$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3137392e3132372e3135322e302f32332d3233203d3e20323633363431.roa File: 3137392e3132372e3135322e302f32332d3233203d3e20323633363431.roa (raw, json) Hash identifier: tFyvUp4G/X0NWppvbvZNUb+G0jvbwd4cy3odQjVY37I= Subject key identifier: 24:1F:A8:3A:E8:55:5D:1F:49:5E:E9:C3:0A:50:7C:91:9E:47:38:BC Certificate issuer: /CN=68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F Certificate serial: 345A00AE0D33CF0B00E320BE8DE0481D7DE4FC04 Authority key identifier: 68:D2:D3:D7:C2:F7:A7:3F:8D:5D:22:BC:53:0D:02:F8:A3:64:46:1F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.cer Subject info access: rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3137392e3132372e3135322e302f32332d3233203d3e20323633363431.roa Signing time: Mon 30 Jun 2025 01:10:21 +0000 ROA not before: Mon 30 Jun 2025 01:05:21 +0000 ROA not after: Mon 29 Jun 2026 01:10:21 +0000 asID: 263641 IP address blocks: 179.127.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.crl rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Jul 2025 11:20:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:5a:00:ae:0d:33:cf:0b:00:e3:20:be:8d:e0:48:1d:7d:e4:fc:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F Validity Not Before: Jun 30 01:05:21 2025 GMT Not After : Jun 29 01:10:21 2026 GMT Subject: CN=241FA83AE8555D1F495EE9C30A507C919E4738BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f6:07:61:a6:b2:21:63:11:2d:5f:cd:b1:f5: 74:fe:8a:fc:64:ac:e5:0c:67:e2:80:8c:d4:b8:29: 16:9b:b0:75:11:0d:fc:52:63:4e:58:99:4a:34:ae: 44:fd:ef:f9:5d:79:c9:a8:6c:ef:b9:db:be:09:a2: b2:22:4e:06:68:67:b4:e0:59:0e:eb:f0:55:8f:52: 4e:ac:a0:58:1a:1f:ca:c2:ed:83:29:49:3b:9c:66: bc:db:96:45:4e:0b:14:7e:14:64:97:57:01:94:fe: 1f:40:7e:f4:30:ca:c5:69:a5:37:23:c6:34:5f:12: 35:19:f6:98:05:19:9a:40:31:82:32:be:90:38:d5: 01:1f:82:05:36:1d:ef:56:91:62:02:95:75:9f:1c: 5b:20:30:9c:df:09:9f:44:21:99:55:63:d6:7b:f2: 8d:d9:c6:ba:78:03:b6:f4:27:af:05:97:f7:ce:97: 27:0b:da:4e:7c:20:58:5c:80:30:57:52:d2:a3:e7: 42:ab:e9:f5:68:71:18:86:7f:74:06:3b:75:7a:61: 1a:92:2e:bc:26:06:ad:62:f6:f8:dc:b3:20:a6:91: 6c:7c:64:c1:ad:6f:22:21:e4:5a:35:30:2c:ad:e1: fb:53:a6:27:1f:96:da:a7:a1:d7:95:28:bc:3d:c3: 16:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:1F:A8:3A:E8:55:5D:1F:49:5E:E9:C3:0A:50:7C:91:9E:47:38:BC X509v3 Authority Key Identifier: keyid:68:D2:D3:D7:C2:F7:A7:3F:8D:5D:22:BC:53:0D:02:F8:A3:64:46:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3137392e3132372e3135322e302f32332d3233203d3e20323633363431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.127.152.0/23 Signature Algorithm: