$ rpki-client -vvf rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/3136382e3139362e3230372e302f32342d3234203d3e20323638373836.roa File: 3136382e3139362e3230372e302f32342d3234203d3e20323638373836.roa (raw, json) Hash identifier: K4BU7GEgHjBF2doG1ofX2ZacWOgUMDp5Se/oO0leL5Y= Subject key identifier: CE:ED:2B:8C:42:17:70:EE:B4:06:46:70:7E:EF:E6:97:28:7A:A6:52 Certificate issuer: /CN=0A8D927B2781E10E47E98BEE9B2077654F84695D Certificate serial: 01894A7A4E92AC9B9129E409C5527A2A3DB08C47 Authority key identifier: 0A:8D:92:7B:27:81:E1:0E:47:E9:8B:EE:9B:20:77:65:4F:84:69:5D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A8D927B2781E10E47E98BEE9B2077654F84695D.cer Subject info access: rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/3136382e3139362e3230372e302f32342d3234203d3e20323638373836.roa Signing time: Fri 28 Feb 2025 12:52:09 +0000 ROA not before: Fri 28 Feb 2025 12:47:09 +0000 ROA not after: Fri 27 Feb 2026 12:52:09 +0000 asID: 268786 IP address blocks: 168.196.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/0A8D927B2781E10E47E98BEE9B2077654F84695D.crl rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/0A8D927B2781E10E47E98BEE9B2077654F84695D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A8D927B2781E10E47E98BEE9B2077654F84695D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 18:52:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:89:4a:7a:4e:92:ac:9b:91:29:e4:09:c5:52:7a:2a:3d:b0:8c:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8D927B2781E10E47E98BEE9B2077654F84695D Validity Not Before: Feb 28 12:47:09 2025 GMT Not After : Feb 27 12:52:09 2026 GMT Subject: CN=CEED2B8C421770EEB40646707EEFE697287AA652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:cc:d9:c9:da:5e:7f:11:c3:b7:16:b2:15:5b: eb:27:84:3b:29:07:60:c5:23:16:e4:d8:e1:6d:18: d7:72:a0:5b:b6:d1:f5:6f:43:2c:e0:47:79:c8:d5: 2a:b2:14:9b:82:47:0a:73:55:0e:e0:49:b9:30:b3: ca:01:8d:eb:9d:46:8f:6d:e1:32:5e:3f:31:6a:56: e7:9d:62:47:b3:a9:c6:cd:18:a3:2a:f1:87:1f:4d: 33:93:02:78:e7:f9:3e:a0:fc:5f:24:ea:04:49:ab: 23:ac:cd:63:a4:10:07:12:8c:80:20:bd:3c:3c:77: 68:79:eb:01:80:31:36:ec:d8:8c:63:5d:92:d8:24: a7:20:6a:e3:a9:48:f6:6f:94:67:79:b1:55:79:ab: cc:3e:96:0b:72:de:66:db:41:36:0d:d0:79:9a:04: 2a:e4:f8:a5:17:1c:50:ae:cc:9b:65:48:0f:6e:27: e8:54:9d:f4:ec:dd:c9:e6:43:90:88:57:d0:9d:26: b1:8a:7a:00:f5:03:59:12:96:ac:b8:b6:e4:c1:9c: c0:4b:af:3c:f3:39:c4:e6:54:b9:3a:5d:6c:07:84: bf:70:29:d9:74:62:43:78:b4:31:c7:3f:8f:09:74: 51:8d:e8:1f:7e:41:69:b4:8e:a3:4c:fc:d4:0d:cd: 51:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:ED:2B:8C:42:17:70:EE:B4:06:46:70:7E:EF:E6:97:28:7A:A6:52 X509v3 Authority Key Identifier: keyid:0A:8D:92:7B:27:81:E1:0E:47:E9:8B:EE:9B:20:77:65:4F:84:69:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/0A8D927B2781E10E47E98BEE9B2077654F84695D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A8D927B2781E10E47E98BEE9B2077654F84695D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/3136382e3139362e3230372e302f32342d3234203d3e20323638373836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.196.207.