$ rpki-client -vvf rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/3133382e302e3131322e302f32322d3232203d3e20323634353434.roa File: 3133382e302e3131322e302f32322d3232203d3e20323634353434.roa (raw, json) Hash identifier: /oGcUS9pBbC1yFVaVOW40Ya+Ysiwkwqadpl5tS5pimM= Subject key identifier: D7:21:B4:F0:FC:BB:F8:CB:DF:69:7B:ED:10:AE:D5:BA:3B:C8:30:3C Certificate issuer: /CN=0A7C3257FA1963CEB7CE14E9599DCE92E73662F9 Certificate serial: 4DA26272C9BBC0ABC14BCFEAEB5A545D647694D5 Authority key identifier: 0A:7C:32:57:FA:19:63:CE:B7:CE:14:E9:59:9D:CE:92:E7:36:62:F9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.cer Subject info access: rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/3133382e302e3131322e302f32322d3232203d3e20323634353434.roa Signing time: Tue 04 Feb 2025 02:44:09 +0000 ROA not before: Tue 04 Feb 2025 02:39:09 +0000 ROA not after: Tue 03 Feb 2026 02:44:09 +0000 asID: 264544 IP address blocks: 138.0.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.crl rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 12 Apr 2025 11:42:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:a2:62:72:c9:bb:c0:ab:c1:4b:cf:ea:eb:5a:54:5d:64:76:94:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A7C3257FA1963CEB7CE14E9599DCE92E73662F9 Validity Not Before: Feb 4 02:39:09 2025 GMT Not After : Feb 3 02:44:09 2026 GMT Subject: CN=D721B4F0FCBBF8CBDF697BED10AED5BA3BC8303C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4f:39:fe:24:39:60:71:53:db:d6:57:2a:35: e5:b4:69:a9:89:bf:56:47:c2:28:04:dd:de:eb:05: 3a:27:48:6b:7d:ea:cf:01:3a:d6:db:06:8f:f9:dd: 60:06:0d:43:7e:39:dd:6d:b6:30:62:ab:b8:ad:cd: b9:e8:7e:8b:db:45:7c:24:24:c1:64:0b:b3:3e:5f: 73:1e:70:57:aa:22:97:81:4c:85:75:33:72:d9:e8: 06:0f:63:4b:19:12:6b:1e:cf:1e:fa:94:1f:a1:54: 7c:3a:69:75:06:e1:eb:e5:41:d5:ae:57:49:c9:bf: 66:30:a1:54:54:23:5c:7e:d9:20:e6:e0:c1:0e:44: 1f:e6:65:33:31:db:cb:58:e6:e9:fa:1b:bf:2a:13: 10:5f:60:3d:94:23:21:1b:fb:63:98:78:3a:e3:6a: 5d:6f:e2:90:d1:9d:f6:d8:aa:6b:95:89:be:68:11: aa:1c:fc:91:a0:1c:54:de:c1:b6:5f:98:01:06:da: a8:63:ca:11:47:3f:2d:fd:23:60:dc:ad:b5:46:5e: 27:5e:08:c0:da:42:ca:b3:ce:47:0b:f7:87:14:cc: 75:39:09:0d:e3:2d:03:cc:ec:de:70:ba:2a:9d:e0: 86:f9:d4:91:7c:76:7f:f6:93:ca:1a:6a:0c:b4:31: 17:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:21:B4:F0:FC:BB:F8:CB:DF:69:7B:ED:10:AE:D5:BA:3B:C8:30:3C X509v3 Authority Key Identifier: keyid:0A:7C:32:57:FA:19:63:CE:B7:CE:14:E9:59:9D:CE:92:E7:36:62:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/3133382e302e3131322e302f32322d3232203d3e20323634353434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.0.112.0/22 Signature