$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/AS53170.roa File: AS53170.roa (raw, json) Hash identifier: U3PJV7jtI068QNGxX2o5rOiyB+YmFYYhvpeAeqoZPtQ= Subject key identifier: 49:C8:AE:43:99:59:81:BF:49:F3:6F:29:2E:0B:B7:4C:44:8D:D6:EE Certificate issuer: /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A Certificate serial: 6FF6E29FC5E69588BB1B2794EA50D8EC694CFBCA Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer Subject info access: rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/AS53170.roa Signing time: Thu 23 May 2024 12:03:01 +0000 ROA not before: Thu 23 May 2024 11:58:01 +0000 ROA not after: Thu 22 May 2025 12:03:01 +0000 asID: 53170 IP address blocks: 186.224.48.0/24 maxlen: 24 186.224.55.0/24 maxlen: 24 2804:3838:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 30 Jun 2024 04:20:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:f6:e2:9f:c5:e6:95:88:bb:1b:27:94:ea:50:d8:ec:69:4c:fb:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A Validity Not Before: May 23 11:58:01 2024 GMT Not After : May 22 12:03:01 2025 GMT Subject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ubject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:17:3c:06:c1:2b:95:e5:51:84:fb:b6:83:f5: ce:58:44:f3:8b:e2:74:bc:eb:d3:19:77:6a:f3:83: 66:2e:57:08:ff:b0:f9:d1:13:18:91:c5:11:c4:80: 12:e9:5c:1d:0b:50:b6:c7:a6:bb:a9:f4:99:af:be: 82:ff:a2:82:c5:b8:a1:fb:6c:71:29:21:ff:07:25: 9a:68:7d:d1:e3:18:f0:9d:91:e8:46:d3:06:21:0f: b0:81:f0:4c:20:60:4b:2b:22:b1:be:c4:c9:ce:91: ad:bb:b7:dc:1f:dc:33:db:e9:14:51:ca:2b:e6:67: df:9d:2c:fa:ea:75:1e:f0:5f:18:d1:12:27:49:cb: 28:30:7a:35:f8:53:05:96:36:e0:02:7a:4e:46:e0: 23:ff:6b:bf:60:32:d4:e5:7a:02:ad:26:c2:06:4b: 55:5a:c2:7c:d5:c9:bb:1e:ad:69:e5:87:40:63:97: b8:bf:c4:19:cc:88:eb:0d:fc:ec:a0:2d:42:6f:ca: 30:62:9a:90:82:9b:33:96:79:bb:d1:b1:5f:ad:2b: 76:f8:b2:41:0b:9c:4d:07:37:75:72:36:18:ea:38: 8e:22:58:c6:66:96:57:a5:24:f4:8e:49:3d:ac:b0: 0a:10:29:54:1f:e9:81:99:7f:8d:23:ef:af:e2:66: 9b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:C8:AE:43:99:59:81:BF:49:F3:6F:29:2E:0B:B7:4C:44:8D:D6:EE X509v3 Authority Key Identifier: keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/AS53170.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.224.48.0/24 186.224.55.0/24 IPv6: 2804:3838:c000::/34 Signature Algorithm: sha256WithRSAEncryption c6:8f:af:72:88:50:1e:f5:46:a3:f7:99:43:23:88:1e:84:0b: b0:e7:2e:aa:34:96:40:f8:65:a9:e1:1d:b0:bd:e3:05:17:21: f2:e3:77:26:04:41:ac:4f:11:9b:8a:b3:97:a4:a6:09:39:c4: 4f:bc:81:a0:8c:3f:4e:19:ae:ad:68:77:a5:49:aa:1c:6e:c0: 31:14:ac:6a:a4:58:df:3e:2c:9a:10:81:74:d2:b6:97:1e:50: e2:cd:60:17:52:98:87:b0:58:ca:b3:85:e5:ed:09:4f:15:e0: a1:96:6e:44:8b:be:bb:02:7f:2f:4a:d9:0f:25:de:ce:ab:a9: 5f:ec:ff:59:b4:a0:01:56:88:b2:59:aa:14:3d:fb:b6:95:7c: 9f:2c:28:b5:ab:d0:c7:d6:d2:2d:43:1b:a5:b6:47:4c:2d:5d: 