$ rpki-client -vvf rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/3133382e302e3135312e302f32342d3234203d3e20323638353436.roa File: 3133382e302e3135312e302f32342d3234203d3e20323638353436.roa (raw, json) Hash identifier: IBdG1pMLCT4CM2ZFASPiNZoh6+S906INleFqSbR6NDI= Subject key identifier: 60:D7:BC:E9:99:2F:31:D7:B3:E9:9A:EA:A6:BC:6A:09:2D:91:42:40 Certificate issuer: /CN=32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4 Certificate serial: 1BC6D8C2599B4062F1AAECCF80435CA6D8F67083 Authority key identifier: 32:C3:A2:0B:EB:E1:AC:7A:6C:3E:09:58:CC:B9:71:DE:A6:4D:E1:B4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.cer Subject info access: rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/3133382e302e3135312e302f32342d3234203d3e20323638353436.roa Signing time: Wed 04 Jun 2025 01:05:43 +0000 ROA not before: Wed 04 Jun 2025 01:00:43 +0000 ROA not after: Wed 03 Jun 2026 01:05:43 +0000 asID: 268546 IP address blocks: 138.0.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.crl rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 12 Jun 2025 15:13:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:c6:d8:c2:59:9b:40:62:f1:aa:ec:cf:80:43:5c:a6:d8:f6:70:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4 Validity Not Before: Jun 4 01:00:43 2025 GMT Not After : Jun 3 01:05:43 2026 GMT Subject: CN=60D7BCE9992F31D7B3E99AEAA6BC6A092D914240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:02:36:fa:9e:9e:91:60:d2:90:16:0a:02:84: 46:e5:e8:d7:8b:4f:30:55:e0:40:61:34:66:43:c5: 9a:8d:8f:c6:3d:46:c4:a5:ed:03:87:7c:26:39:b3: 1b:72:b2:3c:c2:ba:82:dd:9c:61:cf:e6:7d:7e:2c: d3:6b:d0:64:97:45:c2:5a:02:ac:8a:77:9a:96:32: ec:06:75:b0:6c:d1:d9:26:df:71:cc:a8:e0:82:40: 29:97:9a:a9:24:b3:ec:1f:be:c2:35:fc:81:ba:5f: 37:ad:20:6a:f8:2f:28:f6:66:14:ea:50:16:f9:21: 97:48:f4:72:8d:8d:59:9d:43:8c:f9:2a:f7:e5:e2: 13:cb:aa:24:cc:43:b1:b6:c6:22:af:e9:86:af:5f: ac:1e:64:49:00:db:f9:07:8b:cd:7a:d2:5d:b0:4a: a3:93:9c:7a:6c:99:68:5f:a1:61:25:9e:cc:87:5d: d2:3d:3f:b9:6e:4c:e6:b7:46:1c:a0:7d:a4:30:bd: ec:63:b5:5a:6b:1f:9c:94:ed:d6:94:53:c1:43:aa: dd:28:bb:7b:bb:06:db:ef:c5:76:8d:08:87:5d:54: eb:6b:1b:32:94:e4:62:f1:83:e9:6f:83:83:48:ba: 41:09:08:2b:2a:3a:68:8e:3a:8a:4b:84:8d:18:11: 27:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D7:BC:E9:99:2F:31:D7:B3:E9:9A:EA:A6:BC:6A:09:2D:91:42:40 X509v3 Authority Key Identifier: keyid:32:C3:A2:0B:EB:E1:AC:7A:6C:3E:09:58:CC:B9:71:DE:A6:4D:E1:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/3133382e302e3135312e302f32342d3234203d3e20323638353436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.0.151.0/24 Signature Algorithm: