$ rpki-client -vvf rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/3137302e3233332e3132302e302f32322d3232203d3e20323635303830.roa File: 3137302e3233332e3132302e302f32322d3232203d3e20323635303830.roa (raw, json) Hash identifier: 5RjDD96XOT8B1ntJUEiE8NlXSeRen3I/13fTeXJTkEU= Subject key identifier: A9:DA:DD:3A:57:29:7B:87:40:EF:BB:15:36:E1:D9:36:F7:94:0C:57 Certificate issuer: /CN=1DC2A9E17084A1FF48DCF3DA9BDC1AFF64BCE4F0 Certificate serial: 65CD1ED4A62E53DFE8DAEE922867AB081A34595C Authority key identifier: 1D:C2:A9:E1:70:84:A1:FF:48:DC:F3:DA:9B:DC:1A:FF:64:BC:E4:F0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1DC2A9E17084A1FF48DCF3DA9BDC1AFF64BCE4F0.cer Subject info access: rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/3137302e3233332e3132302e302f32322d3232203d3e20323635303830.roa Signing time: Mon 07 Apr 2025 18:32:20 +0000 ROA not before: Mon 07 Apr 2025 18:27:20 +0000 ROA not after: Mon 06 Apr 2026 18:32:20 +0000 asID: 265080 IP address blocks: 170.233.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/1DC2A9E17084A1FF48DCF3DA9BDC1AFF64BCE4F0.crl rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/1DC2A9E17084A1FF48DCF3DA9BDC1AFF64BCE4F0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1DC2A9E17084A1FF48DCF3DA9BDC1AFF64BCE4F0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 08 Apr 2025 21:47:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:cd:1e:d4:a6:2e:53:df:e8:da:ee:92:28:67:ab:08:1a:34:59:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DC2A9E17084A1FF48DCF3DA9BDC1AFF64BCE4F0 Validity Not Before: Apr 7 18:27:20 2025 GMT Not After : Apr 6 18:32:20 2026 GMT Subject: CN=A9DADD3A57297B8740EFBB1536E1D936F7940C57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:6a:07:19:b2:13:7c:88:44:0e:b7:16:ec:a3: a7:11:4a:e1:1e:0b:f2:be:53:ed:14:46:2c:5c:c7: ae:c8:0a:14:4e:19:d7:df:3e:14:8c:75:a4:ad:3e: 30:43:f2:5b:e9:fc:1c:a6:5a:bb:25:e6:e6:1d:75: d0:23:c8:30:7c:44:82:83:24:8d:6e:e0:b7:32:e7: fe:88:55:c5:ea:34:4f:c9:03:0b:c1:e8:04:e8:41: 20:8c:c4:7e:8e:eb:ad:09:69:e5:01:9b:83:c1:6f: 4d:5b:1a:3f:59:e1:48:b9:2a:c4:11:be:7a:3b:5a: 16:f3:c4:c4:ba:54:0d:c5:f9:59:b7:68:22:48:30: c5:00:35:84:cf:e0:6f:3b:2a:c0:d6:13:98:49:b1: 33:90:4d:ae:03:61:4d:15:30:3b:4c:34:5d:1f:65: de:4e:24:4f:d6:c7:63:8e:e5:2d:5b:fa:1f:97:1b: 5b:b7:37:d9:ea:55:f8:fa:28:e4:41:b1:84:a3:66: 76:f5:d2:4c:79:63:8d:b0:12:40:5c:c5:04:95:a5: 54:02:bb:26:d5:45:62:30:ae:d1:d7:19:47:b9:e2: 31:e0:1b:08:65:e7:da:d4:03:73:30:26:cf:41:00: e0:97:e0:59:05:0f:62:c5:58:5f:49:25:2f:f0:6b: 62:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:DA:DD:3A:57:29:7B:87:40:EF:BB:15:36:E1:D9:36:F7:94:0C:57 X509v3 Authority Key Identifier: