$ rpki-client -vvf rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/34352e3138302e3134342e302f32322d3332203d3e20323639313337.roa File: 34352e3138302e3134342e302f32322d3332203d3e20323639313337.roa (raw, json) Hash identifier: CQkxTLpB0h8sw9f6HinJ/zgqW1tumRLs+pW63/RGxSA= Subject key identifier: 3E:0A:60:7A:55:74:92:4B:F0:D7:C5:38:2A:4A:1D:0A:80:68:46:F5 Certificate issuer: /CN=00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74 Certificate serial: 4F63E63631072CC789E71E2DCCB20EB3178EC86B Authority key identifier: 00:D9:5A:AB:43:E0:36:D7:A6:DE:22:28:E9:DB:13:FF:AB:79:BE:74 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.cer Subject info access: rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/34352e3138302e3134342e302f32322d3332203d3e20323639313337.roa Signing time: Thu 06 Mar 2025 17:52:23 +0000 ROA not before: Thu 06 Mar 2025 17:47:23 +0000 ROA not after: Thu 05 Mar 2026 17:52:23 +0000 asID: 269137 IP address blocks: 45.180.144.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.crl rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 08 Apr 2025 22:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:63:e6:36:31:07:2c:c7:89:e7:1e:2d:cc:b2:0e:b3:17:8e:c8:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74 Validity Not Before: Mar 6 17:47:23 2025 GMT Not After : Mar 5 17:52:23 2026 GMT Subject: CN=3E0A607A5574924BF0D7C5382A4A1D0A806846F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:71:9d:4c:5f:91:36:47:85:38:8b:11:44:d3: d3:e1:48:9f:3c:ee:e8:11:bb:74:df:45:15:ab:0a: 6e:e1:5e:44:95:34:ae:9d:ec:12:43:7a:e3:6b:8a: b6:15:a3:9e:c3:88:c6:e3:ef:b3:b9:cb:de:22:3f: 25:99:e9:35:63:59:18:d2:f3:09:d8:d0:c3:a1:9c: ea:60:65:a7:3a:65:74:82:a2:ce:52:ad:18:b6:44: d6:00:35:f2:e3:8d:d8:73:e7:37:69:95:13:98:9a: 75:5d:b3:3c:58:f0:76:af:7a:9c:b6:0a:bc:d9:dc: 7d:e8:17:f4:cc:1f:e3:24:7d:77:04:99:d7:b7:ba: 26:1d:14:f5:03:b6:1d:0a:ae:dc:9e:d8:88:48:2a: c1:29:aa:f6:70:66:39:c4:50:73:4a:bc:dc:59:67: 3d:16:7b:a9:01:11:b1:2d:ed:06:d5:67:a0:71:96: 0b:7f:a4:dc:31:ca:b8:78:da:ea:8f:d4:f7:06:c2: 5d:e8:90:fd:d9:19:a6:a9:c9:11:31:5e:27:fb:a7: 8b:4f:a2:d3:d2:97:d8:89:a9:2f:ff:60:88:6d:ef: 61:f9:9a:7b:aa:66:cf:b0:43:e2:74:8b:bd:c7:60: 87:2d:b3:79:7d:32:b6:b3:37:48:03:36:0c:be:72: 8d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:0A:60:7A:55:74:92:4B:F0:D7:C5:38:2A:4A:1D:0A:80:68:46:F5 X509v3 Authority Key Identifier: keyid:00:D9:5A:AB:43:E0:36:D7:A6:DE:22:28:E9:DB:13:FF:AB:79:BE:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/34352e3138302e3134342e302f32322d3332203d3e20323639313337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.180.144.0/22 Signature Algorithm: sha256WithRSAEncryption 6b:8b:74:ff:99:2e:fc:24:77:4c:5a:ee:eb:ea:69:fb:40:c7: 83:04:67:52:83:3b:dc:98:5d:e4:81:07:95:57:5b:f2:79:6e: 79:1a:4f:e1:88:1c:53:e0:15:22:13:80:ad:62:b0:bd:98:28: 85:07:04:77:ad:0c:b5:0c:80:c4:55:6e:e0:ad:9d:32:e2:51: 9e:65:19:21:7a:7b:48:36:89:82:66:8d:0f:83:1a:e3:6f:6d: 8b:36:80:31:0e:d5:cd:e0:1a:f3:af:9e:b3:79:c1:54:b5:ca: bd:46:6f:1b:00:d3:ac:ae:ce:63:37:b4:5d:ef:af:f5:36:e6: fb:49:55:3b:ca:2b:df:fd:af:dd:b9:6e:52:92:a1:39:a5:cc: 79:9e:7c:bb:2c:a2:79:84:a4:71:52:ad:39:c8:dd:58:ec:c1: 5f:09:ff:cb:ad:27:87:22:9d:21:63:ff:58:62:6b:0d:a2:97: 82:2b:01:f5:69:19:9f:e2:2a:7b:8b:5c:6a:76:71:36:0c:fe: 4c:5e:6b:b0:c0:f0:ac:7e:27:b3:ea:a4:77:99:4a:ab:88:82: 27:74:87:60:b3:3d:98:05:c9:ca:b3:54:61:a2:df:65:a0:3e: 51:b9:fb:93:c5:a3:22:36:e9:79:cd:1a:41:1c:5b:42:77:16: b3:bd:c4:c7 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUT2PmNjEHLMeJ5x4tzLIOsxeOyGswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBEOTVBQUI0M0UwMzZEN0E2REUyMjI4RTlEQjEzRkZB Qjc5QkU3NDAeFw0yNTAzMDYxNzQ3MjNaFw0yNjAzMDUxNzUyMjNaMDMxMTAvBgNV BAMTKDNFMEE2MDdBNTU3NDkyNEJGMEQ3QzUzODJBNEExRDBBODA2ODQ2RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmcZ1MX5E2R4U4ixFE09PhSJ88 7ugRu3TfRRWrCm7hXkSVNK6d7BJDeuNrirYVo57DiMbj77O5y94iPyWZ6TVjWRjS 8wnY0MOhnOpgZac6ZXSCos5SrRi2RNYANfLjjdhz5zdplROYmnVdszxY8Havepy2 CrzZ3H3oF/TMH+MkfXcEmde3uiYdFPUDth0Krtye2IhIKsEpqvZwZjnEUHNKvNxZ Zz0We6kBEbEt7QbVZ6Bxlgt/pNwxyrh42uqP1PcGwl3okP3ZGaapyRExXif7p4tP otPSl9iJqS//YIht72H5mnuqZs+wQ+J0i73HYIcts3l9MrazN0gDNgy+co1RAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUPgpgelV0kkvw18U4KkodCoBoRvUwHwYDVR0j BBgwFoAUANlaq0PgNtem3iIo6dsT/6t5vnQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOGFQMWk0eWd5eWlyZFl0YzVRUW01OFRKdVFYYWRxVDcxeXlqaDNOTVF5 Q0svMS8wMEQ5NUFBQjQzRTAzNkQ3QTZERTIyMjhFOURCMTNGRkFCNzlCRTc0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAwRDk1QUFCNDNFMDM2RDdB NkRFMjIyOEU5REIxM0ZGQUI3OUJFNzQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzhhUDFpNHlneXlpcmRZdGM1UVFtNThUSnVRWGFkcVQ3MXl5amgzTk1ReUNLLzEv MzQzNTJlMzEzODMwMmUzMTM0MzQyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2 MzkzMTMzMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAIttJAwDQYJKoZIhvcNAQELBQADggEBAGuLdP+Z Lvwkd0xa7uvqaftAx4MEZ1KDO9yYXeSBB5VXW/J5bnkaT+GIHFPgFSITgK1isL2Y KIUHBHetDLUMgMRVbuCtnTLiUZ5lGSF6e0g2iYJmjQ+DGuNvbYs2gDEO1c3gGvOv nrN5wVS1yr1GbxsA06yuzmM3tF3vr/U25vtJVTvKK9/9r925blKSoTmlzHmefLss onmEpHFSrTnI3VjswV8J/8utJ4cinSFj/1hiaw2il4IrAfVpGZ/iKnuLXGp2cTYM /kxea7DA8Kx+J7PqpHeZSquIgid0h2CzPZgFycqzVGGi32WgPlG5+5PFoyI26XnN GkEcW0J3FrO9xMc= -----END CERTIFICATE-----Generated at Tue Apr 8 07:57:06 2025 by rpki-client