$ rpki-client -vvf rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/34352e3232382e33372e302f32342d3234203d3e20323731363939.roa File: 34352e3232382e33372e302f32342d3234203d3e20323731363939.roa (raw, json) Hash identifier: 2KBhH+iaJmsKV2+QmlYeKlC/FQ7k9t5D9hBT9miEYCI= Subject key identifier: 75:5D:CD:8A:BA:5B:EB:6C:2C:58:EA:69:38:21:D2:12:A9:C2:E9:EC Certificate issuer: /CN=22B8865EE2EC8BB08F2A5FE22F8E7EC07E38340F Certificate serial: 0260A772FCF5BB29B4BB329F8932CDC32B92945C Authority key identifier: 22:B8:86:5E:E2:EC:8B:B0:8F:2A:5F:E2:2F:8E:7E:C0:7E:38:34:0F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22B8865EE2EC8BB08F2A5FE22F8E7EC07E38340F.cer Subject info access: rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/34352e3232382e33372e302f32342d3234203d3e20323731363939.roa Signing time: Mon 17 Mar 2025 17:41:20 +0000 ROA not before: Mon 17 Mar 2025 17:36:20 +0000 ROA not after: Mon 16 Mar 2026 17:41:20 +0000 asID: 271699 IP address blocks: 45.228.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/22B8865EE2EC8BB08F2A5FE22F8E7EC07E38340F.crl rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/22B8865EE2EC8BB08F2A5FE22F8E7EC07E38340F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22B8865EE2EC8BB08F2A5FE22F8E7EC07E38340F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 12:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:60:a7:72:fc:f5:bb:29:b4:bb:32:9f:89:32:cd:c3:2b:92:94:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22B8865EE2EC8BB08F2A5FE22F8E7EC07E38340F Validity Not Before: Mar 17 17:36:20 2025 GMT Not After : Mar 16 17:41:20 2026 GMT Subject: CN=755DCD8ABA5BEB6C2C58EA693821D212A9C2E9EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0e:84:30:03:3a:dc:61:a1:5e:66:4a:0b:75: 01:48:c5:38:a5:b2:ec:2e:e3:d5:df:6f:0d:75:24: ec:65:13:0c:43:5c:c6:fa:89:ef:3f:25:70:6f:9e: 80:16:5f:78:63:9b:c8:ad:fb:a5:d1:19:2b:73:e7: 22:e3:7b:ec:11:c1:93:15:ef:e7:48:eb:79:4a:5c: ac:3f:ed:e8:21:cb:d8:dd:ab:11:57:30:a7:c5:79: b7:bc:77:dc:de:8e:b3:55:a0:f4:63:45:bc:a7:d6: a9:aa:d4:ab:62:c1:5a:6c:8a:bf:00:f5:d5:56:46: ea:fc:43:d8:f5:05:4e:79:c5:95:12:ef:c4:1d:e5: fd:72:5f:76:79:0c:4d:d2:75:01:73:98:0c:6e:3b: f3:da:aa:81:c7:9f:d5:d3:c4:da:2e:47:28:52:f0: df:b7:10:96:a1:80:46:55:c8:87:1a:80:c4:32:b7: f7:72:fe:da:24:b4:f0:75:22:90:08:86:d8:64:4c: 73:e6:0c:e2:cc:7f:b1:39:ba:50:6a:70:bb:41:b3: 5f:22:6a:b2:87:ad:3c:ea:22:b0:2d:8d:c9:47:31: 4c:48:c6:c0:de:43:24:23:b0:69:a9:e6:42:6e:15: a3:e9:5d:c3:fe:ab:db:78:92:49:4d:ba:17:0d:fa: 6f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:5D:CD:8A:BA:5B:EB:6C:2C:58:EA:69:38:21:D2:12:A9:C2:E9:EC X509v3 Authority Key Identifier: keyid:22:B8:86:5E:E2:EC:8B:B0:8F:2A:5F:E2:2F:8E:7E:C0:7E:38:34:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/22B8865EE2EC8BB08F2A5FE22F8E7EC07E38340F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22B8865EE2EC8BB08F2A5FE22F8E7EC07E38340F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/34352e3232382e33372e302f32342d3234203d3e20323731363939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.228.37.