$ rpki-client -vvf rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/3136382e3132312e3234382e302f32322d3235203d3e20323632393636.roa File: 3136382e3132312e3234382e302f32322d3235203d3e20323632393636.roa (raw, json) Hash identifier: Z6rpwRyuxvgqZK9wg3IWbxseWkxo3KvfvA7U8nx0qtI= Subject key identifier: AF:FE:63:D3:69:FD:FD:9B:E3:0A:38:B7:F5:87:E1:E1:5A:9D:B3:15 Certificate issuer: /CN=DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229 Certificate serial: 7C6A10E36DE5FBA3694CB956CAC55C199BA2DD81 Authority key identifier: DB:60:11:3D:B8:47:EE:4F:DF:EC:F8:E7:B3:2D:8C:B0:A2:8A:42:29 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.cer Subject info access: rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/3136382e3132312e3234382e302f32322d3235203d3e20323632393636.roa Signing time: Thu 06 Mar 2025 20:46:03 +0000 ROA not before: Thu 06 Mar 2025 20:41:03 +0000 ROA not after: Thu 05 Mar 2026 20:46:03 +0000 asID: 262966 IP address blocks: 168.121.248.0/22 maxlen: 25 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.crl rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 17 Apr 2025 07:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:6a:10:e3:6d:e5:fb:a3:69:4c:b9:56:ca:c5:5c:19:9b:a2:dd:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229 Validity Not Before: Mar 6 20:41:03 2025 GMT Not After : Mar 5 20:46:03 2026 GMT Subject: CN=AFFE63D369FDFD9BE30A38B7F587E1E15A9DB315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:39:1c:6f:f2:01:fc:fe:67:71:98:9f:8b:ab: 0b:ff:db:b9:48:06:ea:4b:5d:d3:42:d0:87:d8:02: 44:be:33:c7:21:ff:0d:8c:fb:2b:22:cc:7d:c7:68: 31:85:63:2f:42:c1:8f:53:1c:a5:8a:10:83:3e:27: b4:07:45:cf:c1:83:a0:6f:d9:de:33:ee:74:c8:e9: ce:7e:b5:3e:7e:d9:d3:5d:19:76:e7:51:fa:f9:94: 6f:f5:a9:5e:31:30:c7:f6:94:6f:07:88:40:0f:2e: 36:23:db:2e:c1:5a:23:f0:6d:25:79:f1:fb:1b:a1: 1c:21:ef:d6:99:9b:59:54:cc:b7:23:9b:ce:a1:6e: e8:62:b6:30:d4:81:77:30:ac:f7:f7:2d:d7:07:d2: af:b0:27:aa:0c:2d:b1:69:45:c8:94:e6:a9:f8:8b: 06:a3:92:5b:b0:3a:b9:7b:4d:4f:0d:65:ff:20:64: b7:ec:a9:80:ac:31:7c:31:49:e5:b6:c3:2a:3e:79: 42:64:9e:1b:68:0e:d9:1d:23:e1:ae:91:ad:6f:da: 52:98:a4:3b:93:52:be:a6:07:41:28:e3:82:25:78: 0d:f1:75:94:6a:00:c0:16:20:3a:3c:29:76:9f:1e: cb:b9:5a:59:5a:57:2b:1f:9d:2d:69:42:00:f8:e2: 2f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:FE:63:D3:69:FD:FD:9B:E3:0A:38:B7:F5:87:E1:E1:5A:9D:B3:15 X509v3 Authority Key Identifier: keyid:DB:60:11:3D:B8:47:EE:4F:DF:EC:F8:E7:B3:2D:8C:B0:A2:8A:42:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/3136382e3132312e3234382e302f32322d3235203d3e20323632393636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.121.248.0/22 