$ rpki-client -vvf rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3233312e302f32342d3234203d3e20323638373436.roa File: 34352e3137312e3233312e302f32342d3234203d3e20323638373436.roa (raw, json) Hash identifier: aMmue8j5MNlIu7OVFDXPeuy/1SoIsyufzQmNJPDxAOs= Subject key identifier: 85:30:4D:C5:8A:57:12:70:84:D5:CC:40:9E:A1:F5:27:29:C4:56:44 Certificate issuer: /CN=C75639341EB310D9105CD98A48FC7CED1EC5D643 Certificate serial: 4CDFD106CD4BD18D42A7D84A7586782ED9F3445B Authority key identifier: C7:56:39:34:1E:B3:10:D9:10:5C:D9:8A:48:FC:7C:ED:1E:C5:D6:43 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C75639341EB310D9105CD98A48FC7CED1EC5D643.cer Subject info access: rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3233312e302f32342d3234203d3e20323638373436.roa Signing time: Wed 12 Feb 2025 14:39:57 +0000 ROA not before: Wed 12 Feb 2025 14:34:57 +0000 ROA not after: Wed 11 Feb 2026 14:39:57 +0000 asID: 268746 IP address blocks: 45.171.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/C75639341EB310D9105CD98A48FC7CED1EC5D643.crl rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/C75639341EB310D9105CD98A48FC7CED1EC5D643.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C75639341EB310D9105CD98A48FC7CED1EC5D643.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 17 Feb 2025 11:26:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:df:d1:06:cd:4b:d1:8d:42:a7:d8:4a:75:86:78:2e:d9:f3:44:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C75639341EB310D9105CD98A48FC7CED1EC5D643 Validity Not Before: Feb 12 14:34:57 2025 GMT Not After : Feb 11 14:39:57 2026 GMT Subject: CN=85304DC58A57127084D5CC409EA1F52729C45644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:84:1e:9d:cd:6a:42:6d:d1:d3:b4:88:c1:8f: 44:a8:f4:9a:94:60:b5:b1:b2:5e:28:3a:4a:3d:f2: 39:ca:5e:0a:77:c0:a9:15:b1:45:2a:25:43:71:b0: cd:67:a5:41:c3:9d:a3:8d:11:fb:18:37:a1:23:8d: 58:04:bc:76:35:78:86:73:24:a1:ca:84:22:29:5b: aa:ec:84:a9:41:74:4f:95:77:40:2f:89:53:6e:2b: 7d:55:08:ee:c4:3f:d1:ec:76:58:ce:44:26:74:36: 42:49:f8:53:6c:42:20:3a:33:01:fc:b8:0f:36:dc: d0:04:7e:6b:f3:9d:28:72:ec:4b:ae:cb:c9:9e:cb: e3:05:02:68:d2:4f:3a:07:da:d2:de:24:c9:1d:92: 1b:26:d3:5d:bb:15:8e:59:69:ce:93:44:14:59:28: 4a:22:70:93:04:58:3d:cb:d7:3f:68:51:b8:66:bd: 89:e9:33:ef:92:42:c0:5d:64:90:b9:ed:c2:bc:df: 35:3b:e7:cd:d4:c4:ae:a4:9d:2c:aa:1d:0f:ca:a7: 8f:70:d7:64:a1:89:d9:34:63:0a:cd:1c:63:7a:5c: 11:cf:f0:bf:c4:47:83:eb:74:07:39:3b:bb:ce:5e: a8:cb:3a:d3:7d:f2:a9:51:03:49:d4:ab:89:51:83: db:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:30:4D:C5:8A:57:12:70:84:D5:CC:40:9E:A1:F5:27:29:C4:56:44 X509v3 Authority Key Identifier: keyid:C7:56:39:34:1E:B3:10:D9:10:5C:D9:8A:48:FC:7C:ED:1E:C5:D6:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/C75639341EB310D9105CD98A48FC7CED1EC5D643.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C75639341EB310D9105CD98A48FC7CED1EC5D643.