$ rpki-client -vvf rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/3139302e3131322e3135382e302f32342d3234203d3e20323639373132.roa File: 3139302e3131322e3135382e302f32342d3234203d3e20323639373132.roa (raw, json) Hash identifier: LerQwoGzryhhBLgRfBZP9cjZ8jAIFKguJDMmSEGmsvw= Subject key identifier: F9:AE:7A:18:D7:C1:31:FA:E5:50:31:E0:58:45:84:C3:23:A1:EA:2B Certificate issuer: /CN=9B40C2CC13EAB50345EDACFACC15DB43E60B85A2 Certificate serial: 756FC16B36AF44BF9D8E7A74EA9A61D727C96045 Authority key identifier: 9B:40:C2:CC:13:EA:B5:03:45:ED:AC:FA:CC:15:DB:43:E6:0B:85:A2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer Subject info access: rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/3139302e3131322e3135382e302f32342d3234203d3e20323639373132.roa Signing time: Mon 24 Feb 2025 17:20:07 +0000 ROA not before: Mon 24 Feb 2025 17:15:07 +0000 ROA not after: Mon 23 Feb 2026 17:20:07 +0000 asID: 269712 IP address blocks: 190.112.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 19 Apr 2025 01:49:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:6f:c1:6b:36:af:44:bf:9d:8e:7a:74:ea:9a:61:d7:27:c9:60:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B40C2CC13EAB50345EDACFACC15DB43E60B85A2 Validity Not Before: Feb 24 17:15:07 2025 GMT Not After : Feb 23 17:20:07 2026 GMT Subject: CN=F9AE7A18D7C131FAE55031E0584584C323A1EA2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:70:c4:cf:8b:09:53:3f:4b:0e:43:f7:3b:cc: f3:44:39:d2:58:4b:3d:85:bd:3c:a8:6d:95:12:f9: e0:41:92:ab:79:ef:e4:06:a7:66:0e:02:b8:de:39: 42:a0:2e:96:d8:81:43:f5:97:4c:09:f9:b0:af:33: 33:dd:c4:d0:61:29:5d:76:1a:d5:aa:e7:2a:d8:14: 24:96:a3:ee:e5:21:5b:2f:55:5b:a9:1d:7e:c9:ef: 6b:61:62:49:ca:94:3f:25:a8:81:b6:13:a5:e9:1b: 59:25:ce:2c:e0:4c:41:ac:ab:b5:5c:dc:79:96:1a: b4:98:9c:e0:97:70:9f:e8:ce:9b:9a:01:64:63:52: 66:00:41:e4:c7:bd:95:75:45:23:2e:dc:f9:2f:7d: 75:a4:ea:7d:69:a7:0e:6a:d9:fc:9d:52:65:6a:fa: e9:dc:b3:2d:ad:85:7b:40:46:55:e6:06:26:c9:73: 34:1d:da:8b:fa:fd:3d:8c:d5:32:88:e4:32:27:cf: df:18:93:5f:5f:ed:40:5a:e9:7f:ab:eb:39:b7:3c: d9:da:d4:66:c6:74:0f:7c:cc:73:4f:d3:d1:7b:bb: cb:9f:27:f4:bb:e2:6c:c7:6f:34:9a:67:4b:28:17: f6:b0:dd:35:69:54:fa:cd:e9:cd:2a:44:c3:33:49: e5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:AE:7A:18:D7:C1:31:FA:E5:50:31:E0:58:45:84:C3:23:A1:EA:2B X509v3 Authority Key Identifier: keyid:9B:40:C2:CC:13:EA:B5:03:45:ED:AC:FA:CC:15:DB:43:E6:0B:85:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/3139302e3131322e3135382e302f32342d3234203d3e20323639373132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.112.158.0/24 Signature Algorithm: sha256WithRSAEncryption 