$ rpki-client -vvf rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/0/3134332e3133372e3232302e302f32342d3234203d3e20323634303437.roa File: 3134332e3133372e3232302e302f32342d3234203d3e20323634303437.roa (raw, json) Hash identifier: KLhpy/9L7u6AlQ1l0933qfB8oYMoHTekCjvJVUkM0DI= Subject key identifier: 08:BB:13:66:F7:39:7F:34:B7:B5:13:BB:BE:34:66:04:DE:B9:9C:5E Certificate issuer: /CN=132DCDB6019382C752C71B103893EAC01BCC5512 Certificate serial: 3C23B29D2CC403F8C9EC1CF48B85D1772C15EE10 Authority key identifier: 13:2D:CD:B6:01:93:82:C7:52:C7:1B:10:38:93:EA:C0:1B:CC:55:12 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/132DCDB6019382C752C71B103893EAC01BCC5512.cer Subject info access: rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/0/3134332e3133372e3232302e302f32342d3234203d3e20323634303437.roa Signing time: Tue 12 Nov 2024 18:14:19 +0000 ROA not before: Tue 12 Nov 2024 18:09:19 +0000 ROA not after: Tue 11 Nov 2025 18:14:19 +0000 asID: 264047 IP address blocks: 143.137.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/0/132DCDB6019382C752C71B103893EAC01BCC5512.crl rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/0/132DCDB6019382C752C71B103893EAC01BCC5512.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/132DCDB6019382C752C71B103893EAC01BCC5512.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Nov 2024 07:57:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:23:b2:9d:2c:c4:03:f8:c9:ec:1c:f4:8b:85:d1:77:2c:15:ee:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=132DCDB6019382C752C71B103893EAC01BCC5512 Validity Not Before: Nov 12 18:09:19 2024 GMT Not After : Nov 11 18:14:19 2025 GMT Subject: CN=08BB1366F7397F34B7B513BBBE346604DEB99C5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bc:59:46:71:5e:c9:16:33:01:0a:99:41:fe: d2:7e:e4:98:32:9f:a6:7c:c0:dc:89:9d:ee:a5:1d: 91:51:7b:23:8c:7e:64:6f:bb:55:b0:6b:dd:84:62: 57:2e:cf:0a:bb:d5:20:0d:62:ec:48:4d:2f:ac:63: db:db:a8:8e:ef:3e:fa:f9:b0:36:04:99:4b:df:c0: 9b:d9:a3:32:01:04:a0:ed:3a:85:ba:e6:ae:10:bc: 58:70:30:56:39:3b:87:8c:ce:3d:03:0d:8d:f0:dd: a1:a9:fd:f4:58:ba:01:74:99:91:6a:a9:1b:04:2e: 4c:a0:f3:2f:7d:aa:e3:bb:fa:f7:02:f9:07:17:fc: 69:3c:b0:84:4a:d8:dc:e4:42:97:29:f0:d1:f9:fd: 9e:5b:63:f6:85:0b:98:7a:87:89:29:27:d8:96:80: 46:73:83:c5:9c:3f:c5:33:08:67:4a:8d:43:19:a8: 25:2b:13:71:4e:cc:de:f0:e3:c3:6d:67:83:0d:2b: ed:cb:42:d7:17:4c:69:4b:e2:af:08:de:a3:23:db: 66:58:c6:c1:b5:72:e7:53:b2:3c:dd:17:99:e3:b4: f7:db:49:57:ec:91:79:f7:02:28:f9:4e:77:90:66: 12:8c:c8:7b:3c:6e:f5:8c:d7:28:1d:fd:9d:8b:b5: 19:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:BB:13:66:F7:39:7F:34:B7:B5:13:BB:BE:34:66:04:DE:B9:9C:5E X509v3 Authority Key Identifier: keyid:13:2D:CD:B6:01:93:82:C7:52:C7:1B:10:38:93:EA:C0:1B:CC:55:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/0/132DCDB6019382C752C71B103893EAC01BCC5512.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/132DCDB6019382C752C71B103893EAC01BCC5512.