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3233312e302f32342d3234203d3e20323638373436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.171.231.0/24 Signature Algorithm: sha256WithRSAEncryption c2:29:2e:e3:e9:b6:26:96:ea:11:b3:cd:7a:a2:52:b6:96:67: c2:65:09:c1:5c:54:f4:61:43:af:c9:8b:fc:ff:ca:da:1d:54: 7d:c6:12:58:c1:0e:b7:87:9d:d5:b2:3e:80:23:f8:b5:67:82: f6:af:c8:32:e8:dd:37:c0:c8:ff:96:86:0d:2f:3d:d4:d8:6a: 5b:f8:39:65:a5:e0:16:7d:9c:0d:b2:03:44:01:fd:82:ab:b3: 8f:db:0e:ff:27:c8:48:38:56:34:48:2b:5b:04:1e:e0:01:0f: 2d:cb:c6:69:6f:51:84:61:cf:f3:60:c7:5f:7a:c4:49:03:87: 18:a5:fa:5c:27:78:0f:d4:3b:27:29:33:61:af:0a:25:a7:ca: 0e:1b:48:5b:b4:93:9c:c1:29:2f:d8:d9:8d:ce:33:40:29:c1: 0e:21:ee:5e:99:b4:ae:b6:0a:7f:2f:4b:3a:ae:24:96:89:23: 6b:a3:29:36:ad:81:68:63:dc:77:15:48:ed:95:cf:9c:16:e3: d4:cd:95:39:83:cb:d4:8f:c7:4a:20:3e:5a:0b:60:b8:fa:75: c3:0b:55:ab:75:b5:b5:e8:a2:cb:21:e9:77:1b:ca:1f:3d:9a: 09:42:07:1a:46:27:3b:cd:4d:94:0c:9b:35:c8:00:77:4a:c7: 7d:9f:1d:5f -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIUTN/RBs1L0Y1Cp9hKdYZ4LtnzRFswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc1NjM5MzQxRUIzMTBEOTEwNUNEOThBNDhGQzdDRUQx RUM1RDY0MzAeFw0yNTAyMTIxNDM0NTdaFw0yNjAyMTExNDM5NTdaMDMxMTAvBgNV BAMTKDg1MzA0REM1OEE1NzEyNzA4NEQ1Q0M0MDlFQTFGNTI3MjlDNDU2NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJhB6dzWpCbdHTtIjBj0So9JqU YLWxsl4oOko98jnKXgp3wKkVsUUqJUNxsM1npUHDnaONEfsYN6EjjVgEvHY1eIZz JKHKhCIpW6rshKlBdE+Vd0AviVNuK31VCO7EP9HsdljORCZ0NkJJ+FNsQiA6MwH8 uA823NAEfmvznShy7Euuy8mey+MFAmjSTzoH2tLeJMkdkhsm0127FY5Zac6TRBRZ KEoicJMEWD3L1z9oUbhmvYnpM++SQsBdZJC57cK83zU7583UxK6knSyqHQ/Kp49w 12Shidk0YwrNHGN6XBHP8L/ER4PrdAc5O7vOXqjLOtN98qlRA0nUq4lRg9vDAgMB AAGjggJOMIICSjAdBgNVHQ4EFgQUhTBNxYpXEnCE1cxAnqH1JynEVkQwHwYDVR0j BBgwFoAUx1Y5NB6zENkQXNmKSPx87R7F1kMwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9zUW9WWEQzdndQaEhFVGZEbTNSNlozS3BFRmVWTjhGV3Bud2FwaUFLQ3lz LzAvQzc1NjM5MzQxRUIzMTBEOTEwNUNEOThBNDhGQzdDRUQxRUM1RDY0My5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9DNzU2MzkzNDFFQjMxMEQ5MTA1 Q0Q5OEE0OEZDN0NFRDFFQzVENjQzLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9z UW9WWEQzdndQaEhFVGZEbTNSNlozS3BFRmVWTjhGV3Bud2FwaUFLQ3lzLzAvMzQz NTJlMzEzNzMxMmUzMjMzMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2Mzgz NzM0MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB Af8EEDAOMAwEAgABMAYDBAAtq+cwDQYJKoZIhvcNAQELBQADggEBAMIpLuPptiaW 6hGzzXqiUraWZ8JlCcFcVPRhQ6/Ji/z/ytodVH3GEljBDreHndWyPoAj+LVngvav yDLo3TfAyP+Whg0vPdTYalv4OWWl4BZ9nA2yA0QB/YKrs4/bDv8nyEg4VjRIK1sE HuABDy3LxmlvUYRhz/Ngx196xEkDhxil+lwneA/UOycpM2GvCiWnyg4bSFu0k5zB KS/Y2Y3OM0ApwQ4h7l6ZtK62Cn8vSzquJJaJI2ujKTatgWhj3HcVSO2Vz5wW49TN lTmDy9SPx0ogPloLYLj6dcMLVat1tbXoossh6Xcbyh89mglCBxpGJzvNTZQMmzXI AHdKx32fHV8= -----END CERTIFICATE-----Generated at Sun Feb 16 21:39:09 2025 by rpki-client