$ rpki-client -vvf rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/0/AS268218.roa File: AS268218.roa (raw, json) Hash identifier: UaYSFmow2spEJ4aggUg2a0qGuSKrZL/3yRPToyorUpQ= Subject key identifier: 53:C9:86:C9:7B:09:23:65:07:76:5D:67:56:5A:16:2C:72:27:21:5D Certificate issuer: /CN=F74C2D958B550F7D08449AE576084BD914E5F64F Certificate serial: 12778D7534044114CF651795C864DAD59D26A475 Authority key identifier: F7:4C:2D:95:8B:55:0F:7D:08:44:9A:E5:76:08:4B:D9:14:E5:F6:4F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F74C2D958B550F7D08449AE576084BD914E5F64F.cer Subject info access: rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/0/AS268218.roa Signing time: Tue 22 Oct 2024 17:28:45 +0000 ROA not before: Tue 22 Oct 2024 17:23:45 +0000 ROA not after: Tue 21 Oct 2025 17:28:45 +0000 asID: 268218 IP address blocks: 45.235.236.0/22 maxlen: 22 45.235.236.0/23 maxlen: 23 45.235.236.0/24 maxlen: 24 45.235.237.0/24 maxlen: 24 45.235.238.0/23 maxlen: 23 45.235.238.0/24 maxlen: 24 45.235.239.0/24 maxlen: 24 2804:4dc4::/32 maxlen: 32 2804:4dc4::/33 maxlen: 33 2804:4dc4::/34 maxlen: 34 2804:4dc4::/35 maxlen: 35 2804:4dc4::/36 maxlen: 36 2804:4dc4::/48 maxlen: 48 2804:4dc4:1000::/36 maxlen: 36 2804:4dc4:2000::/35 maxlen: 35 2804:4dc4:2000::/36 maxlen: 36 2804:4dc4:3000::/36 maxlen: 36 2804:4dc4:4000::/34 maxlen: 34 2804:4dc4:4000::/35 maxlen: 35 2804:4dc4:4000::/36 maxlen: 36 2804:4dc4:5000::/36 maxlen: 36 2804:4dc4:6000::/35 maxlen: 35 2804:4dc4:6000::/36 maxlen: 36 2804:4dc4:7000::/36 maxlen: 36 2804:4dc4:8000::/33 maxlen: 33 2804:4dc4:8000::/34 maxlen: 34 2804:4dc4:8000::/35 maxlen: 35 2804:4dc4:8000::/36 maxlen: 36 2804:4dc4:8400::/40 maxlen: 40 2804:4dc4:9000::/36 maxlen: 36 2804:4dc4:a000::/35 maxlen: 35 2804:4dc4:a000::/36 maxlen: 36 2804:4dc4:b000::/36 maxlen: 36 2804:4dc4:c000::/35 maxlen: 35 2804:4dc4:c000::/36 maxlen: 36 2804:4dc4:d000::/36 maxlen: 36 2804:4dc4:e000::/35 maxlen: 35 2804:4dc4:e000::/36 maxlen: 36 2804:4dc4:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/0/F74C2D958B550F7D08449AE576084BD914E5F64F.crl rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/0/F74C2D958B550F7D08449AE576084BD914E5F64F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F74C2D958B550F7D08449AE576084BD914E5F64F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 07:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:77:8d:75:34:04:41:14:cf:65:17:95:c8:64:da:d5:9d:26:a4:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F74C2D958B550F7D08449AE576084BD914E5F64F Validity Not Before: Oct 22 17:23:45 2024 GMT Not After : Oct 21 17:28:45 2025 GMT Subject: CN=53C986C97B09236507765D67565A162C7227215D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7e:cb:07:60:d6:14:2c:4e:23:f7:75:fb:9d: 73:06:06:f5:38:96:76:02:69:69:29:78:61:aa:2c: 68:b5:e8:16:86:3e:71:3c:f3:06:5b:79:bb:c0:54: 10:0a:08:1c:7b:7e:7d:33:47:0d:24:af:c0:4e:8f: 69:ee:04:d1:2f:08:43:1a:d9:80:54:de:9e:63:25: d3:f5:8b:74:27:b4:8a:b9:41:c4:4c:98:8e:3c:74: 81:5d:e4:9a:2d:8b:e4:f2:7b:38:3a:a1:7a:55:4a: 75:0e:5e:3d:2d:6e:19:07:fe:f9:2c:a2:28:7c:60: b4:54:a4:e5:c7:ec:b4:17:ee:d6:13:7f:e3:a1:0c: ec:ba:fb:c3:b9:86:31:be:04:72:05:b3:d5:6b:fd: 92:a5:9e:31:d8:01:7a:0b:82:aa:83:23:64:f7:0c: 22:5e:4b:8e:c1:34:d6:7e:50:c3:50:86:d1:00:0a: 4b:58:06:c2:12:c2:0c:9a:87:0c:1e:06:9f:85:a8: e9:27:62:56:7e:de:42:e1:39:c1:84:01:f3:b5:3a: 