$ rpki-client -vvf rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/1/3136382e3232372e34302e302f32322d3234203d3e20323634383833.roa File: 3136382e3232372e34302e302f32322d3234203d3e20323634383833.roa (raw, json) Hash identifier: PMrjcyP1eWdz1t4C8jQeZvMc6KD9XmEaTz6pAa2qGc0= Subject key identifier: A9:8D:B0:A0:AF:DC:EA:B1:14:BA:7B:94:D0:5C:79:D2:78:41:81:18 Certificate issuer: /CN=7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B Certificate serial: 4CF603C6A96817E8C40C8C2429DEA765EA5657D5 Authority key identifier: 76:52:D9:D4:F9:A6:42:C7:B0:47:74:C9:0C:F6:F3:FB:21:B7:F4:2B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.cer Subject info access: rsync://rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/1/3136382e3232372e34302e302f32322d3234203d3e20323634383833.roa Signing time: Thu 06 Mar 2025 18:07:54 +0000 ROA not before: Thu 06 Mar 2025 18:02:54 +0000 ROA not after: Thu 05 Mar 2026 18:07:54 +0000 asID: 264883 IP address blocks: 168.227.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.crl rsync://rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Apr 2025 09:07:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:f6:03:c6:a9:68:17:e8:c4:0c:8c:24:29:de:a7:65:ea:56:57:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B Validity Not Before: Mar 6 18:02:54 2025 GMT Not After : Mar 5 18:07:54 2026 GMT Subject: CN=A98DB0A0AFDCEAB114BA7B94D05C79D278418118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:93:16:ef:df:3b:01:77:f0:40:bb:22:24:6d: 63:ed:2c:7a:f8:63:f6:43:d1:71:cd:8c:49:35:bc: ce:83:e2:31:d7:cf:1d:0d:30:15:2c:1c:2a:0d:54: 51:cf:ca:e8:cd:e9:84:3e:1f:a7:0e:f9:f1:a5:f6: 3b:32:5e:0f:2f:4c:3f:25:12:2e:85:bb:55:41:18: 21:6f:40:70:ce:81:f7:ad:a8:f8:c3:f6:bc:99:93: 5a:29:ba:50:30:5e:03:02:3b:3a:13:bd:7a:5b:f2: 6b:3a:9a:ae:ee:41:82:8a:45:8d:a8:8a:5e:fb:49: 01:f9:a5:7b:0b:f6:88:b5:c0:3c:87:b7:0d:a0:5a: 74:b2:78:e6:d0:06:54:f3:fb:ad:e7:a9:73:1c:74: 5d:38:e8:a2:cc:81:3b:88:e3:70:4d:42:db:ee:57: e2:a8:32:d4:46:32:c5:3d:5e:9e:50:97:aa:a3:f2: 3d:49:69:58:7e:a6:6b:31:68:72:58:71:50:27:91: 0a:f2:33:33:8c:ba:a9:f5:1d:c5:cd:75:87:c2:39: 2d:a6:3c:27:41:e7:b3:03:55:5b:4b:6d:e0:88:12: 3d:7b:92:85:dc:92:2d:dc:93:80:5f:a3:e9:85:5d: d6:d9:a9:31:68:38:52:70:cd:ab:fc:4f:73:ce:74: d6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:8D:B0:A0:AF:DC:EA:B1:14:BA:7B:94:D0:5C:79:D2:78:41:81:18 X509v3 Authority Key Identifier: keyid:76:52:D9:D4:F9:A6:42:C7:B0:47:74:C9:0C:F6:F3:FB:21:B7:F4:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/1/3136382e3232372e34302e302f32322d3234203d3e20323634383833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.227.40.0/22 Signature