$ rpki-client -vvf rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/34352e3137302e3230302e302f32332d3234203d3e20323638313732.roa File: 34352e3137302e3230302e302f32332d3234203d3e20323638313732.roa (raw, json) Hash identifier: nvT42yV9iGFlUfoudSF7MMxzIS+GJktTRJMKLR66vik= Subject key identifier: 46:6E:E0:FA:89:56:E7:55:92:41:C1:5B:B8:AB:7F:2E:7C:2C:16:04 Certificate issuer: /CN=3D90D603749AF57040F7092DF1F2D266672E47E7 Certificate serial: 36ED6230BBF5E82814D80AF14492AA4117360BFF Authority key identifier: 3D:90:D6:03:74:9A:F5:70:40:F7:09:2D:F1:F2:D2:66:67:2E:47:E7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D90D603749AF57040F7092DF1F2D266672E47E7.cer Subject info access: rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/34352e3137302e3230302e302f32332d3234203d3e20323638313732.roa Signing time: Thu 10 Apr 2025 02:20:26 +0000 ROA not before: Thu 10 Apr 2025 02:15:26 +0000 ROA not after: Thu 09 Apr 2026 02:20:26 +0000 asID: 268172 IP address blocks: 45.170.200.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/3D90D603749AF57040F7092DF1F2D266672E47E7.crl rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/3D90D603749AF57040F7092DF1F2D266672E47E7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D90D603749AF57040F7092DF1F2D266672E47E7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 23 Apr 2025 06:25:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:ed:62:30:bb:f5:e8:28:14:d8:0a:f1:44:92:aa:41:17:36:0b:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D90D603749AF57040F7092DF1F2D266672E47E7 Validity Not Before: Apr 10 02:15:26 2025 GMT Not After : Apr 9 02:20:26 2026 GMT Subject: CN=466EE0FA8956E7559241C15BB8AB7F2E7C2C1604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9e:12:ee:46:cd:62:a5:92:b9:9c:76:ac:d3: 95:05:a1:6c:1e:dc:f4:77:df:86:04:c3:1e:60:46: 79:39:d6:74:de:cb:b2:46:ab:e9:26:66:86:8b:2c: 75:ec:ea:75:95:f7:ea:e1:ad:88:d5:2c:38:7e:77: 28:b2:7d:8a:6a:56:bd:c2:96:c1:64:35:22:ae:57: 45:c8:3b:67:08:13:9d:14:07:93:7b:ad:55:29:d5: 50:ad:31:21:10:9c:df:03:8e:39:92:23:68:aa:53: ce:6d:6b:03:f4:12:a2:83:9c:75:26:75:39:3e:59: 99:01:41:f8:fc:60:b7:b2:36:50:66:61:4a:74:ec: b3:82:0c:78:0a:2e:42:57:f5:a6:33:07:37:37:93: 1e:d2:89:c8:d9:ba:cd:78:76:8c:b5:46:fa:8f:a3: d2:fe:69:e3:68:d4:76:b1:8e:e9:80:b8:77:23:e6: af:f5:f9:35:08:2d:39:7a:36:3c:08:05:6d:95:d3: af:0b:92:fb:13:30:e6:97:fc:39:48:d4:df:02:67: 0b:ee:b6:e5:6b:6a:17:60:ea:07:05:3e:45:bc:fc: 59:20:28:8f:6a:ef:95:c2:ab:33:8e:75:ec:fa:ed: 79:a8:a8:c8:f0:61:21:0e:51:2e:13:35:33:49:37: 1e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:6E:E0:FA:89:56:E7:55:92:41:C1:5B:B8:AB:7F:2E:7C:2C:16:04 X509v3 Authority Key Identifier: keyid:3D:90:D6:03:74:9A:F5:70:40:F7:09:2D:F1:F2:D2:66:67:2E:47:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/3D90D603749AF57040F7092DF1F2D266672E47E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D90D603749AF57040F7092DF1F2D266672E47E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/34352e3137302e3230302e302f32332d3234203d3e20323638313732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.170.200.0/23 Signature Algorithm: sha256WithRSAEncryption ae:c5:8b:bd:4f:a5:58:d8:a6:1e:4b:aa:e8:e1:e2:66:6b:61: f4:51:64:0a:72:1c:85:f6:5e:c8:07:ee:dc:c7:c6:79:1e:ff: a0:44:c5:03:f7:d5:31:22:9f:a0:f6:92:ad:a5:ca:6c:f9:63: 60:c9:fd:23:9a:dd:7f:71:78:16:4f:2c:fa:4b:16:3c:cd:c6: bb:e0:46:a1:a6:df:3e:cf:f9:e7:65:fa:6e:71:eb:56:c3:db: 1a:8a:90:e6:4a:87:1a:65:66:e3:d7:c6:37:47:00:14:47:bc: e7:8a:13:a8:56:c1:c1:09:f1:5c:36:bd:16:a1:0a:3f:d9:47: 0e:45:88:af:03:b3:6c:8e:c5:c0:a6:a9:35:3a:f3:93:7c:77: 96:d2:4a:26:ce:a4:1e:45:92:ab:7c:0b:cf:7d:1e:ae:99:83: 50:4c:f8:eb:9a:c7:0d:3c:c1:52:6f:ab:b2:93:dd:74:e1:e3: 50:32:ad:4c:71:b0:28:55:a3:a8:da:be:2c:60:f3:17:11:7f: 11:f2:7c:8c:40:04:82:92:b9:fd:0d:54:f6:35:31:91:f5:08: 22:a9:97:5c:67:e4:40:1c:34:fe:92:97:c4:a1:27:3f:a9:6b: de:45:6d:e9:fb:46:c4:a7:be:04:fe:8a:1d:65:d7:53:e1:6b: b5:db:01:44 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUNu1iMLv16CgU2ArxRJKqQRc2C/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q5MEQ2MDM3NDlBRjU3MDQwRjcwOTJERjFGMkQyNjY2 NzJFNDdFNzAeFw0yNTA0MTAwMjE1MjZaFw0yNjA0MDkwMjIwMjZaMDMxMTAvBgNV BAMTKDQ2NkVFMEZBODk1NkU3NTU5MjQxQzE1QkI4QUI3RjJFN0MyQzE2MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCznhLuRs1ipZK5nHas05UFoWwe 3PR334YEwx5gRnk51nTey7JGq+kmZoaLLHXs6nWV9+rhrYjVLDh+dyiyfYpqVr3C lsFkNSKuV0XIO2cIE50UB5N7rVUp1VCtMSEQnN8DjjmSI2iqU85tawP0EqKDnHUm dTk+WZkBQfj8YLeyNlBmYUp07LOCDHgKLkJX9aYzBzc3kx7SicjZus14doy1RvqP o9L+aeNo1HaxjumAuHcj5q/1+TUILTl6NjwIBW2V068LkvsTMOaX/DlI1N8CZwvu tuVrahdg6gcFPkW8/FkgKI9q75XCqzOOdez67XmoqMjwYSEOUS4TNTNJNx6fAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQURm7g+olW51WSQcFbuKt/LnwsFgQwHwYDVR0j BBgwFoAUPZDWA3Sa9XBA9wkt8fLSZmcuR+cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN2hWZGdTYXVEUmo2ZERpWXl3OXEyOG9HVDZCUFJrdG9HMTdDRENqNWF0 eEYvMC8zRDkwRDYwMzc0OUFGNTcwNDBGNzA5MkRGMUYyRDI2NjY3MkU0N0U3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNEOTBENjAzNzQ5QUY1NzA0 MEY3MDkyREYxRjJEMjY2NjcyRTQ3RTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzdoVmRnU2F1RFJqNmREaVl5dzlxMjhvR1Q2QlBSa3RvRzE3Q0RDajVhdHhGLzAv MzQzNTJlMzEzNzMwMmUzMjMwMzAyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM2 MzgzMTM3MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAEtqsgwDQYJKoZIhvcNAQELBQADggEBAK7Fi71P pVjYph5Lqujh4mZrYfRRZApyHIX2XsgH7tzHxnke/6BExQP31TEin6D2kq2lymz5 Y2DJ/SOa3X9xeBZPLPpLFjzNxrvgRqGm3z7P+edl+m5x61bD2xqKkOZKhxplZuPX xjdHABRHvOeKE6hWwcEJ8Vw2vRahCj/ZRw5FiK8Ds2yOxcCmqTU685N8d5bSSibO pB5Fkqt8C899Hq6Zg1BM+Ouaxw08wVJvq7KT3XTh41AyrUxxsChVo6javixg8xcR fxHyfIxABIKSuf0NVPY1MZH1CCKpl1xn5EAcNP6Sl8ShJz+pa95Fben7RsSnvgT+ ih1l11Pha7XbAUQ= -----END CERTIFICATE-----Generated at Tue Apr 22 21:43:26 2025 by rpki-client