$ rpki-client -vvf rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/3136382e3139352e32302e302f32342d3234203d3e20323635343139.roa File: 3136382e3139352e32302e302f32342d3234203d3e20323635343139.roa (raw, json) Hash identifier: 4FZL04lwkL/tnGe6n+oq6LmJhu7AQ4mz0o6T9CF6w58= Subject key identifier: C7:3C:8E:AC:85:58:26:56:22:3A:2E:E7:FA:78:41:73:E5:8F:C7:0E Certificate issuer: /CN=C3D3A336BF4C81420EDC1D4CB494D84D3714E13A Certificate serial: 2D5534BFA78395DBF7F6894522A1301E1A037EC4 Authority key identifier: C3:D3:A3:36:BF:4C:81:42:0E:DC:1D:4C:B4:94:D8:4D:37:14:E1:3A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3D3A336BF4C81420EDC1D4CB494D84D3714E13A.cer Subject info access: rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/3136382e3139352e32302e302f32342d3234203d3e20323635343139.roa Signing time: Mon 16 Jun 2025 13:36:28 +0000 ROA not before: Mon 16 Jun 2025 13:31:28 +0000 ROA not after: Mon 15 Jun 2026 13:36:28 +0000 asID: 265419 IP address blocks: 168.195.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/C3D3A336BF4C81420EDC1D4CB494D84D3714E13A.crl rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/C3D3A336BF4C81420EDC1D4CB494D84D3714E13A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3D3A336BF4C81420EDC1D4CB494D84D3714E13A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 20 Jun 2025 17:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:55:34:bf:a7:83:95:db:f7:f6:89:45:22:a1:30:1e:1a:03:7e:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3D3A336BF4C81420EDC1D4CB494D84D3714E13A Validity Not Before: Jun 16 13:31:28 2025 GMT Not After : Jun 15 13:36:28 2026 GMT Subject: CN=C73C8EAC85582656223A2EE7FA784173E58FC70E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:20:bf:72:c4:ed:12:f6:72:07:4c:76:2d:d7: fe:03:74:4b:dd:bb:06:46:d3:11:e2:90:7d:0b:ba: 97:b9:9b:6c:92:d0:b1:71:98:0e:b4:f3:9d:bd:11: 1f:41:4e:70:e7:c3:73:e8:d8:71:a8:53:74:44:97: be:13:9f:5c:0b:f6:78:ba:10:fa:41:47:23:4e:04: ca:bf:d9:a8:5e:e3:86:6a:5d:4f:2e:69:06:a9:40: 60:8d:54:4f:34:f3:b2:fb:ab:3b:94:67:fc:2f:0b: 09:91:62:53:bc:b9:68:a4:13:b2:95:48:74:f0:78: 56:5b:95:de:ab:a2:e7:e7:a3:6b:05:40:38:e7:dc: 72:07:e7:18:ed:79:56:78:cc:c0:e9:86:ed:60:e5: 08:0a:dc:05:c7:f0:02:fb:bd:44:57:da:1e:a9:92: c6:8c:66:8f:56:24:a2:1d:2b:4f:11:ec:1c:92:3b: c5:e3:17:22:18:db:ca:d8:a6:fa:ba:d3:80:8a:c0: 40:7a:ca:03:0c:77:c3:20:14:f8:91:d8:fe:89:b4: 84:c9:66:9c:5f:9c:bb:ee:b6:52:03:3a:c1:4e:79: a1:86:9f:af:ef:0a:21:80:e8:3b:1a:0c:ea:dc:51: db:0b:89:6a:ef:74:1e:12:99:cb:f9:02:61:04:cf: e8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:3C:8E:AC:85:58:26:56:22:3A:2E:E7:FA:78:41:73:E5:8F:C7:0E X509v3 Authority Key Identifier: keyid:C3:D3:A3:36:BF:4C:81:42:0E:DC:1D:4C:B4:94:D8:4D:37:14:E1:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/C3D3A336BF4C81420EDC1D4CB494D84D3714E13A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3D3A336BF4C81420EDC1D4CB494D84D3714E13A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/3136382e3139352e32302e302f32342d3234203d3e20323635343139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.195.20.0/24 