$ rpki-client -vvf rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/3139302e3131322e3135382e302f32332d3233203d3e20323639373132.roa File: 3139302e3131322e3135382e302f32332d3233203d3e20323639373132.roa (raw, json) Hash identifier: Qljf4a+VbVEJbnLDMFmbTeiInabW3m7s+Ij5eLDeJzw= Subject key identifier: 0D:AE:C9:AE:12:C2:3A:12:9B:E1:2F:74:63:FC:2B:C7:01:4A:7F:9D Certificate issuer: /CN=9B40C2CC13EAB50345EDACFACC15DB43E60B85A2 Certificate serial: 7DECF1702A9ED49A6C5A0877C9B4AB665C6CCC13 Authority key identifier: 9B:40:C2:CC:13:EA:B5:03:45:ED:AC:FA:CC:15:DB:43:E6:0B:85:A2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer Subject info access: rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/3139302e3131322e3135382e302f32332d3233203d3e20323639373132.roa Signing time: Mon 24 Feb 2025 17:20:09 +0000 ROA not before: Mon 24 Feb 2025 17:15:09 +0000 ROA not after: Mon 23 Feb 2026 17:20:09 +0000 asID: 269712 IP address blocks: 190.112.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 08 Apr 2025 08:19:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:ec:f1:70:2a:9e:d4:9a:6c:5a:08:77:c9:b4:ab:66:5c:6c:cc:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B40C2CC13EAB50345EDACFACC15DB43E60B85A2 Validity Not Before: Feb 24 17:15:09 2025 GMT Not After : Feb 23 17:20:09 2026 GMT Subject: CN=0DAEC9AE12C23A129BE12F7463FC2BC7014A7F9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b6:bd:8c:88:b6:09:8b:f5:d9:5b:2c:f8:9b: 3e:91:f2:d2:0f:3e:53:b1:42:b8:1d:c5:0a:aa:7a: b1:12:56:66:97:39:ea:68:ca:b8:47:30:f3:8e:68: ca:bf:2a:df:5f:c2:00:0a:24:f1:41:52:7e:cc:79: b9:e1:d4:47:07:87:43:8e:59:38:48:86:24:ea:eb: 6c:ad:60:d7:99:9d:d4:8d:cb:64:07:8f:41:8c:06: 6f:11:94:9f:a7:d9:49:7e:c4:0f:23:2a:0d:ee:0a: 7f:4a:87:05:7d:d2:a6:33:32:73:2f:49:5c:9f:1b: 0d:e5:27:db:4c:f1:68:ad:2f:56:12:41:db:52:3d: 68:7a:c4:87:25:a1:ae:fd:f0:39:d6:a1:53:cc:b4: 8b:48:07:61:2c:30:dd:18:26:46:76:c5:43:72:e5: 55:b1:61:9a:e1:fd:9c:49:6b:f2:58:6a:19:c0:2d: 58:64:74:33:e3:9a:3a:f8:72:04:1f:fb:ef:92:d4: 61:8d:57:a3:f1:df:4f:82:d4:d0:9b:6d:78:1b:ad: 6e:20:df:39:6e:9b:03:26:96:a6:b0:1f:8d:09:74: fe:89:04:e6:6c:a7:6e:ee:75:76:70:fd:ca:f6:08: 4c:e3:8e:9d:86:f7:20:54:8f:12:d4:a3:99:9b:72: d0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:AE:C9:AE:12:C2:3A:12:9B:E1:2F:74:63:FC:2B:C7:01:4A:7F:9D X509v3 Authority Key Identifier: keyid:9B:40:C2:CC:13:EA:B5:03:45:ED:AC:FA:CC:15:DB:43:E6:0B:85:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/3139302e3131322e3135382e302f32332d3233203d3e20323639373132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.112.158.0/23 Signature Algorithm: sha256WithRSAEncryption