96:fd:c5:37:d7:40:e3:c7:9f:25:80:9a:f4:b1:c8:20:fa:1b: 64:26:3c:b7:fe:ee:fc:61:9e:71:22:88:c9:09:e6:d6:8b:6f: 5d:15:fa:be:e7:5f:19:67:f6:2c:63:52:6d:9b:6d:f3:ba:5f: cf:34:67:5a:71:2c:e5:ee:12:af:f8:ce:a5:cc:93:5c:8a:af: 16:ec:ad:e5:f4:54:e6:b4:02:f2:66:f8:eb:c8:4b:a3:bc:fb: a5:5a:a7:43 -----BEGIN CERTIFICATE----- MIIHIzCCBgugAwIBAgIUb/bin8XmlYi7GyeU6lDY7GlM+8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk1Nzg5RThBQ0RDMkQ1OTVCRTMzQjRBMEQyMUI2REEz Q0E2MEI0QTAeFw0yNDA1MjMxMTU4MDFaFw0yNTA1MjIxMjAzMDFaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOTExNzNDMDZDMTJCOTVFNTUx ODRGQkI2ODNGNUNFNTg0NEYzOEJFMjc0QkNFQkQzMTk3NzZBRjM4MzY2MkU1NzA4 RkZCMEY5RDExMzE4OTFDNTExQzQ4MDEyRTk1QzFEMEI1MEI2QzdBNkJCQTlGNDk5 QUZCRTgyRkZBMjgyQzVCOEExRkI2QzcxMjkyMUZGMDcyNTlBNjg3REQxRTMxOEYw OUQ5MUU4NDZEMzA2MjEwRkIwODFGMDRDMjA2MDRCMkIyMkIxQkVDNEM5Q0U5MUFE QkJCN0RDMUZEQzMzREJFOTE0NTFDQTJCRTY2N0RGOUQyQ0ZBRUE3NTFFRjA1RjE4 RDExMjI3NDlDQjI4MzA3QTM1Rjg1MzA1OTYzNkUwMDI3QTRFNDZFMDIzRkY2QkJG NjAzMkQ0RTU3QTAyQUQyNkMyMDY0QjU1NUFDMjdDRDVDOUJCMUVBRDY5RTU4NzQw NjM5N0I4QkZDNDE5Q0M4OEVCMERGQ0VDQTAyRDQyNkZDQTMwNjI5QTkwODI5QjMz OTY3OUJCRDFCMTVGQUQyQjc2RjhCMjQxMEI5QzREMDczNzc1NzIzNjE4RUEzODhF MjI1OEM2NjY5NjU3QTUyNEY0OEU0OTNEQUNCMDBBMTAyOTU0MUZFOTgxOTk3RjhE MjNFRkFGRTI2NjlCRjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAkRc8BsErleVRhPu2g/XOWETzi+J0vOvTGXdq84NmLlcI/7D50RMY kcURxIAS6VwdC1C2x6a7qfSZr76C/6KCxbih+2xxKSH/ByWaaH3R4xjwnZHoRtMG IQ+wgfBMIGBLKyKxvsTJzpGtu7fcH9wz2+kUUcor5mffnSz66nUe8F8Y0RInScso MHo1+FMFljbgAnpORuAj/2u/YDLU5XoCrSbCBktVWsJ81cm7Hq1p5YdAY5e4v8QZ zIjrDfzsoC1Cb8owYpqQgpszlnm70bFfrSt2+LJBC5xNBzd1cjYY6jiOIljGZpZX pST0jkk9rLAKEClUH+mBmX+NI++v4mab+QIDAQABo4ICMTCCAi0wHQYDVR0OBBYE FEnIrkOZWYG/SfNvKS4Lt0xEjdbuMB8GA1UdIwQYMBaAFOlXieis3C1ZW+M7Sg0h tto8pgtKMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpd2RBNGJ6NHZYSGdr Z2ZDaDlKajVaTWJkYk5NaVRYcm45Z1BOTnRWNHZCLzEvRTk1Nzg5RThBQ0RDMkQ1 OTVCRTMzQjRBMEQyMUI2REEzQ0E2MEI0QS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p Y2JyX3JlcG8vMS9FOTU3ODlFOEFDREMyRDU5NUJFMzNCNEEwRDIxQjZEQTNDQTYw QjRBLmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuGXXJzeW5jOi8vcnBr aS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOWl3ZEE0Yno0dlhIZ2tnZkNoOUpqNVpN YmRiTk1pVFhybjlnUE5OdFY0dkIvMS9BUzUzMTcwLnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAuuAwAwQA uuA3MA4EAgACMAgDBgYoBDg4wDANBgkqhkiG9w0BAQsFAAOCAQEAxo+vcohQHvVG o/eZQyOIHoQLsOcuqjSWQPhlqeEdsL3jBRch8uN3JgRBrE8Rm4qzl6SmCTnET7yB oIw/ThmurWh3pUmqHG7AMRSsaqRY3z4smhCBdNK2lx5Q4s1gF1KYh7BYyrOF5e0J TxXgoZZuRIu+uwJ/L0rZDyXezqupX+z/WbSgAVaIslmqFD37tpV8nywotavQx9bS LUMbpbZHTC1dlv3FN9dA48efJYCa9LHIIPobZCY8t/7u/GGecSKIyQnm1otvXRX6 vudfGWf2LGNSbZtt87pfzzRnWnEs5e4Sr/jOpcyTXIqvFuyt5fRU5rQC8mb468hL o7z7pVqnQw== -----END CERTIFICATE-----Generated at Sat Jun 29 07:19:17 2024 by rpki-client on console-ams.rpki-client.org