$ rpki-client -vvf rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/3136302e3233382e3139362e302f32322d3232203d3e20323636353436.roa File: 3136302e3233382e3139362e302f32322d3232203d3e20323636353436.roa (raw, json) Hash identifier: 5pvfWBzN2ChCEaHMyEP6wKg93FsVgWUXZdBfuF0of0Q= Subject key identifier: 99:72:56:D4:55:07:54:96:4F:37:EB:2E:0F:A3:78:C9:DE:83:EF:55 Certificate issuer: /CN=A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A Certificate serial: 6F93A658E3CACB1B89A5530B8D32CC2A36C8B24E Authority key identifier: A7:80:A1:AD:6E:BB:B6:D7:8B:2F:F5:DA:DD:9A:31:70:7A:4B:EE:8A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A.cer Subject info access: rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/3136302e3233382e3139362e302f32322d3232203d3e20323636353436.roa Signing time: Tue 18 Mar 2025 20:06:36 +0000 ROA not before: Tue 18 Mar 2025 20:01:36 +0000 ROA not after: Tue 17 Mar 2026 20:06:36 +0000 asID: 266546 IP address blocks: 160.238.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A.crl rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 08 Apr 2025 03:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:93:a6:58:e3:ca:cb:1b:89:a5:53:0b:8d:32:cc:2a:36:c8:b2:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A Validity Not Before: Mar 18 20:01:36 2025 GMT Not After : Mar 17 20:06:36 2026 GMT Subject: CN=997256D4550754964F37EB2E0FA378C9DE83EF55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5c:a5:72:26:9c:d5:c3:59:1a:b3:09:4b:29: 9e:f5:3c:20:76:a2:17:c7:3f:4e:59:be:ee:e1:16: 53:50:bf:a4:f5:b4:59:fb:e1:a4:c1:0e:2e:81:82: 52:3b:f2:09:2d:74:f4:35:8f:6f:78:7c:11:a3:1c: 6e:97:24:24:cc:be:15:e9:71:3d:14:8e:a9:ba:ba: 29:d2:f7:f1:c8:d0:f3:34:38:49:9e:04:95:b9:2a: e2:db:67:85:1c:5d:8b:78:df:53:8e:86:e6:3f:66: 7b:59:5b:97:23:17:be:ba:50:db:d6:cf:1b:3f:63: 77:75:aa:b5:d1:ef:4a:4b:b6:c9:a0:0b:c3:87:9b: dc:5e:bb:8b:91:5f:f3:0c:0a:4b:33:11:45:74:23: 38:6a:c0:e1:e9:3f:d1:9c:7e:d8:69:d6:d2:d7:2b: 45:2b:8b:ff:f1:de:66:ae:b6:a1:76:1a:5b:f1:d8: 41:d3:ce:fc:37:34:8d:9f:a3:d1:88:52:eb:f7:da: bf:d5:65:44:7c:a1:ad:b2:49:d9:69:48:74:13:3d: 01:11:d9:94:44:be:e7:08:69:71:2d:5a:7f:c4:e2: bf:ce:cb:8a:f0:54:16:5e:be:76:5d:40:1c:37:af: a7:2e:4c:e8:8d:3b:cb:c3:99:4d:d2:20:75:6c:45: fb:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:72:56:D4:55:07:54:96:4F:37:EB:2E:0F:A3:78:C9:DE:83:EF:55 X509v3 Authority Key Identifier: keyid:A7:80:A1:AD:6E:BB:B6:D7:8B:2F:F5:DA:DD:9A:31:70:7A:4B:EE:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/3136302e3233382e3139362e302f32322d3232203d3e20323636353436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.238.196.0/22 Signature Algorithm: