$ rpki-client -vvf rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/34352e3139312e382e302f32322d3232203d3e20323639363938.roa File: 34352e3139312e382e302f32322d3232203d3e20323639363938.roa (raw, json) Hash identifier: uvXqkE0gwe4H6gFGVvKXequ8DorR1C0j+SMI/N7Y91A= Subject key identifier: 95:9B:5A:9A:40:B8:D5:1A:36:8E:50:A4:D3:80:48:50:6E:42:39:E6 Certificate issuer: /CN=F221C31BD2AD9D051303E1E7DE991DC00987A722 Certificate serial: 5BC334DE8A430CF0891CCD21CACE4F0A8DC7FD7F Authority key identifier: F2:21:C3:1B:D2:AD:9D:05:13:03:E1:E7:DE:99:1D:C0:09:87:A7:22 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer Subject info access: rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/34352e3139312e382e302f32322d3232203d3e20323639363938.roa Signing time: Thu 06 Mar 2025 05:11:55 +0000 ROA not before: Thu 06 Mar 2025 05:06:55 +0000 ROA not after: Thu 05 Mar 2026 05:11:55 +0000 asID: 269698 IP address blocks: 45.191.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.crl rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 17 Apr 2025 23:44:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:c3:34:de:8a:43:0c:f0:89:1c:cd:21:ca:ce:4f:0a:8d:c7:fd:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F221C31BD2AD9D051303E1E7DE991DC00987A722 Validity Not Before: Mar 6 05:06:55 2025 GMT Not After : Mar 5 05:11:55 2026 GMT Subject: CN=959B5A9A40B8D51A368E50A4D38048506E4239E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3e:08:88:18:84:06:ec:7a:82:07:5b:94:9d: a9:39:05:ae:c2:c8:da:8b:a1:00:63:16:96:d2:8d: a7:4d:54:97:b3:2c:fe:3e:09:8a:2d:69:d3:cf:17: cd:71:20:ab:21:40:0d:c9:a2:1f:5a:6f:6d:01:00: 56:84:a9:0b:72:15:46:26:ae:a1:1e:0a:e3:5b:25: 76:9f:e4:0b:76:1e:e0:5f:11:52:17:96:ad:05:e0: 28:e6:0b:19:9b:59:fa:a5:c2:e8:a2:65:88:96:90: 12:69:1a:06:dc:88:6c:d1:51:16:83:8f:fb:db:5d: 03:50:8d:33:c6:f1:55:b7:53:6c:e3:a3:47:15:8e: 9a:88:cb:34:a7:93:94:e6:ec:7a:3a:27:7a:b8:c7: 80:bf:7e:45:d7:91:7a:85:18:5c:6f:fb:30:68:a9: 65:a9:e3:4e:41:36:b0:11:5a:d7:bb:0d:b1:6a:74: 4b:62:d1:f5:79:78:4e:42:77:27:7e:f2:a3:2f:5e: 49:b0:b0:58:62:fa:95:21:1d:3c:08:20:b0:83:33: f5:9d:7a:3c:80:18:79:5b:a1:bd:1a:0d:06:b3:71: ef:86:6e:f9:b4:6e:61:69:32:37:de:b6:ef:ec:31: db:d0:62:bf:bb:45:82:87:0a:7a:20:c5:3b:4b:a6: 52:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:9B:5A:9A:40:B8:D5:1A:36:8E:50:A4:D3:80:48:50:6E:42:39:E6 X509v3 Authority Key Identifier: keyid:F2:21:C3:1B:D2:AD:9D:05:13:03:E1:E7:DE:99:1D:C0:09:87:A7:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/34352e3139312e382e302f32322d3232203d3e20323639363938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.191.8.0/22 Signature Algorithm: sha256WithRSAEncryption c1:72:70:5d:af:c9:95:f5:bf:a1:6b:c4:84:2d:9b:5a:06:f9: 8d:b4:82:8b:74:f4:26:4a:d3:fd:e0:50:50:96:6a:f5:6c:39: 6a:43:93:c6:4d:04:e3:17:11:04:e2:8f:53:84:8b:39:00:73: 0a:20:bb:d1:7a:d4:59:3f:db:fb:66:51:a3:43:9b:46:f0:5b: f3:db:74:65:a2:28:01:42:db:ac:8c:b6:e1:b7:e6:9f:c9:20: 30:56:a7:d7:61:1c:be:c9:19:de:00:ca:37:28:a1:bf:98:2c: fd:0d:f1:c0:5d:26:f6:69:14:0a:03:03:5b:0e:d9:8c:6f:c8: be:67:72:f7:27:6c:4e:95:1b:9a:04:10:c5:13:89:17:19:89: 1d:f8:c9:38:7d:ca:02:f4:02:b3:c1:af:a0:77:d6:73:33:33: 6e:c2:7b:50:37:8e:2d:e9:1c:2e:bc:9c:39:63:a2:f6:19:71: 09:77:12:76:26:c8:f4:43:ff:7d:66:a7:eb:c2:fb:94:ee:80: 7e:db:5c:6b:dc:cc:db:ac:be:27:bc:4c:54:2c:ec:d8:7d:b4: dc:3d:5a:00:d1:64:ed:86:53:f2:7c:d5:0e:75:81:b9:09:47: 70:31:3f:1f:c2:38:c8:93:91:c4:72:57:10:32:00:37:13:3e: 2c:e6:5c:05 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUW8M03opDDPCJHM0hys5PCo3H/X8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIyMUMzMUJEMkFEOUQwNTEzMDNFMUU3REU5OTFEQzAw OTg3QTcyMjAeFw0yNTAzMDYwNTA2NTVaFw0yNjAzMDUwNTExNTVaMDMxMTAvBgNV BAMTKDk1OUI1QTlBNDBCOEQ1MUEzNjhFNTBBNEQzODA0ODUwNkU0MjM5RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOPgiIGIQG7HqCB1uUnak5Ba7C yNqLoQBjFpbSjadNVJezLP4+CYotadPPF81xIKshQA3Joh9ab20BAFaEqQtyFUYm rqEeCuNbJXaf5At2HuBfEVIXlq0F4CjmCxmbWfqlwuiiZYiWkBJpGgbciGzRURaD j/vbXQNQjTPG8VW3U2zjo0cVjpqIyzSnk5Tm7Ho6J3q4x4C/fkXXkXqFGFxv+zBo qWWp405BNrARWte7DbFqdEti0fV5eE5Cdyd+8qMvXkmwsFhi+pUhHTwIILCDM/Wd ejyAGHlbob0aDQazce+Gbvm0bmFpMjfetu/sMdvQYr+7RYKHCnogxTtLplJZAgMB AAGjggJNMIICSTAdBgNVHQ4EFgQUlZtamkC41Ro2jlCk04BIUG5COeYwHwYDVR0j BBgwFoAU8iHDG9KtnQUTA+Hn3pkdwAmHpyIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSGhiUGt2RERrNkFrQVA4a2dkYU51VDZXdWhpYkYxUExRUWg0RGRTNXdx VEsvMS9GMjIxQzMxQkQyQUQ5RDA1MTMwM0UxRTdERTk5MURDMDA5ODdBNzIyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YyMjFDMzFCRDJBRDlEMDUx MzAzRTFFN0RFOTkxREMwMDk4N0E3MjIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0hoYlBrdkREazZBa0FQOGtnZGFOdVQ2V3VoaWJGMVBMUVFoNERkUzV3cVRLLzEv MzQzNTJlMzEzOTMxMmUzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzOTM2 MzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB /wQQMA4wDAQCAAEwBgMEAi2/CDANBgkqhkiG9w0BAQsFAAOCAQEAwXJwXa/JlfW/ oWvEhC2bWgb5jbSCi3T0JkrT/eBQUJZq9Ww5akOTxk0E4xcRBOKPU4SLOQBzCiC7 0XrUWT/b+2ZRo0ObRvBb89t0ZaIoAULbrIy24bfmn8kgMFan12EcvskZ3gDKNyih v5gs/Q3xwF0m9mkUCgMDWw7ZjG/Ivmdy9ydsTpUbmgQQxROJFxmJHfjJOH3KAvQC s8GvoHfWczMzbsJ7UDeOLekcLrycOWOi9hlxCXcSdibI9EP/fWan68L7lO6Afttc a9zM26y+J7xMVCzs2H203D1aANFk7YZT8nzVDnWBuQlHcDE/H8I4yJORxHJXEDIA NxM+LOZcBQ== -----END CERTIFICATE-----Generated at Thu Apr 17 07:33:46 2025 by rpki-client