$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3136382e3230352e36302e302f32332d3233203d3e20323633363431.roa File: 3136382e3230352e36302e302f32332d3233203d3e20323633363431.roa (raw, json) Hash identifier: wqxJXD8qtQrM+CMU1O+fktoh4kGWSRnuavZviGgOAnE= Subject key identifier: 6C:FC:43:D7:A2:D2:3C:1D:89:7A:7E:E6:A9:C6:3E:C6:9E:DE:A0:FC Certificate issuer: /CN=68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F Certificate serial: 5498D2A69AB53E5E726DCA1169D4C7585B5B34DE Authority key identifier: 68:D2:D3:D7:C2:F7:A7:3F:8D:5D:22:BC:53:0D:02:F8:A3:64:46:1F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.cer Subject info access: rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3136382e3230352e36302e302f32332d3233203d3e20323633363431.roa Signing time: Mon 30 Jun 2025 01:10:20 +0000 ROA not before: Mon 30 Jun 2025 01:05:20 +0000 ROA not after: Mon 29 Jun 2026 01:10:20 +0000 asID: 263641 IP address blocks: 168.205.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.crl rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 04 Jul 2025 17:09:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:98:d2:a6:9a:b5:3e:5e:72:6d:ca:11:69:d4:c7:58:5b:5b:34:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F Validity Not Before: Jun 30 01:05:20 2025 GMT Not After : Jun 29 01:10:20 2026 GMT Subject: CN=6CFC43D7A2D23C1D897A7EE6A9C63EC69EDEA0FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a8:ea:3d:f8:8a:b1:4a:0a:c4:18:be:83:ad: 0e:49:fd:c0:26:ce:53:0d:33:c3:17:24:bd:16:37: 72:7f:87:6b:54:a3:de:45:1f:9f:c7:20:5e:0c:57: bc:c6:26:92:89:5e:0a:7a:6b:8f:2c:39:1c:14:60: aa:7e:c1:f7:ee:f8:5f:0e:1a:7a:27:be:f0:be:2f: 84:cb:41:f5:c8:8e:74:58:08:7d:8b:35:7d:b7:b3: d9:30:e4:af:8a:26:3d:44:49:f5:92:b6:19:36:65: eb:81:30:c3:a2:ff:02:72:70:20:54:64:82:b0:33: 58:34:59:54:29:6d:58:8c:de:e3:55:04:4c:0f:2f: 16:91:88:06:26:0f:c6:be:0b:e2:8d:94:de:ac:be: a5:8a:4b:eb:9a:fd:86:f4:68:6e:3b:55:1c:31:c3: 23:4c:49:cb:69:89:4b:bb:c6:da:81:46:1c:44:67: 2a:75:5d:c9:56:49:0b:75:59:f0:33:0d:cc:f5:5f: 27:57:d5:9a:f0:41:38:62:d0:6a:42:5a:ff:de:da: 81:df:e6:fc:80:07:47:49:cb:66:9c:63:e4:f5:6f: 43:ba:b6:78:a4:f0:de:8b:99:0a:b1:0b:68:30:49: 98:47:77:3f:5e:72:fd:48:9b:70:b5:dd:6e:5b:f7: 00:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:FC:43:D7:A2:D2:3C:1D:89:7A:7E:E6:A9:C6:3E:C6:9E:DE:A0:FC X509v3 Authority Key Identifier: keyid:68:D2:D3:D7:C2:F7:A7:3F:8D:5D:22:BC:53:0D:02:F8:A3:64:46:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3136382e3230352e36302e302f32332d3233203d3e20323633363431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.205.60.0/23 Signature Algorithm: sha256WithRSAEncryption 8b:f1:88:ce:4d:dd:51:f3:24:e1:11:c8:b3:46:e9:0b:00:27: 97:f0:b9:ec:b3:f6:b7:b7:3e:5d:0a:e7:45:5b:9b:f5:86:60: 02:f9:7d:fa:55:7e:7d:bd:c9:fe:b1:9b:47:8f:2a:10:b6:42: 3e:cd:db:c9:b7:92:b2:be:f8:1a:fa:67:0b:a1:ac:61:5a:24: da:d0:3d:b6:94:1e:be:7d:23:05:95:bd:c4:54:94:66:f1:75: 0e:60:f5:80:f6:90:60:7b:4d:e4:5b:4d:b0:a1:90:4d:c1:6a: 4b:a5:b1:8c:76:3a:de:c6:fc:87:74:39:77:66:7b:26:a5:b9: 3a:42:d4:7a:c2:eb:f0:56:36:1a:59:a5:bb:bc:93:90:fa:d3: b7:41:b5:6d:55:72:15:08:30:a6:21:f1:df:90:7e:68:c2:4d: f9:b7:8d:55:88:61:32:ed:f4:f4:e6:c1:be:21:e4:79:cf:96: 6a:9e:b0:77:aa:74:83:e4:3d:da:26:b6:8b:d0:01:2f:ce:bd: 01:e1:c1:62:2a:4f:55:b7:1a:2e:1e:71:14:a8:ee:e3:1d:15: 76:e6:16:f3:eb:20:5e:13:ca:4b:c8:b7:5f:cb:5b:be:f8:3e: 69:e9:35:48:87:da:96:18:d2:3a:e5:42:08:8c:c2:23:f4:66: 0b:f6:40:bc -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUVJjSppq1Pl5ybcoRadTHWFtbNN4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhEMkQzRDdDMkY3QTczRjhENUQyMkJDNTMwRDAyRjhB MzY0NDYxRjAeFw0yNTA2MzAwMTA1MjBaFw0yNjA2MjkwMTEwMjBaMDMxMTAvBgNV BAMTKDZDRkM0M0Q3QTJEMjNDMUQ4OTdBN0VFNkE5QzYzRUM2OUVERUEwRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRqOo9+IqxSgrEGL6DrQ5J/cAm zlMNM8MXJL0WN3J/h2tUo95FH5/HIF4MV7zGJpKJXgp6a48sORwUYKp+wffu+F8O GnonvvC+L4TLQfXIjnRYCH2LNX23s9kw5K+KJj1ESfWSthk2ZeuBMMOi/wJycCBU ZIKwM1g0WVQpbViM3uNVBEwPLxaRiAYmD8a+C+KNlN6svqWKS+ua/Yb0aG47VRwx wyNMSctpiUu7xtqBRhxEZyp1XclWSQt1WfAzDcz1XydX1ZrwQThi0GpCWv/e2oHf 5vyAB0dJy2acY+T1b0O6tnik8N6LmQqxC2gwSZhHdz9ecv1Im3C13W5b9wCZAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUbPxD16LSPB2Jen7mqcY+xp7eoPwwHwYDVR0j BBgwFoAUaNLT18L3pz+NXSK8Uw0C+KNkRh8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0p2d3hCS01vcVBFNXVuektGNlJ4c3UxY0J4YTVQWkFGYlBwdVNIRnhm a2EvMC82OEQyRDNEN0MyRjdBNzNGOEQ1RDIyQkM1MzBEMDJGOEEzNjQ0NjFGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4RDJEM0Q3QzJGN0E3M0Y4 RDVEMjJCQzUzMEQwMkY4QTM2NDQ2MUYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NKdnd4QktNb3FQRTV1bnpLRjZSeHN1MWNCeGE1UFpBRmJQcHVTSEZ4ZmthLzAv MzEzNjM4MmUzMjMwMzUyZTM2MzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2 MzMzNjM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGozTwwDQYJKoZIhvcNAQELBQADggEBAIvxiM5N 3VHzJOERyLNG6QsAJ5fwueyz9re3Pl0K50Vbm/WGYAL5ffpVfn29yf6xm0ePKhC2 Qj7N28m3krK++Br6ZwuhrGFaJNrQPbaUHr59IwWVvcRUlGbxdQ5g9YD2kGB7TeRb TbChkE3BakulsYx2Ot7G/Id0OXdmeyaluTpC1HrC6/BWNhpZpbu8k5D607dBtW1V chUIMKYh8d+QfmjCTfm3jVWIYTLt9PTmwb4h5HnPlmqesHeqdIPkPdomtovQAS/O vQHhwWIqT1W3Gi4ecRSo7uMdFXbmFvPrIF4TykvIt1/LW774PmnpNUiH2pYY0jrl QgiMwiP0Zgv2QLw= -----END CERTIFICATE-----Generated at Fri Jul 4 07:27:42 2025 by rpki-client