99:0f:cd:67:f1:23:c7:77:83:61:ba:d9:a9:2d:a8:fd:42:de: ee:67:1c:bc:68:be:82:43:a2:5f:a6:67:b6:47:65:e1:66:88: 70:d7:e9:fa:60:60:95:30:36:22:2c:55:50:8d:c3:b6:12:1a: 11:64:ee:dc:e0:d1:37:99:97:74:8e:2e:12:40:de:dd:3a:6b: 3a:cd:bc:ed:b5:0c:1e:47:72:4e:66:f3:76:a7:f8:65:68:69: 61:4a:80:d7:f9:47:d0:b5:ce:7b:a0:72:86:dd:4c:c5:3e:59: a4:f8:88:b4:8b:f2:bf:d7:a6:b4:54:90:75:4f:48:d9:8c:c7: 7e:69:95:fd:03:b6:4a:5a:bf:67:fa:78:6b:fa:4d:0b:63:f6: 7b:c8:95:c6:0b:8e:16:36:80:4e:85:ab:83:aa:44:0b:e3:f6: e7:7c:24:46:3e:8f:39:68:c4:cd:a3:c4:23:88:b4:ae:dd:76: 22:90:28:7b:d4:46:3e:ff:a8:5c:43:d2:56:4e:c9:dc:07:98: 80:dd:b8:b2:5e:fe:d4:f9:7e:8f:57:19:04:78:cb:4f:e3:c1: e3:c3:b4:6a:a6:6e:c0:62:bb:14:ec:15:70:65:d1:e5:ed:29: 76:5a:9b:41:50:18:2e:4f:c6:5a:8a:7b:ce:03:0f:dc:47:d3: 5e:97:5d:b6 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUdW/BazavRL+djnp06pph1yfJYEUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI0MEMyQ0MxM0VBQjUwMzQ1RURBQ0ZBQ0MxNURCNDNF NjBCODVBMjAeFw0yNTAyMjQxNzE1MDdaFw0yNjAyMjMxNzIwMDdaMDMxMTAvBgNV BAMTKEY5QUU3QTE4RDdDMTMxRkFFNTUwMzFFMDU4NDU4NEMzMjNBMUVBMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjcMTPiwlTP0sOQ/c7zPNEOdJY Sz2FvTyobZUS+eBBkqt57+QGp2YOArjeOUKgLpbYgUP1l0wJ+bCvMzPdxNBhKV12 GtWq5yrYFCSWo+7lIVsvVVupHX7J72thYknKlD8lqIG2E6XpG1klzizgTEGsq7Vc 3HmWGrSYnOCXcJ/ozpuaAWRjUmYAQeTHvZV1RSMu3PkvfXWk6n1ppw5q2fydUmVq +uncsy2thXtARlXmBibJczQd2ov6/T2M1TKI5DInz98Yk19f7UBa6X+r6zm3PNna 1GbGdA98zHNP09F7u8ufJ/S74mzHbzSaZ0soF/aw3TVpVPrN6c0qRMMzSeXFAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQU+a56GNfBMfrlUDHgWEWEwyOh6iswHwYDVR0j BBgwFoAUm0DCzBPqtQNF7az6zBXbQ+YLhaIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQnpOejVkQkUya01ZR25BZnhFc05ZTHY3YU1UOG00eXhQNjNZdjgyTGRt MmcvMC85QjQwQzJDQzEzRUFCNTAzNDVFREFDRkFDQzE1REI0M0U2MEI4NUEyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlCNDBDMkNDMTNFQUI1MDM0 NUVEQUNGQUNDMTVEQjQzRTYwQjg1QTIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0J6Tno1ZEJFMmtNWUduQWZ4RXNOWUx2N2FNVDhtNHl4UDYzWXY4MkxkbTJnLzAv MzEzOTMwMmUzMTMxMzIyZTMxMzUzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy MzYzOTM3MzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL5wnjANBgkqhkiG9w0BAQsFAAOCAQEAmQ/N Z/Ejx3eDYbrZqS2o/ULe7mccvGi+gkOiX6Zntkdl4WaIcNfp+mBglTA2IixVUI3D thIaEWTu3ODRN5mXdI4uEkDe3TprOs287bUMHkdyTmbzdqf4ZWhpYUqA1/lH0LXO e6Byht1MxT5ZpPiItIvyv9emtFSQdU9I2YzHfmmV/QO2Slq/Z/p4a/pNC2P2e8iV xguOFjaAToWrg6pEC+P253wkRj6POWjEzaPEI4i0rt12IpAoe9RGPv+oXEPSVk7J 3AeYgN24sl7+1Pl+j1cZBHjLT+PB48O0aqZuwGK7FOwVcGXR5e0pdlqbQVAYLk/G Wop7zgMP3EfTXpddtg== -----END CERTIFICATE-----Generated at Fri Apr 18 16:45:29 2025 by rpki-client