$ rpki-client -vvf rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3137302e3234372e3230322e302f32342d3234203d3e20323633323536.roa File: 3137302e3234372e3230322e302f32342d3234203d3e20323633323536.roa (raw, json) Hash identifier: F/6ub2uppGeTN4jsU83ToAQ8mMU9CAKo7hwjypNHKuw= Subject key identifier: 0F:5F:D8:D8:EE:A4:82:86:3D:3C:AB:BB:92:90:7F:0E:03:67:EB:10 Certificate issuer: /CN=60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011 Certificate serial: 7222131AB035FD13C11855E7847F4F010FC6B7CD Authority key identifier: 60:F5:CE:DC:60:B1:C9:2A:5A:74:DC:B3:CF:E6:F0:44:F9:46:20:11 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.cer Subject info access: rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3137302e3234372e3230322e302f32342d3234203d3e20323633323536.roa Signing time: Fri 10 Jan 2025 16:41:55 +0000 ROA not before: Fri 10 Jan 2025 16:36:55 +0000 ROA not after: Fri 09 Jan 2026 16:41:55 +0000 asID: 263256 IP address blocks: 170.247.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.crl rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 13:49:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:22:13:1a:b0:35:fd:13:c1:18:55:e7:84:7f:4f:01:0f:c6:b7:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011 Validity Not Before: Jan 10 16:36:55 2025 GMT Not After : Jan 9 16:41:55 2026 GMT Subject: CN=0F5FD8D8EEA482863D3CABBB92907F0E0367EB10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:70:1a:16:25:a3:4c:43:35:6f:0a:85:7e:ef: a9:04:20:98:41:be:c7:4b:12:6f:5e:93:10:38:ca: 57:c8:77:94:82:cf:ec:1f:4e:48:24:65:c7:61:01: 2e:29:2e:81:77:b1:e2:5e:2c:1c:7d:d7:ba:37:f1: ed:5e:c8:40:e4:5e:6f:9d:44:70:27:58:2e:61:d5: cd:d0:85:55:c3:c6:96:ac:52:1d:e4:b4:9f:6b:ae: 20:5f:3f:7b:b3:44:9c:e3:76:35:12:ab:97:c4:d0: e7:4a:65:df:1d:b5:f6:e4:37:87:21:3a:6a:7d:ed: f4:2b:5a:b6:f5:14:08:45:67:83:f7:34:09:dd:67: c0:a7:be:b3:ab:f0:a1:d8:d4:84:78:bb:65:2c:98: 97:fa:9b:fe:ce:29:0a:2b:df:57:7b:18:c0:9c:06: a0:f1:c4:ec:4f:cb:3a:e4:83:c4:7d:eb:a6:6e:a1: ec:f4:ce:bd:9c:5c:d9:f6:d6:81:6c:36:53:0a:56: d0:13:b0:97:7e:89:5a:d3:b6:b4:a5:b3:60:4a:22: ee:d9:8b:63:3b:52:a5:b5:0e:5c:37:49:4e:39:66: 97:f1:e1:b0:1f:a7:87:8b:4b:58:e2:b8:be:ac:a7: 45:ab:6b:ca:d0:2b:7b:82:e3:01:7f:74:06:c2:7f: 09:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:5F:D8:D8:EE:A4:82:86:3D:3C:AB:BB:92:90:7F:0E:03:67:EB:10 X509v3 Authority Key Identifier: keyid:60:F5:CE:DC:60:B1:C9:2A:5A:74:DC:B3:CF:E6:F0:44:F9:46:20:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3137302e3234372e3230322e302f32342d3234203d3e20323633323536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.247.202.