$ rpki-client -vvf rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e352e3136342e302f32342d3234203d3e20323633353431.roa File: 3139312e352e3136342e302f32342d3234203d3e20323633353431.roa (raw, json) Hash identifier: IlP+Q4wKatkklk9OutmKhYBcRMPKZ2lXMcR3AadO0dE= Subject key identifier: 42:80:4A:85:A8:20:D6:E8:FD:A5:49:3B:8C:C0:E6:29:D6:42:6C:50 Certificate issuer: /CN=DFA5F9058A3FC234221062FC10FD9D6253F81867 Certificate serial: 29FF1D2AEC4AAEC18924A777AD702C6A86BC56D6 Authority key identifier: DF:A5:F9:05:8A:3F:C2:34:22:10:62:FC:10:FD:9D:62:53:F8:18:67 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFA5F9058A3FC234221062FC10FD9D6253F81867.cer Subject info access: rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e352e3136342e302f32342d3234203d3e20323633353431.roa Signing time: Thu 09 Jan 2025 14:07:03 +0000 ROA not before: Thu 09 Jan 2025 14:02:03 +0000 ROA not after: Thu 08 Jan 2026 14:07:03 +0000 asID: 263541 IP address blocks: 191.5.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/DFA5F9058A3FC234221062FC10FD9D6253F81867.crl rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/DFA5F9058A3FC234221062FC10FD9D6253F81867.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFA5F9058A3FC234221062FC10FD9D6253F81867.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 11 Apr 2025 01:19:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:ff:1d:2a:ec:4a:ae:c1:89:24:a7:77:ad:70:2c:6a:86:bc:56:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFA5F9058A3FC234221062FC10FD9D6253F81867 Validity Not Before: Jan 9 14:02:03 2025 GMT Not After : Jan 8 14:07:03 2026 GMT Subject: CN=42804A85A820D6E8FDA5493B8CC0E629D6426C50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ac:23:4d:a2:d8:60:c6:34:48:73:3b:ce:a6: 06:49:ec:95:96:cd:ec:de:3a:96:e5:0e:be:b8:1d: e0:ee:2b:69:b4:78:13:64:85:4d:5b:d3:19:fc:e0: bc:15:a5:d8:e5:bc:ce:72:c0:32:37:66:ff:59:9c: 04:e0:25:17:78:25:fd:6c:31:7d:09:67:4c:22:1e: 38:30:ac:74:0e:28:3b:e5:e5:67:30:c9:97:10:77: 54:ce:fc:37:d6:c3:6c:95:58:8f:cf:0d:12:f7:4b: 7c:9d:a9:19:b2:a4:fb:22:5f:57:0c:fc:2c:3c:39: ae:6d:c2:d1:a5:6e:c9:3d:91:0b:63:e3:fc:72:91: e6:a4:22:43:5d:9f:b2:6d:e0:75:a8:95:eb:6b:0c: 73:f5:4f:b8:a8:86:4f:8e:7c:ae:9a:0d:a2:65:2b: 74:47:49:29:42:0f:4c:77:19:81:1e:b1:03:c3:81: cf:94:f2:43:6e:fd:d5:49:f5:09:03:c3:e0:04:0f: 63:7f:24:ba:f5:57:99:74:3e:68:08:c6:a8:5f:6e: e6:d1:83:67:b4:f7:93:57:9f:a4:56:9e:08:49:f9: b1:b8:3a:c3:66:38:99:7d:0c:54:02:80:15:1c:e0: 2a:18:b0:2a:55:3e:0a:33:4d:34:4e:e7:de:6f:62: bc:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:80:4A:85:A8:20:D6:E8:FD:A5:49:3B:8C:C0:E6:29:D6:42:6C:50 X509v3 Authority Key Identifier: keyid:DF:A5:F9:05:8A:3F:C2:34:22:10:62:FC:10:FD:9D:62:53:F8:18:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/DFA5F9058A3FC234221062FC10FD9D6253F81867.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFA5F9058A3FC234221062FC10FD9D6253F81867.