$ rpki-client -vvf rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/3139312e3234332e3230312e302f32342d3234203d3e20323633353132.roa File: 3139312e3234332e3230312e302f32342d3234203d3e20323633353132.roa (raw, json) Hash identifier: xLowJwdemO9YNxvepFAOZHDy23O1oAyowSXkAyXalL8= Subject key identifier: C6:6C:CF:75:EA:10:5C:EC:BE:A3:6D:80:DA:73:20:B6:A1:26:86:15 Certificate issuer: /CN=280DBCE26C80C869FE8BD73477199ADD10E444A2 Certificate serial: 567D3D7A6A32C8C25BD77AA34E1297D1045A6FF6 Authority key identifier: 28:0D:BC:E2:6C:80:C8:69:FE:8B:D7:34:77:19:9A:DD:10:E4:44:A2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.cer Subject info access: rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/3139312e3234332e3230312e302f32342d3234203d3e20323633353132.roa Signing time: Wed 05 Mar 2025 19:00:06 +0000 ROA not before: Wed 05 Mar 2025 18:55:06 +0000 ROA not after: Wed 04 Mar 2026 19:00:06 +0000 asID: 263512 IP address blocks: 191.243.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.crl rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 12 Apr 2025 13:49:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:7d:3d:7a:6a:32:c8:c2:5b:d7:7a:a3:4e:12:97:d1:04:5a:6f:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=280DBCE26C80C869FE8BD73477199ADD10E444A2 Validity Not Before: Mar 5 18:55:06 2025 GMT Not After : Mar 4 19:00:06 2026 GMT Subject: CN=C66CCF75EA105CECBEA36D80DA7320B6A1268615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:d4:ac:13:55:e8:7c:d7:fa:61:08:63:79:5d: 21:e1:ba:e8:a4:3f:f0:9f:bb:52:fd:16:de:ed:d2: 74:20:f7:9b:1b:1e:bf:aa:58:12:6d:c5:21:51:f5: aa:42:7b:7f:c3:ed:8b:0a:70:50:83:4e:2c:14:74: 5b:81:d8:68:00:79:91:40:11:e3:3f:2b:55:3d:54: 6c:82:f7:74:34:97:d3:7f:7a:22:ab:e1:bf:e9:3d: 17:12:da:8d:9f:f7:5d:3b:e2:e1:98:c9:2e:37:d7: 00:9b:88:3c:7a:20:7b:ee:ae:14:21:72:f6:b1:ac: 1c:08:53:15:f8:74:c9:4e:99:97:fb:82:06:f0:c3: 82:08:79:4a:b1:0f:e3:36:08:1e:fb:9a:cf:92:f2: 32:37:4d:00:14:4d:d1:12:61:e2:91:27:a6:0c:1d: cc:91:d4:9e:6b:af:26:59:16:9f:90:9e:c1:64:8b: 33:10:3e:47:1e:6a:14:8c:3b:76:94:69:df:8e:93: f7:76:18:60:2a:5d:85:47:0d:6d:8a:0c:7e:c2:8b: a7:e3:2a:99:fc:b2:30:0e:87:17:75:bf:9c:fe:14: 9d:5f:3e:71:eb:3c:47:3e:80:27:29:24:c4:1f:99: d3:24:85:1e:04:6d:1a:c0:b7:57:bc:21:a5:a8:a8: e2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:6C:CF:75:EA:10:5C:EC:BE:A3:6D:80:DA:73:20:B6:A1:26:86:15 X509v3 Authority Key Identifier: keyid:28:0D:BC:E2:6C:80:C8:69:FE:8B:D7:34:77:19:9A:DD:10:E4:44:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/3139312e3234332e3230312e302f32342d3234203d3e20323633353132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.243.201.0/24 Signature