$ rpki-client -vvf rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/34352e3137352e3232392e302f32342d3234203d3e20323638393133.roa File: 34352e3137352e3232392e302f32342d3234203d3e20323638393133.roa (raw, json) Hash identifier: YBBTkiHSOgUVAXZZp1wx9Ur96wrUs7rREvi/PLPwCpY= Subject key identifier: 4A:3C:7D:02:A6:3F:06:86:9D:72:29:39:BC:FB:2F:B2:4C:AB:87:55 Certificate issuer: /CN=3CFEE2C21A17314AD0CFFC520FD817D14B4140D1 Certificate serial: 7C9D9918A6AEA1CF2A3F39FB392247476FE8B8EF Authority key identifier: 3C:FE:E2:C2:1A:17:31:4A:D0:CF:FC:52:0F:D8:17:D1:4B:41:40:D1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer Subject info access: rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/34352e3137352e3232392e302f32342d3234203d3e20323638393133.roa Signing time: Thu 06 Mar 2025 15:09:42 +0000 ROA not before: Thu 06 Mar 2025 15:04:42 +0000 ROA not after: Thu 05 Mar 2026 15:09:42 +0000 asID: 268913 IP address blocks: 45.175.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 06:37:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:9d:99:18:a6:ae:a1:cf:2a:3f:39:fb:39:22:47:47:6f:e8:b8:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CFEE2C21A17314AD0CFFC520FD817D14B4140D1 Validity Not Before: Mar 6 15:04:42 2025 GMT Not After : Mar 5 15:09:42 2026 GMT Subject: CN=4A3C7D02A63F06869D722939BCFB2FB24CAB8755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8a:09:f6:df:40:f7:12:d2:be:c0:f7:49:b2: 7e:65:8c:86:47:33:b9:ee:15:fe:d3:fa:da:2a:5f: 42:62:a9:40:db:4a:2f:df:94:d3:9a:1e:b7:ae:f9: 6c:15:cb:10:cb:5f:f5:de:e3:2a:d3:1a:48:63:06: 6c:6b:b6:d1:b1:70:fb:f7:50:44:95:38:ca:66:ba: 47:80:34:5f:44:07:49:27:6a:6c:64:73:4b:b9:98: 18:a7:91:fe:23:6a:1b:86:53:b1:6d:75:6e:35:5f: dd:1a:5d:92:e6:f1:60:0e:e2:51:9d:0e:5f:79:6a: bb:82:ad:5a:29:e8:38:5e:6b:d7:21:4d:e0:07:f8: c8:46:18:05:a4:d9:4a:d0:9f:ff:92:c0:46:63:ae: 09:6c:33:0d:8f:d1:cf:e6:b9:6a:ed:f0:76:a1:05: 19:18:3c:8d:bb:e2:d6:af:ab:a3:ba:c6:cb:8e:32: 8f:48:d3:05:02:74:59:9d:35:69:1e:31:09:37:e0: 58:59:1a:a2:6b:a9:64:2b:92:69:52:6c:03:1e:35: 7b:1f:7c:0d:3d:ce:b6:4c:6d:ee:74:c2:6a:60:09: 47:71:ee:69:00:21:b2:e6:bf:d8:ef:c6:78:a4:c6: e4:7a:62:5b:23:45:24:4b:7a:b2:07:6d:3a:45:9d: 8e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:3C:7D:02:A6:3F:06:86:9D:72:29:39:BC:FB:2F:B2:4C:AB:87:55 X509v3 Authority Key Identifier: keyid:3C:FE:E2:C2:1A:17:31:4A:D0:CF:FC:52:0F:D8:17:D1:4B:41:40:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/34352e3137352e3232392e302f32342d3234203d3e20323638393133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.175.229.