$ rpki-client -vvf rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/3137302e38342e3234382e302f32342d3234203d3e20323635303238.roa File: 3137302e38342e3234382e302f32342d3234203d3e20323635303238.roa (raw, json) Hash identifier: dyaq/cboi0iW38Wieg+ghf68Oi35g5vAW9LI49ZivUk= Subject key identifier: 68:1A:7E:E8:F5:67:56:CB:FE:62:0F:F3:E8:CC:F4:53:3C:75:2F:91 Certificate issuer: /CN=D6BCFE43F9EBD9B9EFF3815D3B56D13D826C91F8 Certificate serial: 04A7DADC35860145C66107D7701070A5C2DCD534 Authority key identifier: D6:BC:FE:43:F9:EB:D9:B9:EF:F3:81:5D:3B:56:D1:3D:82:6C:91:F8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6BCFE43F9EBD9B9EFF3815D3B56D13D826C91F8.cer Subject info access: rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/3137302e38342e3234382e302f32342d3234203d3e20323635303238.roa Signing time: Wed 09 Apr 2025 19:58:10 +0000 ROA not before: Wed 09 Apr 2025 19:53:10 +0000 ROA not after: Wed 08 Apr 2026 19:58:10 +0000 asID: 265028 IP address blocks: 170.84.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/D6BCFE43F9EBD9B9EFF3815D3B56D13D826C91F8.crl rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/D6BCFE43F9EBD9B9EFF3815D3B56D13D826C91F8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6BCFE43F9EBD9B9EFF3815D3B56D13D826C91F8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 23 Apr 2025 22:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:a7:da:dc:35:86:01:45:c6:61:07:d7:70:10:70:a5:c2:dc:d5:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6BCFE43F9EBD9B9EFF3815D3B56D13D826C91F8 Validity Not Before: Apr 9 19:53:10 2025 GMT Not After : Apr 8 19:58:10 2026 GMT Subject: CN=681A7EE8F56756CBFE620FF3E8CCF4533C752F91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b8:f1:0d:51:67:88:ef:3c:f1:ce:2f:7a:d9: 7c:2b:92:80:42:3f:db:87:1c:33:d3:7d:da:8d:91: 2c:7e:f4:df:e1:93:58:28:4d:ab:30:c6:09:ef:32: ad:d6:b5:c8:22:ed:72:e2:cb:cc:64:ae:1c:2d:c9: 20:65:ee:78:ba:82:0c:84:75:83:fd:03:ab:3b:25: 87:1d:c2:db:96:e1:6b:35:eb:70:41:94:d8:1a:cf: b1:86:0f:d6:6b:0c:1d:0d:ed:24:ef:ee:7e:52:d5: e3:a8:00:3b:3a:32:7b:9b:89:24:ac:b6:0a:5d:12: 0c:b2:91:9c:98:4b:1d:de:4b:cb:b8:ab:67:33:ef: 4b:92:52:51:62:fc:fd:ed:90:5d:4c:94:60:04:b4: b7:33:0c:e0:8c:6f:ea:33:20:f8:69:72:7b:7f:ac: f3:f5:d1:5f:17:ae:2c:f8:91:90:f8:86:96:36:b2: 3f:9a:72:32:57:31:cf:55:10:8a:0c:72:20:32:6a: 2a:12:38:39:6f:37:42:cb:85:94:80:e2:56:04:02: c8:87:de:85:32:b5:4f:9a:f5:26:23:f6:f1:86:eb: 04:4f:75:5e:02:f4:9b:a7:9b:41:3b:22:17:10:b1: 20:48:9a:e6:50:b9:c1:8b:7d:62:c8:8a:7e:e0:f5: 09:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:1A:7E:E8:F5:67:56:CB:FE:62:0F:F3:E8:CC:F4:53:3C:75:2F:91 X509v3 Authority Key Identifier: keyid:D6:BC:FE:43:F9:EB:D9:B9:EF:F3:81:5D:3B:56:D1:3D:82:6C:91:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/D6BCFE43F9EBD9B9EFF3815D3B56D13D826C91F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6BCFE43F9EBD9B9EFF3815D3B56D13D826C91F8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/3137302e38342e3234382e302f32342d3234203d3e20323635303238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.84.248.