$ rpki-client -vvf rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/3137302e3233332e3132302e302f32332d3233203d3e20323635303830.roa File: 3137302e3233332e3132302e302f32332d3233203d3e20323635303830.roa (raw, json) Hash identifier: h3YtaA44z60w/eQKN8k7JLYJdByvBc3rVs7ZG+kh5eI= Subject key identifier: BA:74:AC:28:96:53:77:43:26:40:5B:24:93:1A:75:86:0F:B5:A2:E8 Certificate issuer: /CN=D606CC74EC936AA8ED7F384A9E1B7C0A945C0A38 Certificate serial: 4399D2E928273FD26BD520570D614A9A93AFEC4B Authority key identifier: D6:06:CC:74:EC:93:6A:A8:ED:7F:38:4A:9E:1B:7C:0A:94:5C:0A:38 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D606CC74EC936AA8ED7F384A9E1B7C0A945C0A38.cer Subject info access: rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/3137302e3233332e3132302e302f32332d3233203d3e20323635303830.roa Signing time: Mon 10 Feb 2025 17:25:09 +0000 ROA not before: Mon 10 Feb 2025 17:20:09 +0000 ROA not after: Mon 09 Feb 2026 17:25:09 +0000 asID: 265080 IP address blocks: 170.233.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/D606CC74EC936AA8ED7F384A9E1B7C0A945C0A38.crl rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/D606CC74EC936AA8ED7F384A9E1B7C0A945C0A38.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D606CC74EC936AA8ED7F384A9E1B7C0A945C0A38.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 17 Feb 2025 20:49:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:99:d2:e9:28:27:3f:d2:6b:d5:20:57:0d:61:4a:9a:93:af:ec:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D606CC74EC936AA8ED7F384A9E1B7C0A945C0A38 Validity Not Before: Feb 10 17:20:09 2025 GMT Not After : Feb 9 17:25:09 2026 GMT Subject: CN=BA74AC289653774326405B24931A75860FB5A2E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9b:d0:b0:c5:34:9b:9e:84:64:10:5f:45:fd: 29:aa:8f:1a:92:c4:f2:b0:77:db:d0:e5:29:10:e1: 2c:d1:5e:b1:ec:a9:ca:e8:41:fe:e3:f0:f2:23:d5: c3:9a:87:48:db:2b:c6:56:a8:16:26:d5:c1:f0:18: 67:e2:29:e9:8b:f5:e3:e3:4a:48:02:1e:f4:bf:ea: 4d:48:23:bc:33:72:d7:f0:5c:98:d7:88:32:04:f3: 10:9f:c0:12:fb:d7:29:3d:e0:29:40:30:fd:43:65: f5:2b:65:eb:12:46:53:68:a7:5c:3c:0f:54:34:7f: 29:da:a4:53:70:69:a8:64:9e:59:81:59:60:6b:1d: 98:b9:f3:63:4d:cb:45:3e:ee:ed:00:45:10:e8:66: 11:b2:2c:f4:cd:0c:98:10:42:26:c9:2d:2b:4a:02: 1f:0c:9b:a0:8b:64:f5:2e:53:dd:30:eb:12:54:c4: 6a:62:ef:39:0d:b1:24:87:1e:1b:bc:7f:c8:2d:e3: d1:83:95:ed:56:5d:86:44:32:4c:00:a7:be:cb:d3: 5b:96:e3:49:a4:8d:99:21:d7:80:e1:40:e5:b1:b3: 87:cc:48:1c:3f:3e:68:44:c0:f0:a6:49:08:1a:2d: 38:09:63:7a:f3:33:6c:c5:85:b0:a9:eb:56:90:38: f3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:74:AC:28:96:53:77:43:26:40:5B:24:93:1A:75:86:0F:B5:A2:E8 X509v3 Authority Key Identifier: keyid:D6:06:CC:74:EC:93:6A:A8:ED:7F:38:4A:9E:1B:7C:0A:94:5C:0A:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/D606CC74EC936AA8ED7F384A9E1B7C0A945C0A38.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D606CC74EC936AA8ED7F384A9E1B7C0A945C0A38.