sha256WithRSAEncryption 67:4a:76:75:fe:9b:43:2f:98:f6:1e:6f:31:f7:2e:d3:5a:69: 8e:e8:9d:d4:5a:8f:3f:64:eb:b2:01:49:21:9e:27:7e:24:98: 77:54:82:fe:70:a2:65:b4:f9:e0:18:e2:6e:cc:a7:3e:5d:b3: f2:dd:0c:dc:66:e0:fd:65:7b:9e:d0:e3:2e:40:48:b4:8c:4f: 25:7c:5c:29:82:4b:e8:fc:b2:a2:c9:47:fd:be:d3:52:a6:cc: 82:f7:8f:92:ed:b7:09:fd:fe:59:d9:d4:f0:26:57:bd:f3:31: 04:fb:8f:40:99:99:e7:1d:10:de:ac:62:45:81:f7:2d:59:42: f5:99:02:02:d7:33:ac:9e:f7:11:eb:4e:85:20:36:54:05:96: ff:b8:f6:9e:e0:58:a3:ad:e9:64:d3:b7:16:b0:c8:87:8b:cf: ad:ff:65:9e:38:5f:b2:02:e4:09:9b:5d:ad:82:37:3e:a2:0b: 0f:0e:05:22:a8:e8:9f:c4:19:69:e2:7d:e3:e0:4d:5c:76:18: 49:c4:6e:d7:be:e4:cf:d9:be:93:47:59:a4:de:3e:a0:91:8b: ae:88:cc:84:06:9e:4f:8b:89:69:39:1b:23:77:03:4a:93:eb: b9:50:d9:18:cd:2d:93:78:f2:70:27:a3:c7:3c:6a:91:0b:69: 9f:22:00:88 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUb5OmWOPKyxuJpVMLjTLMKjbIsk4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc4MEExQUQ2RUJCQjZENzhCMkZGNURBREQ5QTMxNzA3 QTRCRUU4QTAeFw0yNTAzMTgyMDAxMzZaFw0yNjAzMTcyMDA2MzZaMDMxMTAvBgNV BAMTKDk5NzI1NkQ0NTUwNzU0OTY0RjM3RUIyRTBGQTM3OEM5REU4M0VGNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBXKVyJpzVw1kaswlLKZ71PCB2 ohfHP05Zvu7hFlNQv6T1tFn74aTBDi6BglI78gktdPQ1j294fBGjHG6XJCTMvhXp cT0Ujqm6uinS9/HI0PM0OEmeBJW5KuLbZ4UcXYt431OOhuY/ZntZW5cjF766UNvW zxs/Y3d1qrXR70pLtsmgC8OHm9xeu4uRX/MMCkszEUV0IzhqwOHpP9Gcfthp1tLX K0Uri//x3mautqF2Glvx2EHTzvw3NI2fo9GIUuv32r/VZUR8oa2ySdlpSHQTPQER 2ZREvucIaXEtWn/E4r/Oy4rwVBZevnZdQBw3r6cuTOiNO8vDmU3SIHVsRfunAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUmXJW1FUHVJZPN+suD6N4yd6D71UwHwYDVR0j BBgwFoAUp4ChrW67tteLL/Xa3ZoxcHpL7oowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRWhnRDFUaEhDTk1VejJrQURrTVdKdGVTZnBuVE5wd1FoeEU4aGUyUFhX RXovMC9BNzgwQTFBRDZFQkJCNkQ3OEIyRkY1REFERDlBMzE3MDdBNEJFRThBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E3ODBBMUFENkVCQkI2RDc4 QjJGRjVEQUREOUEzMTcwN0E0QkVFOEEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0VoZ0QxVGhIQ05NVXoya0FEa01XSnRlU2ZwblROcHdRaHhFOGhlMlBYV0V6LzAv MzEzNjMwMmUzMjMzMzgyZTMxMzkzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy MzYzNjM1MzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqDuxDANBgkqhkiG9w0BAQsFAAOCAQEAZ0p2 df6bQy+Y9h5vMfcu01ppjuid1FqPP2TrsgFJIZ4nfiSYd1SC/nCiZbT54Bjibsyn Pl2z8t0M3Gbg/WV7ntDjLkBItIxPJXxcKYJL6PyyoslH/b7TUqbMgvePku23Cf3+ WdnU8CZXvfMxBPuPQJmZ5x0Q3qxiRYH3LVlC9ZkCAtczrJ73EetOhSA2VAWW/7j2 nuBYo63pZNO3FrDIh4vPrf9lnjhfsgLkCZtdrYI3PqILDw4FIqjon8QZaeJ94+BN XHYYScRu177kz9m+k0dZpN4+oJGLrojMhAaeT4uJaTkbI3cDSpPruVDZGM0tk3jy cCejxzxqkQtpnyIAiA== -----END CERTIFICATE-----Generated at Mon Apr 7 13:37:53 2025 by rpki-client