Algorithm: sha256WithRSAEncryption 88:d0:ce:7b:0e:22:05:13:96:21:b6:f9:14:5b:94:71:d0:ed: 73:98:bf:c0:f7:06:6f:da:9a:2f:0a:f0:83:4c:b3:bc:71:ab: 94:57:92:75:d3:ba:5c:0a:86:98:89:2f:9f:2a:7c:c8:39:ac: 86:35:e6:99:fa:a2:c8:f8:bc:9d:ef:72:b3:78:00:ea:61:48: 84:aa:54:b8:06:e2:25:9e:11:08:64:75:c4:d2:8b:9d:6f:61: 5a:29:d8:54:42:09:e2:24:c5:c7:69:54:80:31:7c:e7:7c:da: 3e:7c:2f:b7:fb:ea:41:a1:6e:34:a7:ea:09:2c:27:2f:65:6f: 6b:e4:38:85:59:bf:18:73:f4:a9:4d:ee:a9:b9:5f:b2:4d:2c: 3f:47:64:c0:cf:a9:6e:f7:be:60:ae:27:80:05:32:cf:00:8e: 2f:5b:27:ba:fd:f5:f7:2d:ee:d0:d9:60:67:84:7c:e5:fc:db: b4:88:cf:fb:8c:1f:17:20:40:ef:dd:f1:6c:dd:3e:ca:0a:50: 84:26:9a:31:7b:ec:09:12:76:c6:d8:ba:39:33:10:52:88:e0: 20:ee:7b:34:6f:e4:10:30:34:e4:47:cf:42:e8:ef:72:07:0e: 0b:07:7c:a6:f4:00:83:c7:8b:40:79:80:24:ca:7c:ea:23:fc: a7:b4:3d:78 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUTaJicsm7wKvBS8/q61pUXWR2lNUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE3QzMyNTdGQTE5NjNDRUI3Q0UxNEU5NTk5RENFOTJF NzM2NjJGOTAeFw0yNTAyMDQwMjM5MDlaFw0yNjAyMDMwMjQ0MDlaMDMxMTAvBgNV BAMTKEQ3MjFCNEYwRkNCQkY4Q0JERjY5N0JFRDEwQUVENUJBM0JDODMwM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Tzn+JDlgcVPb1lcqNeW0aamJ v1ZHwigE3d7rBTonSGt96s8BOtbbBo/53WAGDUN+Od1ttjBiq7itzbnofovbRXwk JMFkC7M+X3MecFeqIpeBTIV1M3LZ6AYPY0sZEmsezx76lB+hVHw6aXUG4evlQdWu V0nJv2YwoVRUI1x+2SDm4MEORB/mZTMx28tY5un6G78qExBfYD2UIyEb+2OYeDrj al1v4pDRnfbYqmuVib5oEaoc/JGgHFTewbZfmAEG2qhjyhFHPy39I2DcrbVGXide CMDaQsqzzkcL94cUzHU5CQ3jLQPM7N5wuiqd4Ib51JF8dn/2k8oaagy0MRehAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQU1yG08Py7+MvfaXvtEK7VujvIMDwwHwYDVR0j BBgwFoAUCnwyV/oZY863zhTpWZ3Okuc2YvkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ2FxZ1lMQjdLbmcyM1ZWMXJ1OXRKVWZSNzdQdnZuTE1CckM2d1hpVXpY OWIvMi8wQTdDMzI1N0ZBMTk2M0NFQjdDRTE0RTk1OTlEQ0U5MkU3MzY2MkY5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBBN0MzMjU3RkExOTYzQ0VC N0NFMTRFOTU5OURDRTkyRTczNjYyRjkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NhcWdZTEI3S25nMjNWVjFydTl0SlVmUjc3UHZ2bkxNQnJDNndYaVV6WDliLzIv MzEzMzM4MmUzMDJlMzEzMTMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM0 MzUzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQCigBwMA0GCSqGSIb3DQEBCwUAA4IBAQCI0M57DiIF E5YhtvkUW5Rx0O1zmL/A9wZv2povCvCDTLO8cauUV5J107pcCoaYiS+fKnzIOayG NeaZ+qLI+Lyd73KzeADqYUiEqlS4BuIlnhEIZHXE0oudb2FaKdhUQgniJMXHaVSA MXznfNo+fC+3++pBoW40p+oJLCcvZW9r5DiFWb8Yc/SpTe6puV+yTSw/R2TAz6lu 975grieABTLPAI4vWye6/fX3Le7Q2WBnhHzl/Nu0iM/7jB8XIEDv3fFs3T7KClCE Jpoxe+wJEnbG2Lo5MxBSiOAg7ns0b+QQMDTkR89C6O9yBw4LB3ym9ACDx4tAeYAk ynzqI/yntD14 -----END CERTIFICATE-----Generated at Fri Apr 11 23:35:04 2025 by rpki-client