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:18:a6:62:ad:f6:af:bf:78:04:a3:92:f0:20:67:89:30:e7: 96:56:e9:dc:ab:1b:af:ec:d0:b4:e9:b0:a9:c1:7a:73:cb:cc: 6b:5c:64:18:94:82:37:63:1b:3a:bf:d5:6f:10:e9:28:82:ca: e1:eb:44:eb:58:4c:13:78:62:4d:a8:c6:8a:6b:f1:5f:bd:ec: 2c:d6:ba:ae:fa:c2:e8:47:ae:98:15:91:af:05:5d:2b:8e:4f: 54:22:b3:23:cf:63:37:bd:09:0c:6c:7a:35:44:c6:61:2d:b2: b8:a4:ed:b8:1e:cd:a8:30:08:91:71:68:7b:1b:47:97:e3:ce: f8:11:56:5f:dd:ff:a6:ab:05:08:0a:53:2b:b7:94:ee:e8:60: 84:da:7c:93:61:20:d1:3c:c2:14:98:93:61:85:18:b2:4a:d5: b9:c9:f1:30:8d:73:3c:93:0c:91:51:09:06:46:99:64:f7:39: 31:77:ce:13:99:50:d8:aa:30:17:15:ec:a8:b8:c0:dc:b0:25: 66:67:5a:68:10:c7:c0:50:2c:46:19:bf:30:e6:76:a1:dc:6c: 83:24:f0:61:b9:1a:0b:2c:c7:3d:2b:b6:d6:e6:64:70:1b:b7: aa:25:aa:97:bf:4a:6e:17:bd:f9:a9:9c:78:91:d1:9a:17:49: c5:71:87:ed -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUBKfa3DWGAUXGYQfXcBBwpcLc1TQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZCQ0ZFNDNGOUVCRDlCOUVGRjM4MTVEM0I1NkQxM0Q4 MjZDOTFGODAeFw0yNTA0MDkxOTUzMTBaFw0yNjA0MDgxOTU4MTBaMDMxMTAvBgNV BAMTKDY4MUE3RUU4RjU2NzU2Q0JGRTYyMEZGM0U4Q0NGNDUzM0M3NTJGOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3uPENUWeI7zzxzi962XwrkoBC P9uHHDPTfdqNkSx+9N/hk1goTaswxgnvMq3Wtcgi7XLiy8xkrhwtySBl7ni6ggyE dYP9A6s7JYcdwtuW4Ws163BBlNgaz7GGD9ZrDB0N7STv7n5S1eOoADs6MnubiSSs tgpdEgyykZyYSx3eS8u4q2cz70uSUlFi/P3tkF1MlGAEtLczDOCMb+ozIPhpcnt/ rPP10V8Xriz4kZD4hpY2sj+acjJXMc9VEIoMciAyaioSODlvN0LLhZSA4lYEAsiH 3oUytU+a9SYj9vGG6wRPdV4C9Junm0E7IhcQsSBImuZQucGLfWLIin7g9QlNAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUaBp+6PVnVsv+Yg/z6Mz0Uzx1L5EwHwYDVR0j BBgwFoAU1rz+Q/nr2bnv84FdO1bRPYJskfgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQUF1cW5QWWN1aWt6RHNGSlYxU3o2Y0pXZlhuekNVZ2R4MWRkZGY4NFlj cUsvMC9ENkJDRkU0M0Y5RUJEOUI5RUZGMzgxNUQzQjU2RDEzRDgyNkM5MUY4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q2QkNGRTQzRjlFQkQ5QjlF RkYzODE1RDNCNTZEMTNEODI2QzkxRjguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0FBdXFuUFljdWlrekRzRkpWMVN6NmNKV2ZYbnpDVWdkeDFkZGRmODRZY3FLLzAv MzEzNzMwMmUzODM0MmUzMjM0MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2 MzUzMDMyMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACqVPgwDQYJKoZIhvcNAQELBQADggEBAB0YpmKt 9q+/eASjkvAgZ4kw55ZW6dyrG6/s0LTpsKnBenPLzGtcZBiUgjdjGzq/1W8Q6SiC yuHrROtYTBN4Yk2oxopr8V+97CzWuq76wuhHrpgVka8FXSuOT1QisyPPYze9CQxs ejVExmEtsrik7bgezagwCJFxaHsbR5fjzvgRVl/d/6arBQgKUyu3lO7oYITafJNh INE8whSYk2GFGLJK1bnJ8TCNczyTDJFRCQZGmWT3OTF3zhOZUNiqMBcV7Ki4wNyw JWZnWmgQx8BQLEYZvzDmdqHcbIMk8GG5Ggssxz0rttbmZHAbt6olqpe/Sm4Xvfmp nHiR0ZoXScVxh+0= -----END CERTIFICATE-----Generated at Wed Apr 23 08:04:32 2025 by rpki-client