$ rpki-client -vvf rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/3136382e3232382e3137302e302f32342d3234203d3e20323632363131.roa File: 3136382e3232382e3137302e302f32342d3234203d3e20323632363131.roa (raw, json) Hash identifier: /ylDGZwZQ2ieGRUKKNbtNNxvaiuwuQGygglu6O1pypk= Subject key identifier: EE:DD:2D:74:E3:53:D2:34:26:6C:E6:C9:BC:E1:59:B4:78:E1:85:B8 Certificate issuer: /CN=D2B24673AF94F6E8A7171887B60BF4EBE9D15E73 Certificate serial: 6CC69BC165B6678E6502A40AC89AD0C4D75A1501 Authority key identifier: D2:B2:46:73:AF:94:F6:E8:A7:17:18:87:B6:0B:F4:EB:E9:D1:5E:73 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.cer Subject info access: rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/3136382e3232382e3137302e302f32342d3234203d3e20323632363131.roa Signing time: Wed 19 Mar 2025 14:30:13 +0000 ROA not before: Wed 19 Mar 2025 14:25:13 +0000 ROA not after: Wed 18 Mar 2026 14:30:13 +0000 asID: 262611 IP address blocks: 168.228.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.crl rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 09:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:c6:9b:c1:65:b6:67:8e:65:02:a4:0a:c8:9a:d0:c4:d7:5a:15:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2B24673AF94F6E8A7171887B60BF4EBE9D15E73 Validity Not Before: Mar 19 14:25:13 2025 GMT Not After : Mar 18 14:30:13 2026 GMT Subject: CN=EEDD2D74E353D234266CE6C9BCE159B478E185B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:bc:d3:3a:54:48:5b:36:0a:26:e8:3e:a0:75: 91:30:cd:41:7c:5d:c5:d0:bd:1e:fc:9f:69:f1:2c: 2a:40:98:34:17:86:1e:b3:8f:7e:e3:42:dc:d7:07: 25:45:9c:81:6a:05:13:c0:0e:7c:10:cb:5f:57:f4: c2:f4:43:88:d1:47:ed:46:51:69:ca:f4:74:10:b7: 13:0b:95:5e:a9:93:1b:9d:e7:d3:5e:d6:86:f3:fd: 29:10:e2:ea:e3:c1:5b:6f:fd:ee:54:e5:4f:b0:85: 1b:0c:91:83:76:e1:ab:bf:f1:1f:b1:9e:51:32:10: f5:7a:fc:bc:2e:ac:3c:eb:5b:52:66:b9:39:cb:2d: d9:47:b9:21:0a:3f:5c:d9:e4:7e:43:eb:6f:d5:5c: 73:d4:c5:db:4d:b8:24:60:86:50:9a:dd:fa:2a:73: 74:e7:4b:28:97:29:34:f3:83:a5:44:cd:ca:dd:78: bd:33:ea:2e:b4:12:93:ff:91:35:35:db:f1:8f:f5: cf:6e:92:14:6e:21:61:76:1f:e6:6e:41:76:e4:3c: ef:ee:68:e3:c9:54:e5:46:0a:9c:a5:9f:f8:a1:b9: 40:88:e2:4c:3b:3f:43:85:ca:e8:9a:df:09:a6:d8: 7c:66:6a:bc:f7:8b:7c:65:ee:ae:e9:1d:03:05:1b: 45:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:DD:2D:74:E3:53:D2:34:26:6C:E6:C9:BC:E1:59:B4:78:E1:85:B8 X509v3 Authority Key Identifier: keyid:D2:B2:46:73:AF:94:F6:E8:A7:17:18:87:B6:0B:F4:EB:E9:D1:5E:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/3136382e3232382e3137302e302f32342d3234203d3e20323632363131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.228.170.0/24 Signature Algorithm: sha256WithRSAEncryption 44:ab:04:ac:09:bc:f4:8f:09:2e:2e:5b:f3:3d:dc:1a:b3:8f: e6:bd:fd:66:a9:f6:84:6f:b0:38:eb:b1:69:59:3e:58:68:5b: 3f:37:48:d3:80:be:29:1b:5d:63:d7:57:dc:e0:9a:f7:5a:48: 53:a8:3d:ee:ac:74:7f:88:77:0b:4b:1b:f1:e9:ca:b8:79:8d: d8:a6:e3:d5:fb:de:cd:7f:af:69:59:47:a5:86:91:96:78:7b: 90:61:e7:0a:39:46:06:ab:2c:e6:d0:b4:53:31:9d:11:76:fa: 1b:80:cf:7a:32:8d:ac:a1:b8:ea:2b:e9:4c:a3:2a:c0:7c:e7: ca:bf:bd:b7:fd:03:00:5f:6b:34:79:92:29:e2:68:23:44:09: 90:bb:be:d0:e0:32:6c:fe:88:25:67:9e:30:2d:1c:08:c1:31: 62:86:35:02:1c:f0:d0:be:e6:12:20:9a:27:32:2a:c9:99:81: c2:98:d0:2b:fb:cf:d6:35:6d:35:bd:77:50:ab:13:11:16:de: 87:ef:37:e0:ee:99:d1:09:13:6d:55:0b:30:37:cb:d6:d0:83: c4:0c:2a:78:51:0c:d7:9a:4f:8f:a0:91:1d:18:fd:2e:8d:31: f2:5f:d2:3f:b2:76:6b:85:f9:5e:55:14:e3:8f:e7:9a:3f:95: 4d:44:1d:35 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUbMabwWW2Z45lAqQKyJrQxNdaFQEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJCMjQ2NzNBRjk0RjZFOEE3MTcxODg3QjYwQkY0RUJF OUQxNUU3MzAeFw0yNTAzMTkxNDI1MTNaFw0yNjAzMTgxNDMwMTNaMDMxMTAvBgNV BAMTKEVFREQyRDc0RTM1M0QyMzQyNjZDRTZDOUJDRTE1OUI0NzhFMTg1QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgvNM6VEhbNgom6D6gdZEwzUF8 XcXQvR78n2nxLCpAmDQXhh6zj37jQtzXByVFnIFqBRPADnwQy19X9ML0Q4jRR+1G UWnK9HQQtxMLlV6pkxud59Ne1obz/SkQ4urjwVtv/e5U5U+whRsMkYN24au/8R+x nlEyEPV6/LwurDzrW1JmuTnLLdlHuSEKP1zZ5H5D62/VXHPUxdtNuCRghlCa3foq c3TnSyiXKTTzg6VEzcrdeL0z6i60EpP/kTU12/GP9c9ukhRuIWF2H+ZuQXbkPO/u aOPJVOVGCpyln/ihuUCI4kw7P0OFyuia3wmm2Hxmarz3i3xl7q7pHQMFG0VfAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQU7t0tdONT0jQmbObJvOFZtHjhhbgwHwYDVR0j BBgwFoAU0rJGc6+U9uinFxiHtgv06+nRXnMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQXJUOHZyRGpxeTRiV2FNQ3RGUDI0Q0ZVNWhNeldoSFJranZneFp5UUJR a3AvMC9EMkIyNDY3M0FGOTRGNkU4QTcxNzE4ODdCNjBCRjRFQkU5RDE1RTczLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyQjI0NjczQUY5NEY2RThB NzE3MTg4N0I2MEJGNEVCRTlEMTVFNzMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0FyVDh2ckRqcXk0YldhTUN0RlAyNENGVTVoTXpXaEhSa2p2Z3haeVFCUWtwLzAv MzEzNjM4MmUzMjMyMzgyZTMxMzczMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy MzYzMjM2MzEzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjkqjANBgkqhkiG9w0BAQsFAAOCAQEARKsE rAm89I8JLi5b8z3cGrOP5r39Zqn2hG+wOOuxaVk+WGhbPzdI04C+KRtdY9dX3OCa 91pIU6g97qx0f4h3C0sb8enKuHmN2Kbj1fvezX+vaVlHpYaRlnh7kGHnCjlGBqss 5tC0UzGdEXb6G4DPejKNrKG46ivpTKMqwHznyr+9t/0DAF9rNHmSKeJoI0QJkLu+ 0OAybP6IJWeeMC0cCMExYoY1Ahzw0L7mEiCaJzIqyZmBwpjQK/vP1jVtNb13UKsT ERbeh+834O6Z0QkTbVULMDfL1tCDxAwqeFEM15pPj6CRHRj9Lo0x8l/SP7J2a4X5 XlUU44/nmj+VTUQdNQ== -----END CERTIFICATE-----Generated at Wed Nov 5 19:45:17 2025 by rpki-client