$ rpki-client -vvf rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/1/3133382e3138362e3132382e302f32322d3234203d3e20323633383630.roa File: 3133382e3138362e3132382e302f32322d3234203d3e20323633383630.roa (raw, json) Hash identifier: 0+4MSJiTqwW6Tt5GMzfLtVFYIRflx6jd0lLnLpGpLuo= Subject key identifier: 56:95:BB:FB:DB:FF:FF:C1:CF:3E:7C:F0:4A:27:75:32:FE:10:72:71 Certificate issuer: /CN=5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78 Certificate serial: 74762FC3230EDF4A38504101AA05E52406DD56A2 Authority key identifier: 56:95:ED:60:EF:09:AD:01:48:A9:E0:A7:0A:AF:AC:61:A6:A2:1D:78 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78.cer Subject info access: rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/1/3133382e3138362e3132382e302f32322d3234203d3e20323633383630.roa Signing time: Wed 05 Mar 2025 22:29:08 +0000 ROA not before: Wed 05 Mar 2025 22:24:08 +0000 ROA not after: Wed 04 Mar 2026 22:29:08 +0000 asID: 263860 IP address blocks: 138.186.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/1/5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78.crl rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/1/5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Apr 2025 23:54:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:76:2f:c3:23:0e:df:4a:38:50:41:01:aa:05:e5:24:06:dd:56:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78 Validity Not Before: Mar 5 22:24:08 2025 GMT Not After : Mar 4 22:29:08 2026 GMT Subject: CN=5695BBFBDBFFFFC1CF3E7CF04A277532FE107271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7f:92:fc:30:0a:ec:4c:10:9f:40:7f:11:bb: e8:5f:20:96:59:38:12:4e:7f:0c:8a:0a:08:91:3e: 2b:5f:97:9e:01:eb:a8:9d:0a:b8:e0:07:30:37:07: fd:e9:a6:ea:75:26:ad:19:07:e5:15:93:8d:0e:ff: 92:dc:30:37:1c:89:49:79:4e:8f:58:c5:e5:19:90: 57:aa:a8:b1:00:e9:00:af:81:3d:66:51:15:9f:0c: 81:26:47:57:c5:61:27:a4:48:e5:99:7e:a7:72:24: 02:b2:fd:e4:bf:2f:dd:2a:af:cc:29:5c:12:21:dd: 99:47:20:ad:35:ba:c0:5f:93:d3:3d:a9:41:73:ce: df:7c:a2:51:13:49:e8:5d:2b:7c:c3:60:70:0d:f7: b2:dc:58:41:88:52:bd:06:97:1b:03:73:e4:85:4a: 4c:1e:01:3a:67:f4:5c:db:c9:fa:92:2e:85:7f:06: 12:3c:40:73:0d:3a:00:a0:e4:a9:e4:20:08:cf:fb: a2:bc:3f:42:ff:5f:ca:a4:9e:1f:30:d4:82:db:84: af:f5:61:d0:1e:0b:ae:7f:06:fe:36:45:35:51:3c: b0:38:13:20:7e:6f:ce:8f:2c:60:d6:d2:86:03:48: 58:24:e6:e0:b9:43:47:77:f3:32:d7:6e:3c:43:a9: 8d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:95:BB:FB:DB:FF:FF:C1:CF:3E:7C:F0:4A:27:75:32:FE:10:72:71 X509v3 Authority Key Identifier: keyid:56:95:ED:60:EF:09:AD:01:48:A9:E0:A7:0A:AF:AC:61:A6:A2:1D:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/1/5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/1/3133382e3138362e3132382e302f32322d3234203d3e20323633383630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.186.128.0/22 