$ rpki-client -vvf rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3137302e38302e3235322e302f32322d3234203d3e203533303738.roa File: 3137302e38302e3235322e302f32322d3234203d3e203533303738.roa (raw, json) Hash identifier: ucQLK33e3lcZsfN4L6Vyg4Ul/FcTHyDFpVJU4H+3Swo= Subject key identifier: 21:3E:4C:DD:09:80:6A:DC:E9:CB:9C:43:01:E7:8A:FE:02:F9:EB:A8 Certificate issuer: /CN=3C8E5F41F3AF740E9427F8ED235C120098AA0C21 Certificate serial: 506570B9B69AF6ABAA1E9222D65123563DED74C0 Authority key identifier: 3C:8E:5F:41:F3:AF:74:0E:94:27:F8:ED:23:5C:12:00:98:AA:0C:21 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.cer Subject info access: rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3137302e38302e3235322e302f32322d3234203d3e203533303738.roa Signing time: Tue 25 Jun 2024 14:10:38 +0000 ROA not before: Tue 25 Jun 2024 14:05:38 +0000 ROA not after: Tue 24 Jun 2025 14:10:38 +0000 asID: 53078 IP address blocks: 170.80.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.crl rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 18 Apr 2025 15:29:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:65:70:b9:b6:9a:f6:ab:aa:1e:92:22:d6:51:23:56:3d:ed:74:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C8E5F41F3AF740E9427F8ED235C120098AA0C21 Validity Not Before: Jun 25 14:05:38 2024 GMT Not After : Jun 24 14:10:38 2025 GMT Subject: CN=213E4CDD09806ADCE9CB9C4301E78AFE02F9EBA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:cb:5a:d0:6f:ce:d0:bf:20:a6:b7:29:92:e4: d7:8c:6c:3b:7b:0d:fc:0f:a8:15:bd:e6:60:87:fe: 81:96:61:69:50:4c:ba:14:98:16:86:a6:45:0d:cb: 6d:6d:31:3c:d7:5a:f3:46:bd:25:31:ba:f0:26:de: a4:46:5b:6d:b5:d1:fe:82:79:4b:59:fe:e6:e6:da: 69:9d:84:c0:a3:0a:84:91:30:5d:88:6b:c9:09:6b: b5:dd:56:23:e3:33:4f:a4:19:e9:8e:c9:d2:b6:50: 21:3d:e3:a9:8f:d0:a5:d0:36:bf:25:5e:b0:6f:78: e9:0f:f1:d9:c1:ca:5e:e3:15:25:56:9a:dc:48:ea: dd:4d:ba:ea:48:e1:58:ce:b2:b5:4f:da:98:e7:ec: fc:69:7a:64:1d:d1:56:a9:32:35:73:d9:dd:76:f6: 01:6d:79:18:27:ef:81:bc:33:ec:4f:42:d7:5a:ae: c4:50:4e:bc:a5:00:6d:d2:84:17:92:85:d0:6d:5e: 07:75:59:72:c0:79:92:12:8e:44:12:02:b4:f9:1c: 66:e0:61:1a:e8:17:57:78:5d:e9:6c:51:5e:9a:e8: 79:bb:3f:77:e4:55:29:06:7f:f8:e1:6a:83:46:ea: 74:b1:12:19:08:66:b6:1d:f7:b2:b8:c9:83:2d:dc: c3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:3E:4C:DD:09:80:6A:DC:E9:CB:9C:43:01:E7:8A:FE:02:F9:EB:A8 X509v3 Authority Key Identifier: keyid:3C:8E:5F:41:F3:AF:74:0E:94:27:F8:ED:23:5C:12:00:98:AA:0C:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3137302e38302e3235322e302f32322d3234203d3e203533303738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.80.252.0/22 Signature