZGZHFCZTVjeUNYN2VxaDliOWRScmlmeVpZdTZXcVBDcnpadzRCTFRiQ0NHLzEv MzEzMzMxMmUzMjMyMzEyZTMxMzYzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy MzYzNDM0MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIPdoDANBgkqhkiG9w0BAQsFAAOCAQEAgPK9 CQFof8d22e9qcIr6ceFTTmDKdX7tu1pwYlJpvinHHEvvmUmoUjfMWSAeeCC+ev6i 7U2zi+9PKQg7Awmk6Hm7wihl2lPE02GfrZUezgs5Tn5vzMeR2iR+n79LFQMDvVqV Fo+uHwyY94GepJp4UBA5GVBNbgznQlH0+2ulBhY/EZOX4w5mG427bXtYM1MOw5ds WU199vPTR9eDG+ZCZox6c0x6wrvv/BBDllxvzWob8ARVO32Oo5vy/CK2cEImsOcX v/cBfYD5E34ecf+tRQHfKmiI6DB9YeXO/5Sl3wVEgvZDiWI6TokunEVjyW9Mm9Vy o/mA85bI8mRJS9X2lA== -----END CERTIFICATE-----Generated at Mon Apr 14 02:41:38 2025 by rpki-client