$ rpki-client -vvf rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/3133382e3132322e3137342e302f32332d3233203d3e20323632353138.roa File: 3133382e3132322e3137342e302f32332d3233203d3e20323632353138.roa (raw, json) Hash identifier: uXepbibq4X9DxTgrMbgJjM/MgvVh22VvyQhXHl8ashM= Subject key identifier: D3:90:2D:02:55:E8:5A:47:4D:56:D8:72:5F:71:CE:10:27:76:56:0E Certificate issuer: /CN=DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36 Certificate serial: 10D444BA4264B6D3BE84ED2CABA5BD7CD90B3970 Authority key identifier: DE:E8:0E:50:E0:3D:F0:1C:15:4B:D2:A4:D1:D2:F3:BD:67:F7:1F:36 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.cer Subject info access: rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/3133382e3132322e3137342e302f32332d3233203d3e20323632353138.roa Signing time: Thu 06 Mar 2025 05:07:23 +0000 ROA not before: Thu 06 Mar 2025 05:02:23 +0000 ROA not after: Thu 05 Mar 2026 05:07:23 +0000 asID: 262518 IP address blocks: 138.122.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.crl rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Apr 2025 05:55:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:d4:44:ba:42:64:b6:d3:be:84:ed:2c:ab:a5:bd:7c:d9:0b:39:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36 Validity Not Before: Mar 6 05:02:23 2025 GMT Not After : Mar 5 05:07:23 2026 GMT Subject: CN=D3902D0255E85A474D56D8725F71CE102776560E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4f:49:09:ec:7f:58:70:4e:f4:ed:41:a2:b1: be:fb:09:87:4c:2d:df:9e:ce:76:78:46:e7:fe:56: 2a:54:f3:8f:e0:9e:b5:4d:a9:49:fb:13:d7:a2:3c: 41:88:0a:c2:26:f6:5c:e2:e6:95:fa:6a:76:86:5b: 0c:95:61:c5:05:6d:86:82:c0:c8:49:45:2e:cc:63: 17:18:c9:c5:db:e0:d8:a3:e0:0f:6b:f3:0b:1d:0e: 43:24:82:59:60:06:66:79:d6:e3:40:dd:63:c7:7f: d5:bf:29:40:dd:bd:61:93:c8:d6:e0:ce:52:46:60: 3b:13:22:5b:b3:23:7c:c9:cd:6e:f0:63:9d:74:3b: c3:de:7f:be:7b:11:6a:4f:d3:7a:c8:f0:9f:49:b1: ee:01:75:cc:b0:7a:a5:9d:6f:96:b6:f7:a9:2f:0e: 5e:dc:8a:2a:cf:fd:96:08:fb:83:38:df:a8:35:57: e9:c4:7d:80:ae:8d:f5:d2:ce:56:1c:8e:57:a0:47: 04:06:e9:88:5d:d7:62:4a:61:ea:d3:a9:93:9f:b1: bb:56:a6:04:3a:a9:4f:f6:28:79:d0:1e:b4:e0:46: e6:4f:f1:2a:5f:17:ba:cf:e0:37:13:1d:90:c4:c7: 77:fe:2e:1c:96:6e:91:09:a0:be:2e:1f:6a:18:0e: ff:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:90:2D:02:55:E8:5A:47:4D:56:D8:72:5F:71:CE:10:27:76:56:0E X509v3 Authority Key Identifier: keyid:DE:E8:0E:50:E0:3D:F0:1C:15:4B:D2:A4:D1:D2:F3:BD:67:F7:1F:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/3133382e3132322e3137342e302f32332d3233203d3e20323632353138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.122.174.0/23 Signature Algorithm: sha256WithRSAEncryption 19:4f:a4:92:ac:d3:e7:47:c9:a1:03:77:6d:ca:78:00:d7:44: 71:2c:3b:83:37:ed:5a:98:38:de:07:20:d2:38:48:71:a1:d3: d1:2e:3e:43:24:0a:de:92:1f:b1:9d:25:6b:ba:df:fc:02:e1: 36:d7:12:c1:29:16:4a:ab:34:65:2a:13:2b:16:ca:13:8c:6c: 09:65:51:73:c7:14:bc:24:27:20:1b:f9:8e:e1:08:3d:e2:3d: ad:f2:0b:5f:b0:83:c1:11:47:d8:08:d7:88:91:ea:6f:22:91: 59:86:5b:4e:9f:92:09:07:8c:22:25:a7:83:9e:da:97:13:34: fe:cb:28:85:ff:c2:cd:bb:3b:c7:17:21:ba:cb:34:00:f6:3c: ac:72:4d:64:c1:33:69:e0:20:89:cd:1a:db:14:a5:c9:e3:7e: 17:43:6c:b3:5b:f0:d3:9c:4f:2d:e1:e4:31:4a:1b:a4:2c:a4: 7f:95:77:9b:c1:54:d5:fe:c8:5b:e7:89:15:97:1c:e7:dd:d2: 08:1c:16:01:c8:76:0f:79:15:a5:11:5b:67:5c:a7:2d:53:c6: 8e:a5:4c:42:19:48:e1:bb:a1:e8:7c:af:04:13:2b:35:c5:81: da:00:55:2a:31:b2:b8:b3:75:99:10:dd:f4:99:48:98:69:e3: d0:ba:e4:dc -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUENREukJkttO+hO0sq6W9fNkLOXAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVFODBFNTBFMDNERjAxQzE1NEJEMkE0RDFEMkYzQkQ2 N0Y3MUYzNjAeFw0yNTAzMDYwNTAyMjNaFw0yNjAzMDUwNTA3MjNaMDMxMTAvBgNV BAMTKEQzOTAyRDAyNTVFODVBNDc0RDU2RDg3MjVGNzFDRTEwMjc3NjU2MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUT0kJ7H9YcE707UGisb77CYdM Ld+eznZ4Ruf+VipU84/gnrVNqUn7E9eiPEGICsIm9lzi5pX6anaGWwyVYcUFbYaC wMhJRS7MYxcYycXb4Nij4A9r8wsdDkMkgllgBmZ51uNA3WPHf9W/KUDdvWGTyNbg zlJGYDsTIluzI3zJzW7wY510O8Pef757EWpP03rI8J9Jse4BdcyweqWdb5a296kv Dl7ciirP/ZYI+4M436g1V+nEfYCujfXSzlYcjlegRwQG6Yhd12JKYerTqZOfsbtW pgQ6qU/2KHnQHrTgRuZP8SpfF7rP4DcTHZDEx3f+LhyWbpEJoL4uH2oYDv9JAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQU05AtAlXoWkdNVthyX3HOECd2Vg4wHwYDVR0j BBgwFoAU3ugOUOA98BwVS9Kk0dLzvWf3HzYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGg3bXdKTEpCQjRBejRmanpXMnRXUWt3dlhrNXNOcDRqd0R5TlRZckgz U3IvMS9ERUU4MEU1MEUwM0RGMDFDMTU0QkQyQTREMUQyRjNCRDY3RjcxRjM2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFRTgwRTUwRTAzREYwMUMx NTRCRDJBNEQxRDJGM0JENjdGNzFGMzYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0RoN213SkxKQkI0QXo0Zmp6VzJ0V1Frd3ZYazVzTnA0andEeU5UWXJIM1NyLzEv MzEzMzM4MmUzMTMyMzIyZTMxMzczNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy MzYzMjM1MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAYp6rjANBgkqhkiG9w0BAQsFAAOCAQEAGU+k kqzT50fJoQN3bcp4ANdEcSw7gzftWpg43gcg0jhIcaHT0S4+QyQK3pIfsZ0la7rf /ALhNtcSwSkWSqs0ZSoTKxbKE4xsCWVRc8cUvCQnIBv5juEIPeI9rfILX7CDwRFH 2AjXiJHqbyKRWYZbTp+SCQeMIiWng57alxM0/ssohf/Czbs7xxchuss0APY8rHJN ZMEzaeAgic0a2xSlyeN+F0Nss1vw05xPLeHkMUobpCykf5V3m8FU1f7IW+eJFZcc 593SCBwWAch2D3kVpRFbZ1ynLVPGjqVMQhlI4buh6HyvBBMrNcWB2gBVKjGyuLN1 mRDd9JlImGnj0Lrk3A== -----END CERTIFICATE-----Generated at Sun Apr 6 12:08:21 2025 by rpki-client