Signature Algorithm: sha256WithRSAEncryption bd:c3:ed:03:ce:59:40:43:d4:90:e1:ae:08:20:30:51:bd:4d: 45:86:38:dd:79:46:7a:c9:d8:b4:c5:d8:8f:a6:41:ad:4c:6c: 9c:c9:29:d5:1d:91:8f:84:51:39:b1:aa:68:ae:97:9b:b2:23: 05:09:d9:42:e4:db:f2:d9:d8:1c:ac:f7:bf:d8:72:0a:4f:44: f2:1e:18:38:43:91:a1:45:01:33:55:0d:3d:34:61:47:e2:ae: a9:0b:20:25:4c:44:87:8d:3e:95:53:03:6c:b8:50:50:7f:9d: 6c:36:49:d0:9c:dc:75:75:a0:91:7f:4d:1d:95:41:ed:6a:08: 73:c1:10:2f:4b:17:35:ae:a2:6e:87:05:07:9d:68:19:0b:28: 60:48:2c:38:bd:7d:ba:7e:73:c8:10:25:b9:18:ec:74:06:7f: 30:a2:2a:9e:d9:6f:61:16:ba:e5:e6:55:22:94:b7:03:1e:dd: 75:24:4c:a1:98:df:fb:55:a9:80:6b:ce:98:8d:c5:f6:6a:75: 99:e7:fe:50:56:7b:c8:67:4b:69:73:41:9d:3c:0d:27:b9:b7: de:a2:03:fc:c0:80:5a:09:8c:2d:4b:9f:ab:58:3a:09:57:d8: 33:3b:5d:d7:54:9f:3e:b1:87:e8:34:d3:ae:37:fd:ba:dc:af: 8c:e9:9a:6c -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIULVU0v6eDldv39olFIqEwHhoDfsQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNEM0EzMzZCRjRDODE0MjBFREMxRDRDQjQ5NEQ4NEQz NzE0RTEzQTAeFw0yNTA2MTYxMzMxMjhaFw0yNjA2MTUxMzM2MjhaMDMxMTAvBgNV BAMTKEM3M0M4RUFDODU1ODI2NTYyMjNBMkVFN0ZBNzg0MTczRTU4RkM3MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzIL9yxO0S9nIHTHYt1/4DdEvd uwZG0xHikH0Lupe5m2yS0LFxmA608529ER9BTnDnw3Po2HGoU3REl74Tn1wL9ni6 EPpBRyNOBMq/2ahe44ZqXU8uaQapQGCNVE8087L7qzuUZ/wvCwmRYlO8uWikE7KV SHTweFZbld6roufno2sFQDjn3HIH5xjteVZ4zMDphu1g5QgK3AXH8AL7vURX2h6p ksaMZo9WJKIdK08R7BySO8XjFyIY28rYpvq604CKwEB6ygMMd8MgFPiR2P6JtITJ ZpxfnLvutlIDOsFOeaGGn6/vCiGA6DsaDOrcUdsLiWrvdB4Smcv5AmEEz+iHAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUxzyOrIVYJlYiOi7n+nhBc+WPxw4wHwYDVR0j BBgwFoAUw9OjNr9MgUIO3B1MtJTYTTcU4TowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSHJZZG5wNnNxOWdUeWMxTXBKVmFTejZhNEI5TWhIU1VlSnJ4eFNBd3Ry OGMvMC9DM0QzQTMzNkJGNEM4MTQyMEVEQzFENENCNDk0RDg0RDM3MTRFMTNBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MzRDNBMzM2QkY0QzgxNDIw RURDMUQ0Q0I0OTREODREMzcxNEUxM0EuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0hyWWRucDZzcTlnVHljMU1wSlZhU3o2YTRCOU1oSFNVZUpyeHhTQXd0cjhjLzAv MzEzNjM4MmUzMTM5MzUyZTMyMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2 MzUzNDMxMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACowxQwDQYJKoZIhvcNAQELBQADggEBAL3D7QPO WUBD1JDhrgggMFG9TUWGON15RnrJ2LTF2I+mQa1MbJzJKdUdkY+EUTmxqmiul5uy IwUJ2ULk2/LZ2Bys97/YcgpPRPIeGDhDkaFFATNVDT00YUfirqkLICVMRIeNPpVT A2y4UFB/nWw2SdCc3HV1oJF/TR2VQe1qCHPBEC9LFzWuom6HBQedaBkLKGBILDi9 fbp+c8gQJbkY7HQGfzCiKp7Zb2EWuuXmVSKUtwMe3XUkTKGY3/tVqYBrzpiNxfZq dZnn/lBWe8hnS2lzQZ08DSe5t96iA/zAgFoJjC1Ln6tYOglX2DM7XddUnz6xh+g0 0643/brcr4zpmmw= -----END CERTIFICATE-----Generated at Fri Jun 20 05:46:23 2025 by rpki-client