$ rpki-client -vvf rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/1/3137302e38322e3135322e302f32322d3234203d3e20323632343238.roa File: 3137302e38322e3135322e302f32322d3234203d3e20323632343238.roa (raw, json) Hash identifier: 2IVpsWf9td7IqeV8vlI6lOxRxzzX6vOBzqs3GCMyrS8= Subject key identifier: 2F:FD:A3:5C:25:E9:15:CC:36:10:FA:95:F7:81:7E:9D:33:F9:CE:E5 Certificate issuer: /CN=938F45B39DC45B48A1C4185FBA8AF194B821EFA1 Certificate serial: 17B05F348CAE6D44C0758646B3C2919FD6ED0F7B Authority key identifier: 93:8F:45:B3:9D:C4:5B:48:A1:C4:18:5F:BA:8A:F1:94:B8:21:EF:A1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/938F45B39DC45B48A1C4185FBA8AF194B821EFA1.cer Subject info access: rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/1/3137302e38322e3135322e302f32322d3234203d3e20323632343238.roa Signing time: Wed 05 Mar 2025 21:02:18 +0000 ROA not before: Wed 05 Mar 2025 20:57:18 +0000 ROA not after: Wed 04 Mar 2026 21:02:18 +0000 asID: 262428 IP address blocks: 170.82.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/1/938F45B39DC45B48A1C4185FBA8AF194B821EFA1.crl rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/1/938F45B39DC45B48A1C4185FBA8AF194B821EFA1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/938F45B39DC45B48A1C4185FBA8AF194B821EFA1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 08 Apr 2025 04:29:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:b0:5f:34:8c:ae:6d:44:c0:75:86:46:b3:c2:91:9f:d6:ed:0f:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=938F45B39DC45B48A1C4185FBA8AF194B821EFA1 Validity Not Before: Mar 5 20:57:18 2025 GMT Not After : Mar 4 21:02:18 2026 GMT Subject: CN=2FFDA35C25E915CC3610FA95F7817E9D33F9CEE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a3:8b:4a:10:40:49:95:83:25:f3:fc:47:62: 33:c2:1e:02:c0:79:e9:9d:b8:86:53:c4:b6:c1:83: da:e9:a4:32:88:37:6b:57:b3:11:04:46:8a:25:c3: 96:d2:2d:fd:87:d9:97:91:52:9c:a0:3b:ee:8e:ef: 00:d8:cf:1b:53:27:76:b5:c6:7d:15:a4:f2:92:85: 9e:5d:7e:b0:e3:8e:5b:69:3b:67:2d:d2:0f:41:ba: 41:83:cb:ea:a7:8d:a1:85:d7:c1:4d:0c:c4:6c:f3: 2a:9b:9e:be:91:21:d3:48:c5:a8:c7:f7:ea:f7:3d: 9c:6c:c7:be:c1:b5:ec:37:66:13:3c:73:82:71:fa: a2:e4:c3:ec:62:10:db:2f:0f:0b:dc:c5:93:1a:19: 80:46:65:f3:90:50:39:5e:e8:3c:88:74:33:39:7d: 70:d8:9d:4e:74:37:4b:f5:fb:85:db:e5:14:06:2c: ec:dc:bc:10:10:5e:15:a0:46:20:cc:e1:1d:35:45: 44:31:28:cd:f2:4b:95:b6:a2:c2:2d:dd:36:04:7f: c2:bf:37:32:34:c2:65:7d:52:b9:1b:f2:0f:c7:2a: 30:a5:b8:94:9a:f7:ed:f9:94:3e:46:81:5a:7a:a5: 67:b2:6e:ca:40:c6:da:5b:80:e2:f6:de:31:88:55: 09:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:FD:A3:5C:25:E9:15:CC:36:10:FA:95:F7:81:7E:9D:33:F9:CE:E5 X509v3 Authority Key Identifier: keyid:93:8F:45:B3:9D:C4:5B:48:A1:C4:18:5F:BA:8A:F1:94:B8:21:EF:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/1/938F45B39DC45B48A1C4185FBA8AF194B821EFA1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/938F45B39DC45B48A1C4185FBA8AF194B821EFA1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/1/3137302e38322e3135322e302f32322d3234203d3e20323632343238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.82.152.0/22 Signature Algorithm: sha256WithRSAEncryption 04:29:6f:ba:15:0e:6e:ca:2f:b7:67:2f:88:c8:9b:bb:3a:79: 32:24:f3:f1:01:32:1a:ca:9b:87:aa:69:e6:47:de:29:43:7d: 37:df:b0:4d:a7:bd:fb:72:e8:f0:8f:30:e6:0a:27:8c:72:84: 33:22:99:b5:3e:3f:29:35:11:12:a2:ef:25:de:db:ba:3c:f8: 88:0f:99:1f:d4:61:1d:38:3c:c7:3b:35:10:84:65:d7:07:21: c8:75:a3:06:9a:8e:0f:3c:5b:17:87:cd:9c:5f:e2:f9:96:7b: 23:db:95:89:00:6c:87:a5:b9:21:72:1b:dd:0c:51:d8:52:79: 9f:82:81:18:0f:b6:ec:39:c2:fd:a6:69:2f:c1:f4:7c:4c:6d: 3d:0d:f8:3f:f4:19:10:e3:be:13:86:79:77:54:29:ed:65:8f: a9:1b:d7:4d:ec:b1:a8:4d:51:7f:28:52:3b:01:96:32:a3:2b: 89:a9:14:6d:3b:2c:8a:6f:da:a3:7f:e6:86:e8:4c:1d:4b:e1: 43:ef:46:65:ec:36:2e:0a:3d:26:6d:06:e4:66:1b:61:11:26: 16:44:e2:f3:5e:3d:d0:52:5b:dd:f5:b5:42:73:75:b2:86:90: de:bb:40:a4:75:5c:f9:11:4b:28:8a:e8:7e:7c:fe:25:f0:47: ee:fc:6f:84 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUF7BfNIyubUTAdYZGs8KRn9btD3swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM4RjQ1QjM5REM0NUI0OEExQzQxODVGQkE4QUYxOTRC ODIxRUZBMTAeFw0yNTAzMDUyMDU3MThaFw0yNjAzMDQyMTAyMThaMDMxMTAvBgNV BAMTKDJGRkRBMzVDMjVFOTE1Q0MzNjEwRkE5NUY3ODE3RTlEMzNGOUNFRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTo4tKEEBJlYMl8/xHYjPCHgLA eemduIZTxLbBg9rppDKIN2tXsxEERoolw5bSLf2H2ZeRUpygO+6O7wDYzxtTJ3a1 xn0VpPKShZ5dfrDjjltpO2ct0g9BukGDy+qnjaGF18FNDMRs8yqbnr6RIdNIxajH 9+r3PZxsx77Btew3ZhM8c4Jx+qLkw+xiENsvDwvcxZMaGYBGZfOQUDle6DyIdDM5 fXDYnU50N0v1+4Xb5RQGLOzcvBAQXhWgRiDM4R01RUQxKM3yS5W2osIt3TYEf8K/ NzI0wmV9Urkb8g/HKjCluJSa9+35lD5GgVp6pWeybspAxtpbgOL23jGIVQn7AgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUL/2jXCXpFcw2EPqV94F+nTP5zuUwHwYDVR0j BBgwFoAUk49Fs53EW0ihxBhfuorxlLgh76EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDdwOW5od0xQbXFYUFluWGRhVEM2ZGgxQnVQRHFuY2N4Mk1WZ3U3akN3 WlcvMS85MzhGNDVCMzlEQzQ1QjQ4QTFDNDE4NUZCQThBRjE5NEI4MjFFRkExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkzOEY0NUIzOURDNDVCNDhB MUM0MTg1RkJBOEFGMTk0QjgyMUVGQTEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0g3cDluaHdMUG1xWFBZblhkYVRDNmRoMUJ1UERxbmNjeDJNVmd1N2pDd1pXLzEv MzEzNzMwMmUzODMyMmUzMTM1MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2 MzIzNDMyMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKqUpgwDQYJKoZIhvcNAQELBQADggEBAAQpb7oV Dm7KL7dnL4jIm7s6eTIk8/EBMhrKm4eqaeZH3ilDfTffsE2nvfty6PCPMOYKJ4xy hDMimbU+Pyk1ERKi7yXe27o8+IgPmR/UYR04PMc7NRCEZdcHIch1owaajg88WxeH zZxf4vmWeyPblYkAbIeluSFyG90MUdhSeZ+CgRgPtuw5wv2maS/B9HxMbT0N+D/0 GRDjvhOGeXdUKe1lj6kb103ssahNUX8oUjsBljKjK4mpFG07LIpv2qN/5oboTB1L 4UPvRmXsNi4KPSZtBuRmG2ERJhZE4vNePdBSW931tUJzdbKGkN67QKR1XPkRSyiK 6H58/iXwR+78b4Q= -----END CERTIFICATE-----Generated at Mon Apr 7 14:50:44 2025 by rpki-client