sha256WithRSAEncryption 51:66:9f:14:f4:15:d6:7b:ef:eb:ff:44:96:d4:82:35:9b:f6: 0f:e5:f2:0e:3a:93:bd:e1:47:9e:3e:63:fb:8e:2b:6e:70:c8: 64:51:53:6c:f1:bc:e6:9e:53:50:6a:a1:95:e9:f6:d0:76:ec: 78:86:95:c1:9a:b5:17:56:87:b5:c3:fd:cc:02:ee:57:77:e6: 25:3b:8e:a6:99:b3:ad:32:fb:8d:a5:31:d7:f3:39:48:0e:ad: 0c:3e:2d:34:88:49:a5:75:6f:c0:a2:f4:04:23:94:8d:b9:59: 9a:ad:fd:13:53:35:e9:1f:81:2e:f3:be:88:5b:23:bb:bf:dd: d3:a0:9e:c6:c2:2e:e4:a3:07:75:50:e9:c1:5b:2d:1a:e7:d1: 1f:0a:f6:a8:f3:a6:b2:d8:1a:8f:40:13:55:83:73:d5:ea:8b: 13:4d:1f:4e:b7:71:88:d7:ee:5a:37:8c:65:75:ce:c5:b3:54: 2e:a5:dc:29:ea:92:ca:73:e9:7d:2c:c5:62:e8:b3:1e:50:69: f5:fb:28:cf:5b:11:04:ff:66:20:c7:98:8f:c6:03:3d:51:dd: ec:6c:e8:3f:9d:44:98:b3:69:b0:c1:45:35:35:fa:ce:61:78: 71:cd:8f:fe:ee:7e:cd:ba:4e:3f:2c:52:78:88:41:7e:a0:7a: 9f:fa:0c:58 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUG8bYwlmbQGLxquzPgENcptj2cIMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJDM0EyMEJFQkUxQUM3QTZDM0UwOTU4Q0NCOTcxREVB NjRERTFCNDAeFw0yNTA2MDQwMTAwNDNaFw0yNjA2MDMwMTA1NDNaMDMxMTAvBgNV BAMTKDYwRDdCQ0U5OTkyRjMxRDdCM0U5OUFFQUE2QkM2QTA5MkQ5MTQyNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfAjb6np6RYNKQFgoChEbl6NeL TzBV4EBhNGZDxZqNj8Y9RsSl7QOHfCY5sxtysjzCuoLdnGHP5n1+LNNr0GSXRcJa AqyKd5qWMuwGdbBs0dkm33HMqOCCQCmXmqkks+wfvsI1/IG6XzetIGr4Lyj2ZhTq UBb5IZdI9HKNjVmdQ4z5Kvfl4hPLqiTMQ7G2xiKv6YavX6weZEkA2/kHi8160l2w SqOTnHpsmWhfoWElnsyHXdI9P7luTOa3RhygfaQwvexjtVprH5yU7daUU8FDqt0o u3u7BtvvxXaNCIddVOtrGzKU5GLxg+lvg4NIukEJCCsqOmiOOopLhI0YESfvAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUYNe86ZkvMdez6ZrqprxqCS2RQkAwHwYDVR0j BBgwFoAUMsOiC+vhrHpsPglYzLlx3qZN4bQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkhrR1ZkQjJoUm96ZHFoSkZmZkduTmRpY0I4aG5wdDZKclJvWG1jZ0hn NTMvMC8zMkMzQTIwQkVCRTFBQzdBNkMzRTA5NThDQ0I5NzFERUE2NERFMUI0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMyQzNBMjBCRUJFMUFDN0E2 QzNFMDk1OENDQjk3MURFQTY0REUxQjQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0JIa0dWZEIyaFJvemRxaEpGZmZHbk5kaWNCOGhucHQ2SnJSb1htY2dIZzUzLzAv MzEzMzM4MmUzMDJlMzEzNTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4 MzUzNDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQAigCXMA0GCSqGSIb3DQEBCwUAA4IBAQBRZp8U9BXW e+/r/0SW1II1m/YP5fIOOpO94UeePmP7jitucMhkUVNs8bzmnlNQaqGV6fbQdux4 hpXBmrUXVoe1w/3MAu5Xd+YlO46mmbOtMvuNpTHX8zlIDq0MPi00iEmldW/AovQE I5SNuVmarf0TUzXpH4Eu876IWyO7v93ToJ7Gwi7kowd1UOnBWy0a59EfCvao86ay 2BqPQBNVg3PV6osTTR9Ot3GI1+5aN4xldc7Fs1Qupdwp6pLKc+l9LMVi6LMeUGn1 +yjPWxEE/2Ygx5iPxgM9Ud3sbOg/nUSYs2mwwUU1NfrOYXhxzY/+7n7Nuk4/LFJ4 iEF+oHqf+gxY -----END CERTIFICATE-----Generated at Thu Jun 12 01:39:43 2025 by rpki-client