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/3137302e3233332e3132302e302f32332d3233203d3e20323635303830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.233.120.0/23 Signature Algorithm: sha256WithRSAEncryption 13:d9:42:0f:0e:8c:6f:31:25:60:02:12:a9:09:67:a9:5b:de: 4f:3a:6e:ef:dd:9e:1b:bc:db:9f:53:9d:f1:28:92:66:78:c1: 5e:cb:2d:fa:41:5c:62:80:f1:ce:f8:c5:62:06:b6:8c:e7:63: 9d:4d:8e:ed:d5:8d:5c:f4:ed:e7:08:43:85:e4:5d:33:df:07: 89:b7:e6:fa:a2:ed:ec:93:e6:62:66:55:f4:4a:43:85:7d:d0: 32:37:e1:c8:bb:f6:d6:47:cb:b4:53:be:71:d3:a9:4a:e1:03: b7:25:ed:fe:10:3d:a6:4c:e0:0d:a8:f6:ce:2b:30:a8:9d:84: f5:0b:6c:6d:12:d7:b3:7f:f0:1f:03:0e:6a:81:77:a8:41:d2: 53:34:18:84:94:52:a0:b8:95:05:07:af:3c:9d:4f:2d:bb:42: 34:ca:74:41:6e:6e:e0:49:e8:18:90:35:08:1b:f8:05:13:4e: b5:c6:56:08:00:3c:3a:c8:9e:0b:de:2b:12:fa:77:8e:b6:4a: af:3b:e5:c2:31:79:7f:e8:98:df:7d:26:95:b5:7b:95:24:50: 44:16:73:a6:2d:27:31:9a:43:b6:b3:d2:32:18:07:dd:e0:53: 92:89:73:9b:d4:c5:5c:6b:f2:e1:c7:7b:1f:19:28:92:39:aa: d6:93:b5:97 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUQ5nS6SgnP9Jr1SBXDWFKmpOv7EswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYwNkNDNzRFQzkzNkFBOEVEN0YzODRBOUUxQjdDMEE5 NDVDMEEzODAeFw0yNTAyMTAxNzIwMDlaFw0yNjAyMDkxNzI1MDlaMDMxMTAvBgNV BAMTKEJBNzRBQzI4OTY1Mzc3NDMyNjQwNUIyNDkzMUE3NTg2MEZCNUEyRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCem9CwxTSbnoRkEF9F/SmqjxqS xPKwd9vQ5SkQ4SzRXrHsqcroQf7j8PIj1cOah0jbK8ZWqBYm1cHwGGfiKemL9ePj SkgCHvS/6k1II7wzctfwXJjXiDIE8xCfwBL71yk94ClAMP1DZfUrZesSRlNop1w8 D1Q0fynapFNwaahknlmBWWBrHZi582NNy0U+7u0ARRDoZhGyLPTNDJgQQibJLStK Ah8Mm6CLZPUuU90w6xJUxGpi7zkNsSSHHhu8f8gt49GDle1WXYZEMkwAp77L01uW 40mkjZkh14DhQOWxs4fMSBw/PmhEwPCmSQgaLTgJY3rzM2zFhbCp61aQOPM7AgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUunSsKJZTd0MmQFskkxp1hg+1ougwHwYDVR0j BBgwFoAU1gbMdOyTaqjtfzhKnht8CpRcCjgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRkZYa0xrYUtYSGVyWExwZlVBc283MzZyUUVlbnFNcGl2NlFlaEZ3bVUx dlcvMC9ENjA2Q0M3NEVDOTM2QUE4RUQ3RjM4NEE5RTFCN0MwQTk0NUMwQTM4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q2MDZDQzc0RUM5MzZBQThF RDdGMzg0QTlFMUI3QzBBOTQ1QzBBMzguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0ZGWGtMa2FLWEhlclhMcGZVQXNvNzM2clFFZW5xTXBpdjZRZWhGd21VMXZXLzAv MzEzNzMwMmUzMjMzMzMyZTMxMzIzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy MzYzNTMwMzgzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAarpeDANBgkqhkiG9w0BAQsFAAOCAQEAE9lC Dw6MbzElYAISqQlnqVveTzpu792eG7zbn1Od8SiSZnjBXsst+kFcYoDxzvjFYga2 jOdjnU2O7dWNXPTt5whDheRdM98Hibfm+qLt7JPmYmZV9EpDhX3QMjfhyLv21kfL tFO+cdOpSuEDtyXt/hA9pkzgDaj2ziswqJ2E9QtsbRLXs3/wHwMOaoF3qEHSUzQY hJRSoLiVBQevPJ1PLbtCNMp0QW5u4EnoGJA1CBv4BRNOtcZWCAA8OsieC94rEvp3 jrZKrzvlwjF5f+iY330mlbV7lSRQRBZzpi0nMZpDtrPSMhgH3eBTkolzm9TFXGvy 4cd7Hxkokjmq1pO1lw== -----END CERTIFICATE-----Generated at Sun Feb 16 22:20:53 2025 by rpki-client