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:dd:c7:57:ce:4e:0d:ee:4b:42:30:22:79:4a:c0:d0:ea:ee: 32:65:03:9c:34:cb:4d:b6:f7:b6:f6:14:ba:d5:3f:05:2c:14: d6:69:ba:9a:72:fe:37:0c:1b:cd:7b:21:69:45:4b:30:64:2a: 57:c9:6c:a4:ab:16:a3:a7:9e:1f:6a:77:c5:aa:1d:99:a1:5f: 86:dc:79:7a:c3:cd:5b:f8:00:64:bd:c1:da:89:78:c1:3f:46: 30:9f:72:5a:c2:61:86:7f:1f:99:53:90:ee:d5:14:d4:0e:e3: 9d:4f:d7:0e:30:ce:b6:6d:59:39:8b:b3:6a:92:56:6d:60:40: 24:9c:a7:cb:35:7e:ac:0d:9f:c7:1b:0b:4c:7d:f0:38:5e:3e: 64:11:4c:63:d1:cd:0f:00:7a:8a:31:0e:6b:86:a4:b8:c9:40: c9:a7:53:eb:f5:38:e5:96:ab:c9:1f:d5:eb:a2:f6:39:c2:6e: d2:13:a3:df:57:39:5b:6f:fb:df:76:57:70:39:90:86:f5:1d: c7:a1:4b:60:3f:b5:da:75:af:cc:1f:c4:77:72:9c:26:f9:bd: 7c:37:f7:23:15:06:0d:3a:03:8a:79:86:3e:ff:57:b6:f1:c1: d4:74:f7:90:b7:94:1b:a6:d8:25:56:8e:8a:7f:44:33:df:9f: 7b:f4:4d:fc -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUAYlKek6SrJuRKeQJxVJ6Kj2wjEcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4RDkyN0IyNzgxRTEwRTQ3RTk4QkVFOUIyMDc3NjU0 Rjg0Njk1RDAeFw0yNTAyMjgxMjQ3MDlaFw0yNjAyMjcxMjUyMDlaMDMxMTAvBgNV BAMTKENFRUQyQjhDNDIxNzcwRUVCNDA2NDY3MDdFRUZFNjk3Mjg3QUE2NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDczNnJ2l5/EcO3FrIVW+snhDsp B2DFIxbk2OFtGNdyoFu20fVvQyzgR3nI1SqyFJuCRwpzVQ7gSbkws8oBjeudRo9t 4TJePzFqVuedYkezqcbNGKMq8YcfTTOTAnjn+T6g/F8k6gRJqyOszWOkEAcSjIAg vTw8d2h56wGAMTbs2IxjXZLYJKcgauOpSPZvlGd5sVV5q8w+lgty3mbbQTYN0Hma BCrk+KUXHFCuzJtlSA9uJ+hUnfTs3cnmQ5CIV9CdJrGKegD1A1kSlqy4tuTBnMBL rzzzOcTmVLk6XWwHhL9wKdl0YkN4tDHHP48JdFGN6B9+QWm0jqNM/NQNzVH1AgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUzu0rjEIXcO60BkZwfu/mlyh6plIwHwYDVR0j BBgwFoAUCo2SeyeB4Q5H6YvumyB3ZU+EaV0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOHgzcXh3N0NoUnJlcERFN1hFVEtTd1cxa1FSZFlmTXZVckp4VmZ4U1Z3 aDEvMC8wQThEOTI3QjI3ODFFMTBFNDdFOThCRUU5QjIwNzc2NTRGODQ2OTVELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBBOEQ5MjdCMjc4MUUxMEU0 N0U5OEJFRTlCMjA3NzY1NEY4NDY5NUQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzh4M3F4dzdDaFJyZXBERTdYRVRLU3dXMWtRUmRZZk12VXJKeFZmeFNWd2gxLzAv MzEzNjM4MmUzMTM5MzYyZTMyMzAzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy MzYzODM3MzgzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjEzzANBgkqhkiG9w0BAQsFAAOCAQEAnN3H V85ODe5LQjAieUrA0OruMmUDnDTLTbb3tvYUutU/BSwU1mm6mnL+NwwbzXshaUVL MGQqV8lspKsWo6eeH2p3xaodmaFfhtx5esPNW/gAZL3B2ol4wT9GMJ9yWsJhhn8f mVOQ7tUU1A7jnU/XDjDOtm1ZOYuzapJWbWBAJJynyzV+rA2fxxsLTH3wOF4+ZBFM Y9HNDwB6ijEOa4akuMlAyadT6/U45ZaryR/V66L2OcJu0hOj31c5W2/733ZXcDmQ hvUdx6FLYD+12nWvzB/Ed3KcJvm9fDf3IxUGDToDinmGPv9XtvHB1HT3kLeUG6bY JVaOin9EM9+fe/RN/A== -----END CERTIFICATE-----Generated at Wed Apr 9 00:39:51 2025 by rpki-client