$ rpki-client -vvf rpki-repo.registro.br/repo/7vSJxH95ahqMLU24jc8syjDiT1u6mWBdBRrFw7va8Gcz/1/34352e3233382e33322e302f32322d3332203d3e20323633313535.roa File: 34352e3233382e33322e302f32322d3332203d3e20323633313535.roa (raw, json) Hash identifier: KzAjB3MiyWypQcZag4cWosAsjY0D6zBqG+EEuC5Dkps= Subject key identifier: 01:74:74:28:7A:53:E7:D4:71:C4:8A:D1:4F:80:09:D3:BF:EC:F9:35 Certificate issuer: /CN=B6EB3DEA1B113D8089F2EB7F26A52CBABA6DF2D8 Certificate serial: 587B3198DC2CB0AB20B0DBAAC9B9142B7D8D3646 Authority key identifier: B6:EB:3D:EA:1B:11:3D:80:89:F2:EB:7F:26:A5:2C:BA:BA:6D:F2:D8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6EB3DEA1B113D8089F2EB7F26A52CBABA6DF2D8.cer Subject info access: rsync://rpki-repo.registro.br/repo/7vSJxH95ahqMLU24jc8syjDiT1u6mWBdBRrFw7va8Gcz/1/34352e3233382e33322e302f32322d3332203d3e20323633313535.roa Signing time: Wed 05 Mar 2025 23:21:38 +0000 ROA not before: Wed 05 Mar 2025 23:16:38 +0000 ROA not after: Wed 04 Mar 2026 23:21:38 +0000 asID: 263155 IP address blocks: 45.238.32.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7vSJxH95ahqMLU24jc8syjDiT1u6mWBdBRrFw7va8Gcz/1/B6EB3DEA1B113D8089F2EB7F26A52CBABA6DF2D8.crl rsync://rpki-repo.registro.br/repo/7vSJxH95ahqMLU24jc8syjDiT1u6mWBdBRrFw7va8Gcz/1/B6EB3DEA1B113D8089F2EB7F26A52CBABA6DF2D8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6EB3DEA1B113D8089F2EB7F26A52CBABA6DF2D8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Apr 2025 22:13:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:7b:31:98:dc:2c:b0:ab:20:b0:db:aa:c9:b9:14:2b:7d:8d:36:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6EB3DEA1B113D8089F2EB7F26A52CBABA6DF2D8 Validity Not Before: Mar 5 23:16:38 2025 GMT Not After : Mar 4 23:21:38 2026 GMT Subject: CN=017474287A53E7D471C48AD14F8009D3BFECF935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e6:76:c2:0b:fb:c9:88:62:43:b6:9a:e7:b9: 6e:cc:03:b3:83:29:bb:ed:71:6b:6c:00:5d:28:22: 4b:d8:27:b8:8f:8d:9f:1c:38:5c:f8:0e:b2:3a:52: 1d:65:99:18:23:0e:98:ac:6f:d8:46:25:91:43:c7: 46:9e:b9:fa:1b:de:2d:d8:6a:67:7d:b0:5d:ee:db: 5c:af:67:da:dd:94:5c:d2:82:d6:20:f2:f0:d1:e3: 17:82:b7:2f:0c:df:79:9e:92:e8:04:cc:4b:71:3e: cd:fe:ff:16:b0:89:59:3a:8b:04:b4:14:75:1f:50: 33:50:a5:57:62:22:00:1d:01:16:02:32:5c:59:fe: ee:78:b6:86:2b:30:e8:27:62:b8:58:08:3f:31:c1: d5:cd:ac:82:06:c5:45:ef:91:d1:89:2b:12:a5:dc: ea:cc:32:3b:b0:da:d7:35:dd:09:a2:aa:2e:b7:44: 65:e8:c9:e3:3f:73:6b:22:b4:2f:27:5b:a8:ad:8f: f0:89:81:41:12:0b:49:60:a7:3b:e9:d7:a1:18:82: f8:2b:56:1d:60:44:b1:06:b9:a6:f5:f4:08:28:5b: 63:63:34:92:f5:b2:67:61:e7:4a:bc:fc:52:b3:9d: 52:61:1b:66:83:be:b8:1e:27:a9:5b:3b:68:f2:ec: a7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:74:74:28:7A:53:E7:D4:71:C4:8A:D1:4F:80:09:D3:BF:EC:F9:35 X509v3 Authority Key Identifier: