$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e31392e3235302e302f32342d3234203d3e2032373136.roa File: 3230302e31392e3235302e302f32342d3234203d3e2032373136.roa (raw, json) Hash identifier: QjgmfYCCQjTQzBsxaESup5YnUrJ1LSU0ZlL2prRKhlQ= Subject key identifier: 85:2E:B6:42:AF:1F:6A:CF:BA:17:68:39:B5:F3:A9:B5:E7:51:AD:49 Certificate issuer: /CN=D54C376960A26972A0B767BDA084048DFFE3673E Certificate serial: 111158F8936F751FB0E41724BBC47F1F4F560025 Authority key identifier: D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer Subject info access: rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e31392e3235302e302f32342d3234203d3e2032373136.roa Signing time: Wed 05 Mar 2025 19:00:02 +0000 ROA not before: Wed 05 Mar 2025 18:55:02 +0000 ROA not after: Wed 04 Mar 2026 19:00:02 +0000 asID: 2716 IP address blocks: 200.19.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 06 Apr 2025 11:10:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:11:58:f8:93:6f:75:1f:b0:e4:17:24:bb:c4:7f:1f:4f:56:00:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D54C376960A26972A0B767BDA084048DFFE3673E Validity Not Before: Mar 5 18:55:02 2025 GMT Not After : Mar 4 19:00:02 2026 GMT Subject: CN=3082010A0282010100C48343F4F58BB1803C6C9BF93928C6DA8AE42027DE65F22D8479758C7EFDEF9116785DE1D5253E57D89DDB28B486A80850D83340DCF7A102024004C6866047214C435B8E2DEBD52D4228374D51C10CA891C5271560C23911528FB4D1CA69E07596BF7843AE3D1177F840C75019488D61239A620F28C8E2F798B6B0B945A42B388F9C8527013FE74EA0D9351FFF468056A0B8C3385E588FF370DFC2DE7F1EFEB71FD0F330E164A4431D966342D9149F30C06CA04D1FD34D6CE924E16E865D2C6144DE2E772357B8FDC7F991BFE9FF235736926FC0E1B88B3710E8488A9DCF1F05590269A226D3B5B7E215ECF8C4A4DF22FB2726E47DAC8F79E47D762370609B9B0203010001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:83:43:f4:f5:8b:b1:80:3c:6c:9b:f9:39:28: c6:da:8a:e4:20:27:de:65:f2:2d:84:79:75:8c:7e: fd:ef:91:16:78:5d:e1:d5:25:3e:57:d8:9d:db:28: b4:86:a8:08:50:d8:33:40:dc:f7:a1:02:02:40:04: c6:86:60:47:21:4c:43:5b:8e:2d:eb:d5:2d:42:28: 37:4d:51:c1:0c:a8:91:c5:27:15:60:c2:39:11:52: 8f:b4:d1:ca:69:e0:75:96:bf:78:43:ae:3d:11:77: f8:40:c7:50:19:48:8d:61:23:9a:62:0f:28:c8:e2: f7:98:b6:b0:b9:45:a4:2b:38:8f:9c:85:27:01:3f: e7:4e:a0:d9:35:1f:ff:46:80:56:a0:b8:c3:38:5e: 58:8f:f3:70:df:c2:de:7f:1e:fe:b7:1f:d0:f3:30: e1:64:a4:43:1d:96:63:42:d9:14:9f:30:c0:6c:a0: 4d:1f:d3:4d:6c:e9:24:e1:6e:86:5d:2c:61:44:de: 2e:77:23:57:b8:fd:c7:f9:91:bf:e9:ff:23:57:36: 92:6f:c0:e1:b8:8b:37:10:e8:48:8a:9d:cf:1f:05: 59:02:69:a2:26:d3:b5:b7:e2:15:ec:f8:c4:a4:df: 22:fb:27:26:e4:7d:ac:8f:79:e4:7d:76:23:70:60: 9b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:2E:B6:42:AF:1F:6A:CF:BA:17:68:39:B5:F3:A9:B5:E7:51:AD:49 X509v3 Authority Key Identifier: keyid:D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e31392e3235302e302f32342d3234203d3e2032373136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.19.250.