$ rpki-client -vvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/AS61832.roa File: AS61832.roa (raw, json) Hash identifier: 1o1TkzCjaSBxO0kDm2pBpMbNwn5hkhVf+xd+oLehO34= Subject key identifier: F1:53:02:23:74:FF:16:D9:11:FD:B5:CD:95:21:A0:48:AF:50:3B:68 Certificate issuer: /CN=988E922E2EBFFBA80468C170F0B053C90FD160E4 Certificate serial: 5EBF9CECD38D44DA77B101E7903B328B9BE28577 Authority key identifier: 98:8E:92:2E:2E:BF:FB:A8:04:68:C1:70:F0:B0:53:C9:0F:D1:60:E4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.cer Subject info access: rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/AS61832.roa Signing time: Thu 27 Jun 2024 20:34:39 +0000 ROA not before: Thu 27 Jun 2024 20:29:39 +0000 ROA not after: Thu 26 Jun 2025 20:34:39 +0000 asID: 61832 IP address blocks: 45.236.68.0/22 maxlen: 24 170.81.192.0/22 maxlen: 22 170.81.192.0/24 maxlen: 24 170.81.193.0/24 maxlen: 24 170.81.194.0/24 maxlen: 24 170.81.195.0/24 maxlen: 24 177.66.120.0/22 maxlen: 22 177.66.120.0/23 maxlen: 23 177.66.122.0/23 maxlen: 23 177.72.0.0/21 maxlen: 21 177.72.0.0/22 maxlen: 22 177.72.4.0/22 maxlen: 22 187.60.240.0/20 maxlen: 20 187.60.240.0/21 maxlen: 21 187.60.248.0/21 maxlen: 21 187.84.64.0/20 maxlen: 20 187.84.64.0/21 maxlen: 21 187.84.72.0/21 maxlen: 21 191.6.8.0/21 maxlen: 21 191.6.8.0/22 maxlen: 22 191.6.12.0/22 maxlen: 22 201.148.100.0/22 maxlen: 24 2804:1a04::/32 maxlen: 32 2804:1a04:9::/48 maxlen: 48 2804:1a04:a::/48 maxlen: 48 2804:1a04:1b::/48 maxlen: 48 2804:1a04:1c::/48 maxlen: 48 2804:1a04:1d::/48 maxlen: 48 2804:1a04:1e::/48 maxlen: 48 2804:1a04:1f::/48 maxlen: 48 2804:1a04:20::/48 maxlen: 48 2804:1a04:22::/48 maxlen: 48 2804:1a04:24::/48 maxlen: 48 2804:1a04:2c::/48 maxlen: 48 2804:1a04:2d::/48 maxlen: 48 2804:1a04:80::/48 maxlen: 48 2804:1a04:81::/48 maxlen: 48 2804:1a04:180::/48 maxlen: 48 2804:1a04:181::/48 maxlen: 48 2804:1a04:400::/48 maxlen: 48 2804:1a04:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.crl rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 29 Jun 2024 15:26:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:bf:9c:ec:d3:8d:44:da:77:b1:01:e7:90:3b:32:8b:9b:e2:85:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=988E922E2EBFFBA80468C170F0B053C90FD160E4 Validity Not Before: Jun 27 20:29:39 2024 GMT Not After : Jun 26 20:34:39 2025 GMT Subject: CN=F153022374FF16D911FDB5CD9521A048AF503B68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:69:1b:ba:03:94:fe:c5:a4:4b:8c:9c:98:e5: ce:f8:a4:31:2f:03:a2:b3:46:21:99:bd:da:96:3f: b2:33:66:a2:c5:3a:ed:82:28:a5:e2:98:dc:50:f5: b8:00:4e:c6:d2:2f:90:c2:ee:84:79:ff:fa:02:57: c1:76:4d:0c:a3:16:df:1d:ba:ce:b6:44:77:b8:07: ea:22:e2:7e:57:47:43:51:93:5d:6c:7e:23:b0:0e: 90:d7:b4:f0:1b:03:a1:05:1e:6c:1e:98:08:2b:56: 5d:f7:cc:7c:5a:bd:84:28:33:a2:9a:61:48:38:36: d7:c4:a8:63:0c:12:9e:92:cc:a9:af:11:15:47:39: 70:fe:4d:1b:bd:54:af:82:e2:73:e0:99:bd:12:ed: 9f:da:d8:74:e6:d0:5e:b4:46:8b:2d:c0:fa:83:34: 36:5c:4d:fd:04:60:15:96:1f:61:ff:d5:d6:a0:a6: 83:e3:bc:be:e8:2b:89:5a:21:23:57:8d:b8:ca:b3: f8:61:5c:87:a6:c8:7b:2b:7a:22:61:86:2a:82:5e: b5:9f:c7:b9:65:52:b2:b0:90:6c:fa:69:82:91:d7: 53:13:55:56:2c:c0:97:f1:39:3a:e5:35:7f:05:d7: f6:b2:77:7d:f2:7c:c1:d0:40:ce:aa:5b:f3:47:d9: 06:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:53:02:23:74:FF:16:D9:11:FD:B5:CD:95:21:A0:48:AF:50:3B:68 X509v3 Authority Key Identifier: keyid:98:8E:92:2E:2E:BF:FB:A8:04:68:C1:70:F0:B0:53:C9:0F:D1:60:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/AS61832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.236.68.0/22 170.81.192.0/22 177.66.120.0/22 177.72.0.0/21 187.60.240.0/20 187.84.64.0/20 191.6.8.0/21 201.148.100.0/22 IPv6: 2804:1a04::/32 Signature Algorithm: sha256WithRSAEncryption 83:cc:7b:63:82:78:df:67:b5:a1:cd:57:94:c2:5c:e3:4f:c1: 62:ea:99:41:e3:b7:c6:03:ce:8e:1a:9a:22:db:d6:4e:5a:7c: 20:0e:6d:3f:d5:e0:3a:cb:49:00:34:30:86:91:a0:94:0b:e5: 44:3a:71:63:ee:90:6c:1b:4a:2a:90:a4:82:20:8d:1f:39:34: f2:da:29:8b:03:48:f9:ee:04:5d:d9:19:1f:2f:62:d7:88:1c: 1b:9d:41:40:e8:50:19:d3:12:4f:2d:0d:27:77:ee:15:8f:e0: 5b:89:c2:02:9c:4c:97:6a:36:f8:7b:85:5a:49:e5:9e:1e:67: b1:e4:0e:5b:08:d6:b4:ff:e2:c0:a0:4c:0f:0c:8e:93:44:d9: 57:5b:33:d2:7f:6c:0b:7c:53:19:58:e6:d5:3c:dc:a8:45:50: 50:04:78:f2:78:c6:15:a8:fe:3f:39:6f:2d:e5:2a:f8:39:d7: ab:f8:20:bf:c6:4c:dd:86:27:0d:5c:3d:f7:ee:42:32:0c:7c: bb:8b:6a:07:a9:88:5c:22:17:98:f0:12:51:b6:f4:bd:2f:f3: b5:99:45:ad:05:04:dc:2b:24:f2:a2:6f:7b:9a:02:6a:3c:77: d7:a7:4b:11:59:7c:27:7e:01:9c:9a:8a:f1:df:3c:07:c0:df: b4:47:78:27 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgIUXr+c7NONRNp3sQHnkDsyi5vihXcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg4RTkyMkUyRUJGRkJBODA0NjhDMTcwRjBCMDUzQzkw RkQxNjBFNDAeFw0yNDA2MjcyMDI5MzlaFw0yNTA2MjYyMDM0MzlaMDMxMTAvBgNV BAMTKEYxNTMwMjIzNzRGRjE2RDkxMUZEQjVDRDk1MjFBMDQ4QUY1MDNCNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWaRu6A5T+xaRLjJyY5c74pDEv A6KzRiGZvdqWP7IzZqLFOu2CKKXimNxQ9bgATsbSL5DC7oR5//oCV8F2TQyjFt8d us62RHe4B+oi4n5XR0NRk11sfiOwDpDXtPAbA6EFHmwemAgrVl33zHxavYQoM6Ka YUg4NtfEqGMMEp6SzKmvERVHOXD+TRu9VK+C4nPgmb0S7Z/a2HTm0F60RostwPqD NDZcTf0EYBWWH2H/1dagpoPjvL7oK4laISNXjbjKs/hhXIemyHsreiJhhiqCXrWf x7llUrKwkGz6aYKR11MTVVYswJfxOTrlNX8F1/ayd33yfMHQQM6qW/NH2QZ7AgMB AAGjggJUMIICUDAdBgNVHQ4EFgQU8VMCI3T/FtkR/bXNlSGgSK9QO2gwHwYDVR0j BBgwFoAUmI6SLi6/+6gEaMFw8LBTyQ/RYOQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1JXeHdxajlLa0NValVyUWE2MWM4Wm8xREhtSG1wVGtUOW5VZmphZlFm dXEvMS85ODhFOTIyRTJFQkZGQkE4MDQ2OEMxNzBGMEIwNTNDOTBGRDE2MEU0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk4OEU5MjJFMkVCRkZCQTgw NDY4QzE3MEYwQjA1M0M5MEZEMTYwRTQuY2VyMHkGCCsGAQUFBwELBG0wazBpBggr BgEFBQcwC4ZdcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9DUld4 d3FqOUtrQ1VqVXJRYTYxYzhabzFESG1IbXBUa1Q5blVmamFmUWZ1cS8xL0FTNjE4 MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwWAYIKwYBBQUHAQcBAf8E STBHMDYEAgABMDADBAIt7EQDBAKqUcADBAKxQngDBAOxSAADBAS7PPADBAS7VEAD BAO/BggDBALJlGQwDQQCAAIwBwMFACgEGgQwDQYJKoZIhvcNAQELBQADggEBAIPM e2OCeN9ntaHNV5TCXONPwWLqmUHjt8YDzo4amiLb1k5afCAObT/V4DrLSQA0MIaR oJQL5UQ6cWPukGwbSiqQpIIgjR85NPLaKYsDSPnuBF3ZGR8vYteIHBudQUDoUBnT Ek8tDSd37hWP4FuJwgKcTJdqNvh7hVpJ5Z4eZ7HkDlsI1rT/4sCgTA8MjpNE2Vdb M9J/bAt8UxlY5tU83KhFUFAEePJ4xhWo/j85by3lKvg516v4IL/GTN2GJw1cPffu QjIMfLuLagepiFwiF5jwElG29L0v87WZRa0FBNwrJPKib3uaAmo8d9enSxFZfCd+ AZyaivHfPAfA37RHeCc= -----END CERTIFICATE-----Generated at Fri Jun 28 15:42:23 2024 by rpki-client on console-fra.rpki-client.org