sha256WithRSAEncryption ba:71:d7:49:2b:36:56:33:a0:9e:dd:09:05:b5:b4:ce:7d:cc: 68:57:d3:70:3a:a0:68:27:b1:8f:ce:fb:2a:70:db:37:52:fc: 6d:2d:61:dd:be:7d:d0:41:ed:8d:c0:64:03:f8:28:46:a3:1a: 46:49:0d:a5:ef:9c:40:93:a6:07:b1:d5:4b:1c:0c:53:7f:43: a9:38:a9:f3:58:f7:78:59:d7:69:22:b2:0f:1b:38:14:9a:b1: 00:a0:83:40:26:c0:ca:ef:62:e4:9d:aa:db:29:26:8c:8a:50: 2e:9b:be:d0:7d:37:a5:24:7f:04:13:df:d4:ee:6b:3a:b0:c2: 1c:b7:0a:5d:11:cf:05:7b:96:33:19:95:6e:d5:16:1f:fb:3a: c7:d0:fb:c1:1f:91:df:33:63:d7:73:bb:34:13:d1:ae:51:13: c8:22:73:09:20:7d:72:00:00:81:6c:af:f3:73:fb:b9:dd:84: cf:b1:05:d6:1c:a6:79:8e:7b:a7:ce:02:bb:af:0f:50:c7:09: bd:b1:4d:4f:f3:49:43:b0:1f:e1:57:7e:ae:4a:44:a2:44:ab: 84:17:23:d9:9d:05:4e:cb:ec:b5:ec:9b:ee:bb:b9:7c:e2:72: a4:20:1b:ee:27:1c:e5:86:ae:e5:9f:a4:64:ee:18:ed:8b:4b: 1d:2c:6e:37 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUNFoArg0zzwsA4yC+jeBIHX3k/AQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhEMkQzRDdDMkY3QTczRjhENUQyMkJDNTMwRDAyRjhB MzY0NDYxRjAeFw0yNTA2MzAwMTA1MjFaFw0yNjA2MjkwMTEwMjFaMDMxMTAvBgNV BAMTKDI0MUZBODNBRTg1NTVEMUY0OTVFRTlDMzBBNTA3QzkxOUU0NzM4QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs9gdhprIhYxEtX82x9XT+ivxk rOUMZ+KAjNS4KRabsHURDfxSY05YmUo0rkT97/ldecmobO+5274JorIiTgZoZ7Tg WQ7r8FWPUk6soFgaH8rC7YMpSTucZrzblkVOCxR+FGSXVwGU/h9AfvQwysVppTcj xjRfEjUZ9pgFGZpAMYIyvpA41QEfggU2He9WkWIClXWfHFsgMJzfCZ9EIZlVY9Z7 8o3Zxrp4A7b0J68Fl/fOlycL2k58IFhcgDBXUtKj50Kr6fVocRiGf3QGO3V6YRqS LrwmBq1i9vjcsyCmkWx8ZMGtbyIh5Fo1MCyt4ftTpicfltqnodeVKLw9wxbtAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUJB+oOuhVXR9JXunDClB8kZ5HOLwwHwYDVR0j BBgwFoAUaNLT18L3pz+NXSK8Uw0C+KNkRh8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0p2d3hCS01vcVBFNXVuektGNlJ4c3UxY0J4YTVQWkFGYlBwdVNIRnhm a2EvMC82OEQyRDNEN0MyRjdBNzNGOEQ1RDIyQkM1MzBEMDJGOEEzNjQ0NjFGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4RDJEM0Q3QzJGN0E3M0Y4 RDVEMjJCQzUzMEQwMkY4QTM2NDQ2MUYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NKdnd4QktNb3FQRTV1bnpLRjZSeHN1MWNCeGE1UFpBRmJQcHVTSEZ4ZmthLzAv MzEzNzM5MmUzMTMyMzcyZTMxMzUzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy MzYzMzM2MzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbN/mDANBgkqhkiG9w0BAQsFAAOCAQEAunHX SSs2VjOgnt0JBbW0zn3MaFfTcDqgaCexj877KnDbN1L8bS1h3b590EHtjcBkA/go RqMaRkkNpe+cQJOmB7HVSxwMU39DqTip81j3eFnXaSKyDxs4FJqxAKCDQCbAyu9i 5J2q2ykmjIpQLpu+0H03pSR/BBPf1O5rOrDCHLcKXRHPBXuWMxmVbtUWH/s6x9D7 wR+R3zNj13O7NBPRrlETyCJzCSB9cgAAgWyv83P7ud2Ez7EF1hymeY57p84Cu68P UMcJvbFNT/NJQ7Af4Vd+rkpEokSrhBcj2Z0FTsvsteyb7ru5fOJypCAb7icc5Yau 5Z+kZO4Y7YtLHSxuNw== -----END CERTIFICATE-----Generated at Fri Jul 4 14:22:02 2025 by rpki-client