$ rpki-client -vvf rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/34352e3138312e3130382e302f32322d3232203d3e20323639313833.roa File: 34352e3138312e3130382e302f32322d3232203d3e20323639313833.roa (raw, json) Hash identifier: GL81dEJlRKChuOE0S8509jFD8OV3S20mmiTLF0fC9So= Subject key identifier: 91:8E:AE:53:45:F6:1B:E1:2C:DB:D2:03:CC:2A:39:A8:0C:D1:33:B9 Certificate issuer: /CN=95D5107C3F975DC279B2EE7748B02AB010470E6D Certificate serial: 0CFEFF6D422E1DFDE4D1A7ED47028A69B0F34E62 Authority key identifier: 95:D5:10:7C:3F:97:5D:C2:79:B2:EE:77:48:B0:2A:B0:10:47:0E:6D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95D5107C3F975DC279B2EE7748B02AB010470E6D.cer Subject info access: rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/34352e3138312e3130382e302f32322d3232203d3e20323639313833.roa Signing time: Wed 19 Mar 2025 18:27:26 +0000 ROA not before: Wed 19 Mar 2025 18:22:26 +0000 ROA not after: Wed 18 Mar 2026 18:27:26 +0000 asID: 269183 IP address blocks: 45.181.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/95D5107C3F975DC279B2EE7748B02AB010470E6D.crl rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/95D5107C3F975DC279B2EE7748B02AB010470E6D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95D5107C3F975DC279B2EE7748B02AB010470E6D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 00:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:fe:ff:6d:42:2e:1d:fd:e4:d1:a7:ed:47:02:8a:69:b0:f3:4e:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95D5107C3F975DC279B2EE7748B02AB010470E6D Validity Not Before: Mar 19 18:22:26 2025 GMT Not After : Mar 18 18:27:26 2026 GMT Subject: CN=918EAE5345F61BE12CDBD203CC2A39A80CD133B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2d:27:3a:ea:1f:09:17:f6:fb:c2:04:67:2b: 55:bb:3f:cf:f2:24:e0:a5:2a:c9:63:d3:67:be:c4: 41:cc:40:ca:06:14:f0:6d:85:e6:06:71:36:31:b5: bd:8e:14:61:dc:17:c2:cb:ab:ed:4a:9f:6d:f2:f7: b8:1c:0e:42:ed:ae:f2:ea:15:a2:88:83:a8:c4:e3: 14:68:5e:a3:a1:9d:14:2b:11:da:bd:3a:95:cd:72: bf:3b:c3:85:1b:fd:87:c5:8d:b8:51:99:86:36:b1: a7:58:08:54:f3:38:63:1e:1f:b0:f2:ee:d8:81:e0: 5f:a3:eb:52:d3:42:9c:db:59:c0:c3:99:91:d1:48: 75:6b:75:f7:00:eb:da:f6:73:6e:63:49:84:9b:05: d9:8c:06:cb:d4:4e:89:04:19:00:c7:14:b0:35:a4: ba:9f:32:37:28:73:f9:0e:f2:47:97:a5:32:36:87: 55:3f:46:59:14:74:a1:9d:0d:60:b4:fd:4b:78:9e: 27:b3:9f:59:b7:5b:6e:aa:68:3e:ba:ec:5d:ad:58: 4e:12:86:70:1b:df:8f:6a:2f:c2:9d:bd:97:7c:9b: 2c:24:f0:11:0e:9b:a7:2c:b1:fb:51:92:0e:46:cc: 76:52:a6:fd:0d:11:22:1f:b1:83:8c:98:e6:23:ff: 15:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:8E:AE:53:45:F6:1B:E1:2C:DB:D2:03:CC:2A:39:A8:0C:D1:33:B9 X509v3 Authority Key Identifier: keyid:95:D5:10:7C:3F:97:5D:C2:79:B2:EE:77:48:B0:2A:B0:10:47:0E:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/95D5107C3F975DC279B2EE7748B02AB010470E6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95D5107C3F975DC279B2EE7748B02AB010470E6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/34352e3138312e3130382e302f32322d3232203d3e20323639313833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.181.108.0/22 