$ rpki-client -vvf rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/3137302e3233332e36302e302f32322d3234203d3e203238313533.roa File: 3137302e3233332e36302e302f32322d3234203d3e203238313533.roa (raw, json) Hash identifier: I3Edz0N7BkPOy03876avlis+79tYwC4DD47mOHaDbCI= Subject key identifier: C6:78:D8:C8:D1:13:D5:2E:39:00:4B:0B:9A:C4:6C:BC:76:8A:90:05 Certificate issuer: /CN=5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50 Certificate serial: 7CBE82694FA163F92F5A3C83B8E86607B328F242 Authority key identifier: 53:00:AE:48:AF:BB:B3:79:3D:0E:14:25:B8:FC:6D:38:F4:3B:DC:50 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.cer Subject info access: rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/3137302e3233332e36302e302f32322d3234203d3e203238313533.roa Signing time: Mon 31 Mar 2025 14:21:16 +0000 ROA not before: Mon 31 Mar 2025 14:16:16 +0000 ROA not after: Mon 30 Mar 2026 14:21:16 +0000 asID: 28153 IP address blocks: 170.233.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.crl rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 19:09:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:be:82:69:4f:a1:63:f9:2f:5a:3c:83:b8:e8:66:07:b3:28:f2:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50 Validity Not Before: Mar 31 14:16:16 2025 GMT Not After : Mar 30 14:21:16 2026 GMT Subject: CN=C678D8C8D113D52E39004B0B9AC46CBC768A9005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7d:ac:dc:18:a3:0c:fa:75:6a:da:a1:ec:f2: e2:1c:dc:34:5d:35:2c:9a:af:ba:d8:92:69:c3:7d: 31:03:52:30:ab:44:12:94:5b:06:a0:29:b4:63:70: 19:8a:26:ed:6c:ad:d7:91:46:43:ce:f0:d5:c1:b4: 58:55:7f:c6:8a:c3:a5:96:6d:7a:a6:30:7e:c1:19: 0b:8b:ce:92:e8:ef:19:76:a9:c8:91:32:da:86:55: 7f:52:b9:a1:f9:3a:d3:02:75:b1:6a:01:cc:94:8a: dd:9b:b1:9a:da:26:64:ab:32:b1:1c:63:ff:57:b2: a4:f1:1c:f6:f3:d3:d4:8b:4a:25:e3:7e:09:9f:f9: 81:5d:df:18:8d:20:ec:e1:c4:42:ce:d3:0e:07:4f: b3:07:d3:71:25:bb:17:d5:63:f7:91:0d:46:21:a5: ff:57:de:2e:60:2f:fd:9a:3c:14:a0:a0:d7:c0:b1: d4:24:da:67:49:f2:10:af:65:31:31:da:14:39:1f: ee:32:5f:7c:61:d1:7f:bd:f5:49:2b:41:89:ae:41: cf:70:00:b3:4d:42:32:6c:c9:9b:a9:18:1a:de:77: 56:79:3d:88:77:66:43:b2:65:e1:3c:56:0e:77:ee: 70:f2:19:ce:3a:5c:5d:be:db:2a:71:30:8e:a9:67: 58:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:78:D8:C8:D1:13:D5:2E:39:00:4B:0B:9A:C4:6C:BC:76:8A:90:05 X509v3 Authority Key Identifier: keyid:53:00:AE:48:AF:BB:B3:79:3D:0E:14:25:B8:FC:6D:38:F4:3B:DC:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/3137302e3233332e36302e302f32322d3234203d3e203238313533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.233.60.0/22 Signature Algorithm: sha256WithRSAEncryption 9b:7a:18:28:85:78:28:64:a9:ef:9a:af:60:5a:64:08:82:7b: 5a:ec:e6:7f:e2:ed:61:e8:3c:47:f3:18:9b:a5:6f:6c:2e:00: 92:5f:dd:06:fa:f4:79:f2:29:3b:9e:f4:c9:39:a5:15:5c:8f: 29:31:84:ad:90:c1:10:f7:bb:85:c3:51:fd:be:96:fb:8a:b8: 16:2a:6d:10:2c:75:07:38:46:44:ed:6b:93:44:82:a4:71:56: c3:eb:64:d5:5d:cc:aa:a5:89:99:bb:f6:9a:8f:7f:55:72:d2: cd:6f:9b:99:6a:1e:69:33:b6:ac:a6:2d:54:22:cc:c2:77:40: fb:aa:23:df:a5:36:8e:17:76:f4:7a:cf:86:d9:03:bc:19:8b: c2:a2:ea:03:7d:4b:df:42:b2:e5:4d:b8:70:fb:42:5f:54:5a: 2b:6c:0c:b0:3f:47:33:e1:c2:f4:2d:43:da:85:87:fd:5c:2b: e7:27:4c:44:fb:b8:ea:27:87:d9:8a:e4:fe:0d:0e:f2:42:b4: 23:5d:6f:71:4d:b1:9f:af:6f:47:0f:1b:2c:3b:1b:bd:ba:c7: 50:f7:1d:3b:b8:f8:8e:5b:f3:a1:32:be:52:6c:9c:e4:fb:4b: 0c:5a:64:a5:0d:15:f2:1f:81:21:ba:c0:da:82:25:b1:af:25: 84:bf:df:e8 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUfL6CaU+hY/kvWjyDuOhmB7Mo8kIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMwMEFFNDhBRkJCQjM3OTNEMEUxNDI1QjhGQzZEMzhG NDNCREM1MDAeFw0yNTAzMzExNDE2MTZaFw0yNjAzMzAxNDIxMTZaMDMxMTAvBgNV BAMTKEM2NzhEOEM4RDExM0Q1MkUzOTAwNEIwQjlBQzQ2Q0JDNzY4QTkwMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrfazcGKMM+nVq2qHs8uIc3DRd NSyar7rYkmnDfTEDUjCrRBKUWwagKbRjcBmKJu1srdeRRkPO8NXBtFhVf8aKw6WW bXqmMH7BGQuLzpLo7xl2qciRMtqGVX9SuaH5OtMCdbFqAcyUit2bsZraJmSrMrEc Y/9XsqTxHPbz09SLSiXjfgmf+YFd3xiNIOzhxELO0w4HT7MH03EluxfVY/eRDUYh pf9X3i5gL/2aPBSgoNfAsdQk2mdJ8hCvZTEx2hQ5H+4yX3xh0X+99UkrQYmuQc9w ALNNQjJsyZupGBred1Z5PYh3ZkOyZeE8Vg537nDyGc46XF2+2ypxMI6pZ1jNAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUxnjYyNET1S45AEsLmsRsvHaKkAUwHwYDVR0j BBgwFoAUUwCuSK+7s3k9DhQluPxtOPQ73FAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQXp5cmJadEgydEFnWG03dm9kTndoRFM3NTJLckZjVkVzQkxVa0hBb0xk aUcvMC81MzAwQUU0OEFGQkJCMzc5M0QwRTE0MjVCOEZDNkQzOEY0M0JEQzUwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUzMDBBRTQ4QUZCQkIzNzkz RDBFMTQyNUI4RkM2RDM4RjQzQkRDNTAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0F6eXJiWnRIMnRBZ1htN3ZvZE53aERTNzUyS3JGY1ZFc0JMVWtIQW9MZGlHLzAv MzEzNzMwMmUzMjMzMzMyZTM2MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM4 MzEzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQCquk8MA0GCSqGSIb3DQEBCwUAA4IBAQCbehgohXgo ZKnvmq9gWmQIgnta7OZ/4u1h6DxH8xibpW9sLgCSX90G+vR58ik7nvTJOaUVXI8p MYStkMEQ97uFw1H9vpb7irgWKm0QLHUHOEZE7WuTRIKkcVbD62TVXcyqpYmZu/aa j39VctLNb5uZah5pM7aspi1UIszCd0D7qiPfpTaOF3b0es+G2QO8GYvCouoDfUvf QrLlTbhw+0JfVForbAywP0cz4cL0LUPahYf9XCvnJ0xE+7jqJ4fZiuT+DQ7yQrQj XW9xTbGfr29HDxssOxu9usdQ9x07uPiOW/OhMr5SbJzk+0sMWmSlDRXyH4EhusDa giWxryWEv9/o -----END CERTIFICATE-----Generated at Wed Apr 9 02:41:04 2025 by rpki-client