$ rpki-client -vvf rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3136382e3139342e3133322e302f32322d3234203d3e203533303738.roa File: 3136382e3139342e3133322e302f32322d3234203d3e203533303738.roa (raw, json) Hash identifier: oOTzxC9NhunYba0aP38a/ghXq4y49lqX3o2LedS636o= Subject key identifier: 58:C1:C7:A6:00:1B:F5:A3:F3:A5:E8:FD:C8:2C:CB:28:29:09:89:91 Certificate issuer: /CN=3C8E5F41F3AF740E9427F8ED235C120098AA0C21 Certificate serial: 2C2959878FCB043684B51963D3A4BAEC9EDB06FA Authority key identifier: 3C:8E:5F:41:F3:AF:74:0E:94:27:F8:ED:23:5C:12:00:98:AA:0C:21 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.cer Subject info access: rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3136382e3139342e3133322e302f32322d3234203d3e203533303738.roa Signing time: Thu 26 Jun 2025 11:57:20 +0000 ROA not before: Thu 26 Jun 2025 11:52:20 +0000 ROA not after: Thu 25 Jun 2026 11:57:20 +0000 asID: 53078 IP address blocks: 168.194.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.crl rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 04 Jul 2025 12:44:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:29:59:87:8f:cb:04:36:84:b5:19:63:d3:a4:ba:ec:9e:db:06:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C8E5F41F3AF740E9427F8ED235C120098AA0C21 Validity Not Before: Jun 26 11:52:20 2025 GMT Not After : Jun 25 11:57:20 2026 GMT Subject: CN=58C1C7A6001BF5A3F3A5E8FDC82CCB2829098991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c4:78:8d:a2:37:d1:cb:19:b7:90:13:db:1a: b4:7f:2e:4e:63:f0:96:c8:2a:94:c8:ce:2e:bc:e0: 4a:62:8c:83:f5:7a:10:47:70:39:a9:14:a6:3d:c9: 60:30:58:ed:c0:f5:c8:ec:44:40:e0:c7:69:a4:b3: 04:e6:e4:3b:44:aa:de:0d:64:11:d3:00:92:a8:5d: 4d:50:63:a9:9b:c9:71:8a:a5:0e:a6:2c:bb:70:82: d0:cc:0e:82:75:4f:ba:59:22:3b:c1:17:03:d9:38: 61:b5:dd:db:e8:16:e2:7b:59:71:b9:ae:18:f0:76: 89:6c:1c:2e:fa:c7:ec:c2:c2:50:d7:af:99:b4:f2: 2e:83:5b:7d:44:2b:c5:b7:20:e4:27:e0:6d:ce:a1: 1e:36:74:5d:09:e4:c6:67:92:10:b8:80:9c:3b:59: f7:c3:cc:cb:21:37:14:36:e6:1f:17:48:76:cc:7a: 06:36:0d:11:bf:8d:9d:ff:15:49:ed:82:e1:89:5e: c3:bd:79:72:a1:15:bc:1c:b5:d4:96:62:12:e1:b6: 8c:06:fc:74:41:70:8d:1c:78:71:18:0f:3e:c1:65: 1a:eb:8c:8a:95:74:73:a1:69:8d:6f:60:c6:85:9a: 8c:32:41:e0:34:bc:82:98:47:d5:7b:60:d0:cd:3e: 62:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:C1:C7:A6:00:1B:F5:A3:F3:A5:E8:FD:C8:2C:CB:28:29:09:89:91 X509v3 Authority Key Identifier: keyid:3C:8E:5F:41:F3:AF:74:0E:94:27:F8:ED:23:5C:12:00:98:AA:0C:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3136382e3139342e3133322e302f32322d3234203d3e203533303738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.194.132.0/22 Signature