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:17:a1:7e:7a:6f:36:da:28:7d:62:8a:6e:3b:59:1f:c8:b2: c8:a8:2d:f7:99:03:30:f1:72:a1:d9:a3:34:7d:8e:19:ab:bb: c1:db:76:51:31:16:73:38:41:e6:9f:ff:aa:fc:fb:43:4d:88: 94:3c:b3:87:33:7a:fc:1c:fb:c5:76:06:3f:b6:68:69:cf:eb: 8c:ea:74:cb:bf:06:af:d7:b5:22:bf:ce:79:5e:7b:63:e4:62: f9:e3:4d:1e:6f:2d:ad:0e:25:c8:56:23:c9:03:cb:07:3d:50: 57:d4:1c:7f:e2:ec:7f:f8:42:35:f2:b9:d1:93:c4:f2:d4:06: 80:b6:5f:3b:d7:fb:be:06:70:b0:8c:18:d9:4f:0e:31:8e:35: 9e:b8:8b:dd:a7:5f:7f:ab:6a:5f:ae:78:0b:b6:c9:20:0e:b3: 57:7c:b0:ea:c0:6d:d0:4d:79:56:6a:de:fc:24:b6:60:ca:be: 1f:22:ac:e4:f2:9f:42:b6:af:d8:55:ad:87:17:69:74:a7:85: 0e:7c:44:0e:7c:a2:06:d6:4b:a4:fe:6e:a7:43:fc:61:66:61: 80:8d:c3:eb:1e:af:ea:79:3d:1a:67:70:7e:a1:9f:65:88:12: bf:6c:83:06:65:66:30:a4:10:3b:64:bd:e5:94:64:3c:a6:3d: f8:40:13:67 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUAmCncvz1uym0uzKfiTLNwyuSlFwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjJCODg2NUVFMkVDOEJCMDhGMkE1RkUyMkY4RTdFQzA3 RTM4MzQwRjAeFw0yNTAzMTcxNzM2MjBaFw0yNjAzMTYxNzQxMjBaMDMxMTAvBgNV BAMTKDc1NURDRDhBQkE1QkVCNkMyQzU4RUE2OTM4MjFEMjEyQTlDMkU5RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYDoQwAzrcYaFeZkoLdQFIxTil suwu49Xfbw11JOxlEwxDXMb6ie8/JXBvnoAWX3hjm8it+6XRGStz5yLje+wRwZMV 7+dI63lKXKw/7eghy9jdqxFXMKfFebe8d9zejrNVoPRjRbyn1qmq1KtiwVpsir8A 9dVWRur8Q9j1BU55xZUS78Qd5f1yX3Z5DE3SdQFzmAxuO/PaqoHHn9XTxNouRyhS 8N+3EJahgEZVyIcagMQyt/dy/toktPB1IpAIhthkTHPmDOLMf7E5ulBqcLtBs18i arKHrTzqIrAtjclHMUxIxsDeQyQjsGmp5kJuFaPpXcP+q9t4kklNuhcN+m99AgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUdV3Nirpb62wsWOppOCHSEqnC6ewwHwYDVR0j BBgwFoAUIriGXuLsi7CPKl/iL45+wH44NA8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOW53RUNXUVpEWEFoVzVWcGFkVnZDYUo2c3dwYnNSUDhQSmM0WWZON1pM RFgvMC8yMkI4ODY1RUUyRUM4QkIwOEYyQTVGRTIyRjhFN0VDMDdFMzgzNDBGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIyQjg4NjVFRTJFQzhCQjA4 RjJBNUZFMjJGOEU3RUMwN0UzODM0MEYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzlud0VDV1FaRFhBaFc1VnBhZFZ2Q2FKNnN3cGJzUlA4UEpjNFlmTjdaTERYLzAv MzQzNTJlMzIzMjM4MmUzMzM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMx MzYzOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQALeQlMA0GCSqGSIb3DQEBCwUAA4IBAQALF6F+em82 2ih9YopuO1kfyLLIqC33mQMw8XKh2aM0fY4Zq7vB23ZRMRZzOEHmn/+q/PtDTYiU PLOHM3r8HPvFdgY/tmhpz+uM6nTLvwav17Uiv855Xntj5GL5400eby2tDiXIViPJ A8sHPVBX1Bx/4ux/+EI18rnRk8Ty1AaAtl871/u+BnCwjBjZTw4xjjWeuIvdp19/ q2pfrngLtskgDrNXfLDqwG3QTXlWat78JLZgyr4fIqzk8p9Ctq/YVa2HF2l0p4UO fEQOfKIG1kuk/m6nQ/xhZmGAjcPrHq/qeT0aZ3B+oZ9liBK/bIMGZWYwpBA7ZL3l lGQ8pj34QBNn -----END CERTIFICATE-----Generated at Wed Apr 9 03:30:24 2025 by rpki-client