keyid:1D:C2:A9:E1:70:84:A1:FF:48:DC:F3:DA:9B:DC:1A:FF:64:BC:E4:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/1DC2A9E17084A1FF48DCF3DA9BDC1AFF64BCE4F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1DC2A9E17084A1FF48DCF3DA9BDC1AFF64BCE4F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/3137302e3233332e3132302e302f32322d3232203d3e20323635303830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.233.120.0/22 Signature Algorithm: sha256WithRSAEncryption 11:3d:2d:2e:1f:12:5e:ab:79:d7:34:fb:43:1f:b9:1d:5e:b0: e0:8e:f3:11:ef:63:0d:4c:0d:df:bc:06:30:f7:6a:4e:10:6d: ae:90:c7:b0:93:ea:2a:f4:4d:cc:38:4c:64:24:3c:e2:f0:9f: a6:ff:4e:77:6b:52:75:c3:49:1d:35:af:ee:d1:d4:73:ed:9f: 4e:3e:b5:39:30:5b:01:ce:b8:89:f5:fd:b2:f3:dc:6b:09:44: 43:41:a3:2d:f3:ae:5c:12:d3:f2:d5:3e:08:65:b3:8f:f4:9d: a4:29:d2:84:41:15:83:14:50:7a:c6:85:38:1d:8b:8e:6c:12: de:af:1a:9a:48:84:f9:91:2e:c8:60:60:3b:3c:9d:6b:19:76: 22:63:24:dd:17:21:5c:17:90:15:70:ab:d8:50:84:19:e1:2e: 45:9c:19:ec:d2:46:ba:63:0e:f3:7b:db:bf:c5:99:13:e4:8d: 67:6d:ef:bc:7f:3d:96:b4:48:14:70:c4:62:ff:f4:a2:0a:e2: 5c:fc:9d:1f:58:3a:e9:73:49:82:e7:2e:be:69:78:37:1b:a3: 7b:01:bb:66:d4:44:ba:f4:8e:f8:d1:cd:2d:2e:cf:eb:f2:f5: 80:a8:10:48:87:be:2a:08:f4:ca:00:f7:be:30:cc:4b:42:de: e3:0e:99:c9 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUZc0e1KYuU9/o2u6SKGerCBo0WVwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURDMkE5RTE3MDg0QTFGRjQ4RENGM0RBOUJEQzFBRkY2 NEJDRTRGMDAeFw0yNTA0MDcxODI3MjBaFw0yNjA0MDYxODMyMjBaMDMxMTAvBgNV BAMTKEE5REFERDNBNTcyOTdCODc0MEVGQkIxNTM2RTFEOTM2Rjc5NDBDNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJagcZshN8iEQOtxbso6cRSuEe C/K+U+0URixcx67IChROGdffPhSMdaStPjBD8lvp/BymWrsl5uYdddAjyDB8RIKD JI1u4Lcy5/6IVcXqNE/JAwvB6AToQSCMxH6O660JaeUBm4PBb01bGj9Z4Ui5KsQR vno7WhbzxMS6VA3F+Vm3aCJIMMUANYTP4G87KsDWE5hJsTOQTa4DYU0VMDtMNF0f Zd5OJE/Wx2OO5S1b+h+XG1u3N9nqVfj6KORBsYSjZnb10kx5Y42wEkBcxQSVpVQC uybVRWIwrtHXGUe54jHgGwhl59rUA3MwJs9BAOCX4FkFD2LFWF9JJS/wa2L7AgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUqdrdOlcpe4dA77sVNuHZNveUDFcwHwYDVR0j BBgwFoAUHcKp4XCEof9I3PPam9wa/2S85PAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRkZYa0xrYUtYSGVyWExwZlVBc283MzZyUUVlbnFNcGl2NlFlaEZ3bVUx dlcvMC8xREMyQTlFMTcwODRBMUZGNDhEQ0YzREE5QkRDMUFGRjY0QkNFNEYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFEQzJBOUUxNzA4NEExRkY0 OERDRjNEQTlCREMxQUZGNjRCQ0U0RjAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0ZGWGtMa2FLWEhlclhMcGZVQXNvNzM2clFFZW5xTXBpdjZRZWhGd21VMXZXLzAv MzEzNzMwMmUzMjMzMzMyZTMxMzIzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy MzYzNTMwMzgzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqrpeDANBgkqhkiG9w0BAQsFAAOCAQEAET0t Lh8SXqt51zT7Qx+5HV6w4I7zEe9jDUwN37wGMPdqThBtrpDHsJPqKvRNzDhMZCQ8 4vCfpv9Od2tSdcNJHTWv7tHUc+2fTj61OTBbAc64ifX9svPcawlEQ0GjLfOuXBLT 8tU+CGWzj/SdpCnShEEVgxRQesaFOB2LjmwS3q8amkiE+ZEuyGBgOzydaxl2ImMk 3RchXBeQFXCr2FCEGeEuRZwZ7NJGumMO83vbv8WZE+SNZ23vvH89lrRIFHDEYv/0 ogriXPydH1g66XNJgucuvml4NxujewG7ZtREuvSO+NHNLS7P6/L1gKgQSIe+Kgj0 ygD3vjDMS0Le4w6ZyQ== -----END CERTIFICATE-----Generated at Tue Apr 8 07:39:12 2025 by rpki-client