Algorithm: sha256WithRSAEncryption 68:fa:4a:9c:d1:17:cc:67:0b:42:92:40:1a:a0:b2:01:e7:8f: 2c:7f:7e:11:7a:60:81:af:c6:20:04:28:af:6f:2d:64:11:c8: b1:a8:36:c2:88:32:9a:60:55:bc:a1:3a:d0:f4:c8:73:bb:51: b6:6f:c6:43:7b:4e:1e:52:47:ee:e7:3c:43:53:1b:13:ea:a3: cc:46:79:ef:d5:67:e2:11:b4:70:fb:e4:1d:0b:ef:59:3c:8f: 08:4b:05:c1:7a:f7:b3:73:d0:e2:6f:e5:ca:67:94:af:45:22: 7e:87:6b:16:a0:51:2a:cc:07:34:6f:70:c2:45:1f:e8:59:df: 84:d9:5b:52:01:56:17:d9:a4:ad:17:d2:4f:e2:ce:a8:6f:79: 98:9f:99:5a:a0:9e:b2:83:e0:30:f6:f4:ca:8b:d2:2e:1d:b1: d3:ed:31:02:b6:fa:ae:64:ea:5d:62:e2:77:0b:d6:a6:20:17: 99:a1:b2:ae:0a:41:6d:90:77:37:26:8a:bc:56:05:d5:8d:cb: 29:1a:b6:91:86:33:77:52:35:21:8f:db:b3:76:4a:81:13:35: 03:58:7a:83:70:8a:15:8c:bd:b6:84:12:fe:c8:50:9c:4a:b4: 7b:e3:f7:15:f0:09:46:5c:64:ff:6a:52:3a:3a:5c:53:b3:87: 47:15:23:d6 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUUGVwubaa9quqHpIi1lEjVj3tdMAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M4RTVGNDFGM0FGNzQwRTk0MjdGOEVEMjM1QzEyMDA5 OEFBMEMyMTAeFw0yNDA2MjUxNDA1MzhaFw0yNTA2MjQxNDEwMzhaMDMxMTAvBgNV BAMTKDIxM0U0Q0REMDk4MDZBRENFOUNCOUM0MzAxRTc4QUZFMDJGOUVCQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLy1rQb87QvyCmtymS5NeMbDt7 DfwPqBW95mCH/oGWYWlQTLoUmBaGpkUNy21tMTzXWvNGvSUxuvAm3qRGW2210f6C eUtZ/ubm2mmdhMCjCoSRMF2Ia8kJa7XdViPjM0+kGemOydK2UCE946mP0KXQNr8l XrBveOkP8dnByl7jFSVWmtxI6t1NuupI4VjOsrVP2pjn7PxpemQd0VapMjVz2d12 9gFteRgn74G8M+xPQtdarsRQTrylAG3ShBeShdBtXgd1WXLAeZISjkQSArT5HGbg YRroF1d4XelsUV6a6Hm7P3fkVSkGf/jhaoNG6nSxEhkIZrYd97K4yYMt3MNpAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUIT5M3QmAatzpy5xDAeeK/gL566gwHwYDVR0j BBgwFoAUPI5fQfOvdA6UJ/jtI1wSAJiqDCEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0txYWJTeEpEbTlLZGtoM3kzRk0zVkZVVEtZQVFIVWI1WFZzRnFwbndp U2IvMC8zQzhFNUY0MUYzQUY3NDBFOTQyN0Y4RUQyMzVDMTIwMDk4QUEwQzIxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDOEU1RjQxRjNBRjc0MEU5 NDI3RjhFRDIzNUMxMjAwOThBQTBDMjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NLcWFiU3hKRG05S2RraDN5M0ZNM1ZGVVRLWUFRSFViNVhWc0ZxcG53aVNiLzAv MzEzNzMwMmUzODMwMmUzMjM1MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMz MzAzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQCqlD8MA0GCSqGSIb3DQEBCwUAA4IBAQBo+kqc0RfM ZwtCkkAaoLIB548sf34RemCBr8YgBCivby1kEcixqDbCiDKaYFW8oTrQ9Mhzu1G2 b8ZDe04eUkfu5zxDUxsT6qPMRnnv1WfiEbRw++QdC+9ZPI8ISwXBevezc9Dib+XK Z5SvRSJ+h2sWoFEqzAc0b3DCRR/oWd+E2VtSAVYX2aStF9JP4s6ob3mYn5laoJ6y g+Aw9vTKi9IuHbHT7TECtvquZOpdYuJ3C9amIBeZobKuCkFtkHc3Joq8VgXVjcsp GraRhjN3UjUhj9uzdkqBEzUDWHqDcIoVjL22hBL+yFCcSrR74/cV8AlGXGT/alI6 OlxTs4dHFSPW -----END CERTIFICATE-----Generated at Thu Apr 17 20:19:14 2025 by rpki-client