Signature Algorithm: sha256WithRSAEncryption 54:4b:9c:4d:7a:eb:6b:d5:b9:54:ef:4d:92:72:58:3d:9e:9a: d8:33:bb:14:8a:86:d7:bd:98:4e:c1:dd:3a:48:a7:24:de:54: 0f:16:e4:da:be:14:46:ee:f7:c1:7a:06:bb:92:07:d2:a7:fc: f9:db:88:40:09:00:fe:ed:a1:3e:5c:a4:ca:5a:1c:28:6d:9f: 58:fd:04:39:e3:f5:dd:5d:cd:b3:35:5e:dd:f0:1a:cb:07:9f: 8d:48:5e:4c:c4:34:4a:1d:33:b4:5e:71:ca:ce:47:ab:4c:54: 3f:9a:05:80:73:f1:80:fa:e3:7c:28:82:d0:ee:9a:ac:46:22: 24:ed:9c:08:1a:2a:fb:94:41:0f:ac:43:f4:ed:c2:6c:d4:55: 27:51:5b:8b:90:05:77:86:84:85:a1:c9:89:06:eb:cb:5b:de: 77:15:7d:e8:88:62:fa:96:26:22:98:94:a7:1e:ed:86:b1:a6: 14:fd:35:e8:2a:fc:07:48:94:83:d2:14:45:ed:15:25:cd:6a: 3f:7c:56:b0:2b:43:e7:f3:23:1d:ff:56:81:0e:91:9b:13:9c: 59:17:98:57:05:1a:91:ff:04:bd:0c:02:e3:6a:cf:ce:6f:25: 27:5b:76:fa:40:b5:64:ff:f3:46:27:58:b4:0f:41:d4:2e:73: 97:df:a4:50 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUDP7/bUIuHf3k0aftRwKKabDzTmIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVENTEwN0MzRjk3NURDMjc5QjJFRTc3NDhCMDJBQjAx MDQ3MEU2RDAeFw0yNTAzMTkxODIyMjZaFw0yNjAzMTgxODI3MjZaMDMxMTAvBgNV BAMTKDkxOEVBRTUzNDVGNjFCRTEyQ0RCRDIwM0NDMkEzOUE4MENEMTMzQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWLSc66h8JF/b7wgRnK1W7P8/y JOClKslj02e+xEHMQMoGFPBtheYGcTYxtb2OFGHcF8LLq+1Kn23y97gcDkLtrvLq FaKIg6jE4xRoXqOhnRQrEdq9OpXNcr87w4Ub/YfFjbhRmYY2sadYCFTzOGMeH7Dy 7tiB4F+j61LTQpzbWcDDmZHRSHVrdfcA69r2c25jSYSbBdmMBsvUTokEGQDHFLA1 pLqfMjcoc/kO8keXpTI2h1U/RlkUdKGdDWC0/Ut4niezn1m3W26qaD667F2tWE4S hnAb349qL8KdvZd8mywk8BEOm6cssftRkg5GzHZSpv0NESIfsYOMmOYj/xWLAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUkY6uU0X2G+Es29IDzCo5qAzRM7kwHwYDVR0j BBgwFoAUldUQfD+XXcJ5su53SLAqsBBHDm0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN3NKUDZxMUtUTFZZdG0zNFVHY3J4RlNSd1Z6a3lxVzdFZXNOdmVZSEVi RGIvMC85NUQ1MTA3QzNGOTc1REMyNzlCMkVFNzc0OEIwMkFCMDEwNDcwRTZELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk1RDUxMDdDM0Y5NzVEQzI3 OUIyRUU3NzQ4QjAyQUIwMTA0NzBFNkQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzdzSlA2cTFLVExWWXRtMzRVR2NyeEZTUndWemt5cVc3RWVzTnZlWUhFYkRiLzAv MzQzNTJlMzEzODMxMmUzMTMwMzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2 MzkzMTM4MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAIttWwwDQYJKoZIhvcNAQELBQADggEBAFRLnE16 62vVuVTvTZJyWD2emtgzuxSKhte9mE7B3TpIpyTeVA8W5Nq+FEbu98F6BruSB9Kn /PnbiEAJAP7toT5cpMpaHChtn1j9BDnj9d1dzbM1Xt3wGssHn41IXkzENEodM7Re ccrOR6tMVD+aBYBz8YD643wogtDumqxGIiTtnAgaKvuUQQ+sQ/TtwmzUVSdRW4uQ BXeGhIWhyYkG68tb3ncVfeiIYvqWJiKYlKce7YaxphT9Negq/AdIlIPSFEXtFSXN aj98VrArQ+fzIx3/VoEOkZsTnFkXmFcFGpH/BL0MAuNqz85vJSdbdvpAtWT/80Yn WLQPQdQuc5ffpFA= -----END CERTIFICATE-----Generated at Wed Apr 9 07:21:58 2025 by rpki-client