$ rpki-client -vvf rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/1/3133382e3138352e3230302e302f32322d3234203d3e20323633383439.roa File: 3133382e3138352e3230302e302f32322d3234203d3e20323633383439.roa (raw, json) Hash identifier: eexWA0vLPD5Uv+sRM+dgzfA8aq2yqYvioG5xkOn3HfE= Subject key identifier: 45:A2:9B:2E:9D:1D:AF:53:19:FC:CB:41:F1:9F:83:85:63:15:9E:1E Certificate issuer: /CN=701CA9DD24FE6BBE9CFFCE3F0ADBC664A121571A Certificate serial: 38AB004E7B86E79B776202D2A9ED264AF7A89F41 Authority key identifier: 70:1C:A9:DD:24:FE:6B:BE:9C:FF:CE:3F:0A:DB:C6:64:A1:21:57:1A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701CA9DD24FE6BBE9CFFCE3F0ADBC664A121571A.cer Subject info access: rsync://rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/1/3133382e3138352e3230302e302f32322d3234203d3e20323633383439.roa Signing time: Wed 05 Mar 2025 19:00:06 +0000 ROA not before: Wed 05 Mar 2025 18:55:06 +0000 ROA not after: Wed 04 Mar 2026 19:00:06 +0000 asID: 263849 IP address blocks: 138.185.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/1/701CA9DD24FE6BBE9CFFCE3F0ADBC664A121571A.crl rsync://rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/1/701CA9DD24FE6BBE9CFFCE3F0ADBC664A121571A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701CA9DD24FE6BBE9CFFCE3F0ADBC664A121571A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 23 Apr 2025 03:10:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:ab:00:4e:7b:86:e7:9b:77:62:02:d2:a9:ed:26:4a:f7:a8:9f:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=701CA9DD24FE6BBE9CFFCE3F0ADBC664A121571A Validity Not Before: Mar 5 18:55:06 2025 GMT Not After : Mar 4 19:00:06 2026 GMT Subject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ubject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3c:e7:e6:df:86:fb:df:cb:6e:2f:2e:3d:de: 40:31:7f:5f:ab:92:c6:5d:8b:4a:28:f1:53:f4:c0: 1c:dc:50:a9:0e:7c:8f:2e:fb:d3:54:1f:c7:f9:a9: 36:a4:a0:9f:ad:45:5d:f4:3e:ac:b3:98:e5:7f:8d: b3:34:9d:ad:52:93:00:6b:6b:db:a3:0b:ae:d3:3f: d0:af:57:76:89:24:3b:7a:60:7d:09:3a:37:15:3a: d0:d6:b8:85:d4:c8:cf:60:90:ed:65:b6:14:24:8b: 15:8c:80:e0:b3:b1:4e:c8:3d:d6:38:c3:c7:4c:bb: f6:33:5a:10:14:68:06:7f:be:5f:04:ce:d4:08:37: e3:94:85:5a:d7:fc:3d:8a:61:05:19:5e:3b:f7:ea: 82:63:af:9c:4d:3b:23:bd:7c:43:fe:8c:76:6f:77: b4:12:39:16:7b:75:51:be:10:62:b7:36:de:08:8b: e8:de:6b:39:d5:49:6f:03:40:a0:35:a6:41:b5:d1: 13:e8:b0:0c:72:26:68:8f:71:54:08:77:1f:66:16: f7:c4:7a:2b:e5:e3:a2:63:de:0f:a8:1a:de:26:22: 2a:a1:f3:44:31:19:54:91:2e:fd:87:33:32:eb:2d: 62:66:90:81:9e:73:77:d4:65:f7:85:b8:0f:9a:4b: 4c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:A2:9B:2E:9D:1D:AF:53:19:FC:CB:41:F1:9F:83:85:63:15:9E:1E X509v3 Authority Key Identifier: keyid:70:1C:A9:DD:24:FE:6B:BE:9C:FF:CE:3F:0A:DB:C6:64:A1:21:57:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/1/701CA9DD24FE6BBE9CFFCE3F0ADBC664A121571A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701CA9DD24FE6BBE9CFFCE3F0ADBC664A121571A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/1/3133382e3138352e3230302e302f32322d3234203d3e20323633383439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.185.200.0/22 Signature Algorithm: sha256WithRSAEncryption 3d:d8:43:9a:fb:1c:43:a6:b1:c0:1e:0d:88:b5:d9:24:8a:93: 