$ rpki-client -vvf rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/3133312e302e32302e302f32322d3332203d3e20313938393439.roa File: 3133312e302e32302e302f32322d3332203d3e20313938393439.roa (raw, json) Hash identifier: fTd/5cBG9mlz6n9KlIjz6g6nXkqHzbKoyPgp4g5+LNU= Subject key identifier: 46:8F:14:6C:D3:C9:6F:01:F0:A0:50:21:08:F2:DA:0D:3E:FF:D2:85 Certificate issuer: /CN=9F85C9FEBF815155C6D44798669FB3BFB9FD49E0 Certificate serial: 3A3EFA45BE9A766BDC5192E4BE4C0FA0481B3A35 Authority key identifier: 9F:85:C9:FE:BF:81:51:55:C6:D4:47:98:66:9F:B3:BF:B9:FD:49:E0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.cer Subject info access: rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/3133312e302e32302e302f32322d3332203d3e20313938393439.roa Signing time: Fri 21 Feb 2025 16:52:48 +0000 ROA not before: Fri 21 Feb 2025 16:47:48 +0000 ROA not after: Fri 20 Feb 2026 16:52:48 +0000 asID: 198949 IP address blocks: 131.0.20.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.crl rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Apr 2025 14:06:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:3e:fa:45:be:9a:76:6b:dc:51:92:e4:be:4c:0f:a0:48:1b:3a:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F85C9FEBF815155C6D44798669FB3BFB9FD49E0 Validity Not Before: Feb 21 16:47:48 2025 GMT Not After : Feb 20 16:52:48 2026 GMT Subject: CN=468F146CD3C96F01F0A0502108F2DA0D3EFFD285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d3:3a:d4:44:ba:97:71:f8:76:73:40:1a:bc: fc:43:76:26:11:93:7a:18:e6:71:63:9f:3f:86:06: 11:29:f0:4e:ee:53:e9:51:aa:87:0d:54:42:14:69: 60:e2:4c:21:65:97:78:44:b4:ef:ae:7a:c0:77:b5: 04:e9:8d:dd:d2:f3:eb:30:e6:1f:12:03:22:3d:e9: 24:7d:f8:4d:2e:ca:79:91:5c:74:cd:d6:67:0a:be: 9b:4e:22:58:f4:00:ee:56:f3:48:40:78:85:8b:f8: 33:e0:41:0f:6c:dc:73:4e:80:e2:9a:d3:38:cb:8b: 11:e0:eb:bb:f8:ff:67:43:c5:3b:f3:ff:76:86:56: 03:c9:fd:3c:b0:3d:0d:26:27:26:21:d6:c4:8d:d8: 4c:e2:dd:bf:79:08:d4:bb:93:6a:88:55:b9:c8:be: 23:aa:81:2a:75:36:5d:75:8e:89:20:f6:ac:b9:17: c1:10:9a:ee:25:25:5e:0a:55:68:a6:f2:1b:05:0a: 60:d0:90:24:a9:ae:21:b8:f4:d9:44:b6:d2:62:dd: ac:12:e2:05:40:8f:80:43:6f:c2:26:e5:40:ea:67: b0:34:4c:37:04:00:dc:4e:f2:fa:4a:67:64:af:c5: 0d:49:9f:a6:c6:02:3d:2d:ab:66:cf:24:d6:ad:28: d3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:8F:14:6C:D3:C9:6F:01:F0:A0:50:21:08:F2:DA:0D:3E:FF:D2:85 X509v3 Authority Key Identifier: keyid:9F:85:C9:FE:BF:81:51:55:C6:D4:47:98:66:9F:B3:BF:B9:FD:49:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/3133312e302e32302e302f32322d3332203d3e20313938393439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.0.20.0/22 Signature Algorithm: sha256WithRSAEncryption 46:34:3c:2e:64:a6:de:38:08:bb:36:ad:36:14:80:ad:e8:c3: 01:1d:aa:72:6a:58:c8:e8:d4:4c:fd:96:c0:e8:f4:27:d7:4d: 61:6c:22:92:6b:dd:2a:76:a7:ad:8a:0b:a4:a0:f3:a0:86:8a: 7d:42:55:e0:86:c7:1b:b6:16:0b:7a:08:98:f9:43:3e:67:6d: 1d:a4:c7:cc:fd:4c:5c:86:65:59:97:5e:6f:85:c7:fb:b4:24: cf:6c:25:a8:65:2a:c5:cb:05:d4:18:b5:0c:7d:f8:bd:79:12: e7:1b:99:a8:ee:44:82:e3:7e:16:f4:fd:9e:dc:db:b2:fb:16: ad:be:1b:7a:42:70:b3:6a:c7:ae:76:2a:f9:85:27:35:9e:a7: 16:d6:19:f2:41:87:b1:d7:64:a6:2e:4f:c8:ce:2a:54:d2:23: f3:8e:ae:95:d1:89:6a:bf:67:c1:2f:61:91:11:bf:cd:56:3d: 8d:18:ae:67:2b:50:43:ee:69:7e:d2:8e:7b:2c:d2:f3:30:24: 71:04:51:f3:eb:69:99:76:d5:ff:25:4e:37:3f:a0:cf:c6:e8: 4e:72:b9:e3:c1:99:29:d4:24:a3:52:a8:7a:42:0f:49:03:59: da:1b:be:33:8b:63:dc:f8:16:bf:17:d6:99:c2:de:05:fd:0f: bf:d6:46:b8 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUOj76Rb6admvcUZLkvkwPoEgbOjUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY4NUM5RkVCRjgxNTE1NUM2RDQ0Nzk4NjY5RkIzQkZC OUZENDlFMDAeFw0yNTAyMjExNjQ3NDhaFw0yNjAyMjAxNjUyNDhaMDMxMTAvBgNV BAMTKDQ2OEYxNDZDRDNDOTZGMDFGMEEwNTAyMTA4RjJEQTBEM0VGRkQyODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC20zrURLqXcfh2c0AavPxDdiYR k3oY5nFjnz+GBhEp8E7uU+lRqocNVEIUaWDiTCFll3hEtO+uesB3tQTpjd3S8+sw 5h8SAyI96SR9+E0uynmRXHTN1mcKvptOIlj0AO5W80hAeIWL+DPgQQ9s3HNOgOKa 0zjLixHg67v4/2dDxTvz/3aGVgPJ/TywPQ0mJyYh1sSN2Ezi3b95CNS7k2qIVbnI viOqgSp1Nl11jokg9qy5F8EQmu4lJV4KVWim8hsFCmDQkCSpriG49NlEttJi3awS 4gVAj4BDb8Im5UDqZ7A0TDcEANxO8vpKZ2SvxQ1Jn6bGAj0tq2bPJNatKNPxAgMB AAGjggJNMIICSTAdBgNVHQ4EFgQURo8UbNPJbwHwoFAhCPLaDT7/0oUwHwYDVR0j BBgwFoAUn4XJ/r+BUVXG1EeYZp+zv7n9SeAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQU53M0FpaXE4TG1DR1pHSnY0NDFZcHZqUjFkcGVmYVJqRWRjcllzVjd4 aEgvMC85Rjg1QzlGRUJGODE1MTU1QzZENDQ3OTg2NjlGQjNCRkI5RkQ0OUUwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlGODVDOUZFQkY4MTUxNTVD NkQ0NDc5ODY2OUZCM0JGQjlGRDQ5RTAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0FOdzNBaWlxOExtQ0daR0p2NDQxWXB2alIxZHBlZmFSakVkY3JZc1Y3eGhILzAv MzEzMzMxMmUzMDJlMzIzMDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMxMzkzODM5 MzQzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB /wQQMA4wDAQCAAEwBgMEAoMAFDANBgkqhkiG9w0BAQsFAAOCAQEARjQ8LmSm3jgI uzatNhSArejDAR2qcmpYyOjUTP2WwOj0J9dNYWwikmvdKnanrYoLpKDzoIaKfUJV 4IbHG7YWC3oImPlDPmdtHaTHzP1MXIZlWZdeb4XH+7Qkz2wlqGUqxcsF1Bi1DH34 vXkS5xuZqO5EguN+FvT9ntzbsvsWrb4bekJws2rHrnYq+YUnNZ6nFtYZ8kGHsddk pi5PyM4qVNIj846uldGJar9nwS9hkRG/zVY9jRiuZytQQ+5pftKOeyzS8zAkcQRR 8+tpmXbV/yVONz+gz8boTnK548GZKdQko1KoekIPSQNZ2hu+M4tj3PgWvxfWmcLe Bf0Pv9ZGuA== -----END CERTIFICATE-----Generated at Mon Apr 7 04:26:08 2025 by rpki-client