$ rpki-client -vvf rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/3133312e37322e3139362e302f32322d3234203d3e203532393734.roa File: 3133312e37322e3139362e302f32322d3234203d3e203532393734.roa (raw, json) Hash identifier: 3luY1VlFYN1TJnOAM06LP0+78GdZDhR5b8dCnVnt/8E= Subject key identifier: AD:2A:E3:6E:5C:DB:8B:99:A7:9E:7F:82:95:B6:2E:95:46:28:B6:FC Certificate issuer: /CN=E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68 Certificate serial: 2D58ACE9B34D8C8C6385A22F7C08E78AD3FD685B Authority key identifier: E0:B7:8B:98:B4:09:4A:86:E5:8E:4F:A9:EA:D0:06:4F:2A:8C:CF:68 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.cer Subject info access: rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/3133312e37322e3139362e302f32322d3234203d3e203532393734.roa Signing time: Fri 14 Mar 2025 13:13:25 +0000 ROA not before: Fri 14 Mar 2025 13:08:25 +0000 ROA not after: Fri 13 Mar 2026 13:13:25 +0000 asID: 52974 IP address blocks: 131.72.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.crl rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 12 Apr 2025 03:23:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:58:ac:e9:b3:4d:8c:8c:63:85:a2:2f:7c:08:e7:8a:d3:fd:68:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68 Validity Not Before: Mar 14 13:08:25 2025 GMT Not After : Mar 13 13:13:25 2026 GMT Subject: CN=AD2AE36E5CDB8B99A79E7F8295B62E954628B6FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2d:e2:da:1b:74:4b:df:60:2f:fb:f3:16:de: 61:32:e7:cf:93:a6:fb:7c:5d:76:a5:35:e2:59:4d: 75:4e:0f:35:8b:c1:02:69:4b:88:0c:ac:be:8d:6a: 14:dd:9f:64:34:1f:2a:84:0b:7f:47:db:b3:e4:6e: 3c:39:84:9c:02:29:2f:33:a7:a8:9e:be:31:0d:f4: 38:71:ec:0a:ed:73:7d:8e:97:40:61:09:3e:ca:ec: 84:a0:a6:d1:64:92:19:3f:0e:be:e0:ab:86:c2:b1: e7:76:fd:04:0e:94:96:1d:9a:35:cd:8c:0b:8d:4b: c4:59:55:ce:91:26:db:f5:14:61:06:2c:67:14:a9: 2d:f5:03:69:64:1c:68:b2:4d:3d:05:a3:45:cc:09: a0:68:69:c6:0a:7f:d3:1a:98:ac:27:50:95:ee:cf: 11:6d:ea:a5:f7:67:6d:e3:07:d9:b4:20:dd:6b:b2: 6b:e0:94:e2:14:83:e2:40:79:29:87:d0:52:e8:56: 23:90:3e:81:16:c7:01:d6:65:ef:b6:ce:7e:d1:6f: e1:32:37:8a:29:9f:4e:9c:9c:39:82:de:83:6d:dc: f0:e8:bc:b6:4d:cb:9b:67:87:6b:67:15:8d:21:b9: 43:bf:53:1c:3e:5b:43:2e:9d:c4:c6:c7:06:28:fe: 2e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:2A:E3:6E:5C:DB:8B:99:A7:9E:7F:82:95:B6:2E:95:46:28:B6:FC X509v3 Authority Key Identifier: keyid:E0:B7:8B:98:B4:09:4A:86:E5:8E:4F:A9:EA:D0:06:4F:2A:8C:CF:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/3133312e37322e3139362e302f32322d3234203d3e203532393734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.72.196.0/22 Signature Algorithm: