$ rpki-client -vvf rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/3136372e3234392e38392e302f32342d3234203d3e20323731313334.roa File: 3136372e3234392e38392e302f32342d3234203d3e20323731313334.roa (raw, json) Hash identifier: 4PAcp3xHepWz+3jtI9ZXWkqCNHsOQ1FvAUk4SVVZqzU= Subject key identifier: 61:5E:81:36:65:D4:A9:11:50:C0:C4:BA:A5:CD:37:C4:B5:BE:B3:92 Certificate issuer: /CN=C0DA5845CF951A8ECD8332855BC18916639F81DF Certificate serial: 05FEC9CF0FCBB58AECD931D73AE5ACFFF034426F Authority key identifier: C0:DA:58:45:CF:95:1A:8E:CD:83:32:85:5B:C1:89:16:63:9F:81:DF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0DA5845CF951A8ECD8332855BC18916639F81DF.cer Subject info access: rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/3136372e3234392e38392e302f32342d3234203d3e20323731313334.roa Signing time: Sat 01 Mar 2025 16:24:29 +0000 ROA not before: Sat 01 Mar 2025 16:19:29 +0000 ROA not after: Sat 28 Feb 2026 16:24:29 +0000 asID: 271134 IP address blocks: 167.249.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/C0DA5845CF951A8ECD8332855BC18916639F81DF.crl rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/C0DA5845CF951A8ECD8332855BC18916639F81DF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0DA5845CF951A8ECD8332855BC18916639F81DF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 12 Apr 2025 23:44:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:fe:c9:cf:0f:cb:b5:8a:ec:d9:31:d7:3a:e5:ac:ff:f0:34:42:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0DA5845CF951A8ECD8332855BC18916639F81DF Validity Not Before: Mar 1 16:19:29 2025 GMT Not After : Feb 28 16:24:29 2026 GMT Subject: CN=615E813665D4A91150C0C4BAA5CD37C4B5BEB392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3c:eb:e3:32:40:9f:2c:ba:f2:d5:46:72:cb: 18:47:2c:5f:ab:e1:80:81:58:4f:af:8f:00:b4:45: 9d:09:ce:37:d2:f8:fb:b2:9e:e0:a1:a3:ff:00:ed: 37:76:55:30:dd:45:93:cf:05:17:14:12:bc:90:36: 5b:c3:04:71:1a:a8:62:df:c2:58:0a:b8:a4:ca:d3: 93:3e:38:63:0e:df:29:fb:fc:c4:09:01:8b:f7:0c: 4f:0c:b0:18:14:2f:7f:22:b7:cb:fa:32:3d:f9:d8: 1d:9d:cc:50:59:d5:11:a8:57:f8:46:97:f5:fa:13: 15:76:fc:cb:2c:83:c1:90:8b:13:ee:56:c9:e7:48: f1:d5:a1:0a:48:6b:e6:be:bc:07:eb:e3:85:f6:ef: 73:30:d5:af:ba:9c:94:53:ae:74:b2:b9:68:fd:44: 72:f2:aa:e0:8a:1a:43:2f:97:58:fb:a6:86:6f:8b: 8a:3b:15:22:26:c8:30:0a:e9:ae:69:2c:5c:e7:bc: b5:98:94:88:c7:5f:8f:1e:40:37:89:0c:e5:d3:94: 07:68:7f:15:fe:92:8e:21:35:49:0a:bd:59:36:80: 75:d7:99:52:8d:e6:bb:2c:e7:b3:e3:34:3f:2b:d0: 59:5c:d1:49:ef:fb:f4:fa:49:43:3a:9d:74:0d:f4: 85:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:5E:81:36:65:D4:A9:11:50:C0:C4:BA:A5:CD:37:C4:B5:BE:B3:92 X509v3 Authority Key Identifier: keyid:C0:DA:58:45:CF:95:1A:8E:CD:83:32:85:5B:C1:89:16:63:9F:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/C0DA5845CF951A8ECD8332855BC18916639F81DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0DA5845CF951A8ECD8332855BC18916639F81DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/3136372e3234392e38392e302f32342d3234203d3e20323731313334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.249.89.0/24 Signature Algorithm: sha256WithRSAEncryption 59:a7:9b:b8:a4:d4:09:1f:1e:46:db:d6:16:a9:34:1a:ca:49: f9:68:c8:bd:23:f4:82:3f:d6:fc:63:07:f8:bc:d3:9a:cb:c2: bf:35:cf:c1:71:3e:61:5b:49:88:a4:6b:60:17:31:e6:66:4b: ed:1d:0e:f6:8b:58:5c:25:f3:19:57:73:15:40:e2:6c:48:54: 33:54:2f:fa:7f:1a:e8:9e:24:b0:00:5f:cd:6f:20:80:1d:e7: b4:4d:17:b5:03:a5:2c:06:11:35:13:4b:d6:29:44:8d:cf:ca: 64:f3:76:98:ed:44:2b:f5:95:a3:9f:6b:62:fb:04:22:a4:d7: 7c:70:26:fa:8f:0a:fa:a4:56:84:79:16:2b:97:b4:10:e4:f0: 18:23:9b:3b:1d:c7:94:32:f7:94:ba:24:3e:fa:33:a2:a2:55: 37:ef:b1:c4:c4:9b:96:20:15:4e:82:c1:10:a5:1c:90:5c:1f: e6:5f:63:61:74:44:d1:1b:fc:08:a5:d2:84:07:9b:75:c9:5e: 4d:16:43:14:4c:99:40:90:63:af:af:b5:03:86:14:77:e5:52: ad:5a:c9:8e:fc:72:13:fb:e4:bd:8e:52:3f:f3:ed:61:94:c7: b6:ab:24:93:cb:47:d6:33:9a:65:47:55:7a:6f:c9:a0:94:00: f6:09:1c:20 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUBf7Jzw/LtYrs2THXOuWs//A0Qm8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBEQTU4NDVDRjk1MUE4RUNEODMzMjg1NUJDMTg5MTY2 MzlGODFERjAeFw0yNTAzMDExNjE5MjlaFw0yNjAyMjgxNjI0MjlaMDMxMTAvBgNV BAMTKDYxNUU4MTM2NjVENEE5MTE1MEMwQzRCQUE1Q0QzN0M0QjVCRUIzOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaPOvjMkCfLLry1UZyyxhHLF+r 4YCBWE+vjwC0RZ0JzjfS+PuynuCho/8A7Td2VTDdRZPPBRcUEryQNlvDBHEaqGLf wlgKuKTK05M+OGMO3yn7/MQJAYv3DE8MsBgUL38it8v6Mj352B2dzFBZ1RGoV/hG l/X6ExV2/Mssg8GQixPuVsnnSPHVoQpIa+a+vAfr44X273Mw1a+6nJRTrnSyuWj9 RHLyquCKGkMvl1j7poZvi4o7FSImyDAK6a5pLFznvLWYlIjHX48eQDeJDOXTlAdo fxX+ko4hNUkKvVk2gHXXmVKN5rss57PjND8r0Flc0Unv+/T6SUM6nXQN9IXhAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUYV6BNmXUqRFQwMS6pc03xLW+s5IwHwYDVR0j BBgwFoAUwNpYRc+VGo7NgzKFW8GJFmOfgd8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmhVM1FoTWF0aldYQW8yWEUzVTkzekxTR0hHY0JFR1pycmQ2MTdnTWFw NHovMC9DMERBNTg0NUNGOTUxQThFQ0Q4MzMyODU1QkMxODkxNjYzOUY4MURGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MwREE1ODQ1Q0Y5NTFBOEVD RDgzMzI4NTVCQzE4OTE2NjM5RjgxREYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0JoVTNRaE1hdGpXWEFvMlhFM1U5M3pMU0dIR2NCRUdacnJkNjE3Z01hcDR6LzAv MzEzNjM3MmUzMjM0MzkyZTM4MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3 MzEzMTMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACn+VkwDQYJKoZIhvcNAQELBQADggEBAFmnm7ik 1AkfHkbb1hapNBrKSfloyL0j9II/1vxjB/i805rLwr81z8FxPmFbSYika2AXMeZm S+0dDvaLWFwl8xlXcxVA4mxIVDNUL/p/GuieJLAAX81vIIAd57RNF7UDpSwGETUT S9YpRI3PymTzdpjtRCv1laOfa2L7BCKk13xwJvqPCvqkVoR5FiuXtBDk8Bgjmzsd x5Qy95S6JD76M6KiVTfvscTEm5YgFU6CwRClHJBcH+ZfY2F0RNEb/Ail0oQHm3XJ Xk0WQxRMmUCQY6+vtQOGFHflUq1ayY78chP75L2OUj/z7WGUx7arJJPLR9YzmmVH VXpvyaCUAPYJHCA= -----END CERTIFICATE-----Generated at Sat Apr 12 03:44:26 2025 by rpki-client