$ rpki-client -vvf rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/3137302e3233332e3132302e302f32342d3234203d3e20323635303830.roa File: 3137302e3233332e3132302e302f32342d3234203d3e20323635303830.roa (raw, json) Hash identifier: BE7scLGOCGnw+q7Y76r+nhaWT0hJe04yZx4QkdirgbI= Subject key identifier: C9:0E:8B:34:2E:4B:04:68:F6:B8:59:DE:EF:18:FF:66:F0:24:32:0E Certificate issuer: /CN=D541B9E1C0D6AC17BF115BB1B7A87B29BEDDB0DF Certificate serial: 71B4AADAC986AC9100D4888C4F891D298DB1A657 Authority key identifier: D5:41:B9:E1:C0:D6:AC:17:BF:11:5B:B1:B7:A8:7B:29:BE:DD:B0:DF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D541B9E1C0D6AC17BF115BB1B7A87B29BEDDB0DF.cer Subject info access: rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/3137302e3233332e3132302e302f32342d3234203d3e20323635303830.roa Signing time: Wed 30 Apr 2025 17:17:50 +0000 ROA not before: Wed 30 Apr 2025 17:12:50 +0000 ROA not after: Wed 29 Apr 2026 17:17:50 +0000 asID: 265080 IP address blocks: 170.233.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/D541B9E1C0D6AC17BF115BB1B7A87B29BEDDB0DF.crl rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/D541B9E1C0D6AC17BF115BB1B7A87B29BEDDB0DF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D541B9E1C0D6AC17BF115BB1B7A87B29BEDDB0DF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 03 May 2025 08:57:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:b4:aa:da:c9:86:ac:91:00:d4:88:8c:4f:89:1d:29:8d:b1:a6:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D541B9E1C0D6AC17BF115BB1B7A87B29BEDDB0DF Validity Not Before: Apr 30 17:12:50 2025 GMT Not After : Apr 29 17:17:50 2026 GMT Subject: CN=C90E8B342E4B0468F6B859DEEF18FF66F024320E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2d:cd:81:10:04:d5:ca:9a:9e:3e:f9:97:8e: 07:35:2a:5b:29:c0:6a:f2:d5:90:bf:f2:80:db:6e: 49:2e:68:4d:06:9e:85:7f:2c:47:f6:eb:1b:4f:62: 17:68:7d:28:5e:bf:eb:7b:5d:df:0a:15:8d:9a:63: 23:32:c4:7b:1e:6c:23:ef:6c:39:03:3b:5a:f9:4c: ff:76:72:2e:8a:55:6d:8b:59:24:b4:de:f8:70:15: a0:a9:fe:ce:26:46:5b:62:75:3f:c2:b7:15:7d:cb: 88:cc:19:4b:5f:a0:c3:96:d4:a0:f8:64:1c:cf:a6: c5:1d:64:96:7f:a6:e7:2b:32:59:e0:26:9f:82:c6: 40:7a:8c:8e:96:a8:aa:89:1f:46:0e:d6:e4:14:41: b7:a0:f9:1c:7b:9f:7e:d2:e3:96:38:2b:84:b0:d2: b8:37:72:e9:26:e5:a0:b2:2c:38:e5:6c:59:a2:71: 70:e6:80:3a:84:a9:4b:13:dc:93:56:aa:8a:ba:ae: c7:a5:68:f8:92:4d:44:3b:d7:78:a2:f1:7d:a6:f9: 3d:22:41:66:66:2c:bd:aa:c6:41:0b:9d:40:77:62: e7:51:10:14:53:f5:e5:65:1a:be:e2:91:19:e2:a6: a0:c2:3e:eb:2f:6d:c4:86:8d:d9:76:3a:cc:37:89: c8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:0E:8B:34:2E:4B:04:68:F6:B8:59:DE:EF:18:FF:66:F0:24:32:0E X509v3 Authority Key Identifier: keyid:D5:41:B9:E1:C0:D6:AC:17:BF:11:5B:B1:B7:A8:7B:29:BE:DD:B0:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/D541B9E1C0D6AC17BF115BB1B7A87B29BEDDB0DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D541B9E1C0D6AC17BF115BB1B7A87B29BEDDB0DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/3137302e3233332e3132302e302f32342d3234203d3e20323635303830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.233.120.