$ rpki-client -vvf rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3137302e3233312e3135362e302f32322d3332203d3e20323635303632.roa File: 3137302e3233312e3135362e302f32322d3332203d3e20323635303632.roa (raw, json) Hash identifier: SeYU5404iSokv/Gz5rw5RNitLBwfn0VjE4GkNS2MnrE= Subject key identifier: DA:D2:5A:BD:34:18:9D:6E:3F:5B:A3:B6:9E:4F:55:7A:BF:28:9C:D1 Certificate issuer: /CN=3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8 Certificate serial: 4ED74AB3F8850FCC22732F28C3F5FB79BD97F589 Authority key identifier: 3F:B5:A4:D9:E6:7E:9A:59:FC:56:42:B0:23:C3:E2:E0:2B:0C:91:C8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.cer Subject info access: rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3137302e3233312e3135362e302f32322d3332203d3e20323635303632.roa Signing time: Fri 31 Jan 2025 18:48:33 +0000 ROA not before: Fri 31 Jan 2025 18:43:33 +0000 ROA not after: Fri 30 Jan 2026 18:48:33 +0000 asID: 265062 IP address blocks: 170.231.156.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.crl rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 21 Apr 2025 08:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:d7:4a:b3:f8:85:0f:cc:22:73:2f:28:c3:f5:fb:79:bd:97:f5:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8 Validity Not Before: Jan 31 18:43:33 2025 GMT Not After : Jan 30 18:48:33 2026 GMT Subject: CN=DAD25ABD34189D6E3F5BA3B69E4F557ABF289CD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:7f:38:9a:fb:53:b9:02:95:1a:0c:64:41:2a: 5a:68:ec:1c:99:8c:de:da:54:74:72:70:12:d1:0e: ae:72:f5:90:45:43:20:40:06:43:b5:98:34:ac:6b: 94:b3:62:0c:b5:77:65:06:8c:8e:03:ef:c9:be:fd: 5b:60:d9:d3:aa:f8:a2:51:48:bd:2f:ef:cb:54:79: 00:f8:97:1a:d0:4c:6a:e4:4c:bd:ad:50:8b:e1:94: 63:25:bd:1e:8d:f2:b3:23:29:11:23:27:db:3e:9e: ce:52:27:9f:e4:a6:8e:60:a7:f7:8f:2c:b0:0c:4e: 24:f6:fb:aa:cc:55:bc:8b:94:6c:da:17:22:b5:8f: 61:a3:0e:c2:84:b4:9f:53:4c:7b:74:6d:45:e0:db: 6e:8e:fb:9b:d8:d4:1b:e1:85:c6:c1:9e:3a:16:f1: 98:ae:58:ff:20:2b:ba:4a:ec:86:65:8a:81:81:06: 55:4a:af:78:bf:67:d5:fb:3c:82:dd:5d:c8:16:11: 24:47:a9:9b:8a:01:5b:c6:78:6a:0d:70:bf:c4:f6: 5f:be:8e:22:65:a8:da:1d:3a:81:6f:d0:74:73:6d: 1d:e8:e9:42:4e:12:ea:fa:81:0c:89:e1:a1:d4:cd: f5:65:88:d1:07:d1:72:31:34:a5:39:f6:1e:72:d6: b4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:D2:5A:BD:34:18:9D:6E:3F:5B:A3:B6:9E:4F:55:7A:BF:28:9C:D1 X509v3 Authority Key Identifier: keyid:3F:B5:A4:D9:E6:7E:9A:59:FC:56:42:B0:23:C3:E2:E0:2B:0C:91:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3137302e3233312e3135362e302f32322d3332203d3e20323635303632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.231.156.0/22 Signature Algorithm: sha256WithRSAEncryption 4f:8a:16:a9:04:d4:09:35:73:d8:e4:91:7f:c1:ea:41:94:f7: b6:21:84:d3:34:99:4c:fb:6b:72:fe:c3:37:02:24:56:be:7b: 52:28:6d:b6:c4:1d:7d:2c:0c:30:ea:85:ad:67:d6:ef:2e:c0: e3:f6:f8:8d:6f:0b:1f:70:c4:58:63:07:04:03:e6:8f:e2:c4: 1a:2e:cc:f5:8d:c7:98:a9:04:d3:02:58:45:f9:2e:47:15:55: 60:cf:15:81:c1:f6:6a:de:1f:d5:1c:5d:a9:f6:54:44:24:95: 00:3c:cc:62:12:4a:53:63:bd:d6:11:86:81:82:44:e9:41:3e: 1e:27:99:34:d6:2f:53:c2:02:d7:a5:05:5f:06:ad:1c:8c:90: b0:c5:ef:6c:b6:8b:df:61:0e:89:20:6e:f0:6d:3a:4f:57:c3: ae:43:55:71:6c:3b:ea:f7:63:a9:b0:14:e2:81:fa:81:b7:bb: ea:fa:2b:89:a2:8f:3c:20:ec:62:f1:2b:fc:28:82:d4:60:ff: 08:f1:f3:75:50:fa:67:2c:47:a2:08:8c:c2:fa:32:a8:66:ad: 87:1c:af:70:81:e1:b8:3e:69:bb:9f:c9:17:e8:97:f3:30:18: be:da:4c:6c:ff:27:ce:5b:89:7a:d0:5b:6c:11:46:51:76:b2: b0:5d:f7:42 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUTtdKs/iFD8wicy8ow/X7eb2X9YkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZCNUE0RDlFNjdFOUE1OUZDNTY0MkIwMjNDM0UyRTAy QjBDOTFDODAeFw0yNTAxMzExODQzMzNaFw0yNjAxMzAxODQ4MzNaMDMxMTAvBgNV BAMTKERBRDI1QUJEMzQxODlENkUzRjVCQTNCNjlFNEY1NTdBQkYyODlDRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjfzia+1O5ApUaDGRBKlpo7ByZ jN7aVHRycBLRDq5y9ZBFQyBABkO1mDSsa5SzYgy1d2UGjI4D78m+/Vtg2dOq+KJR SL0v78tUeQD4lxrQTGrkTL2tUIvhlGMlvR6N8rMjKREjJ9s+ns5SJ5/kpo5gp/eP LLAMTiT2+6rMVbyLlGzaFyK1j2GjDsKEtJ9TTHt0bUXg226O+5vY1BvhhcbBnjoW 8ZiuWP8gK7pK7IZlioGBBlVKr3i/Z9X7PILdXcgWESRHqZuKAVvGeGoNcL/E9l++ jiJlqNodOoFv0HRzbR3o6UJOEur6gQyJ4aHUzfVliNEH0XIxNKU59h5y1rSrAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQU2tJavTQYnW4/W6O2nk9Ver8onNEwHwYDVR0j BBgwFoAUP7Wk2eZ+mln8VkKwI8Pi4CsMkcgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0pBZkNUOThQNmtSRXVtdVZSV2NmdUUxUXpHQUNHTEhDQ0xRdHkxcnFw WjQvMC8zRkI1QTREOUU2N0U5QTU5RkM1NjQyQjAyM0MzRTJFMDJCMEM5MUM4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNGQjVBNEQ5RTY3RTlBNTlG QzU2NDJCMDIzQzNFMkUwMkIwQzkxQzguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NKQWZDVDk4UDZrUkV1bXVWUldjZnVFMVF6R0FDR0xIQ0NMUXR5MXJxcFo0LzAv MzEzNzMwMmUzMjMzMzEyZTMxMzUzNjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy MzYzNTMwMzYzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqrnnDANBgkqhkiG9w0BAQsFAAOCAQEAT4oW qQTUCTVz2OSRf8HqQZT3tiGE0zSZTPtrcv7DNwIkVr57UihttsQdfSwMMOqFrWfW 7y7A4/b4jW8LH3DEWGMHBAPmj+LEGi7M9Y3HmKkE0wJYRfkuRxVVYM8VgcH2at4f 1RxdqfZURCSVADzMYhJKU2O91hGGgYJE6UE+HieZNNYvU8IC16UFXwatHIyQsMXv bLaL32EOiSBu8G06T1fDrkNVcWw76vdjqbAU4oH6gbe76voriaKPPCDsYvEr/CiC 1GD/CPHzdVD6ZyxHogiMwvoyqGathxyvcIHhuD5pu5/JF+iX8zAYvtpMbP8nzluJ etBbbBFGUXaysF33Qg== -----END CERTIFICATE-----Generated at Sun Apr 20 22:42:35 2025 by rpki-client