sha256WithRSAEncryption 6d:70:8d:86:0b:8f:89:0f:8e:d2:d3:04:bd:38:82:29:a5:1e: 8f:24:f7:eb:05:50:9a:70:29:36:ce:5d:5b:79:c7:89:5b:58: 6b:86:4e:a4:59:8a:8b:c7:9d:08:b0:a4:37:ab:6b:06:52:d5: 0b:c7:2a:b7:91:98:a4:3b:0a:37:70:21:9d:99:01:cd:7a:b0: 11:b3:05:fb:62:3b:86:ce:db:11:da:85:84:7e:03:63:65:d8: ee:2a:14:a0:88:4d:07:35:58:ae:90:a2:ae:d0:b6:55:57:86: 89:ba:00:92:cd:64:3e:fd:f5:5a:b3:57:73:e1:fb:29:c0:42: d4:7d:e5:4f:93:ff:1b:f2:bd:22:ab:ec:69:56:5a:17:38:86: b4:0d:ff:55:22:b4:42:5c:60:74:f0:d7:14:40:e4:c8:e0:7c: 94:5c:1f:98:1d:00:94:a3:47:98:0a:4c:1d:d4:1d:9e:6b:54: 97:5a:57:f1:37:83:fe:b8:b7:d6:74:8a:2e:82:1d:f7:d6:7c: af:3c:f4:57:de:8e:7e:9c:f4:04:90:4f:5b:60:59:dc:84:e2: 25:b1:32:71:10:d1:a7:59:ae:f3:30:d1:29:31:eb:11:a2:7d: 7b:d3:0d:0e:5c:49:6d:dc:b5:1b:47:bf:13:6e:99:7d:79:31: 56:59:c7:1e -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIULVis6bNNjIxjhaIvfAjnitP9aFswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBCNzhCOThCNDA5NEE4NkU1OEU0RkE5RUFEMDA2NEYy QThDQ0Y2ODAeFw0yNTAzMTQxMzA4MjVaFw0yNjAzMTMxMzEzMjVaMDMxMTAvBgNV BAMTKEFEMkFFMzZFNUNEQjhCOTlBNzlFN0Y4Mjk1QjYyRTk1NDYyOEI2RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxLeLaG3RL32Av+/MW3mEy58+T pvt8XXalNeJZTXVODzWLwQJpS4gMrL6NahTdn2Q0HyqEC39H27Pkbjw5hJwCKS8z p6ievjEN9Dhx7Artc32Ol0BhCT7K7ISgptFkkhk/Dr7gq4bCsed2/QQOlJYdmjXN jAuNS8RZVc6RJtv1FGEGLGcUqS31A2lkHGiyTT0Fo0XMCaBoacYKf9MamKwnUJXu zxFt6qX3Z23jB9m0IN1rsmvglOIUg+JAeSmH0FLoViOQPoEWxwHWZe+2zn7Rb+Ey N4opn06cnDmC3oNt3PDovLZNy5tnh2tnFY0huUO/Uxw+W0MuncTGxwYo/i4vAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUrSrjblzbi5mnnn+ClbYulUYotvwwHwYDVR0j BBgwFoAU4LeLmLQJSobljk+p6tAGTyqMz2gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRHU5elRneUF5RE1mQWtpZVBkUUxDM1RKZXZyZ01KS1V6UExpY1cxUHRo ekwvMC9FMEI3OEI5OEI0MDk0QTg2RTU4RTRGQTlFQUQwMDY0RjJBOENDRjY4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UwQjc4Qjk4QjQwOTRBODZF NThFNEZBOUVBRDAwNjRGMkE4Q0NGNjguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0R1OXpUZ3lBeURNZkFraWVQZFFMQzNUSmV2cmdNSktVelBMaWNXMVB0aHpMLzAv MzEzMzMxMmUzNzMyMmUzMTM5MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMy MzkzNzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQCg0jEMA0GCSqGSIb3DQEBCwUAA4IBAQBtcI2GC4+J D47S0wS9OIIppR6PJPfrBVCacCk2zl1beceJW1hrhk6kWYqLx50IsKQ3q2sGUtUL xyq3kZikOwo3cCGdmQHNerARswX7YjuGztsR2oWEfgNjZdjuKhSgiE0HNViukKKu 0LZVV4aJugCSzWQ+/fVas1dz4fspwELUfeVPk/8b8r0iq+xpVloXOIa0Df9VIrRC XGB08NcUQOTI4HyUXB+YHQCUo0eYCkwd1B2ea1SXWlfxN4P+uLfWdIough331nyv PPRX3o5+nPQEkE9bYFnchOIlsTJxENGnWa7zMNEpMesRon170w0OXElt3LUbR78T bpl9eTFWWcce -----END CERTIFICATE-----Generated at Fri Apr 11 14:10:58 2025 by rpki-client