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e352e3136342e302f32342d3234203d3e20323633353431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.5.164.0/24 Signature Algorithm: sha256WithRSAEncryption b5:c0:f4:bb:1c:cb:ea:cf:2c:b4:2d:ac:b7:5f:41:17:dd:40: fa:1a:50:cf:00:42:51:5b:b3:7e:43:b5:cc:47:e4:c4:71:b3: 8f:d1:ff:de:06:0d:ed:9b:90:6f:f1:ad:e6:5a:69:55:ef:c5: ef:1e:b2:53:c3:ce:6c:f1:f8:2f:7a:32:e5:ba:9d:a6:05:e9: 0d:9f:d5:28:4b:2c:5e:9b:38:11:8d:45:19:e6:52:18:b0:23: e2:19:58:a2:11:d1:71:df:22:7b:23:21:6a:38:57:48:2c:ef: be:23:5b:3c:22:2e:8c:9b:c8:b9:3b:bc:b9:84:cd:1f:60:63: 93:24:80:21:06:96:51:b3:df:aa:c4:cf:f4:87:70:52:36:db: a8:e3:0d:19:a8:d2:66:28:29:09:e1:51:69:fc:71:fc:63:f5: 08:63:ce:86:31:f7:00:12:9c:2d:db:35:49:c3:d5:31:ce:31: e6:e3:29:1d:1c:85:8d:4d:48:17:d9:45:93:e5:5f:f0:5b:c0: 51:04:e5:7e:c1:fe:5a:a2:81:6f:d0:56:3b:53:ee:9d:5c:47: f2:a4:7c:ae:cb:99:79:be:0d:e2:08:db:7f:d0:26:5c:89:a9: 8e:8d:5a:dd:ec:96:90:84:46:f1:bf:b9:64:0e:d4:10:0d:2f: b9:f4:cd:0f -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUKf8dKuxKrsGJJKd3rXAsaoa8VtYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZBNUY5MDU4QTNGQzIzNDIyMTA2MkZDMTBGRDlENjI1 M0Y4MTg2NzAeFw0yNTAxMDkxNDAyMDNaFw0yNjAxMDgxNDA3MDNaMDMxMTAvBgNV BAMTKDQyODA0QTg1QTgyMEQ2RThGREE1NDkzQjhDQzBFNjI5RDY0MjZDNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4rCNNothgxjRIczvOpgZJ7JWW zezeOpblDr64HeDuK2m0eBNkhU1b0xn84LwVpdjlvM5ywDI3Zv9ZnATgJRd4Jf1s MX0JZ0wiHjgwrHQOKDvl5WcwyZcQd1TO/DfWw2yVWI/PDRL3S3ydqRmypPsiX1cM /Cw8Oa5twtGlbsk9kQtj4/xykeakIkNdn7Jt4HWoletrDHP1T7iohk+OfK6aDaJl K3RHSSlCD0x3GYEesQPDgc+U8kNu/dVJ9QkDw+AED2N/JLr1V5l0PmgIxqhfbubR g2e095NXn6RWnghJ+bG4OsNmOJl9DFQCgBUc4CoYsCpVPgozTTRO595vYryhAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUQoBKhagg1uj9pUk7jMDmKdZCbFAwHwYDVR0j BBgwFoAU36X5BYo/wjQiEGL8EP2dYlP4GGcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ2lhenB2ZzgxUTRER00yajgxQ1ZTRmF1WVdSUWM2NFlBeU13ckdYdlJ6 U1UvMC9ERkE1RjkwNThBM0ZDMjM0MjIxMDYyRkMxMEZEOUQ2MjUzRjgxODY3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGQTVGOTA1OEEzRkMyMzQy MjEwNjJGQzEwRkQ5RDYyNTNGODE4NjcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NpYXpwdmc4MVE0REdNMmo4MUNWU0ZhdVlXUlFjNjRZQXlNd3JHWHZSelNVLzAv MzEzOTMxMmUzNTJlMzEzNjM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMz MzUzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQAvwWkMA0GCSqGSIb3DQEBCwUAA4IBAQC1wPS7HMvq zyy0Lay3X0EX3UD6GlDPAEJRW7N+Q7XMR+TEcbOP0f/eBg3tm5Bv8a3mWmlV78Xv HrJTw85s8fgvejLlup2mBekNn9UoSyxemzgRjUUZ5lIYsCPiGViiEdFx3yJ7IyFq OFdILO++I1s8Ii6Mm8i5O7y5hM0fYGOTJIAhBpZRs9+qxM/0h3BSNtuo4w0ZqNJm KCkJ4VFp/HH8Y/UIY86GMfcAEpwt2zVJw9UxzjHm4ykdHIWNTUgX2UWT5V/wW8BR BOV+wf5aooFv0FY7U+6dXEfypHyuy5l5vg3iCNt/0CZciamOjVrd7JaQhEbxv7lk DtQQDS+59M0P -----END CERTIFICATE-----Generated at Thu Apr 10 15:47:33 2025 by rpki-client