$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3136382e3132312e3136382e302f32322d3234203d3e203532353435.roa File: 3136382e3132312e3136382e302f32322d3234203d3e203532353435.roa (raw, json) Hash identifier: Sf78mjIIFNHEX+KrjMMiN8rVlDC9zv9Le/KET2sIJfM= Subject key identifier: 4E:A1:E4:69:02:1D:CE:6E:2C:A5:D0:65:CE:FE:D7:FB:13:9B:6A:D2 Certificate issuer: /CN=3525DEC2C298F98A0A0CC888E805E01C39FD63D7 Certificate serial: 431C7C34884AB9E9ED2A349F3E65CDD514937B13 Authority key identifier: 35:25:DE:C2:C2:98:F9:8A:0A:0C:C8:88:E8:05:E0:1C:39:FD:63:D7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer Subject info access: rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3136382e3132312e3136382e302f32322d3234203d3e203532353435.roa Signing time: Thu 06 Mar 2025 02:06:27 +0000 ROA not before: Thu 06 Mar 2025 02:01:27 +0000 ROA not after: Thu 05 Mar 2026 02:06:27 +0000 asID: 52545 IP address blocks: 168.121.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.crl rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Apr 2025 21:11:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:1c:7c:34:88:4a:b9:e9:ed:2a:34:9f:3e:65:cd:d5:14:93:7b:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3525DEC2C298F98A0A0CC888E805E01C39FD63D7 Validity Not Before: Mar 6 02:01:27 2025 GMT Not After : Mar 5 02:06:27 2026 GMT Subject: CN=4EA1E469021DCE6E2CA5D065CEFED7FB139B6AD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9d:5c:4f:00:7f:4c:03:77:ce:a6:e4:39:21: 2d:37:e6:67:65:ed:b2:ee:37:d0:73:80:9f:6f:f1: 5a:91:94:dd:e1:1a:2c:32:66:6e:e2:78:8c:9e:43: 81:37:83:e6:2d:39:ce:a9:a6:15:ef:73:de:72:70: 45:8e:42:e8:1d:88:2e:72:58:aa:14:0b:62:1e:c9: 89:0b:c3:bd:04:da:cd:ba:c2:ef:0c:a6:0e:9c:61: b8:3d:da:d9:ba:82:37:92:cb:8a:e9:b5:90:aa:bf: ff:b3:2d:9a:76:03:92:e1:b8:2f:78:d7:6f:a3:e0: 2f:4f:0a:34:3c:03:43:3e:4c:c1:e3:c7:71:5d:4f: 04:28:0e:fd:5d:83:3b:f0:7c:76:f5:11:49:14:87: d8:55:c7:9c:ed:ce:dc:b8:aa:b7:b4:a6:c4:f4:e3: 8e:15:ab:09:bc:97:ee:54:55:fa:fa:43:49:d6:fe: 4a:35:0a:df:8e:19:57:9d:59:1d:9a:b4:2b:a5:78: 2a:b1:ae:99:78:52:8c:26:1f:49:3d:ad:54:68:67: 9a:16:ab:7e:9f:55:45:37:d7:da:0a:c8:0a:7a:4e: f5:bf:ce:f5:c5:84:08:91:19:da:02:23:ba:84:e8: 2f:e4:1c:d8:78:e0:14:8e:2d:42:85:31:54:79:28: 27:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A1:E4:69:02:1D:CE:6E:2C:A5:D0:65:CE:FE:D7:FB:13:9B:6A:D2 X509v3 Authority Key Identifier: keyid:35:25:DE:C2:C2:98:F9:8A:0A:0C:C8:88:E8:05:E0:1C:39:FD:63:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3136382e3132312e3136382e302f32322d3234203d3e203532353435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.121.168.0/22 Signature Algorithm: sha256WithRSAEncryption 5d:c8:65:5c:e4:b3:79:46:bd:c5:e2:f8:8c:ca:f6:33:c5:eb: 01:21:cb:90:82:b2:5d:e5:2e:07:ae:4e:ff:65:e9:9e:36:6b: f7:74:63:b1:83:44:58:5e:fc:a0:ef:b0:6e:94:1e:18:a7:5d: 10:23:45:3b:ee:4d:47:51:74:3a:8e:77:13:0c:5e:b5:ec:75: ea:b6:95:9f:6d:bd:67:d7:68:f6:33:4f:7e:c1:5e:d3:ec:7a: 4b:fd:fe:ca:4d:7d:73:d8:1f:59:c6:e4:e8:c8:bd:7e:dc:b5: 47:0b:5a:19:0b:31:fc:46:06:17:eb:85:a8:8f:0a:72:9f:6d: 17:ec:76:bd:ea:87:f9:6e:98:f1:b3:98:80:4d:6d:0c:39:11: 62:7b:25:dd:b2:6b:00:9f:e4:46:c2:78:65:ae:16:c2:38:58: a5:aa:2a:3b:9c:2d:20:8e:af:8e:71:8c:27:da:0c:4c:4b:6d: d2:fe:af:94:b8:b5:18:ec:3c:f6:db:b1:51:52:d2:ca:7e:a4: 21:e3:8a:65:34:0d:50:5e:18:46:0d:86:8d:c2:39:aa:cc:76: 44:ec:6d:a8:a1:ab:30:b5:47:96:3b:c4:cf:e8:40:57:43:e9: f3:4a:0d:9f:31:70:f9:98:da:cf:0e:5b:41:57:1b:b8:b5:de: 64:d2:64:a8 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUQxx8NIhKuentKjSfPmXN1RSTexMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUyNURFQzJDMjk4Rjk4QTBBMENDODg4RTgwNUUwMUMz OUZENjNENzAeFw0yNTAzMDYwMjAxMjdaFw0yNjAzMDUwMjA2MjdaMDMxMTAvBgNV BAMTKDRFQTFFNDY5MDIxRENFNkUyQ0E1RDA2NUNFRkVEN0ZCMTM5QjZBRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4nVxPAH9MA3fOpuQ5IS035mdl 7bLuN9BzgJ9v8VqRlN3hGiwyZm7ieIyeQ4E3g+YtOc6pphXvc95ycEWOQugdiC5y WKoUC2IeyYkLw70E2s26wu8Mpg6cYbg92tm6gjeSy4rptZCqv/+zLZp2A5LhuC94 12+j4C9PCjQ8A0M+TMHjx3FdTwQoDv1dgzvwfHb1EUkUh9hVx5ztzty4qre0psT0 444Vqwm8l+5UVfr6Q0nW/ko1Ct+OGVedWR2atCuleCqxrpl4UowmH0k9rVRoZ5oW q36fVUU319oKyAp6TvW/zvXFhAiRGdoCI7qE6C/kHNh44BSOLUKFMVR5KCcFAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUTqHkaQIdzm4spdBlzv7X+xObatIwHwYDVR0j BBgwFoAUNSXewsKY+YoKDMiI6AXgHDn9Y9cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR0FMUTJHakRRU3NZUW03Q1NYdEhld1FIZlFGOFFxdEJIdnM0TWdIbTFx eHgvMy8zNTI1REVDMkMyOThGOThBMEEwQ0M4ODhFODA1RTAxQzM5RkQ2M0Q3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM1MjVERUMyQzI5OEY5OEEw QTBDQzg4OEU4MDVFMDFDMzlGRDYzRDcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0dBTFEyR2pEUVNzWVFtN0NTWHRIZXdRSGZRRjhRcXRCSHZzNE1nSG0xcXh4LzMv MzEzNjM4MmUzMTMyMzEyZTMxMzYzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM1 MzIzNTM0MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKoeagwDQYJKoZIhvcNAQELBQADggEBAF3IZVzk s3lGvcXi+IzK9jPF6wEhy5CCsl3lLgeuTv9l6Z42a/d0Y7GDRFhe/KDvsG6UHhin XRAjRTvuTUdRdDqOdxMMXrXsdeq2lZ9tvWfXaPYzT37BXtPsekv9/spNfXPYH1nG 5OjIvX7ctUcLWhkLMfxGBhfrhaiPCnKfbRfsdr3qh/lumPGzmIBNbQw5EWJ7Jd2y awCf5EbCeGWuFsI4WKWqKjucLSCOr45xjCfaDExLbdL+r5S4tRjsPPbbsVFS0sp+ pCHjimU0DVBeGEYNho3COarMdkTsbaihqzC1R5Y7xM/oQFdD6fNKDZ8xcPmY2s8O W0FXG7i13mTSZKg= -----END CERTIFICATE-----Generated at Tue Apr 22 02:10:23 2025 by rpki-client