$ rpki-client -vvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3134332e3130382e3132382e302f31382d3234203d3e20313334393930.roa File: 3134332e3130382e3132382e302f31382d3234203d3e20313334393930.roa (raw, json) Hash identifier: tSmC/rJhmjJeA9TY1bxBBPgssb+Iiy0AuKhxY2YZKPk= Subject key identifier: D1:CD:17:CA:01:9E:FF:E8:9E:06:B1:55:32:29:7D:4C:16:66:C0:C3 Certificate issuer: /CN=47F9B7F1523B5B333E71404DF4D659EB16D1D775 Certificate serial: 5CCAD22D178B43F9492F5AADBB10CE48E7977C00 Authority key identifier: 47:F9:B7:F1:52:3B:5B:33:3E:71:40:4D:F4:D6:59:EB:16:D1:D7:75 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F9B7F1523B5B333E71404DF4D659EB16D1D775.cer Subject info access: rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3134332e3130382e3132382e302f31382d3234203d3e20313334393930.roa Signing time: Tue 29 Apr 2025 05:40:26 +0000 ROA not before: Tue 29 Apr 2025 05:35:26 +0000 ROA not after: Tue 28 Apr 2026 05:40:26 +0000 asID: 134990 IP address blocks: 143.108.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/47F9B7F1523B5B333E71404DF4D659EB16D1D775.crl rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/47F9B7F1523B5B333E71404DF4D659EB16D1D775.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F9B7F1523B5B333E71404DF4D659EB16D1D775.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 11 May 2025 03:54:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:ca:d2:2d:17:8b:43:f9:49:2f:5a:ad:bb:10:ce:48:e7:97:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47F9B7F1523B5B333E71404DF4D659EB16D1D775 Validity Not Before: Apr 29 05:35:26 2025 GMT Not After : Apr 28 05:40:26 2026 GMT Subject: CN=D1CD17CA019EFFE89E06B15532297D4C1666C0C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f4:65:aa:26:75:b9:d6:e9:94:c7:57:82:6e: fc:46:eb:18:4c:61:9e:f8:59:ed:71:91:e5:11:78: 5d:e4:f1:bf:a7:0b:b7:d6:4f:56:8b:09:c5:70:5f: 28:ee:ab:52:c3:2d:6b:fb:2e:0a:c6:42:be:6a:15: fd:06:6f:79:40:3c:0f:72:e6:71:8f:2d:85:8d:c7: 09:1b:44:01:ff:29:81:9a:18:7b:c6:e6:43:fe:78: c4:c6:d0:f9:27:d2:f0:ce:5b:b3:9f:7f:53:2a:2f: 25:7d:17:f4:18:b4:fa:3a:87:52:12:67:62:50:e7: 54:fa:91:b8:48:0b:ee:d4:a6:fe:82:b4:a9:ad:f0: 3c:a9:45:26:03:2e:b3:63:cc:fc:51:3f:91:7c:3f: f0:5b:5f:3f:95:52:1d:4d:8b:4a:81:a6:68:59:32: 40:55:ce:dc:7b:eb:63:f4:6f:9d:83:0c:53:9c:56: fb:7d:78:f8:67:b2:13:07:42:49:46:d3:cf:1d:f6: 37:ce:ad:8b:88:a0:5d:3a:4a:35:ad:9a:bf:b9:dd: fa:f2:78:66:39:c9:b1:88:02:3f:c4:96:92:6b:37: 0b:29:f7:a0:16:16:cd:50:45:0e:71:46:57:db:4f: 8d:39:95:01:39:6f:f4:1f:03:2a:ba:81:c0:89:0d: 58:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:CD:17:CA:01:9E:FF:E8:9E:06:B1:55:32:29:7D:4C:16:66:C0:C3 X509v3 Authority Key Identifier: keyid:47:F9:B7:F1:52:3B:5B:33:3E:71:40:4D:F4:D6:59:EB:16:D1:D7:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/47F9B7F1523B5B333E71404DF4D659EB16D1D775.