$ rpki-client -vvf rpki-repo.registro.br/repo/HyuYfGLAWR34gKwwp4ZvjoKbCNYBmgCmcvZLtzNkxziY/0/3136382e3232382e3231322e302f32322d3332203d3e20323634393330.roa File: 3136382e3232382e3231322e302f32322d3332203d3e20323634393330.roa (raw, json) Hash identifier: 0bGXG6lW4VY6bSDFB+KRRkX0llotW42epYOQT7IZGDo= Subject key identifier: 75:86:84:88:EB:C3:94:2B:1A:53:7D:5F:84:0C:32:12:AA:2E:7B:97 Certificate issuer: /CN=968A30C4F91D45691AD58B655CB6D13DE53B4770 Certificate serial: 0905C6FE4DA771105A9572CF5547368A3B404B69 Authority key identifier: 96:8A:30:C4:F9:1D:45:69:1A:D5:8B:65:5C:B6:D1:3D:E5:3B:47:70 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968A30C4F91D45691AD58B655CB6D13DE53B4770.cer Subject info access: rsync://rpki-repo.registro.br/repo/HyuYfGLAWR34gKwwp4ZvjoKbCNYBmgCmcvZLtzNkxziY/0/3136382e3232382e3231322e302f32322d3332203d3e20323634393330.roa Signing time: Fri 24 Jan 2025 18:13:12 +0000 ROA not before: Fri 24 Jan 2025 18:08:12 +0000 ROA not after: Fri 23 Jan 2026 18:13:12 +0000 asID: 264930 IP address blocks: 168.228.212.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HyuYfGLAWR34gKwwp4ZvjoKbCNYBmgCmcvZLtzNkxziY/0/968A30C4F91D45691AD58B655CB6D13DE53B4770.crl rsync://rpki-repo.registro.br/repo/HyuYfGLAWR34gKwwp4ZvjoKbCNYBmgCmcvZLtzNkxziY/0/968A30C4F91D45691AD58B655CB6D13DE53B4770.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968A30C4F91D45691AD58B655CB6D13DE53B4770.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 11:48:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:05:c6:fe:4d:a7:71:10:5a:95:72:cf:55:47:36:8a:3b:40:4b:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=968A30C4F91D45691AD58B655CB6D13DE53B4770 Validity Not Before: Jan 24 18:08:12 2025 GMT Not After : Jan 23 18:13:12 2026 GMT Subject: CN=75868488EBC3942B1A537D5F840C3212AA2E7B97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d5:e8:46:f2:13:81:2a:b7:fe:3e:cc:16:4f: 94:76:6d:61:98:e7:32:1c:e9:95:c5:70:ee:6d:b2: 0a:14:c1:ab:84:a0:67:21:79:e2:5a:ed:a0:06:50: 70:b2:b9:f9:87:11:0e:b5:42:42:23:76:ee:92:70: 21:a3:28:c1:45:ee:2b:54:ce:91:5f:64:15:03:b8: 07:5f:57:96:db:2c:80:5e:d9:74:bf:b2:65:ed:2b: 7c:ce:73:91:6c:a1:4d:b5:4d:5c:48:16:8e:87:b0: 0d:92:86:96:00:27:d4:f7:d9:6f:f5:95:bb:9a:57: 63:f0:4d:4e:bd:49:21:7b:b0:47:54:31:b7:f7:ef: 60:20:a8:e5:be:d1:61:6e:e8:5c:08:84:e5:4c:d7: b9:ba:e9:57:0d:2e:ce:f2:13:c0:31:79:30:d0:2e: b1:37:c8:5e:be:d2:78:a3:dd:a8:d2:54:79:cd:0c: 8d:cb:1e:b7:d6:4b:80:fb:83:40:58:2f:5c:c4:8d: 3a:01:e0:8f:58:83:86:3c:27:98:56:ff:7b:54:73: d2:81:b1:81:26:a7:51:90:df:11:45:25:ec:6d:25: 5f:d6:0f:40:f8:fb:2a:fa:f5:28:00:8b:fa:a9:a5: 84:39:8b:57:93:49:e0:2c:27:3b:50:13:c0:78:27: b3:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:86:84:88:EB:C3:94:2B:1A:53:7D:5F:84:0C:32:12:AA:2E:7B:97 X509v3 Authority Key Identifier: keyid:96:8A:30:C4:F9:1D:45:69:1A:D5:8B:65:5C:B6:D1:3D:E5:3B:47:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HyuYfGLAWR34gKwwp4ZvjoKbCNYBmgCmcvZLtzNkxziY/0/968A30C4F91D45691AD58B655CB6D13DE53B4770.