49:55:ad:9d:98:95:2f:39:42:ea:b4:b0:0a:30:5d: 70:8d:47:08:40:d6:6f:90:0e:74:72:5e:d3:f4:77: eb:70:34:98:48:20:01:6d:f1:c9:2e:50:2e:22:49: ce:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C9:86:C9:7B:09:23:65:07:76:5D:67:56:5A:16:2C:72:27:21:5D X509v3 Authority Key Identifier: keyid:F7:4C:2D:95:8B:55:0F:7D:08:44:9A:E5:76:08:4B:D9:14:E5:F6:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/0/F74C2D958B550F7D08449AE576084BD914E5F64F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F74C2D958B550F7D08449AE576084BD914E5F64F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/0/AS268218.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.235.236.0/22 IPv6: 2804:4dc4::/32 Signature Algorithm: sha256WithRSAEncryption ab:75:57:3f:61:a7:38:58:d4:f9:bf:5b:a7:7e:94:15:d9:02: 59:11:11:9a:39:82:4e:a6:21:8c:84:ea:b6:81:9d:a0:b5:bc: 98:5a:d4:42:ff:43:f2:9e:fd:06:94:7a:cd:86:e9:88:74:1f: be:24:1a:e1:a6:b9:f9:f8:8a:f3:10:24:2f:47:95:47:4d:39: 4a:c2:85:b5:cc:25:7b:28:96:9a:f4:56:25:c7:af:33:ba:28: 93:c5:b0:1d:d9:9e:1c:a8:0f:24:78:33:43:ef:75:01:18:f2: 11:9c:c1:1a:1e:92:7d:8a:47:c5:a2:b0:48:95:6f:e0:df:c4: 9b:47:53:b3:f8:6f:b7:e7:19:f8:fa:b4:cb:79:ee:26:54:87: 3e:e1:d6:32:e7:44:a6:74:23:07:bc:ca:b1:df:bc:8a:f5:af: f0:f4:f5:f3:55:35:32:79:28:1b:4f:22:6a:35:99:ed:53:27: 74:e9:d6:69:fc:ba:15:2b:1e:34:1c:0a:c6:f3:5d:11:2b:3a: 4c:1e:42:a6:7b:d1:35:be:ca:c7:06:d8:e8:ee:7f:d5:e0:d4: 5b:8e:f4:ea:48:fe:13:24:c6:5a:f9:98:80:8a:e4:12:17:15: df:b9:22:b6:30:c1:1c:e3:9f:4f:35:7e:63:5a:78:25:20:7b: 8f:de:96:a7 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgIUEneNdTQEQRTPZReVyGTa1Z0mpHUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjc0QzJEOTU4QjU1MEY3RDA4NDQ5QUU1NzYwODRCRDkx NEU1RjY0RjAeFw0yNDEwMjIxNzIzNDVaFw0yNTEwMjExNzI4NDVaMDMxMTAvBgNV BAMTKDUzQzk4NkM5N0IwOTIzNjUwNzc2NUQ2NzU2NUExNjJDNzIyNzIxNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJfssHYNYULE4j93X7nXMGBvU4 lnYCaWkpeGGqLGi16BaGPnE88wZbebvAVBAKCBx7fn0zRw0kr8BOj2nuBNEvCEMa 2YBU3p5jJdP1i3QntIq5QcRMmI48dIFd5Joti+Tyezg6oXpVSnUOXj0tbhkH/vks oih8YLRUpOXH7LQX7tYTf+OhDOy6+8O5hjG+BHIFs9Vr/ZKlnjHYAXoLgqqDI2T3 DCJeS47BNNZ+UMNQhtEACktYBsISwgyahwweBp+FqOknYlZ+3kLhOcGEAfO1OklV rZ2YlS85Quq0sAowXXCNRwhA1m+QDnRyXtP0d+twNJhIIAFt8ckuUC4iSc7pAgMB AAGjggIrMIICJzAdBgNVHQ4EFgQUU8mGyXsJI2UHdl1nVloWLHInIV0wHwYDVR0j BBgwFoAU90wtlYtVD30IRJrldghL2RTl9k8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0JwV2pFWGlQRFNMTXhYZUVLdEIyM01UdGVpcXNOdUFMUFlKdzV6V1lW a1gvMC9GNzRDMkQ5NThCNTUwRjdEMDg0NDlBRTU3NjA4NEJEOTE0RTVGNjRGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y3NEMyRDk1OEI1NTBGN0Qw ODQ0OUFFNTc2MDg0QkQ5MTRFNUY2NEYuY2VyMHoGCCsGAQUFBwELBG4wbDBqBggr BgEFBQcwC4ZecnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9DQnBX akVYaVBEU0xNeFhlRUt0QjIzTVR0ZWlxc051QUxQWUp3NXpXWVZrWC8wL0FTMjY4 MjE4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/ BB8wHTAMBAIAATAGAwQCLevsMA0EAgACMAcDBQAoBE3EMA0GCSqGSIb3DQEBCwUA A4IBAQCrdVc/Yac4WNT5v1unfpQV2QJZERGaOYJOpiGMhOq2gZ2gtbyYWtRC/0Py nv0GlHrNhumIdB++JBrhprn5+IrzECQvR5VHTTlKwoW1zCV7KJaa9FYlx68zuiiT xbAd2Z4cqA8keDND73UBGPIRnMEaHpJ9ikfForBIlW/g38SbR1Oz+G+35xn4+rTL ee4mVIc+4dYy50SmdCMHvMqx37yK9a/w9PXzVTUyeSgbTyJqNZntUyd06dZp/LoV Kx40HArG810RKzpMHkKme9E1vsrHBtjo7n/V4NRbjvTqSP4TJMZa+ZiAiuQSFxXf uSK2MMEc459PNX5jWnglIHuP3pan -----END CERTIFICATE-----Generated at Sat Nov 23 09:50:06 2024 by rpki-client on console-fra.rpki-client.org