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:b5:e7:d9:9f:7e:f4:d9:11:f0:67:4d:60:a7:b5:fb:be:58: aa:dd:d3:df:3e:40:ab:38:aa:0a:0d:77:75:a8:ab:25:d4:3f: 7a:38:75:52:25:e3:5a:3e:3e:0f:fb:90:6a:60:58:76:e2:e2: 6f:d2:fe:5b:ab:b0:dd:f2:6c:08:57:ef:45:5d:9a:2c:35:60: b7:d7:d8:b4:d0:b0:9f:ce:18:fe:c6:66:20:c0:7c:b6:db:62: 8a:19:80:9d:a6:4e:5f:f2:1a:1e:a6:e2:b5:9d:c6:a2:6c:65: 23:80:aa:47:6c:e4:57:2f:7d:a8:6f:c4:45:ad:a7:8b:71:7a: ef:c9:70:e4:00:5b:3b:25:5a:53:60:68:b5:b7:53:0d:b0:d0: ca:1c:66:ef:dc:16:7f:48:9e:5b:84:c8:34:78:88:b8:58:af: 20:ba:5e:08:d3:6a:29:6f:b8:93:c2:9c:f6:6b:44:99:b1:d9: a0:e5:70:f8:41:01:85:5d:a1:8a:74:9a:8b:f8:fc:2f:1b:63: c3:cf:ea:ae:22:48:95:b1:5e:b6:2f:e2:1b:57:04:ac:c4:a3: 3a:df:69:fe:7e:59:23:0d:ca:b9:92:87:98:0d:2e:6c:1f:26: c8:36:b0:f9:16:c7:16:de:84:e9:ac:c2:24:45:46:91:30:34: 63:ce:53:8a -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUciITGrA1/RPBGFXnhH9PAQ/Gt80wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBGNUNFREM2MEIxQzkyQTVBNzREQ0IzQ0ZFNkYwNDRG OTQ2MjAxMTAeFw0yNTAxMTAxNjM2NTVaFw0yNjAxMDkxNjQxNTVaMDMxMTAvBgNV BAMTKDBGNUZEOEQ4RUVBNDgyODYzRDNDQUJCQjkyOTA3RjBFMDM2N0VCMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCucBoWJaNMQzVvCoV+76kEIJhB vsdLEm9ekxA4ylfId5SCz+wfTkgkZcdhAS4pLoF3seJeLBx917o38e1eyEDkXm+d RHAnWC5h1c3QhVXDxpasUh3ktJ9rriBfP3uzRJzjdjUSq5fE0OdKZd8dtfbkN4ch Omp97fQrWrb1FAhFZ4P3NAndZ8CnvrOr8KHY1IR4u2UsmJf6m/7OKQor31d7GMCc BqDxxOxPyzrkg8R966Zuoez0zr2cXNn21oFsNlMKVtATsJd+iVrTtrSls2BKIu7Z i2M7UqW1Dlw3SU45Zpfx4bAfp4eLS1jiuL6sp0Wra8rQK3uC4wF/dAbCfwktAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUD1/Y2O6kgoY9PKu7kpB/DgNn6xAwHwYDVR0j BBgwFoAUYPXO3GCxySpadNyzz+bwRPlGIBEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRXB3UGZzd1c5TmdMZVZKdXFHQ2RZTlRLRWluMXpWQlQ2b0d6ZXM5YXJk U2QvMC82MEY1Q0VEQzYwQjFDOTJBNUE3NERDQjNDRkU2RjA0NEY5NDYyMDExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYwRjVDRURDNjBCMUM5MkE1 QTc0RENCM0NGRTZGMDQ0Rjk0NjIwMTEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0Vwd1Bmc3dXOU5nTGVWSnVxR0NkWU5US0VpbjF6VkJUNm9HemVzOWFyZFNkLzAv MzEzNzMwMmUzMjM0MzcyZTMyMzAzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy MzYzMzMyMzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKr3yjANBgkqhkiG9w0BAQsFAAOCAQEAjbXn 2Z9+9NkR8GdNYKe1+75Yqt3T3z5AqziqCg13dairJdQ/ejh1UiXjWj4+D/uQamBY duLib9L+W6uw3fJsCFfvRV2aLDVgt9fYtNCwn84Y/sZmIMB8tttiihmAnaZOX/Ia HqbitZ3GomxlI4CqR2zkVy99qG/ERa2ni3F678lw5ABbOyVaU2BotbdTDbDQyhxm 79wWf0ieW4TINHiIuFivILpeCNNqKW+4k8Kc9mtEmbHZoOVw+EEBhV2hinSai/j8 Lxtjw8/qriJIlbFeti/iG1cErMSjOt9p/n5ZIw3KuZKHmA0ubB8myDaw+RbHFt6E 6azCJEVGkTA0Y85Tig== -----END CERTIFICATE-----Generated at Tue Apr 8 16:45:19 2025 by rpki-client