$ rpki-client -vvf rpki-repo.registro.br/repo/6NRAZqTUi9C2gYdm8MhEir6NsveCUXxywwjZYJ8ES9MT/0/34352e3136382e3230362e302f32332d3233203d3e20323638303833.roa File: 34352e3136382e3230362e302f32332d3233203d3e20323638303833.roa (raw, json) Hash identifier: a8HEjTFwV83TMl/hmi0DGrfcDXQjebBzlqMTv47UthQ= Subject key identifier: 0E:4C:29:10:93:2C:DA:DD:95:39:78:80:A5:8C:E8:52:3E:E2:5B:FB Certificate issuer: /CN=1697926DE3CD00AA3AC5E65249B50EF179E9908C Certificate serial: 337F02001C3A83DBC042717D36EBB72DD1AE6827 Authority key identifier: 16:97:92:6D:E3:CD:00:AA:3A:C5:E6:52:49:B5:0E:F1:79:E9:90:8C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1697926DE3CD00AA3AC5E65249B50EF179E9908C.cer Subject info access: rsync://rpki-repo.registro.br/repo/6NRAZqTUi9C2gYdm8MhEir6NsveCUXxywwjZYJ8ES9MT/0/34352e3136382e3230362e302f32332d3233203d3e20323638303833.roa Signing time: Mon 13 Jan 2025 14:20:38 +0000 ROA not before: Mon 13 Jan 2025 14:15:38 +0000 ROA not after: Mon 12 Jan 2026 14:20:38 +0000 asID: 268083 IP address blocks: 45.168.206.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6NRAZqTUi9C2gYdm8MhEir6NsveCUXxywwjZYJ8ES9MT/0/1697926DE3CD00AA3AC5E65249B50EF179E9908C.crl rsync://rpki-repo.registro.br/repo/6NRAZqTUi9C2gYdm8MhEir6NsveCUXxywwjZYJ8ES9MT/0/1697926DE3CD00AA3AC5E65249B50EF179E9908C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1697926DE3CD00AA3AC5E65249B50EF179E9908C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 08 Apr 2025 13:05:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:7f:02:00:1c:3a:83:db:c0:42:71:7d:36:eb:b7:2d:d1:ae:68:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1697926DE3CD00AA3AC5E65249B50EF179E9908C Validity Not Before: Jan 13 14:15:38 2025 GMT Not After : Jan 12 14:20:38 2026 GMT Subject: CN=0E4C2910932CDADD95397880A58CE8523EE25BFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e4:4c:7e:5d:c7:99:92:cd:d6:e6:59:88:79: d2:51:07:ee:97:4d:89:6b:60:84:d8:c0:df:85:24: 07:97:24:f7:8d:f1:f9:b9:a6:8f:ea:58:cc:86:5a: 95:7f:ed:d3:fd:da:8b:cc:6a:36:51:ff:fb:6f:73: 05:64:c1:ff:0e:de:db:ae:b8:04:44:38:85:d0:24: ea:b6:bb:ed:e7:56:72:7a:33:79:7f:60:d3:37:1d: 83:79:b2:1f:f4:ff:75:2f:47:97:c2:c9:08:0d:47: 84:4b:93:9a:00:f2:3e:d2:c0:a6:e1:28:26:32:d8: 39:2b:4f:81:6a:bd:b6:58:c3:85:c2:57:b0:f8:c7: 59:75:2f:46:7a:92:85:7a:bb:8b:7c:a5:4e:25:cc: 36:ed:56:05:57:89:01:f7:3d:31:6c:3e:be:93:39: 00:34:1e:4b:5a:d4:8e:ff:18:98:d3:f4:97:1f:09: 45:c8:c0:77:f4:a0:e6:af:18:d5:91:ee:24:52:b2: 39:2c:a6:80:37:95:7d:88:83:52:9c:3c:4c:97:1e: 83:54:e7:9b:e2:07:f3:27:0b:35:94:5d:48:a1:27: 7c:c8:b7:fc:82:e8:5a:1b:24:cf:bf:9f:07:33:4c: 4f:6f:64:69:d4:47:08:6b:f6:08:e8:af:01:d3:03: b0:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:4C:29:10:93:2C:DA:DD:95:39:78:80:A5:8C:E8:52:3E:E2:5B:FB X509v3 Authority Key Identifier: keyid:16:97:92:6D:E3:CD:00:AA:3A:C5:E6:52:49:B5:0E:F1:79:E9:90:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6NRAZqTUi9C2gYdm8MhEir6NsveCUXxywwjZYJ8ES9MT/0/1697926DE3CD00AA3AC5E65249B50EF179E9908C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1697926DE3CD00AA3AC5E65249B50EF179E9908C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NRAZqTUi9C2gYdm8MhEir6NsveCUXxywwjZYJ8ES9MT/0/34352e3136382e3230362e302f32332d3233203d3e20323638303833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.168.206.0/23 Signature Algorithm: sha256WithRSAEncryption 27:7e:de:ae:9f:6c:4b:9e:46:90:04:ad:5f:a5:6f:f5:7e:1a: 0b:63:b3:a3:09:3c:5d:6f:a5:e1:19:5a:5a:d1:3d:5c:59:69: ca:b6:10:82:1a:e5:51:b6:c9:c3:c8:7b:0b:9e:3a:3f:5d:76: 94:49:07:06:88:ca:32:97:af:e9:76:0b:ef:74:dc:4e:44:18: 7b:7d:90:52:6e:2b:2f:37:9a:8f:15:5d:9f:6f:e4:21:e0:de: 19:0f:2f:ae:e1:67:93:57:cd:cb:bf:53:ac:2a:09:39:4e:85: 6b:ea:f7:f0:06:96:e6:b9:c6:d4:35:03:a7:b8:21:60:9d:52: a1:9c:e3:fe:50:e2:c4:c1:2c:71:b7:ec:10:70:d5:b7:fe:f3: 3e:76:d5:5d:ae:f6:78:4b:f3:27:5d:4f:50:3f:90:72:51:86: d9:71:3e:50:e6:d3:a5:7c:df:1c:a7:58:d3:1a:b7:58:b9:f8: f6:cd:4c:5e:d1:34:d8:f6:9a:dd:b9:e1:b8:97:45:f7:13:68: eb:fe:4a:c1:f2:a2:e3:c3:01:63:9c:7c:cf:72:6a:1d:ec:e7: 5b:82:a2:cd:9e:82:1a:2e:2b:3a:8b:c7:aa:8e:11:92:dc:4b: 1b:89:ea:62:6a:31:1d:24:69:0b:24:a6:c6:da:73:87:8d:25: 70:a3:47:b0 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUM38CABw6g9vAQnF9Nuu3LdGuaCcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY5NzkyNkRFM0NEMDBBQTNBQzVFNjUyNDlCNTBFRjE3 OUU5OTA4QzAeFw0yNTAxMTMxNDE1MzhaFw0yNjAxMTIxNDIwMzhaMDMxMTAvBgNV BAMTKDBFNEMyOTEwOTMyQ0RBREQ5NTM5Nzg4MEE1OENFODUyM0VFMjVCRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI5Ex+XceZks3W5lmIedJRB+6X TYlrYITYwN+FJAeXJPeN8fm5po/qWMyGWpV/7dP92ovMajZR//tvcwVkwf8O3tuu uAREOIXQJOq2u+3nVnJ6M3l/YNM3HYN5sh/0/3UvR5fCyQgNR4RLk5oA8j7SwKbh KCYy2DkrT4FqvbZYw4XCV7D4x1l1L0Z6koV6u4t8pU4lzDbtVgVXiQH3PTFsPr6T OQA0Hkta1I7/GJjT9JcfCUXIwHf0oOavGNWR7iRSsjkspoA3lX2Ig1KcPEyXHoNU 55viB/MnCzWUXUihJ3zIt/yC6FobJM+/nwczTE9vZGnURwhr9gjorwHTA7BjAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUDkwpEJMs2t2VOXiApYzoUj7iW/swHwYDVR0j BBgwFoAUFpeSbePNAKo6xeZSSbUO8XnpkIwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNk5SQVpxVFVpOUMyZ1lkbThNaEVpcjZOc3ZlQ1VYeHl3d2paWUo4RVM5 TVQvMC8xNjk3OTI2REUzQ0QwMEFBM0FDNUU2NTI0OUI1MEVGMTc5RTk5MDhDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE2OTc5MjZERTNDRDAwQUEz QUM1RTY1MjQ5QjUwRUYxNzlFOTkwOEMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzZOUkFacVRVaTlDMmdZZG04TWhFaXI2TnN2ZUNVWHh5d3dqWllKOEVTOU1ULzAv MzQzNTJlMzEzNjM4MmUzMjMwMzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2 MzgzMDM4MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAEtqM4wDQYJKoZIhvcNAQELBQADggEBACd+3q6f bEueRpAErV+lb/V+Ggtjs6MJPF1vpeEZWlrRPVxZacq2EIIa5VG2ycPIewueOj9d dpRJBwaIyjKXr+l2C+903E5EGHt9kFJuKy83mo8VXZ9v5CHg3hkPL67hZ5NXzcu/ U6wqCTlOhWvq9/AGlua5xtQ1A6e4IWCdUqGc4/5Q4sTBLHG37BBw1bf+8z521V2u 9nhL8yddT1A/kHJRhtlxPlDm06V83xynWNMat1i5+PbNTF7RNNj2mt254biXRfcT aOv+SsHyouPDAWOcfM9yah3s51uCos2eghouKzqLx6qOEZLcSxuJ6mJqMR0kaQsk psbac4eNJXCjR7A= -----END CERTIFICATE-----Generated at Mon Apr 7 17:28:54 2025 by rpki-client