a4:08:a8:ca:74:ba:ea:d8:03:27:19:6f:42:4e:ef:7b:d8:13: b8:b9:45:08:06:4a:23:e1:c7:d0:35:5a:ee:d7:d9:cb:62:d9: 12:4a:ff:fa:e4:ad:e6:3d:fa:75:14:b5:77:df:62:c2:8b:3f: 3a:03:bc:07:37:b0:9e:7d:73:a7:b3:4c:3d:26:f9:01:7a:3d: 02:67:f9:80:af:63:e6:e8:f9:bf:c1:dd:e9:45:ce:f5:46:5c: 4e:61:41:31:94:05:c6:8b:5c:f5:c8:e6:d1:95:c7:e2:61:f9: 00:b0:a1:8c:df:2b:79:42:b6:fc:b3:24:6b:de:ff:f0:80:cb: e8:00:9b:d9:7c:45:9c:7b:ce:72:ca:78:7c:1d:89:aa:64:9e: e6:be:e8:f9:cf:f4:c5:a5:fc:c7:d4:98:74:e1:b5:9a:86:02: ee:26:a3:12:1e:f8:fa:28:c5:37:dc:2b:dd:c0:fa:86:47:57: 8c:81:b9:b2:ed:5a:68:98:51:3a:80:d7:e8:05:5d:c3:d8:32: d1:9b:d6:06:e3:a4:ce:62:bf:50:c2:c9:cd:c7:df:9a:4f:6f: 14:24:ad:1b:93:d6:d8:c2:f8:1b:8e:dc:c0:55:ee:ae:8c:d6: 8b:3c:ae:06:29:a2:24:3a:b4:bc:06:4a:8a:fd:9c:c9:42:fa: 97:1c:52:66 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUfezxcCqe1JpsWgh3ybSrZlxszBMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI0MEMyQ0MxM0VBQjUwMzQ1RURBQ0ZBQ0MxNURCNDNF NjBCODVBMjAeFw0yNTAyMjQxNzE1MDlaFw0yNjAyMjMxNzIwMDlaMDMxMTAvBgNV BAMTKDBEQUVDOUFFMTJDMjNBMTI5QkUxMkY3NDYzRkMyQkM3MDE0QTdGOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxtr2MiLYJi/XZWyz4mz6R8tIP PlOxQrgdxQqqerESVmaXOepoyrhHMPOOaMq/Kt9fwgAKJPFBUn7Mebnh1EcHh0OO WThIhiTq62ytYNeZndSNy2QHj0GMBm8RlJ+n2Ul+xA8jKg3uCn9KhwV90qYzMnMv SVyfGw3lJ9tM8WitL1YSQdtSPWh6xIcloa798DnWoVPMtItIB2EsMN0YJkZ2xUNy 5VWxYZrh/ZxJa/JYahnALVhkdDPjmjr4cgQf+++S1GGNV6Px30+C1NCbbXgbrW4g 3zlumwMmlqawH40JdP6JBOZsp27udXZw/cr2CEzjjp2G9yBUjxLUo5mbctDvAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUDa7JrhLCOhKb4S90Y/wrxwFKf50wHwYDVR0j BBgwFoAUm0DCzBPqtQNF7az6zBXbQ+YLhaIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQnpOejVkQkUya01ZR25BZnhFc05ZTHY3YU1UOG00eXhQNjNZdjgyTGRt MmcvMC85QjQwQzJDQzEzRUFCNTAzNDVFREFDRkFDQzE1REI0M0U2MEI4NUEyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlCNDBDMkNDMTNFQUI1MDM0 NUVEQUNGQUNDMTVEQjQzRTYwQjg1QTIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0J6Tno1ZEJFMmtNWUduQWZ4RXNOWUx2N2FNVDhtNHl4UDYzWXY4MkxkbTJnLzAv MzEzOTMwMmUzMTMxMzIyZTMxMzUzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy MzYzOTM3MzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAb5wnjANBgkqhkiG9w0BAQsFAAOCAQEApAio ynS66tgDJxlvQk7ve9gTuLlFCAZKI+HH0DVa7tfZy2LZEkr/+uSt5j36dRS1d99i wos/OgO8Bzewnn1zp7NMPSb5AXo9Amf5gK9j5uj5v8Hd6UXO9UZcTmFBMZQFxotc 9cjm0ZXH4mH5ALChjN8reUK2/LMka97/8IDL6ACb2XxFnHvOcsp4fB2JqmSe5r7o +c/0xaX8x9SYdOG1moYC7iajEh74+ijFN9wr3cD6hkdXjIG5su1aaJhROoDX6AVd w9gy0ZvWBuOkzmK/UMLJzcffmk9vFCStG5PW2ML4G47cwFXurozWizyuBimiJDq0 vAZKiv2cyUL6lxxSZg== -----END CERTIFICATE-----Generated at Mon Apr 7 14:40:38 2025 by rpki-client