Signature Algorithm: sha256WithRSAEncryption 7d:84:bd:09:0c:7a:4e:42:2d:cc:7c:41:27:fa:0c:17:81:3f: 3e:0a:eb:5c:26:4b:a1:c0:3a:a1:f5:2a:db:ae:61:32:ef:83: 28:ce:de:51:cb:b6:01:77:28:52:32:09:ce:4a:8c:f1:0a:b6: 7b:70:32:45:7d:68:37:af:75:a7:5d:cb:1a:a4:8c:aa:cb:11: 9b:41:a7:58:b2:0f:bc:75:d9:8e:bd:b7:43:cb:f2:95:99:26: 07:78:91:e1:db:cb:0c:c6:37:f9:65:e6:32:ae:e4:fe:af:3f: db:fc:00:d1:e6:d0:2f:4f:58:e6:d3:e0:62:4e:d8:1d:d3:45: 60:a8:92:d5:ee:57:6c:64:4f:31:e3:47:2f:1c:54:a7:63:0c: 49:46:fb:51:09:54:eb:7f:47:a3:1e:eb:22:e3:3a:35:f3:6e: 00:09:21:49:6e:99:25:bd:b0:4a:4b:88:01:ba:a1:08:63:fb: dc:52:a7:df:77:a9:47:58:88:3e:1a:10:18:1d:0e:72:8a:45: 85:fc:42:dc:71:9d:27:a0:ac:d3:04:16:d5:78:46:dc:b9:12: 3a:f0:15:81:28:6a:23:1b:8a:e9:9c:18:c2:44:c1:40:3c:08: a5:de:31:eb:23:6e:bc:de:a1:79:34:f7:eb:de:cc:9a:e8:95: ea:6b:95:51 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUdHYvwyMO30o4UEEBqgXlJAbdVqIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTY5NUVENjBFRjA5QUQwMTQ4QTlFMEE3MEFBRkFDNjFB NkEyMUQ3ODAeFw0yNTAzMDUyMjI0MDhaFw0yNjAzMDQyMjI5MDhaMDMxMTAvBgNV BAMTKDU2OTVCQkZCREJGRkZGQzFDRjNFN0NGMDRBMjc3NTMyRkUxMDcyNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvf5L8MArsTBCfQH8Ru+hfIJZZ OBJOfwyKCgiRPitfl54B66idCrjgBzA3B/3ppup1Jq0ZB+UVk40O/5LcMDcciUl5 To9YxeUZkFeqqLEA6QCvgT1mURWfDIEmR1fFYSekSOWZfqdyJAKy/eS/L90qr8wp XBIh3ZlHIK01usBfk9M9qUFzzt98olETSehdK3zDYHAN97LcWEGIUr0GlxsDc+SF SkweATpn9FzbyfqSLoV/BhI8QHMNOgCg5KnkIAjP+6K8P0L/X8qknh8w1ILbhK/1 YdAeC65/Bv42RTVRPLA4EyB+b86PLGDW0oYDSFgk5uC5Q0d38zLXbjxDqY2VAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUVpW7+9v//8HPPnzwSid1Mv4QcnEwHwYDVR0j BBgwFoAUVpXtYO8JrQFIqeCnCq+sYaaiHXgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQzlyMkFKR3l6b3F0V3NxRUYzSFFielI1cVphYXVDZTFWZ1BMWmZqVkxk ZGovMS81Njk1RUQ2MEVGMDlBRDAxNDhBOUUwQTcwQUFGQUM2MUE2QTIxRDc4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU2OTVFRDYwRUYwOUFEMDE0 OEE5RTBBNzBBQUZBQzYxQTZBMjFENzguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0M5cjJBSkd5em9xdFdzcUVGM0hRYnpSNXFaYWF1Q2UxVmdQTFpmalZMZGRqLzEv MzEzMzM4MmUzMTM4MzYyZTMxMzIzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy MzYzMzM4MzYzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoq6gDANBgkqhkiG9w0BAQsFAAOCAQEAfYS9 CQx6TkItzHxBJ/oMF4E/PgrrXCZLocA6ofUq265hMu+DKM7eUcu2AXcoUjIJzkqM 8Qq2e3AyRX1oN691p13LGqSMqssRm0GnWLIPvHXZjr23Q8vylZkmB3iR4dvLDMY3 +WXmMq7k/q8/2/wA0ebQL09Y5tPgYk7YHdNFYKiS1e5XbGRPMeNHLxxUp2MMSUb7 UQlU639Hox7rIuM6NfNuAAkhSW6ZJb2wSkuIAbqhCGP73FKn33epR1iIPhoQGB0O copFhfxC3HGdJ6Cs0wQW1XhG3LkSOvAVgShqIxuK6ZwYwkTBQDwIpd4x6yNuvN6h eTT3697MmuiV6muVUQ== -----END CERTIFICATE-----Generated at Tue Apr 22 03:54:28 2025 by rpki-client