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:39:e9:50:20:0f:27:69:12:e3:56:0e:42:3f:8a:f6:f9:d8: 7b:27:64:56:11:51:d4:e4:df:bd:b5:80:8b:1f:5d:4d:1e:47: ce:0a:38:2f:b6:90:a3:7f:09:08:89:e6:fa:df:98:08:a3:da: 65:09:f9:20:de:9b:5a:d4:6f:18:03:9f:66:c9:11:56:30:78: 96:04:d8:91:ff:13:f2:37:b4:a6:58:6b:aa:00:d4:f1:2b:b9: db:c1:39:31:2d:86:c4:b5:ed:56:8a:d1:18:17:66:29:a9:53: 5c:98:94:14:dc:a7:d7:81:9c:d4:6e:92:fe:79:d9:94:b1:75: a6:5b:09:c3:15:a0:34:86:b1:40:1d:83:f9:a3:7b:08:28:75: a0:ce:5f:51:8b:69:57:e5:00:2a:ac:41:62:6c:0d:5a:7a:03: 82:21:6c:39:23:f9:50:c8:58:7c:37:ea:d3:81:a8:f0:cb:54: ff:a0:ce:5b:b5:53:8c:ab:8a:ed:06:ab:60:d2:66:21:0d:c4: 54:18:c9:03:56:31:0b:c3:44:67:88:e5:f5:db:82:a6:e0:41: 00:21:b1:8e:90:e9:24:1f:f9:9e:57:6b:79:41:26:66:b8:2c: 45:5a:16:dd:4c:c2:75:18:3f:f5:a6:cf:2e:db:72:e0:29:3f: 82:1a:9e:9f -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUfJ2ZGKauoc8qPzn7OSJHR2/ouO8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NGRUUyQzIxQTE3MzE0QUQwQ0ZGQzUyMEZEODE3RDE0 QjQxNDBEMTAeFw0yNTAzMDYxNTA0NDJaFw0yNjAzMDUxNTA5NDJaMDMxMTAvBgNV BAMTKDRBM0M3RDAyQTYzRjA2ODY5RDcyMjkzOUJDRkIyRkIyNENBQjg3NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDign230D3EtK+wPdJsn5ljIZH M7nuFf7T+toqX0JiqUDbSi/flNOaHreu+WwVyxDLX/Xe4yrTGkhjBmxrttGxcPv3 UESVOMpmukeANF9EB0knamxkc0u5mBinkf4jahuGU7FtdW41X90aXZLm8WAO4lGd Dl95aruCrVop6Dhea9chTeAH+MhGGAWk2UrQn/+SwEZjrglsMw2P0c/muWrt8Hah BRkYPI274tavq6O6xsuOMo9I0wUCdFmdNWkeMQk34FhZGqJrqWQrkmlSbAMeNXsf fA09zrZMbe50wmpgCUdx7mkAIbLmv9jvxnikxuR6YlsjRSRLerIHbTpFnY65AgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUSjx9AqY/Boadcik5vPsvskyrh1UwHwYDVR0j BBgwFoAUPP7iwhoXMUrQz/xSD9gX0UtBQNEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmNQRG52ZFhraGhkd2thUXh2ZVJHVkVWS1BZSm44V1NrbUY3SEZ0UE5K Z2UvMS8zQ0ZFRTJDMjFBMTczMTRBRDBDRkZDNTIwRkQ4MTdEMTRCNDE0MEQxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDRkVFMkMyMUExNzMxNEFE MENGRkM1MjBGRDgxN0QxNEI0MTQwRDEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJjUERudmRYa2hoZHdrYVF4dmVSR1ZFVktQWUpuOFdTa21GN0hGdFBOSmdlLzEv MzQzNTJlMzEzNzM1MmUzMjMyMzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2 MzgzOTMxMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAAtr+UwDQYJKoZIhvcNAQELBQADggEBAIo56VAg DydpEuNWDkI/ivb52HsnZFYRUdTk3721gIsfXU0eR84KOC+2kKN/CQiJ5vrfmAij 2mUJ+SDem1rUbxgDn2bJEVYweJYE2JH/E/I3tKZYa6oA1PErudvBOTEthsS17VaK 0RgXZimpU1yYlBTcp9eBnNRukv552ZSxdaZbCcMVoDSGsUAdg/mjewgodaDOX1GL aVflACqsQWJsDVp6A4IhbDkj+VDIWHw36tOBqPDLVP+gzlu1U4yriu0Gq2DSZiEN xFQYyQNWMQvDRGeI5fXbgqbgQQAhsY6Q6SQf+Z5Xa3lBJma4LEVaFt1MwnUYP/Wm zy7bcuApP4Ianp8= -----END CERTIFICATE-----Generated at Wed Nov 5 10:05:04 2025 by rpki-client