$ rpki-client -vvf rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/3137302e3234362e3139362e302f32322d3234203d3e203532393734.roa File: 3137302e3234362e3139362e302f32322d3234203d3e203532393734.roa (raw, json) Hash identifier: D8wyygmFK+djs0aX64oDB2YVHLiOlJThn9QwyvH3qCg= Subject key identifier: 1B:8F:F8:D9:EE:22:53:98:B9:04:46:88:E8:30:21:82:E7:7D:22:7B Certificate issuer: /CN=E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68 Certificate serial: 108E7F4F2EDC4EF18E1C3103BDD4D6AA4B3416DD Authority key identifier: E0:B7:8B:98:B4:09:4A:86:E5:8E:4F:A9:EA:D0:06:4F:2A:8C:CF:68 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.cer Subject info access: rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/3137302e3234362e3139362e302f32322d3234203d3e203532393734.roa Signing time: Fri 14 Mar 2025 14:16:10 +0000 ROA not before: Fri 14 Mar 2025 14:11:10 +0000 ROA not after: Fri 13 Mar 2026 14:16:10 +0000 asID: 52974 IP address blocks: 170.246.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.crl rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 12 Apr 2025 03:23:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:8e:7f:4f:2e:dc:4e:f1:8e:1c:31:03:bd:d4:d6:aa:4b:34:16:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68 Validity Not Before: Mar 14 14:11:10 2025 GMT Not After : Mar 13 14:16:10 2026 GMT Subject: CN=1B8FF8D9EE225398B9044688E8302182E77D227B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:61:9a:9b:a3:94:54:48:b8:64:63:bb:37:52: 9c:9e:9f:af:fa:e5:ba:eb:cd:e5:b3:e3:99:92:4d: 2f:d9:24:1e:ba:6d:b5:68:64:8f:d8:01:a3:34:d7: fc:10:09:dd:12:50:0d:6e:d5:db:aa:46:34:bd:52: e3:2b:69:01:4e:3b:a5:d7:34:af:df:6b:10:eb:5f: 76:83:47:f1:c6:85:5b:bb:26:5a:7c:1d:11:9b:78: 05:4a:12:6c:cb:13:0f:e9:1a:c9:a2:8f:24:87:74: 8e:42:0b:d2:13:ca:89:a4:9a:f3:df:9b:8a:6a:84: 47:9f:28:03:bb:fd:da:28:ff:c9:65:64:4b:a3:9a: c1:cf:52:4e:2f:ac:62:54:87:9d:68:6e:c7:6a:d9: cd:25:33:c1:17:20:53:b1:c7:15:89:67:b7:70:29: 64:e7:cb:03:1b:3e:54:a4:b6:ad:51:6c:c2:3c:f0: 9c:80:ee:d8:b1:5d:d4:50:99:69:54:19:fb:39:a4: d4:01:cf:04:4d:9d:62:6e:c5:5c:bb:4d:bd:a5:d3: 43:f0:24:3d:70:06:ed:36:a6:36:4c:5b:94:b0:e3: 27:90:d7:9d:78:35:c4:d5:36:90:f7:ab:b7:dc:70: 1e:d8:13:0a:32:60:14:08:b0:6a:e7:72:2a:c6:42: f1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:8F:F8:D9:EE:22:53:98:B9:04:46:88:E8:30:21:82:E7:7D:22:7B X509v3 Authority Key Identifier: keyid:E0:B7:8B:98:B4:09:4A:86:E5:8E:4F:A9:EA:D0:06:4F:2A:8C:CF:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/3137302e3234362e3139362e302f32322d3234203d3e203532393734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.246.196.0/22 Signature Algorithm: