$ rpki-client -vvf rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/3137372e3132382e38382e302f32322d3234203d3e20323637313432.roa File: 3137372e3132382e38382e302f32322d3234203d3e20323637313432.roa (raw, json) Hash identifier: L4iJGteHF6GdbZUpYdPsmSF6aU2WwIJnyrqJCiuS0u4= Subject key identifier: C0:EC:8C:35:1B:B7:6B:8F:93:FB:18:29:4B:D5:CC:56:17:79:2A:00 Certificate issuer: /CN=AFFAF320E60531FB95C6C685842B56D1BDFCED45 Certificate serial: 765BE4FDD9C67C9B05FE7D6217DEEA7EF1EB6C74 Authority key identifier: AF:FA:F3:20:E6:05:31:FB:95:C6:C6:85:84:2B:56:D1:BD:FC:ED:45 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFAF320E60531FB95C6C685842B56D1BDFCED45.cer Subject info access: rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/3137372e3132382e38382e302f32322d3234203d3e20323637313432.roa Signing time: Sun 09 Feb 2025 23:07:39 +0000 ROA not before: Sun 09 Feb 2025 23:02:39 +0000 ROA not after: Sun 08 Feb 2026 23:07:39 +0000 asID: 267142 IP address blocks: 177.128.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.crl rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFAF320E60531FB95C6C685842B56D1BDFCED45.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 21 Feb 2025 20:53:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:5b:e4:fd:d9:c6:7c:9b:05:fe:7d:62:17:de:ea:7e:f1:eb:6c:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFFAF320E60531FB95C6C685842B56D1BDFCED45 Validity Not Before: Feb 9 23:02:39 2025 GMT Not After : Feb 8 23:07:39 2026 GMT Subject: CN=C0EC8C351BB76B8F93FB18294BD5CC5617792A00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:14:34:68:53:ed:68:6c:b6:ac:c3:29:93:43: 52:49:47:42:82:4f:6d:9f:5b:f7:b3:26:6f:cf:35: ad:04:e3:c0:ad:45:db:f1:d6:06:1b:73:bc:8a:a9: 79:7c:f3:65:6c:5a:af:b3:6b:38:5b:f7:9a:62:48: c3:0e:2b:96:a5:79:32:90:d7:06:6f:8a:77:6f:4c: 26:ca:a4:b6:c4:cd:87:b9:7e:fd:9d:ff:d9:7f:3b: 1d:52:27:ff:9a:70:25:46:48:81:43:e4:24:a5:14: 25:fa:74:86:9c:3e:fa:12:3a:e8:b1:6f:e7:ba:f9: 55:91:73:1a:ae:2c:e9:f8:a7:9b:ca:03:61:75:b5: 99:9e:14:96:ac:5a:2c:47:45:27:46:82:8d:a2:16: 1a:55:8f:ab:2b:f1:89:62:8d:d9:1e:fc:67:ff:d7: 5f:a7:3c:d2:8a:29:c3:27:2e:5e:97:4d:77:e4:5c: 7b:58:58:0c:55:cb:f6:f8:ce:b8:c8:7c:18:b2:bd: 7c:1f:12:58:fc:8d:3e:07:db:ea:91:20:cb:92:f0: f0:5d:ef:9e:dd:a8:07:f2:05:39:47:d3:e6:20:00: 4b:64:75:fc:b2:40:74:d4:62:96:16:2a:1b:4b:8b: 3a:c3:79:37:4c:5b:89:a6:27:cc:1e:e3:a3:ee:df: e9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:EC:8C:35:1B:B7:6B:8F:93:FB:18:29:4B:D5:CC:56:17:79:2A:00 X509v3 Authority Key Identifier: keyid:AF:FA:F3:20:E6:05:31:FB:95:C6:C6:85:84:2B:56:D1:BD:FC:ED:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFAF320E60531FB95C6C685842B56D1BDFCED45.