Algorithm: sha256WithRSAEncryption 18:19:ce:a9:3b:31:ba:36:6c:39:7f:62:94:62:a5:39:10:7b: 89:da:6b:12:d7:02:83:74:70:1e:79:03:2d:67:b0:5c:0f:84: 2c:88:95:18:99:fa:82:89:53:ee:ee:d7:5a:2b:4b:15:33:65: 7c:f1:bc:18:01:79:60:3f:1b:10:40:e9:62:0b:20:cb:30:83: 22:2a:d8:23:0f:2f:7f:fd:1d:1e:10:c5:af:3f:51:2f:35:d5: a7:3f:66:23:3a:55:b6:c1:54:d5:6e:54:85:0d:da:a1:7c:1a: 4c:ee:c1:b2:91:95:ee:62:c1:88:60:89:7a:ab:65:35:0b:66: ba:f4:55:80:3b:a2:8c:09:21:36:0c:d9:04:52:e5:86:3b:4b: 3b:1c:ae:70:4d:e6:3f:53:b2:5f:0b:66:01:63:c8:35:f1:5e: 44:b9:55:ac:ad:af:aa:40:89:83:19:e4:ff:54:cc:e9:ce:ac: e6:54:0a:84:04:9e:6a:9a:e7:8b:9b:f0:d1:53:8e:4e:2e:b1: 7c:6d:08:f0:18:49:1f:3d:73:f3:f3:f8:d1:de:b2:10:48:9f: c0:84:17:da:ff:a8:29:98:c1:d6:c2:69:70:c1:df:ca:e1:74: 0f:0e:b2:ea:8f:c1:bc:61:33:87:47:5e:20:76:24:b7:62:21: fb:29:ef:31 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUVn09emoyyMJb13qjThKX0QRab/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgwREJDRTI2QzgwQzg2OUZFOEJENzM0NzcxOTlBREQx MEU0NDRBMjAeFw0yNTAzMDUxODU1MDZaFw0yNjAzMDQxOTAwMDZaMDMxMTAvBgNV BAMTKEM2NkNDRjc1RUExMDVDRUNCRUEzNkQ4MERBNzMyMEI2QTEyNjg2MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr1KwTVeh81/phCGN5XSHhuuik P/Cfu1L9Ft7t0nQg95sbHr+qWBJtxSFR9apCe3/D7YsKcFCDTiwUdFuB2GgAeZFA EeM/K1U9VGyC93Q0l9N/eiKr4b/pPRcS2o2f91074uGYyS431wCbiDx6IHvurhQh cvaxrBwIUxX4dMlOmZf7ggbww4IIeUqxD+M2CB77ms+S8jI3TQAUTdESYeKRJ6YM HcyR1J5rryZZFp+QnsFkizMQPkceahSMO3aUad+Ok/d2GGAqXYVHDW2KDH7Ci6fj Kpn8sjAOhxd1v5z+FJ1fPnHrPEc+gCcpJMQfmdMkhR4EbRrAt1e8IaWoqOJZAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUxmzPdeoQXOy+o22A2nMgtqEmhhUwHwYDVR0j BBgwFoAUKA284myAyGn+i9c0dxma3RDkRKIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOWZxQmRuV1RVVVAxclpweHB2bm1iVHNLQlBFVU5qejFmU013VlU5OGZy TmQvMS8yODBEQkNFMjZDODBDODY5RkU4QkQ3MzQ3NzE5OUFERDEwRTQ0NEEyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4MERCQ0UyNkM4MEM4NjlG RThCRDczNDc3MTk5QUREMTBFNDQ0QTIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzlmcUJkbldUVVVQMXJacHhwdm5tYlRzS0JQRVVOanoxZlNNd1ZVOThmck5kLzEv MzEzOTMxMmUzMjM0MzMyZTMyMzAzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy MzYzMzM1MzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL/zyTANBgkqhkiG9w0BAQsFAAOCAQEAGBnO qTsxujZsOX9ilGKlORB7idprEtcCg3RwHnkDLWewXA+ELIiVGJn6golT7u7XWitL FTNlfPG8GAF5YD8bEEDpYgsgyzCDIirYIw8vf/0dHhDFrz9RLzXVpz9mIzpVtsFU 1W5UhQ3aoXwaTO7BspGV7mLBiGCJeqtlNQtmuvRVgDuijAkhNgzZBFLlhjtLOxyu cE3mP1OyXwtmAWPINfFeRLlVrK2vqkCJgxnk/1TM6c6s5lQKhASeaprni5vw0VOO Ti6xfG0I8BhJHz1z8/P40d6yEEifwIQX2v+oKZjB1sJpcMHfyuF0Dw6y6o/BvGEz h0deIHYkt2Ih+ynvMQ== -----END CERTIFICATE-----Generated at Fri Apr 11 15:53:49 2025 by rpki-client