Algorithm: sha256WithRSAEncryption 4c:60:42:1c:94:cd:d0:7c:07:45:d9:51:fe:5d:78:4b:7c:29: 2e:23:57:4e:04:dc:95:d6:ed:86:fa:da:ad:95:8b:3f:bc:bf: 15:ca:ce:d7:78:5d:7e:51:54:5b:97:3d:c6:97:fd:35:4e:74: 21:3e:61:f0:ed:b6:b9:e5:e9:4e:36:18:9d:2b:94:3f:d2:80: 03:b5:d8:06:4c:e8:e7:16:19:c1:7e:d9:00:be:e4:1d:5f:ce: d2:b6:32:85:1a:f1:a9:52:7f:c3:83:21:69:ec:f9:7f:ab:5f: 1a:70:35:6f:6f:af:c8:b0:47:ce:49:25:47:5e:a8:81:c8:9c: a5:4a:0b:45:4c:73:ba:b2:35:34:09:3b:ea:02:81:89:9e:8c: 4a:60:cd:24:e3:3f:bb:07:88:28:b2:89:9c:9a:98:3f:df:87: 4d:20:08:ad:a6:a2:bf:6b:94:0b:6f:81:05:66:aa:a7:5f:ef: e2:25:ab:0f:90:58:c4:2c:4f:7a:85:5a:4b:c9:26:32:3c:c7: 51:cc:34:67:28:64:83:c4:09:b1:ba:fc:19:06:3e:40:e0:c9: 04:6b:0e:3b:32:0f:46:eb:6b:dd:a7:a2:84:f6:fa:ff:a3:06: 7f:d1:8d:2a:dd:c3:f4:cf:4e:96:1c:d8:16:3c:dd:e2:f9:7a: a6:fd:f4:08 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUTPYDxqloF+jEDIwkKd6nZepWV9UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzY1MkQ5RDRGOUE2NDJDN0IwNDc3NEM5MENGNkYzRkIy MUI3RjQyQjAeFw0yNTAzMDYxODAyNTRaFw0yNjAzMDUxODA3NTRaMDMxMTAvBgNV BAMTKEE5OERCMEEwQUZEQ0VBQjExNEJBN0I5NEQwNUM3OUQyNzg0MTgxMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWkxbv3zsBd/BAuyIkbWPtLHr4 Y/ZD0XHNjEk1vM6D4jHXzx0NMBUsHCoNVFHPyujN6YQ+H6cO+fGl9jsyXg8vTD8l Ei6Fu1VBGCFvQHDOgfetqPjD9ryZk1opulAwXgMCOzoTvXpb8ms6mq7uQYKKRY2o il77SQH5pXsL9oi1wDyHtw2gWnSyeObQBlTz+63nqXMcdF046KLMgTuI43BNQtvu V+KoMtRGMsU9Xp5Ql6qj8j1JaVh+pmsxaHJYcVAnkQryMzOMuqn1HcXNdYfCOS2m PCdB57MDVVtLbeCIEj17koXcki3ck4Bfo+mFXdbZqTFoOFJwzav8T3POdNbZAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUqY2woK/c6rEUunuU0Fx50nhBgRgwHwYDVR0j BBgwFoAUdlLZ1PmmQsewR3TJDPbz+yG39CswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOFVWWmk1SFRHZnhUbTdYNFlXN2ZxRlczZFU1b3gzTXpDa0Vjelh4UHB6 WVEvMS83NjUyRDlENEY5QTY0MkM3QjA0Nzc0QzkwQ0Y2RjNGQjIxQjdGNDJCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc2NTJEOUQ0RjlBNjQyQzdC MDQ3NzRDOTBDRjZGM0ZCMjFCN0Y0MkIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzhVVlppNUhUR2Z4VG03WDRZVzdmcUZXM2RVNW94M016Q2tFY3pYeFBwellRLzEv MzEzNjM4MmUzMjMyMzcyZTM0MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2 MzQzODM4MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKo4ygwDQYJKoZIhvcNAQELBQADggEBAExgQhyU zdB8B0XZUf5deEt8KS4jV04E3JXW7Yb62q2Viz+8vxXKztd4XX5RVFuXPcaX/TVO dCE+YfDttrnl6U42GJ0rlD/SgAO12AZM6OcWGcF+2QC+5B1fztK2MoUa8alSf8OD IWns+X+rXxpwNW9vr8iwR85JJUdeqIHInKVKC0VMc7qyNTQJO+oCgYmejEpgzSTj P7sHiCiyiZyamD/fh00gCK2mor9rlAtvgQVmqqdf7+Ilqw+QWMQsT3qFWkvJJjI8 x1HMNGcoZIPECbG6/BkGPkDgyQRrDjsyD0bra92nooT2+v+jBn/RjSrdw/TPTpYc 2BY83eL5eqb99Ag= -----END CERTIFICATE-----Generated at Mon Apr 7 02:39:46 2025 by rpki-client