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/0/3134332e3133372e3232302e302f32342d3234203d3e20323634303437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.137.220.0/24 Signature Algorithm: sha256WithRSAEncryption 60:36:a5:48:1e:27:fe:04:f8:fa:62:a2:d2:12:94:4e:73:07: a9:f4:32:66:06:79:70:3c:ce:23:03:5e:f9:1e:d7:d4:e3:4d: 2a:c1:62:05:dd:7b:a2:ba:e0:7b:d6:55:9a:6e:66:2a:58:8c: f2:35:94:dc:cc:26:6e:58:da:3c:28:9a:40:1f:cc:0e:3e:be: 2a:d6:0c:9a:36:a4:99:76:3f:51:3e:b2:d8:d0:32:53:a1:d6: ff:67:a5:87:4a:40:7e:c7:7e:3d:f4:2f:33:22:fd:31:8e:74: ee:68:df:6a:18:de:4c:61:b4:3b:1d:5a:0f:07:55:bc:b4:5e: f8:a6:d9:b9:8b:06:1c:87:13:6e:5d:0b:32:b3:13:36:c7:20: 8c:fb:9f:26:a3:70:8e:ae:fe:33:81:ee:67:73:d8:2e:ed:53: f4:98:05:23:66:f5:89:02:19:6f:d0:93:8b:d2:fa:36:2a:cd: 2b:97:70:b7:4b:31:3c:3b:d8:3a:2b:d8:77:ba:c0:2e:be:e7: 7c:eb:0a:26:32:e3:fc:b1:8b:14:bf:e7:02:af:e3:46:c0:79: 31:66:35:46:c8:62:4f:40:6a:40:c2:a5:d2:03:ab:dd:cf:c2: e0:a7:72:dd:8f:c3:ac:56:3b:cc:66:bc:48:ea:92:42:8a:97: 8b:9d:66:37 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUPCOynSzEA/jJ7Bz0i4XRdywV7hAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMyRENEQjYwMTkzODJDNzUyQzcxQjEwMzg5M0VBQzAx QkNDNTUxMjAeFw0yNDExMTIxODA5MTlaFw0yNTExMTExODE0MTlaMDMxMTAvBgNV BAMTKDA4QkIxMzY2RjczOTdGMzRCN0I1MTNCQkJFMzQ2NjA0REVCOTlDNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLvFlGcV7JFjMBCplB/tJ+5Jgy n6Z8wNyJne6lHZFReyOMfmRvu1Wwa92EYlcuzwq71SANYuxITS+sY9vbqI7vPvr5 sDYEmUvfwJvZozIBBKDtOoW65q4QvFhwMFY5O4eMzj0DDY3w3aGp/fRYugF0mZFq qRsELkyg8y99quO7+vcC+QcX/Gk8sIRK2NzkQpcp8NH5/Z5bY/aFC5h6h4kpJ9iW gEZzg8WcP8UzCGdKjUMZqCUrE3FOzN7w48NtZ4MNK+3LQtcXTGlL4q8I3qMj22ZY xsG1cudTsjzdF5njtPfbSVfskXn3Aij5TneQZhKMyHs8bvWM1ygd/Z2LtRk7AgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUCLsTZvc5fzS3tRO7vjRmBN65nF4wHwYDVR0j BBgwFoAUEy3NtgGTgsdSxxsQOJPqwBvMVRIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOHdFakF3VWY5S1BuWDRFUnkxQlhFQlVzZWNkM3VZM2pINUIyQ3EzV3hW b2UvMC8xMzJEQ0RCNjAxOTM4MkM3NTJDNzFCMTAzODkzRUFDMDFCQ0M1NTEyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEzMkRDREI2MDE5MzgyQzc1 MkM3MUIxMDM4OTNFQUMwMUJDQzU1MTIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzh3RWpBd1VmOUtQblg0RVJ5MUJYRUJVc2VjZDN1WTNqSDVCMkNxM1d4Vm9lLzAv MzEzNDMzMmUzMTMzMzcyZTMyMzIzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy MzYzNDMwMzQzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAI+J3DANBgkqhkiG9w0BAQsFAAOCAQEAYDal SB4n/gT4+mKi0hKUTnMHqfQyZgZ5cDzOIwNe+R7X1ONNKsFiBd17orrge9ZVmm5m KliM8jWU3MwmbljaPCiaQB/MDj6+KtYMmjakmXY/UT6y2NAyU6HW/2elh0pAfsd+ PfQvMyL9MY507mjfahjeTGG0Ox1aDwdVvLRe+KbZuYsGHIcTbl0LMrMTNscgjPuf JqNwjq7+M4HuZ3PYLu1T9JgFI2b1iQIZb9CTi9L6NirNK5dwt0sxPDvYOivYd7rA Lr7nfOsKJjLj/LGLFL/nAq/jRsB5MWY1RshiT0BqQMKl0gOr3c/C4Kdy3Y/DrFY7 zGa8SOqSQoqXi51mNw== -----END CERTIFICATE-----Generated at Tue Nov 26 07:51:05 2024 by rpki-client on console-fra.rpki-client.org