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968A30C4F91D45691AD58B655CB6D13DE53B4770.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HyuYfGLAWR34gKwwp4ZvjoKbCNYBmgCmcvZLtzNkxziY/0/3136382e3232382e3231322e302f32322d3332203d3e20323634393330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.228.212.0/22 Signature Algorithm: sha256WithRSAEncryption 2e:8e:90:18:d6:6d:88:9e:bf:4f:b7:1a:86:7a:95:a0:00:ae: d7:6b:11:cc:6b:af:bf:6f:25:0e:78:a3:b8:6e:5d:e1:bf:0d: a4:71:d9:72:e0:d7:87:a0:77:a4:a2:06:9e:c3:78:5b:48:ed: 96:06:de:78:9d:a6:fd:ea:bb:f5:b4:27:7d:36:b7:3a:57:e2: d3:c1:37:89:8e:7a:1d:4c:5b:8c:d0:00:c4:e6:d2:d7:80:e1: 1f:77:88:13:e5:60:15:fb:63:c8:ee:6f:5a:e0:36:38:3c:54: ba:b1:9c:47:39:42:6b:6e:3e:5e:3f:d9:ce:7f:9a:0b:6d:b0: 9f:7a:1d:2c:be:4d:08:ff:d8:29:aa:6e:27:25:00:c6:51:75: ea:b1:f0:a0:ad:38:43:35:df:0f:34:c3:a8:df:b7:b3:45:70: d7:7c:b3:7f:2b:a2:0b:76:88:f6:ab:85:b3:3b:e5:65:a6:53: 8e:86:6a:fb:03:df:28:39:30:5f:89:63:cf:c2:9c:ef:af:34: 51:59:7d:46:f8:23:bb:b8:1f:22:e7:f3:f0:bc:33:2b:a2:75: 63:6d:a5:e8:db:7a:56:0b:74:8e:d4:92:db:71:d3:59:aa:cb: 1f:df:aa:6b:33:bd:17:4c:47:c6:92:ff:9f:19:18:b1:62:c2: e4:98:91:40 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUCQXG/k2ncRBalXLPVUc2ijtAS2kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY4QTMwQzRGOTFENDU2OTFBRDU4QjY1NUNCNkQxM0RF NTNCNDc3MDAeFw0yNTAxMjQxODA4MTJaFw0yNjAxMjMxODEzMTJaMDMxMTAvBgNV BAMTKDc1ODY4NDg4RUJDMzk0MkIxQTUzN0Q1Rjg0MEMzMjEyQUEyRTdCOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa1ehG8hOBKrf+PswWT5R2bWGY 5zIc6ZXFcO5tsgoUwauEoGcheeJa7aAGUHCyufmHEQ61QkIjdu6ScCGjKMFF7itU zpFfZBUDuAdfV5bbLIBe2XS/smXtK3zOc5FsoU21TVxIFo6HsA2ShpYAJ9T32W/1 lbuaV2PwTU69SSF7sEdUMbf372AgqOW+0WFu6FwIhOVM17m66VcNLs7yE8AxeTDQ LrE3yF6+0nij3ajSVHnNDI3LHrfWS4D7g0BYL1zEjToB4I9Yg4Y8J5hW/3tUc9KB sYEmp1GQ3xFFJextJV/WD0D4+yr69SgAi/qppYQ5i1eTSeAsJztQE8B4J7PpAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUdYaEiOvDlCsaU31fhAwyEqoue5cwHwYDVR0j BBgwFoAUloowxPkdRWka1YtlXLbRPeU7R3AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSHl1WWZHTEFXUjM0Z0t3d3A0WnZqb0tiQ05ZQm1nQ21jdlpMdHpOa3h6 aVkvMC85NjhBMzBDNEY5MUQ0NTY5MUFENThCNjU1Q0I2RDEzREU1M0I0NzcwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk2OEEzMEM0RjkxRDQ1Njkx QUQ1OEI2NTVDQjZEMTNERTUzQjQ3NzAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0h5dVlmR0xBV1IzNGdLd3dwNFp2am9LYkNOWUJtZ0NtY3ZaTHR6Tmt4emlZLzAv MzEzNjM4MmUzMjMyMzgyZTMyMzEzMjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy MzYzNDM5MzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjk1DANBgkqhkiG9w0BAQsFAAOCAQEALo6Q GNZtiJ6/T7cahnqVoACu12sRzGuvv28lDnijuG5d4b8NpHHZcuDXh6B3pKIGnsN4 W0jtlgbeeJ2m/eq79bQnfTa3Olfi08E3iY56HUxbjNAAxObS14DhH3eIE+VgFftj yO5vWuA2ODxUurGcRzlCa24+Xj/Zzn+aC22wn3odLL5NCP/YKapuJyUAxlF16rHw oK04QzXfDzTDqN+3s0Vw13yzfyuiC3aI9quFszvlZaZTjoZq+wPfKDkwX4ljz8Kc 7680UVl9Rvgju7gfIufz8LwzK6J1Y22l6Nt6Vgt0jtSS23HTWarLH9+qazO9F0xH xpL/nxkYsWLC5JiRQA== -----END CERTIFICATE-----Generated at Wed Apr 9 14:50:18 2025 by rpki-client