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/3137372e3132382e38382e302f32322d3234203d3e20323637313432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.128.88.0/22 Signature Algorithm: sha256WithRSAEncryption a7:a1:da:8c:d5:fb:3d:4a:67:25:9e:f1:5c:dd:b8:7d:b7:42: 24:86:dd:03:81:2c:5f:6c:77:86:c3:78:f0:29:bb:59:18:ce: 9b:b4:03:64:8d:e8:5b:a4:7a:87:b0:60:d7:69:10:2d:92:9b: 02:da:0a:18:f7:15:13:47:56:dc:45:e5:25:ad:41:51:88:90: fb:af:2e:46:2c:d5:52:e6:b1:8d:92:c3:fe:ba:c0:b7:0f:f5: 45:6e:25:e1:29:6d:cc:cb:62:5f:ea:9d:a9:63:d0:51:1a:e6: 72:c7:91:54:49:75:83:83:72:d3:b2:55:09:19:91:ba:0c:15: ec:8d:97:cf:65:ee:75:4b:f9:a2:8c:fe:09:82:61:0e:8f:ed: 42:d4:ef:8b:d7:fc:13:c3:ad:02:53:31:4d:41:04:84:dd:e8: 13:62:a0:bb:87:38:3a:db:aa:35:5e:6d:03:08:fb:c9:2a:34: c8:99:5e:5e:e2:86:88:45:7a:85:4d:bc:a9:12:07:f1:8e:ae: 3a:6f:c4:d0:dc:90:de:44:78:fa:ab:00:71:bd:85:a8:07:94: 6d:0f:b9:9e:8c:38:25:f0:8c:2e:0a:ab:94:14:22:95:2c:4f: d5:ba:36:3e:e5:43:02:e3:bb:6e:5d:c3:4e:2f:14:f4:b4:c6: 6a:2f:f7:b3 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUdlvk/dnGfJsF/n1iF97qfvHrbHQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGQUYzMjBFNjA1MzFGQjk1QzZDNjg1ODQyQjU2RDFC REZDRUQ0NTAeFw0yNTAyMDkyMzAyMzlaFw0yNjAyMDgyMzA3MzlaMDMxMTAvBgNV BAMTKEMwRUM4QzM1MUJCNzZCOEY5M0ZCMTgyOTRCRDVDQzU2MTc3OTJBMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrFDRoU+1obLaswymTQ1JJR0KC T22fW/ezJm/PNa0E48CtRdvx1gYbc7yKqXl882VsWq+zazhb95piSMMOK5aleTKQ 1wZvindvTCbKpLbEzYe5fv2d/9l/Ox1SJ/+acCVGSIFD5CSlFCX6dIacPvoSOuix b+e6+VWRcxquLOn4p5vKA2F1tZmeFJasWixHRSdGgo2iFhpVj6sr8Ylijdke/Gf/ 11+nPNKKKcMnLl6XTXfkXHtYWAxVy/b4zrjIfBiyvXwfElj8jT4H2+qRIMuS8PBd 757dqAfyBTlH0+YgAEtkdfyyQHTUYpYWKhtLizrDeTdMW4mmJ8we46Pu3+nDAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUwOyMNRu3a4+T+xgpS9XMVhd5KgAwHwYDVR0j BBgwFoAUr/rzIOYFMfuVxsaFhCtW0b387UUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGhoYWNKRmdXczl3SzlDdUVQVFhlUUMxWER3amhnTU5KczN6VGg5dzl0 QlUvMC9BRkZBRjMyMEU2MDUzMUZCOTVDNkM2ODU4NDJCNTZEMUJERkNFRDQ1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGRkFGMzIwRTYwNTMxRkI5 NUM2QzY4NTg0MkI1NkQxQkRGQ0VENDUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0RoaGFjSkZnV3M5d0s5Q3VFUFRYZVFDMVhEd2poZ01OSnMzelRoOXc5dEJVLzAv MzEzNzM3MmUzMTMyMzgyZTM4MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2 MzczMTM0MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKxgFgwDQYJKoZIhvcNAQELBQADggEBAKeh2ozV +z1KZyWe8VzduH23QiSG3QOBLF9sd4bDePApu1kYzpu0A2SN6FukeoewYNdpEC2S mwLaChj3FRNHVtxF5SWtQVGIkPuvLkYs1VLmsY2Sw/66wLcP9UVuJeEpbczLYl/q nalj0FEa5nLHkVRJdYODctOyVQkZkboMFeyNl89l7nVL+aKM/gmCYQ6P7ULU74vX /BPDrQJTMU1BBITd6BNioLuHODrbqjVebQMI+8kqNMiZXl7ihohFeoVNvKkSB/GO rjpvxNDckN5EePqrAHG9hagHlG0PuZ6MOCXwjC4Kq5QUIpUsT9W6Nj7lQwLju25d w04vFPS0xmov97M= -----END CERTIFICATE-----Generated at Fri Feb 21 11:20:46 2025 by rpki-client