Signature Algorithm: sha256WithRSAEncryption 7e:e5:31:51:cd:89:2f:d7:c9:51:f6:f3:6d:0b:66:5c:81:96: dd:b8:a0:8c:21:fd:50:82:13:07:03:4d:7e:a4:2e:29:8e:fd: 5c:0a:aa:45:d9:d3:d7:27:27:97:e5:67:08:0b:cb:26:c8:e4: f1:96:66:70:f2:1b:f0:35:7b:88:ed:80:f7:e8:12:c8:0d:82: b0:38:e2:9a:f1:21:1b:d0:06:1f:d6:2c:ae:97:10:c6:a2:45: 20:9a:2d:7b:ac:47:e3:17:26:31:28:7e:45:92:8c:d5:07:1b: 25:42:86:23:6e:b0:60:e0:39:59:8a:4f:9a:0c:91:5f:34:0a: cf:ff:74:6f:c6:f8:2b:e9:da:ce:18:a8:b7:78:5b:74:40:e8: a3:6b:5e:0a:e4:1b:56:f3:7a:b7:fa:82:6f:f8:63:52:c1:d7: 6b:db:1a:e4:83:29:a7:a2:82:ef:7c:9e:ae:bc:25:bc:45:73: b7:49:0f:c9:73:7e:d5:e2:a5:38:06:f8:6d:13:d8:74:24:9b: aa:81:47:60:96:07:40:27:af:4f:9c:bf:f9:be:41:d0:15:53: 14:1c:aa:ec:ab:46:d2:7d:ba:94:fb:52:0d:12:95:47:cb:54: 25:14:30:81:e0:8d:c9:24:70:7f:ea:9e:99:38:da:80:26:e0: a5:3b:9d:54 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUfGoQ423l+6NpTLlWysVcGZui3YEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI2MDExM0RCODQ3RUU0RkRGRUNGOEU3QjMyRDhDQjBB MjhBNDIyOTAeFw0yNTAzMDYyMDQxMDNaFw0yNjAzMDUyMDQ2MDNaMDMxMTAvBgNV BAMTKEFGRkU2M0QzNjlGREZEOUJFMzBBMzhCN0Y1ODdFMUUxNUE5REIzMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOORxv8gH8/mdxmJ+Lqwv/27lI BupLXdNC0IfYAkS+M8ch/w2M+ysizH3HaDGFYy9CwY9THKWKEIM+J7QHRc/Bg6Bv 2d4z7nTI6c5+tT5+2dNdGXbnUfr5lG/1qV4xMMf2lG8HiEAPLjYj2y7BWiPwbSV5 8fsboRwh79aZm1lUzLcjm86hbuhitjDUgXcwrPf3LdcH0q+wJ6oMLbFpRciU5qn4 iwajkluwOrl7TU8NZf8gZLfsqYCsMXwxSeW2wyo+eUJknhtoDtkdI+Guka1v2lKY pDuTUr6mB0Eo44IleA3xdZRqAMAWIDo8KXafHsu5WllaVysfnS1pQgD44i/lAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUr/5j02n9/ZvjCji39Yfh4VqdsxUwHwYDVR0j BBgwFoAU22ARPbhH7k/f7Pjnsy2MsKKKQikwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR2szZFk2VHZKUWRFeVZRakpUSlZaV0hid29OeHAxa1hiaWZ0and4M01z Q2ovMS9EQjYwMTEzREI4NDdFRTRGREZFQ0Y4RTdCMzJEOENCMEEyOEE0MjI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCNjAxMTNEQjg0N0VFNEZE RkVDRjhFN0IzMkQ4Q0IwQTI4QTQyMjkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0drM2RZNlR2SlFkRXlWUWpKVEpWWldIYndvTnhwMWtYYmlmdGp3eDNNc0NqLzEv MzEzNjM4MmUzMTMyMzEyZTMyMzQzODJlMzAyZjMyMzIyZDMyMzUyMDNkM2UyMDMy MzYzMjM5MzYzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqh5+DANBgkqhkiG9w0BAQsFAAOCAQEAfuUx Uc2JL9fJUfbzbQtmXIGW3bigjCH9UIITBwNNfqQuKY79XAqqRdnT1ycnl+VnCAvL Jsjk8ZZmcPIb8DV7iO2A9+gSyA2CsDjimvEhG9AGH9YsrpcQxqJFIJote6xH4xcm MSh+RZKM1QcbJUKGI26wYOA5WYpPmgyRXzQKz/90b8b4K+nazhiot3hbdEDoo2te CuQbVvN6t/qCb/hjUsHXa9sa5IMpp6KC73yerrwlvEVzt0kPyXN+1eKlOAb4bRPY dCSbqoFHYJYHQCevT5y/+b5B0BVTFByq7KtG0n26lPtSDRKVR8tUJRQwgeCNySRw f+qemTjagCbgpTudVA== -----END CERTIFICATE-----Generated at Wed Apr 16 15:46:33 2025 by rpki-client