$ rpki-client -vvf rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3137302e3233332e35322e302f32322d3234203d3e203532353437.roa File: 3137302e3233332e35322e302f32322d3234203d3e203532353437.roa (raw, json) Hash identifier: f+dLS6lFS6QntvaUj/oGAyGXboGiBaVhLCL7tDDqBv8= Subject key identifier: CB:1A:10:FE:71:20:91:10:37:FE:29:ED:C4:75:A8:A7:9C:2A:D0:A5 Certificate issuer: /CN=FF5D171186C7F92AA82E56A3848B9D1390938458 Certificate serial: 7BBD35BD53CA9FD7980339A17B4A29C85351F5A8 Authority key identifier: FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer Subject info access: rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3137302e3233332e35322e302f32322d3234203d3e203532353437.roa Signing time: Wed 30 Apr 2025 18:28:54 +0000 ROA not before: Wed 30 Apr 2025 18:23:54 +0000 ROA not after: Wed 29 Apr 2026 18:28:54 +0000 asID: 52547 IP address blocks: 170.233.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 13:58:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:bd:35:bd:53:ca:9f:d7:98:03:39:a1:7b:4a:29:c8:53:51:f5:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF5D171186C7F92AA82E56A3848B9D1390938458 Validity Not Before: Apr 30 18:23:54 2025 GMT Not After : Apr 29 18:28:54 2026 GMT Subject: CN=CB1A10FE7120911037FE29EDC475A8A79C2AD0A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:61:02:08:2b:39:36:2a:bd:7e:11:9a:b0:af: bd:21:c5:06:0b:a4:78:4e:98:eb:80:b6:09:c3:bb: b1:f1:a4:13:e6:28:21:69:c8:8b:2d:33:05:4e:4d: 13:df:22:51:22:e1:bb:e8:ba:8e:05:4a:62:01:d4: 70:f3:3b:c2:7f:7b:f8:8a:e0:af:81:10:73:d1:e0: ae:52:ed:d9:d7:cc:ad:58:aa:5e:25:9d:75:8b:37: c5:68:e4:31:b7:4b:e6:59:38:1b:de:15:0e:fe:cb: 40:1f:06:fd:0c:aa:73:36:39:7e:5a:e7:ed:0a:02: a5:ad:e6:f8:a3:11:58:7f:e2:a5:42:83:70:83:01: f4:93:21:6d:08:45:ad:ef:70:76:9e:f2:5d:de:e6: 1f:ef:73:9d:0e:e1:6b:f9:6a:c6:b8:68:db:ef:24: e6:58:22:88:b8:d4:59:f2:f5:4f:32:6c:8f:8f:5a: f6:cf:1c:3a:76:4d:e2:a1:e0:0c:02:f6:fb:e2:64: aa:8f:c4:2b:52:76:7a:da:d3:d3:4a:4d:10:06:37: b6:ac:69:eb:78:68:e1:61:d8:2f:51:60:f2:62:93: 9b:a9:42:8e:9b:1b:c8:59:da:c7:29:4c:6c:6c:b1: fd:4e:32:0e:0b:8e:61:af:62:6a:0b:f8:0b:8d:cc: d9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:1A:10:FE:71:20:91:10:37:FE:29:ED:C4:75:A8:A7:9C:2A:D0:A5 X509v3 Authority Key Identifier: keyid:FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3137302e3233332e35322e302f32322d3234203d3e203532353437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.233.52.0/22 Signature Algorithm: sha256WithRSAEncryption 9a:f1:4d:d0:a3:3e:59:b3:13:0a:89:e5:0f:95:41:98:db:d1: 