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F9B7F1523B5B333E71404DF4D659EB16D1D775.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3134332e3130382e3132382e302f31382d3234203d3e20313334393930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.108.128.0/18 Signature Algorithm: sha256WithRSAEncryption 4f:b3:4c:8b:ee:b8:57:c6:79:1a:9b:00:a7:e6:91:6d:88:81: 2d:be:9e:ac:2f:5f:79:23:14:23:76:ee:fe:96:fc:02:36:2d: 93:22:e7:bb:ac:6a:3c:d5:64:49:1e:0c:00:d3:ac:1c:f4:ec: 14:01:08:df:ea:ae:f7:15:4b:21:5a:fa:15:0d:39:21:25:1e: a3:c3:c2:37:55:14:21:82:fd:c2:b4:19:90:c7:4b:6f:de:e4: 82:89:82:e7:e4:ef:72:86:f4:08:fb:76:26:ba:ae:c0:bd:ba: 3a:fb:21:44:45:95:fd:13:51:93:aa:71:6f:cb:6c:0a:5a:b8: 39:2a:1b:a8:44:a9:7a:ca:5f:27:53:ff:31:12:46:c7:9c:8e: 91:f5:1e:bd:8d:1c:97:91:5f:29:63:52:a8:25:25:95:85:e7: 96:e7:f1:25:e7:d2:93:30:10:c1:1d:57:cb:35:8b:e4:98:e6: fb:d2:f2:1f:cf:5c:20:0f:d6:83:4e:0c:dc:57:9e:be:62:b7: 58:be:ec:70:be:62:6a:b7:06:ae:f1:2b:82:2f:ff:1e:ba:a5: ff:da:5a:26:5a:43:d5:61:26:75:77:09:62:64:2f:c6:32:c1: 08:42:bd:3a:4f:72:8d:fe:46:20:c3:24:bf:74:ba:60:c1:c3: 0b:d5:d4:a7 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUXMrSLReLQ/lJL1qtuxDOSOeXfAAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdGOUI3RjE1MjNCNUIzMzNFNzE0MDRERjRENjU5RUIx NkQxRDc3NTAeFw0yNTA0MjkwNTM1MjZaFw0yNjA0MjgwNTQwMjZaMDMxMTAvBgNV BAMTKEQxQ0QxN0NBMDE5RUZGRTg5RTA2QjE1NTMyMjk3RDRDMTY2NkMwQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg9GWqJnW51umUx1eCbvxG6xhM YZ74We1xkeUReF3k8b+nC7fWT1aLCcVwXyjuq1LDLWv7LgrGQr5qFf0Gb3lAPA9y 5nGPLYWNxwkbRAH/KYGaGHvG5kP+eMTG0Pkn0vDOW7Off1MqLyV9F/QYtPo6h1IS Z2JQ51T6kbhIC+7Upv6CtKmt8DypRSYDLrNjzPxRP5F8P/BbXz+VUh1Ni0qBpmhZ MkBVztx762P0b52DDFOcVvt9ePhnshMHQklG088d9jfOrYuIoF06SjWtmr+53fry eGY5ybGIAj/ElpJrNwsp96AWFs1QRQ5xRlfbT405lQE5b/QfAyq6gcCJDVi/AgMB AAGjggJTMIICTzAdBgNVHQ4EFgQU0c0XygGe/+ieBrFVMil9TBZmwMMwHwYDVR0j BBgwFoAUR/m38VI7WzM+cUBN9NZZ6xbR13UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHhweUpOVlpTZjROYXRWQkFzb3g5UlllcGJpRFd4dGNVVTlYWGRlN1VM SmovMC80N0Y5QjdGMTUyM0I1QjMzM0U3MTQwNERGNEQ2NTlFQjE2RDFENzc1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ3RjlCN0YxNTIzQjVCMzMz RTcxNDA0REY0RDY1OUVCMTZEMUQ3NzUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzR4cHlKTlZaU2Y0TmF0VkJBc294OVJZZXBiaURXeHRjVVU5WFhkZTdVTEpqLzAv MzEzNDMzMmUzMTMwMzgyZTMxMzIzODJlMzAyZjMxMzgyZDMyMzQyMDNkM2UyMDMx MzMzNDM5MzkzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEBo9sgDANBgkqhkiG9w0BAQsFAAOCAQEAT7NM i+64V8Z5GpsAp+aRbYiBLb6erC9feSMUI3bu/pb8AjYtkyLnu6xqPNVkSR4MANOs HPTsFAEI3+qu9xVLIVr6FQ05ISUeo8PCN1UUIYL9wrQZkMdLb97kgomC5+Tvcob0 CPt2JrquwL26OvshREWV/RNRk6pxb8tsClq4OSobqESpespfJ1P/MRJGx5yOkfUe vY0cl5FfKWNSqCUllYXnlufxJefSkzAQwR1XyzWL5Jjm+9LyH89cIA/Wg04M3Fee vmK3WL7scL5iarcGrvErgi//Hrql/9paJlpD1WEmdXcJYmQvxjLBCEK9Ok9yjf5G IMMkv3S6YMHDC9XUpw== -----END CERTIFICATE-----Generated at Sat May 10 17:55:29 2025 by rpki-client