$ rpki-client -vvf rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/3137302e3234352e3137362e302f32322d3234203d3e20323636353234.roa File: 3137302e3234352e3137362e302f32322d3234203d3e20323636353234.roa (raw, json) Hash identifier: bkG6nRhuuAvtH28sET40mnQpqJfxK8Y3Bh3nGqC8fWQ= Subject key identifier: 64:15:59:28:0D:79:70:CF:56:59:B7:20:85:2C:ED:0E:0C:C7:AD:B9 Certificate issuer: /CN=BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F Certificate serial: 26C24EE66260D9655E8F1D3E1306AF004C85025F Authority key identifier: BB:ED:0B:D7:5C:AD:3A:30:3E:C7:2F:1A:D0:B2:36:5E:E9:5D:39:0F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.cer Subject info access: rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/3137302e3234352e3137362e302f32322d3234203d3e20323636353234.roa Signing time: Thu 06 Mar 2025 21:40:33 +0000 ROA not before: Thu 06 Mar 2025 21:35:33 +0000 ROA not after: Thu 05 Mar 2026 21:40:33 +0000 asID: 266524 IP address blocks: 170.245.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.crl rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 13 Apr 2025 11:02:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:c2:4e:e6:62:60:d9:65:5e:8f:1d:3e:13:06:af:00:4c:85:02:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F Validity Not Before: Mar 6 21:35:33 2025 GMT Not After : Mar 5 21:40:33 2026 GMT Subject: CN=641559280D7970CF5659B720852CED0E0CC7ADB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e1:75:5d:32:5b:e2:b7:57:5d:37:c5:a3:4c: 8b:5c:b4:d6:ee:9a:23:57:59:02:05:e5:93:5d:61: ab:04:5e:bd:66:66:ae:79:04:a0:a0:fb:85:9f:25: 92:aa:7e:33:fc:c4:66:49:f3:14:d4:4a:a9:30:17: d2:fe:eb:d2:df:32:17:89:bf:0c:e6:1d:8e:7d:e5: 9d:f3:84:6b:f6:88:8a:ca:b6:a8:16:3a:69:63:91: 4c:e7:1a:a2:35:5f:37:c5:2f:9d:78:6d:4f:54:36: f3:f5:fb:3b:7f:78:1f:78:12:3d:ba:94:25:52:01: 00:25:67:6e:f6:44:23:89:99:7a:01:16:fb:a6:34: f2:fc:80:1d:89:9c:0b:35:69:9a:b9:55:44:40:fa: fa:6d:76:b6:62:f3:70:fb:54:02:0f:2a:9d:ed:42: 17:f9:26:d2:12:dc:c2:c1:a5:06:02:05:b0:bc:65: 8a:2f:8c:8e:04:10:02:fd:02:b3:64:ba:ce:ae:00: ac:b4:77:76:73:4f:ab:d2:f9:d3:55:c9:bc:dc:37: 0b:32:87:90:30:bf:64:04:02:35:ba:50:a3:77:3e: e8:c7:d1:fe:22:c5:4c:d9:e4:22:5c:3c:3e:30:b3: fc:a7:d9:cb:6f:46:54:6a:b3:1b:53:e7:f6:8c:2e: c5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:15:59:28:0D:79:70:CF:56:59:B7:20:85:2C:ED:0E:0C:C7:AD:B9 X509v3 Authority Key Identifier: keyid:BB:ED:0B:D7:5C:AD:3A:30:3E:C7:2F:1A:D0:B2:36:5E:E9:5D:39:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/3137302e3234352e3137362e302f32322d3234203d3e20323636353234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.245.176.0/22 Signature Algorithm: sha256WithRSAEncryption 52:27:e3:37:6b:ab:39:55:79:dd:a6:66:29:1f:b5:ce:f7:16: 2f:61:af:a1:de:2e:2e:83:a4:4d:4c:3a:48:0b:e7:7b:38:34: 2e:79:2e:0d:e1:64:d8:0f:9c:45:af:95:90:2a:9d:30:7d:88: b2:cd:a4:ad:6c:02:06:2f:80:e1:6c:4d:3e:9f:c5:28:58:be: a1:5e:d2:0e:b3:06:8b:75:67:74:0e:10:2c:db:6a:89:5e:1f: 6a:18:f8:0e:e5:5e:87:ad:98:9a:70:5d:9c:3f:cc:92:3c:ca: d8:e8:8b:65:2a:d7:24:f0:b2:9c:ad:f4:7f:8a:e6:09:80:80: f5:f1:08:e7:4f:10:7f:d2:b0:cd:9b:61:45:f0:9c:80:7c:8e: 35:cb:ef:5d:31:bb:de:02:95:59:5b:5e:34:36:f4:8b:be:f0: 47:f5:e9:83:e7:d3:ad:a4:2b:4a:6a:d1:d8:ed:fc:c2:d6:fd: 61:ed:b7:65:35:b6:1b:61:98:33:72:a9:47:6f:92:4d:f8:cd: 44:5e:62:b5:eb:b9:40:a6:57:cb:14:2d:0a:10:f5:e6:63:65: c4:9e:47:ca:ed:45:c4:82:a0:79:60:c3:1c:a8:99:bf:91:99: 77:67:e0:72:a3:0b:a5:68:9c:94:fe:e3:06:b1:6d:0b:fd:36: 22:33:39:83 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUJsJO5mJg2WVejx0+EwavAEyFAl8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJFRDBCRDc1Q0FEM0EzMDNFQzcyRjFBRDBCMjM2NUVF OTVEMzkwRjAeFw0yNTAzMDYyMTM1MzNaFw0yNjAzMDUyMTQwMzNaMDMxMTAvBgNV BAMTKDY0MTU1OTI4MEQ3OTcwQ0Y1NjU5QjcyMDg1MkNFRDBFMENDN0FEQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/4XVdMlvit1ddN8WjTItctNbu miNXWQIF5ZNdYasEXr1mZq55BKCg+4WfJZKqfjP8xGZJ8xTUSqkwF9L+69LfMheJ vwzmHY595Z3zhGv2iIrKtqgWOmljkUznGqI1XzfFL514bU9UNvP1+zt/eB94Ej26 lCVSAQAlZ272RCOJmXoBFvumNPL8gB2JnAs1aZq5VURA+vptdrZi83D7VAIPKp3t Qhf5JtIS3MLBpQYCBbC8ZYovjI4EEAL9ArNkus6uAKy0d3ZzT6vS+dNVybzcNwsy h5Awv2QEAjW6UKN3PujH0f4ixUzZ5CJcPD4ws/yn2ctvRlRqsxtT5/aMLsXrAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUZBVZKA15cM9WWbcghSztDgzHrbkwHwYDVR0j BBgwFoAUu+0L11ytOjA+xy8a0LI2XuldOQ8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR3pKYTRjYXN2aGNqRDJobkhtNWpBYXdjdFJrTmFnR25MQjY1M3VxOEhE Y04vMS9CQkVEMEJENzVDQUQzQTMwM0VDNzJGMUFEMEIyMzY1RUU5NUQzOTBGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JCRUQwQkQ3NUNBRDNBMzAz RUM3MkYxQUQwQjIzNjVFRTk1RDM5MEYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0d6SmE0Y2FzdmhjakQyaG5IbTVqQWF3Y3RSa05hZ0duTEI2NTN1cThIRGNOLzEv MzEzNzMwMmUzMjM0MzUyZTMxMzczNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy MzYzNjM1MzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqr1sDANBgkqhkiG9w0BAQsFAAOCAQEAUifj N2urOVV53aZmKR+1zvcWL2Gvod4uLoOkTUw6SAvnezg0LnkuDeFk2A+cRa+VkCqd MH2Iss2krWwCBi+A4WxNPp/FKFi+oV7SDrMGi3VndA4QLNtqiV4fahj4DuVeh62Y mnBdnD/MkjzK2OiLZSrXJPCynK30f4rmCYCA9fEI508Qf9KwzZthRfCcgHyONcvv XTG73gKVWVteNDb0i77wR/Xpg+fTraQrSmrR2O38wtb9Ye23ZTW2G2GYM3KpR2+S TfjNRF5iteu5QKZXyxQtChD15mNlxJ5Hyu1FxIKgeWDDHKiZv5GZd2fgcqMLpWic lP7jBrFtC/02IjM5gw== -----END CERTIFICATE-----Generated at Sun Apr 13 02:36:59 2025 by rpki-client