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:fb:10:65:10:6f:e2:bd:1d:02:c2:ee:c4:63:63:15:16:d0: 16:05:0f:ef:81:23:42:d1:9b:f2:d0:45:b2:f7:a1:8b:87:3b: 90:5e:bb:da:29:d9:02:1f:e0:e0:ac:d2:86:0e:28:9d:53:9c: bf:cc:b9:96:e7:05:71:b1:79:ec:de:28:fe:7a:00:88:c8:93: 98:c2:46:29:39:47:fd:8d:2b:b1:0a:9e:7f:c4:22:77:ea:f2: cf:cd:b8:6e:53:c5:42:c2:41:48:0c:3f:fd:49:d9:4f:e9:de: 94:c4:2b:8d:1a:d5:db:bd:1a:94:c2:9f:41:af:0a:93:9c:3d: 75:c8:af:2e:cf:98:16:ec:48:b1:db:f7:71:ad:26:81:b1:6d: d4:eb:d6:54:12:00:b7:35:a0:cf:41:6e:d7:12:94:33:41:b6: 44:65:75:a9:6c:50:d8:a1:92:50:76:84:ce:16:43:0f:1f:28: d8:e3:cc:3f:09:00:20:6c:c5:7e:53:c9:19:18:dc:c2:32:27: ad:42:eb:9c:66:80:b4:85:a3:58:9c:f6:ca:36:32:c8:cd:fd: 73:cd:34:ac:80:c7:ae:c1:5b:6d:3e:02:f9:9a:d5:a0:9b:fc: 17:cd:67:f8:84:fa:0c:2f:c3:f4:61:4a:c2:89:49:5a:6b:e0: 2e:df:4e:01 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUcbSq2smGrJEA1IiMT4kdKY2xplcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU0MUI5RTFDMEQ2QUMxN0JGMTE1QkIxQjdBODdCMjlC RUREQjBERjAeFw0yNTA0MzAxNzEyNTBaFw0yNjA0MjkxNzE3NTBaMDMxMTAvBgNV BAMTKEM5MEU4QjM0MkU0QjA0NjhGNkI4NTlERUVGMThGRjY2RjAyNDMyMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgLc2BEATVypqePvmXjgc1Klsp wGry1ZC/8oDbbkkuaE0GnoV/LEf26xtPYhdofShev+t7Xd8KFY2aYyMyxHsebCPv bDkDO1r5TP92ci6KVW2LWSS03vhwFaCp/s4mRltidT/CtxV9y4jMGUtfoMOW1KD4 ZBzPpsUdZJZ/pucrMlngJp+CxkB6jI6WqKqJH0YO1uQUQbeg+Rx7n37S45Y4K4Sw 0rg3cukm5aCyLDjlbFmicXDmgDqEqUsT3JNWqoq6rselaPiSTUQ713ii8X2m+T0i QWZmLL2qxkELnUB3YudREBRT9eVlGr7ikRnipqDCPusvbcSGjdl2Osw3icilAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUyQ6LNC5LBGj2uFne7xj/ZvAkMg4wHwYDVR0j BBgwFoAU1UG54cDWrBe/EVuxt6h7Kb7dsN8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRkZYa0xrYUtYSGVyWExwZlVBc283MzZyUUVlbnFNcGl2NlFlaEZ3bVUx dlcvMC9ENTQxQjlFMUMwRDZBQzE3QkYxMTVCQjFCN0E4N0IyOUJFRERCMERGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1NDFCOUUxQzBENkFDMTdC RjExNUJCMUI3QTg3QjI5QkVEREIwREYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0ZGWGtMa2FLWEhlclhMcGZVQXNvNzM2clFFZW5xTXBpdjZRZWhGd21VMXZXLzAv MzEzNzMwMmUzMjMzMzMyZTMxMzIzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy MzYzNTMwMzgzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKrpeDANBgkqhkiG9w0BAQsFAAOCAQEADPsQ ZRBv4r0dAsLuxGNjFRbQFgUP74EjQtGb8tBFsvehi4c7kF672inZAh/g4KzShg4o nVOcv8y5lucFcbF57N4o/noAiMiTmMJGKTlH/Y0rsQqef8Qid+ryz824blPFQsJB SAw//UnZT+nelMQrjRrV270alMKfQa8Kk5w9dcivLs+YFuxIsdv3ca0mgbFt1OvW VBIAtzWgz0Fu1xKUM0G2RGV1qWxQ2KGSUHaEzhZDDx8o2OPMPwkAIGzFflPJGRjc wjInrULrnGaAtIWjWJz2yjYyyM39c800rIDHrsFbbT4C+ZrVoJv8F81n+IT6DC/D 9GFKwolJWmvgLt9OAQ== -----END CERTIFICATE-----Generated at Fri May 2 21:39:28 2025 by rpki-client