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:b5:41:33:69:44:a6:7e:b0:7d:d0:9b:dd:2b:fc:d4:94:e0: b4:8d:8a:63:a1:10:05:e9:9f:81:ac:37:f4:2f:52:f8:34:a3: ef:da:09:c1:3e:45:0b:74:1b:74:3b:3e:1e:70:e8:f1:03:dc: 22:da:4b:af:10:07:1d:a3:3e:1e:a8:27:02:0f:c3:4d:0b:95: 3b:1d:6a:74:fb:f3:36:3c:df:b5:db:1c:d6:1e:51:2e:7c:13: f2:18:ab:08:5c:3a:74:65:ea:d4:bc:3b:c6:f5:99:a6:ba:cb: ff:b9:cd:9b:be:d3:b6:b6:6d:2f:c9:4f:86:72:72:3b:3d:1d: 9b:54:19:e7:98:0a:e3:19:26:b1:cc:8c:28:8d:01:7f:f9:4b: a5:e9:ae:2f:5b:33:38:5f:9c:aa:2a:83:ed:13:e0:39:5e:50: 67:20:f4:30:ab:f2:4b:f7:23:13:95:8b:57:91:de:e1:95:ef: fa:1f:c5:f7:af:79:cb:55:34:95:27:07:5d:34:0e:6d:d3:cf: 34:a2:3d:4b:07:f3:3a:a7:91:79:18:b9:c0:62:69:81:f3:e6: ec:67:eb:b4:32:08:f7:c6:4c:a2:a2:9f:66:5c:eb:1e:b2:18: 8c:e6:1b:4b:13:02:68:e5:6e:9f:33:f3:34:fc:4b:6f:f9:f2: d9:c0:77:f9 -----BEGIN CERTIFICATE----- MIIHPzCCBiegAwIBAgIUERFY+JNvdR+w5Bcku8R/H09WACUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU0QzM3Njk2MEEyNjk3MkEwQjc2N0JEQTA4NDA0OERG RkUzNjczRTAeFw0yNTAzMDUxODU1MDJaFw0yNjAzMDQxOTAwMDJaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzQ4MzQzRjRGNThCQjE4MDND NkM5QkY5MzkyOEM2REE4QUU0MjAyN0RFNjVGMjJEODQ3OTc1OEM3RUZERUY5MTE2 Nzg1REUxRDUyNTNFNTdEODlEREIyOEI0ODZBODA4NTBEODMzNDBEQ0Y3QTEwMjAy NDAwNEM2ODY2MDQ3MjE0QzQzNUI4RTJERUJENTJENDIyODM3NEQ1MUMxMENBODkx QzUyNzE1NjBDMjM5MTE1MjhGQjREMUNBNjlFMDc1OTZCRjc4NDNBRTNEMTE3N0Y4 NDBDNzUwMTk0ODhENjEyMzlBNjIwRjI4QzhFMkY3OThCNkIwQjk0NUE0MkIzODhG OUM4NTI3MDEzRkU3NEVBMEQ5MzUxRkZGNDY4MDU2QTBCOEMzMzg1RTU4OEZGMzcw REZDMkRFN0YxRUZFQjcxRkQwRjMzMEUxNjRBNDQzMUQ5NjYzNDJEOTE0OUYzMEMw NkNBMDREMUZEMzRENkNFOTI0RTE2RTg2NUQyQzYxNDRERTJFNzcyMzU3QjhGREM3 Rjk5MUJGRTlGRjIzNTczNjkyNkZDMEUxQjg4QjM3MTBFODQ4OEE5RENGMUYwNTU5 MDI2OUEyMjZEM0I1QjdFMjE1RUNGOEM0QTRERjIyRkIyNzI2RTQ3REFDOEY3OUU0 N0Q3NjIzNzA2MDlCOUIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAxIND9PWLsYA8bJv5OSjG2orkICfeZfIthHl1jH7975EWeF3h1SU+ V9id2yi0hqgIUNgzQNz3oQICQATGhmBHIUxDW44t69UtQig3TVHBDKiRxScVYMI5 EVKPtNHKaeB1lr94Q649EXf4QMdQGUiNYSOaYg8oyOL3mLawuUWkKziPnIUnAT/n TqDZNR//RoBWoLjDOF5Yj/Nw38Lefx7+tx/Q8zDhZKRDHZZjQtkUnzDAbKBNH9NN bOkk4W6GXSxhRN4udyNXuP3H+ZG/6f8jVzaSb8DhuIs3EOhIip3PHwVZAmmiJtO1 t+IV7PjEpN8i+ycm5H2sj3nkfXYjcGCbmwIDAQABo4ICTTCCAkkwHQYDVR0OBBYE FIUutkKvH2rPuhdoObXzqbXnUa1JMB8GA1UdIwQYMBaAFNVMN2lgomlyoLdnvaCE BI3/42c+MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhFYjRBR2pmTlk5emQ3 dEJtd2hUWExUSnlGRkFGelVGcVBnZUhVQ04xU3dhLzEvRDU0QzM3Njk2MEEyNjk3 MkEwQjc2N0JEQTA4NDA0OERGRkUzNjczRS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p Y2JyX3JlcG8vMS9ENTRDMzc2OTYwQTI2OTcyQTBCNzY3QkRBMDg0MDQ4REZGRTM2 NzNFLmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6 Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84RWI0QUdqZk5ZOXpkN3RCbXdo VFhMVEp5RkZBRnpVRnFQZ2VIVUNOMVN3YS8xLzMyMzAzMDJlMzEzOTJlMzIzNTMw MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMxMzYucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADIE/ow DQYJKoZIhvcNAQELBQADggEBAG21QTNpRKZ+sH3Qm90r/NSU4LSNimOhEAXpn4Gs N/QvUvg0o+/aCcE+RQt0G3Q7Ph5w6PED3CLaS68QBx2jPh6oJwIPw00LlTsdanT7 8zY837XbHNYeUS58E/IYqwhcOnRl6tS8O8b1maa6y/+5zZu+07a2bS/JT4Zycjs9 HZtUGeeYCuMZJrHMjCiNAX/5S6Xpri9bMzhfnKoqg+0T4DleUGcg9DCr8kv3IxOV i1eR3uGV7/ofxfevectVNJUnB100Dm3TzzSiPUsH8zqnkXkYucBiaYHz5uxn67Qy CPfGTKKin2Zc6x6yGIzmG0sTAmjlbp8z8zT8S2/58tnAd/k= -----END CERTIFICATE-----Generated at Sat Apr 5 23:55:55 2025 by rpki-client