Algorithm: sha256WithRSAEncryption a4:f9:3b:01:0a:c3:27:8d:16:e6:f7:f9:a9:be:bf:a5:11:ee: 2b:1b:f5:b3:3f:02:f9:cf:38:2a:8d:3c:63:cf:fa:96:62:98: b8:47:32:fa:cf:ca:fb:0e:fc:1c:8a:2b:78:a5:79:65:7d:95: b5:6f:ea:6a:d7:83:62:07:a7:f4:7b:d2:db:d3:bb:4b:2f:ae: 90:73:5b:5f:ef:7d:b7:c4:0f:2e:df:4e:57:b0:33:69:cc:6e: 57:9a:d2:46:a9:e3:fe:e5:01:3d:a1:4e:20:7b:c1:d2:3e:26: 95:f8:62:f8:ba:fc:31:cb:f4:28:c9:65:59:3d:16:fd:c0:75: ac:f5:85:73:1b:28:dc:34:ed:7a:72:6e:43:cc:75:6c:88:04: 37:ee:55:fe:af:a8:47:4f:f9:49:8f:b5:d2:63:8f:b0:b3:ec: 1c:6c:d6:2b:fa:3c:ef:15:4c:80:d8:c2:91:6a:62:51:8b:39: 9a:cd:52:ee:0f:63:49:1c:7a:5d:90:1a:8a:99:4c:21:73:38: 57:3b:ba:5c:1d:e7:a3:64:b8:f1:4b:34:2a:82:29:c6:d4:24: fb:3d:56:c2:88:57:65:75:8a:2d:73:d7:5b:45:92:ba:31:06: c0:aa:07:6c:cf:9e:37:f6:17:16:48:12:18:27:f0:01:3c:41: 6b:bf:04:74 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIULClZh4/LBDaEtRlj06S67J7bBvowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M4RTVGNDFGM0FGNzQwRTk0MjdGOEVEMjM1QzEyMDA5 OEFBMEMyMTAeFw0yNTA2MjYxMTUyMjBaFw0yNjA2MjUxMTU3MjBaMDMxMTAvBgNV BAMTKDU4QzFDN0E2MDAxQkY1QTNGM0E1RThGREM4MkNDQjI4MjkwOTg5OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPxHiNojfRyxm3kBPbGrR/Lk5j 8JbIKpTIzi684EpijIP1ehBHcDmpFKY9yWAwWO3A9cjsREDgx2mkswTm5DtEqt4N ZBHTAJKoXU1QY6mbyXGKpQ6mLLtwgtDMDoJ1T7pZIjvBFwPZOGG13dvoFuJ7WXG5 rhjwdolsHC76x+zCwlDXr5m08i6DW31EK8W3IOQn4G3OoR42dF0J5MZnkhC4gJw7 WffDzMshNxQ25h8XSHbMegY2DRG/jZ3/FUntguGJXsO9eXKhFbwctdSWYhLhtowG /HRBcI0ceHEYDz7BZRrrjIqVdHOhaY1vYMaFmowyQeA0vIKYR9V7YNDNPmIVAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUWMHHpgAb9aPzpej9yCzLKCkJiZEwHwYDVR0j BBgwFoAUPI5fQfOvdA6UJ/jtI1wSAJiqDCEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0txYWJTeEpEbTlLZGtoM3kzRk0zVkZVVEtZQVFIVWI1WFZzRnFwbndp U2IvMC8zQzhFNUY0MUYzQUY3NDBFOTQyN0Y4RUQyMzVDMTIwMDk4QUEwQzIxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDOEU1RjQxRjNBRjc0MEU5 NDI3RjhFRDIzNUMxMjAwOThBQTBDMjEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NLcWFiU3hKRG05S2RraDN5M0ZNM1ZGVVRLWUFRSFViNVhWc0ZxcG53aVNiLzAv MzEzNjM4MmUzMTM5MzQyZTMxMzMzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM1 MzMzMDM3Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKowoQwDQYJKoZIhvcNAQELBQADggEBAKT5OwEK wyeNFub3+am+v6UR7isb9bM/AvnPOCqNPGPP+pZimLhHMvrPyvsO/ByKK3ileWV9 lbVv6mrXg2IHp/R70tvTu0svrpBzW1/vfbfEDy7fTlewM2nMblea0kap4/7lAT2h TiB7wdI+JpX4Yvi6/DHL9CjJZVk9Fv3Adaz1hXMbKNw07XpybkPMdWyIBDfuVf6v qEdP+UmPtdJjj7Cz7Bxs1iv6PO8VTIDYwpFqYlGLOZrNUu4PY0kcel2QGoqZTCFz OFc7ulwd56NkuPFLNCqCKcbUJPs9VsKIV2V1ii1z11tFkroxBsCqB2zPnjf2FxZI Ehgn8AE8QWu/BHQ= -----END CERTIFICATE-----Generated at Thu Jul 3 16:44:43 2025 by rpki-client