8c:e7:75:0c:2b:af:3e:31:7c:fa:e4:43:95:3e:51:c7:58:9f: 99:b9:2c:b5:e2:8c:c0:41:a3:2f:36:4e:56:0b:37:d5:35:c4: bd:43:3d:a8:64:74:4a:f8:ed:0e:6f:67:17:7f:8d:d2:3f:9a: 6f:c8:e9:64:7c:0e:cf:29:2f:62:e7:31:96:ce:05:c9:e9:36: 62:a1:1e:af:d5:9f:5c:32:5b:f5:cc:68:e7:ab:24:e8:14:67: 70:17:6d:c8:1f:f4:11:dc:86:ca:42:b8:05:f7:ec:8c:62:3f: 73:4b:f3:f7:be:5a:6b:ee:4d:ed:54:e3:4a:d0:71:88:cd:1e: 44:eb:cd:b6:ef:26:6d:a9:05:b5:0e:8f:87:c4:3c:7a:12:57: 63:66:64:51:a6:e4:f4:5c:9f:1c:6e:b1:7b:44:11:ed:55:8a: eb:68:0c:a5:24:8a:32:fe:ac:e3:35:24:2b:63:ee:8e:d0:11: 39:80:3e:e9:3f:7a:66:45:2f:2c:7a:ca:9a:df:e9:75:2d:7e: b8:fc:35:32:9e:e8:b8:5e:d6:3c:47:b5:a3:3f:7f:03:32:c8: 2d:c4:19:82:78:9a:d4:b8:b4:c9:82:34:f5:6c:ed:fe:2c:06: 7e:c6:a4:c4 -----BEGIN CERTIFICATE----- MIIHRTCCBi2gAwIBAgIUOKsATnuG55t3YgLSqe0mSveon0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAxQ0E5REQyNEZFNkJCRTlDRkZDRTNGMEFEQkM2NjRB MTIxNTcxQTAeFw0yNTAzMDUxODU1MDZaFw0yNjAzMDQxOTAwMDZaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjYzQ0U3RTZERjg2RkJERkNC NkUyRjJFM0RERTQwMzE3RjVGQUI5MkM2NUQ4QjRBMjhGMTUzRjRDMDFDREM1MEE5 MEU3QzhGMkVGQkQzNTQxRkM3RjlBOTM2QTRBMDlGQUQ0NTVERjQzRUFDQjM5OEU1 N0Y4REIzMzQ5REFENTI5MzAwNkI2QkRCQTMwQkFFRDMzRkQwQUY1Nzc2ODkyNDNC N0E2MDdEMDkzQTM3MTUzQUQwRDZCODg1RDRDOENGNjA5MEVENjVCNjE0MjQ4QjE1 OEM4MEUwQjNCMTRFQzgzREQ2MzhDM0M3NENCQkY2MzM1QTEwMTQ2ODA2N0ZCRTVG MDRDRUQ0MDgzN0UzOTQ4NTVBRDdGQzNEOEE2MTA1MTk1RTNCRjdFQTgyNjNBRjlD NEQzQjIzQkQ3QzQzRkU4Qzc2NkY3N0I0MTIzOTE2N0I3NTUxQkUxMDYyQjczNkRF MDg4QkU4REU2QjM5RDU0OTZGMDM0MEEwMzVBNjQxQjVEMTEzRThCMDBDNzIyNjY4 OEY3MTU0MDg3NzFGNjYxNkY3QzQ3QTJCRTVFM0EyNjNERTBGQTgxQURFMjYyMjJB QTFGMzQ0MzExOTU0OTEyRUZEODczMzMyRUIyRDYyNjY5MDgxOUU3Mzc3RDQ2NUY3 ODVCODBGOUE0QjRDMjcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAtjzn5t+G+9/Lbi8uPd5AMX9fq5LGXYtKKPFT9MAc3FCpDnyPLvvT VB/H+ak2pKCfrUVd9D6ss5jlf42zNJ2tUpMAa2vbowuu0z/Qr1d2iSQ7emB9CTo3 FTrQ1riF1MjPYJDtZbYUJIsVjIDgs7FOyD3WOMPHTLv2M1oQFGgGf75fBM7UCDfj lIVa1/w9imEFGV479+qCY6+cTTsjvXxD/ox2b3e0EjkWe3VRvhBitzbeCIvo3ms5 1UlvA0CgNaZBtdET6LAMciZoj3FUCHcfZhb3xHor5eOiY94PqBreJiIqofNEMRlU kS79hzMy6y1iZpCBnnN31GX3hbgPmktMJwIDAQABo4ICUzCCAk8wHQYDVR0OBBYE FEWimy6dHa9TGfzLQfGfg4VjFZ4eMB8GA1UdIwQYMBaAFHAcqd0k/mu+nP/OPwrb xmShIVcaMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FmOVRNcjVEVVNuMlFz TWJjWllrYTlaUE1XN3RLdzFRTDFMa2NBRXdZWDM4LzEvNzAxQ0E5REQyNEZFNkJC RTlDRkZDRTNGMEFEQkM2NjRBMTIxNTcxQS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p Y2JyX3JlcG8vMS83MDFDQTlERDI0RkU2QkJFOUNGRkNFM0YwQURCQzY2NEExMjE1 NzFBLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6 Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BZjlUTXI1RFVTbjJRc01iY1pZ a2E5WlBNVzd0S3cxUUwxTGtjQUV3WVgzOC8xLzMxMzMzODJlMzEzODM1MmUzMjMw MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzMzODM0Mzkucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAKKucgwDQYJKoZIhvcNAQELBQADggEBAD3YQ5r7HEOmscAeDYi12SSKk4zndQwr rz4xfPrkQ5U+UcdYn5m5LLXijMBBoy82TlYLN9U1xL1DPahkdEr47Q5vZxd/jdI/ mm/I6WR8Ds8pL2LnMZbOBcnpNmKhHq/Vn1wyW/XMaOerJOgUZ3AXbcgf9BHchspC uAX37IxiP3NL8/e+WmvuTe1U40rQcYjNHkTrzbbvJm2pBbUOj4fEPHoSV2NmZFGm 5PRcnxxusXtEEe1ViutoDKUkijL+rOM1JCtj7o7QETmAPuk/emZFLyx6yprf6XUt frj8NTKe6Lhe1jxHtaM/fwMyyC3EGYJ4mtS4tMmCNPVs7f4sBn7GpMQ= -----END CERTIFICATE-----Generated at Tue Apr 22 13:47:57 2025 by rpki-client