keyid:B6:EB:3D:EA:1B:11:3D:80:89:F2:EB:7F:26:A5:2C:BA:BA:6D:F2:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7vSJxH95ahqMLU24jc8syjDiT1u6mWBdBRrFw7va8Gcz/1/B6EB3DEA1B113D8089F2EB7F26A52CBABA6DF2D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6EB3DEA1B113D8089F2EB7F26A52CBABA6DF2D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7vSJxH95ahqMLU24jc8syjDiT1u6mWBdBRrFw7va8Gcz/1/34352e3233382e33322e302f32322d3332203d3e20323633313535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.238.32.0/22 Signature Algorithm: sha256WithRSAEncryption a8:a0:9c:d5:29:d4:9c:64:b4:c7:a0:b3:8f:c1:8f:65:43:69: 40:87:ec:6b:12:9e:d3:4e:a2:37:52:0b:20:ec:6a:bb:83:05: 91:16:1c:36:5d:36:83:5f:59:d1:f7:59:cc:b8:66:1f:9c:1e: 66:65:cc:68:86:f2:2b:3a:2d:06:a7:18:d6:3c:24:fc:8f:3d: fe:c1:f0:e3:5f:3f:69:eb:70:00:2d:e5:26:fd:b7:47:2e:50: 3a:f5:b1:fe:a1:73:7d:99:dd:a8:3a:22:78:99:f6:b8:d5:a6: 98:5d:46:b0:de:5b:c7:d4:e8:b9:2c:bc:f5:48:6c:ab:93:4d: ee:0f:a0:53:45:ee:a9:1a:5f:fc:45:ae:42:80:52:e0:58:f0: ac:b7:41:bd:9a:57:6e:e5:29:a6:04:0b:7e:7c:44:c4:a8:37: ec:7d:3d:f6:9b:9c:dd:04:4b:ef:77:9c:42:ba:79:f0:f2:54: dd:5b:78:02:71:d7:37:94:c0:c0:40:bc:04:6d:1a:eb:58:0b: 2d:83:b8:30:ab:ff:4a:65:31:40:b0:ca:87:b0:3a:8b:a3:c5: b0:41:c7:32:c6:d2:38:da:ef:45:29:10:ea:3f:5b:f5:64:d3: 6e:9d:2c:54:97:f1:c2:41:b2:99:0e:78:3c:1a:fa:18:54:4b: c2:49:6d:26 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUWHsxmNwssKsgsNuqybkUK32NNkYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjZFQjNERUExQjExM0Q4MDg5RjJFQjdGMjZBNTJDQkFC QTZERjJEODAeFw0yNTAzMDUyMzE2MzhaFw0yNjAzMDQyMzIxMzhaMDMxMTAvBgNV BAMTKDAxNzQ3NDI4N0E1M0U3RDQ3MUM0OEFEMTRGODAwOUQzQkZFQ0Y5MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd5nbCC/vJiGJDtprnuW7MA7OD KbvtcWtsAF0oIkvYJ7iPjZ8cOFz4DrI6Uh1lmRgjDpisb9hGJZFDx0aeufob3i3Y amd9sF3u21yvZ9rdlFzSgtYg8vDR4xeCty8M33mekugEzEtxPs3+/xawiVk6iwS0 FHUfUDNQpVdiIgAdARYCMlxZ/u54toYrMOgnYrhYCD8xwdXNrIIGxUXvkdGJKxKl 3OrMMjuw2tc13Qmiqi63RGXoyeM/c2sitC8nW6itj/CJgUESC0lgpzvp16EYgvgr Vh1gRLEGuab19AgoW2NjNJL1smdh50q8/FKznVJhG2aDvrgeJ6lbO2jy7KcrAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUAXR0KHpT59RxxIrRT4AJ07/s+TUwHwYDVR0j BBgwFoAUtus96hsRPYCJ8ut/JqUsurpt8tgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN3ZTSnhIOTVhaHFNTFUyNGpjOHN5akRpVDF1Nm1XQmRCUnJGdzd2YThH Y3ovMS9CNkVCM0RFQTFCMTEzRDgwODlGMkVCN0YyNkE1MkNCQUJBNkRGMkQ4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I2RUIzREVBMUIxMTNEODA4 OUYyRUI3RjI2QTUyQ0JBQkE2REYyRDguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzd2U0p4SDk1YWhxTUxVMjRqYzhzeWpEaVQxdTZtV0JkQlJyRnc3dmE4R2N6LzEv MzQzNTJlMzIzMzM4MmUzMzMyMmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjMz MzEzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQCLe4gMA0GCSqGSIb3DQEBCwUAA4IBAQCooJzVKdSc ZLTHoLOPwY9lQ2lAh+xrEp7TTqI3Ugsg7Gq7gwWRFhw2XTaDX1nR91nMuGYfnB5m ZcxohvIrOi0GpxjWPCT8jz3+wfDjXz9p63AALeUm/bdHLlA69bH+oXN9md2oOiJ4 mfa41aaYXUaw3lvH1Oi5LLz1SGyrk03uD6BTRe6pGl/8Ra5CgFLgWPCst0G9mldu 5SmmBAt+fETEqDfsfT32m5zdBEvvd5xCunnw8lTdW3gCcdc3lMDAQLwEbRrrWAst g7gwq/9KZTFAsMqHsDqLo8WwQccyxtI42u9FKRDqP1v1ZNNunSxUl/HCQbKZDng8 GvoYVEvCSW0m -----END CERTIFICATE-----Generated at Mon Apr 7 08:06:03 2025 by rpki-client