1a:82:b5:ef:29:07:e3:dd:72:a5:01:7a:54:0c:7b:90:22:58: 61:ae:d6:00:7b:80:d3:7a:15:bc:17:7b:7d:e1:02:26:0f:de: cc:0a:f0:32:35:2b:56:55:59:0c:8f:1c:f1:a1:a1:c4:af:83: 4a:94:cf:7c:c6:f8:82:95:5c:81:7b:83:c5:54:58:97:fb:51: c9:f7:aa:c7:00:dd:e3:b5:39:b5:36:07:72:07:40:29:fd:ad: 47:bf:81:f3:52:18:97:46:5a:cd:f6:b6:40:54:95:bd:0d:e6: 4b:cc:68:d2:3e:b9:10:23:67:44:97:b7:7a:0a:4f:bd:47:d2: 88:b8:09:6d:2e:62:d8:05:ba:ec:02:35:12:e4:00:d7:c9:ee: 2a:bd:fa:dc:09:05:23:71:93:d3:fb:00:fc:ee:22:ff:b0:ee: 75:0b:e3:55:70:cc:00:27:7f:98:27:17:53:4a:a1:d6:8b:c7: 38:7f:00:06:40:4b:8a:58:37:c1:ef:9c:10:b4:95:49:1e:b0: a5:88:c9:8a:f4:1c:66:52:0b:7e:8a:45:38:c8:54:8a:d9:84: e0:92:be:6c:1f:52:80:30:d1:30:d5:e8:6d:bf:cd:b5:00:19: 41:34:6c:f2 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUe701vVPKn9eYAzmhe0opyFNR9agwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY1RDE3MTE4NkM3RjkyQUE4MkU1NkEzODQ4QjlEMTM5 MDkzODQ1ODAeFw0yNTA0MzAxODIzNTRaFw0yNjA0MjkxODI4NTRaMDMxMTAvBgNV BAMTKENCMUExMEZFNzEyMDkxMTAzN0ZFMjlFREM0NzVBOEE3OUMyQUQwQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWYQIIKzk2Kr1+EZqwr70hxQYL pHhOmOuAtgnDu7HxpBPmKCFpyIstMwVOTRPfIlEi4bvouo4FSmIB1HDzO8J/e/iK 4K+BEHPR4K5S7dnXzK1Yql4lnXWLN8Vo5DG3S+ZZOBveFQ7+y0AfBv0MqnM2OX5a 5+0KAqWt5vijEVh/4qVCg3CDAfSTIW0IRa3vcHae8l3e5h/vc50O4Wv5asa4aNvv JOZYIoi41Fny9U8ybI+PWvbPHDp2TeKh4AwC9vviZKqPxCtSdnra09NKTRAGN7as aet4aOFh2C9RYPJik5upQo6bG8hZ2scpTGxssf1OMg4LjmGvYmoL+AuNzNnJAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUyxoQ/nEgkRA3/intxHWop5wq0KUwHwYDVR0j BBgwFoAU/10XEYbH+SqoLlajhIudE5CThFgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFZhQk5wY01LenE3REJ6eEFOVVBmUUNnSFNEMUUzemF1VFhDc2NWaVc0 SDQvMC9GRjVEMTcxMTg2QzdGOTJBQTgyRTU2QTM4NDhCOUQxMzkwOTM4NDU4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGNUQxNzExODZDN0Y5MkFB ODJFNTZBMzg0OEI5RDEzOTA5Mzg0NTguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0RWYUJOcGNNS3pxN0RCenhBTlVQZlFDZ0hTRDFFM3phdVRYQ3NjVmlXNEg0LzAv MzEzNzMwMmUzMjMzMzMyZTM1MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMy MzUzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQCquk0MA0GCSqGSIb3DQEBCwUAA4IBAQCa8U3Qoz5Z sxMKieUPlUGY29EagrXvKQfj3XKlAXpUDHuQIlhhrtYAe4DTehW8F3t94QImD97M CvAyNStWVVkMjxzxoaHEr4NKlM98xviClVyBe4PFVFiX+1HJ96rHAN3jtTm1Ngdy B0Ap/a1Hv4HzUhiXRlrN9rZAVJW9DeZLzGjSPrkQI2dEl7d6Ck+9R9KIuAltLmLY BbrsAjUS5ADXye4qvfrcCQUjcZPT+wD87iL/sO51C+NVcMwAJ3+YJxdTSqHWi8c4 fwAGQEuKWDfB75wQtJVJHrCliMmK9BxmUgt+ikU4yFSK2YTgkr5sH1KAMNEw1eht v821ABlBNGzy -----END CERTIFICATE-----Generated at Thu May 1 16:06:25 2025 by rpki-client