sha256WithRSAEncryption 43:7b:0b:20:60:5a:fa:0a:01:fd:76:6e:7e:3c:26:48:18:2b: ee:03:8b:3b:d3:e4:97:7c:4a:34:f3:4e:45:96:93:0b:4a:16: 78:4f:cb:72:59:d3:be:a4:2d:32:b1:a7:01:e1:a5:b7:e4:13: 3a:c1:8b:80:55:82:b2:f1:df:5b:7c:81:eb:76:18:90:db:82: b4:d0:3f:7c:6d:6c:af:a8:5b:09:74:38:50:a4:d0:a3:96:4a: c2:a0:84:47:b8:cf:68:dd:0a:9f:35:95:45:22:37:09:c2:7c: e4:c4:1d:62:59:8c:fb:2f:ad:f2:1d:f2:15:2a:ef:96:c4:0f: 39:89:e8:09:d4:2e:45:bb:8e:69:b1:01:c6:b2:e5:16:4a:62: 04:bb:8a:6d:24:3b:26:dd:1b:0a:1b:7c:d6:01:ac:9b:b9:9f: 56:2a:31:c7:fe:8a:4a:c9:08:5b:d5:90:61:e1:aa:cf:7e:8b: 20:e5:df:51:cd:d7:e3:27:ce:b8:a7:be:f5:9f:e2:c9:87:d0: cc:56:04:62:c9:5c:d8:b9:b0:90:98:a3:a4:a5:66:90:56:aa: 8b:9f:92:d2:4a:99:53:9a:da:37:5a:e8:2c:18:73:a8:27:1a: e1:9c:f3:a0:7b:7f:b0:cb:d9:bf:23:d1:7a:7b:7c:04:32:94: 83:53:4a:f4 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUEI5/Ty7cTvGOHDEDvdTWqks0Ft0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBCNzhCOThCNDA5NEE4NkU1OEU0RkE5RUFEMDA2NEYy QThDQ0Y2ODAeFw0yNTAzMTQxNDExMTBaFw0yNjAzMTMxNDE2MTBaMDMxMTAvBgNV BAMTKDFCOEZGOEQ5RUUyMjUzOThCOTA0NDY4OEU4MzAyMTgyRTc3RDIyN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpYZqbo5RUSLhkY7s3Upyen6/6 5brrzeWz45mSTS/ZJB66bbVoZI/YAaM01/wQCd0SUA1u1duqRjS9UuMraQFOO6XX NK/faxDrX3aDR/HGhVu7Jlp8HRGbeAVKEmzLEw/pGsmijySHdI5CC9ITyomkmvPf m4pqhEefKAO7/doo/8llZEujmsHPUk4vrGJUh51obsdq2c0lM8EXIFOxxxWJZ7dw KWTnywMbPlSktq1RbMI88JyA7tixXdRQmWlUGfs5pNQBzwRNnWJuxVy7Tb2l00Pw JD1wBu02pjZMW5Sw4yeQ1514NcTVNpD3q7fccB7YEwoyYBQIsGrncirGQvFlAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUG4/42e4iU5i5BEaI6DAhgud9InswHwYDVR0j BBgwFoAU4LeLmLQJSobljk+p6tAGTyqMz2gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRHU5elRneUF5RE1mQWtpZVBkUUxDM1RKZXZyZ01KS1V6UExpY1cxUHRo ekwvMC9FMEI3OEI5OEI0MDk0QTg2RTU4RTRGQTlFQUQwMDY0RjJBOENDRjY4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UwQjc4Qjk4QjQwOTRBODZF NThFNEZBOUVBRDAwNjRGMkE4Q0NGNjguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0R1OXpUZ3lBeURNZkFraWVQZFFMQzNUSmV2cmdNSktVelBMaWNXMVB0aHpMLzAv MzEzNzMwMmUzMjM0MzYyZTMxMzkzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM1 MzIzOTM3MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKq9sQwDQYJKoZIhvcNAQELBQADggEBAEN7CyBg WvoKAf12bn48JkgYK+4DizvT5Jd8SjTzTkWWkwtKFnhPy3JZ076kLTKxpwHhpbfk EzrBi4BVgrLx31t8get2GJDbgrTQP3xtbK+oWwl0OFCk0KOWSsKghEe4z2jdCp81 lUUiNwnCfOTEHWJZjPsvrfId8hUq75bEDzmJ6AnULkW7jmmxAcay5RZKYgS7im0k OybdGwobfNYBrJu5n1YqMcf+ikrJCFvVkGHhqs9+iyDl31HN1+MnzrinvvWf4smH 0MxWBGLJXNi5sJCYo6SlZpBWqoufktJKmVOa2jda6CwYc6gnGuGc86B7f7DL2b8j 0Xp7fAQylINTSvQ= -----END CERTIFICATE-----Generated at Fri Apr 11 15:11:07 2025 by rpki-client