$ rpki-client -vvf rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/34352e3137302e35362e302f32322d3232203d3e20323638313438.roa File: 34352e3137302e35362e302f32322d3232203d3e20323638313438.roa (raw, json) Hash identifier: NcZvtk9vtk4cBlbbop46EV0A+5s9d/7hpHIDDTwgZ0w= Subject key identifier: C5:A0:E4:1B:58:73:44:D5:C1:3F:49:F0:08:14:9D:76:CE:1D:35:DD Certificate issuer: /CN=21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372 Certificate serial: 5BD5046E4CF6F4D297FB36BC663E567E54068815 Authority key identifier: 21:FD:5A:0A:6A:A8:4A:CE:DB:44:5F:1A:73:D0:7D:D3:C0:A4:A3:72 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.cer Subject info access: rsync://rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/34352e3137302e35362e302f32322d3232203d3e20323638313438.roa Signing time: Thu 01 May 2025 00:02:42 +0000 ROA not before: Wed 30 Apr 2025 23:57:42 +0000 ROA not after: Thu 30 Apr 2026 00:02:42 +0000 asID: 268148 IP address blocks: 45.170.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.crl rsync://rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 May 2025 05:37:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:d5:04:6e:4c:f6:f4:d2:97:fb:36:bc:66:3e:56:7e:54:06:88:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372 Validity Not Before: Apr 30 23:57:42 2025 GMT Not After : Apr 30 00:02:42 2026 GMT Subject: CN=C5A0E41B587344D5C13F49F008149D76CE1D35DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:be:d3:d3:be:2c:47:04:d7:cf:36:38:bf:d5: 6c:cd:fe:13:14:ce:fb:16:fa:1e:4f:bb:0b:60:c7: ce:47:ae:05:38:19:42:58:b4:6f:9d:ec:39:fc:c9: b2:02:04:36:2e:00:b2:e6:d1:b3:d9:3a:47:60:c1: c1:1f:17:1d:c0:03:e9:25:b7:79:e5:41:cf:1b:a8: 2d:3b:e4:67:43:c4:a6:a5:2d:72:7b:aa:7e:7f:10: cd:b7:aa:70:cd:be:1a:77:52:77:32:c9:e1:8a:15: 76:76:d3:84:66:c4:d4:a0:c6:22:29:31:c1:03:67: 23:bc:0d:d2:5e:01:31:f6:38:6e:e8:2c:8b:87:09: 22:eb:e9:5b:76:6b:fc:c1:ac:c9:dc:39:06:e7:4b: 3b:e4:87:5b:c2:46:11:35:cc:dc:16:0b:d7:b8:73: ff:64:be:9a:67:c9:dd:59:e6:12:77:bd:b7:c8:f3: 4f:f2:86:ee:6b:31:b0:14:0d:4e:80:e2:1e:b8:a6: 29:9c:1d:55:06:c0:33:74:ae:b9:a3:c1:b8:1e:4e: 68:45:39:70:ef:be:99:95:73:4e:b1:5b:48:8a:fd: 86:cd:27:c1:15:23:29:48:33:a5:fd:6f:f1:3e:57: e2:31:22:43:17:9e:03:9d:78:1f:34:dc:01:88:44: 58:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:A0:E4:1B:58:73:44:D5:C1:3F:49:F0:08:14:9D:76:CE:1D:35:DD X509v3 Authority Key Identifier: keyid:21:FD:5A:0A:6A:A8:4A:CE:DB:44:5F:1A:73:D0:7D:D3:C0:A4:A3:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/34352e3137302e35362e302f32322d3232203d3e20323638313438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.170.56.0/22 Signature Algorithm: sha256WithRSAEncryption 33:22:b6:9f:3e:02:f3:7b:21:76:c0:d0:5f:c1:e7:28:ee:a4: 93:93:b7:ad:ec:7e:2f:74:8a:ff:f7:cc:21:9a:1a:77:c3:fb: 94:5e:9d:20:49:c2:f1:c6:38:0b:1d:84:54:59:64:d6:12:e2: c6:a3:ed:b8:9f:95:50:37:68:89:2b:1f:9a:53:bb:b6:1c:8d: 24:ce:7b:b0:43:22:23:17:4b:7c:01:53:d5:ba:13:cc:ee:84: ab:52:3c:31:0a:bb:b1:13:94:55:0a:6f:7e:9c:64:24:2f:75: f2:b2:6a:15:ae:28:65:01:89:fb:12:45:e6:f0:30:eb:8a:b1: e3:29:58:a8:a3:48:8c:bc:0c:47:81:3f:ed:9e:5f:36:f6:94: a3:12:d1:5f:3c:71:95:c7:f2:98:43:ff:91:d2:e5:53:d7:92: c2:44:9f:ec:ea:8a:f0:c6:6f:d7:d6:e0:56:80:f6:a9:d1:20: cf:e3:38:e0:11:f2:bf:0e:31:e7:7a:6e:55:b0:f6:d0:00:66: a5:6d:5f:33:27:b3:80:3e:a2:2a:1d:5b:1d:52:85:31:8f:d6: ad:f4:20:3e:fe:2e:c7:94:06:a7:3f:4c:0a:e1:e7:d3:60:11: ff:40:e6:42:32:a3:43:31:cc:7d:52:f6:9d:cd:3e:e1:be:b6: c1:23:5d:8d -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUW9UEbkz29NKX+za8Zj5WflQGiBUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFGRDVBMEE2QUE4NEFDRURCNDQ1RjFBNzNEMDdERDND MEE0QTM3MjAeFw0yNTA0MzAyMzU3NDJaFw0yNjA0MzAwMDAyNDJaMDMxMTAvBgNV BAMTKEM1QTBFNDFCNTg3MzQ0RDVDMTNGNDlGMDA4MTQ5RDc2Q0UxRDM1REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNvtPTvixHBNfPNji/1WzN/hMU zvsW+h5Puwtgx85HrgU4GUJYtG+d7Dn8ybICBDYuALLm0bPZOkdgwcEfFx3AA+kl t3nlQc8bqC075GdDxKalLXJ7qn5/EM23qnDNvhp3UncyyeGKFXZ204RmxNSgxiIp McEDZyO8DdJeATH2OG7oLIuHCSLr6Vt2a/zBrMncOQbnSzvkh1vCRhE1zNwWC9e4 c/9kvppnyd1Z5hJ3vbfI80/yhu5rMbAUDU6A4h64pimcHVUGwDN0rrmjwbgeTmhF OXDvvpmVc06xW0iK/YbNJ8EVIylIM6X9b/E+V+IxIkMXngOdeB803AGIRFiBAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUxaDkG1hzRNXBP0nwCBSdds4dNd0wHwYDVR0j BBgwFoAUIf1aCmqoSs7bRF8ac9B908Cko3IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1luM2VSdHRodER5aWZ1WkQ1VVJ2VmttdUJidXVGRjZtVWpXQWtiR1hM emIvMC8yMUZENUEwQTZBQTg0QUNFREI0NDVGMUE3M0QwN0REM0MwQTRBMzcyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxRkQ1QTBBNkFBODRBQ0VE QjQ0NUYxQTczRDA3REQzQzBBNEEzNzIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NZbjNlUnR0aHREeWlmdVpENVVSdlZrbXVCYnV1RkY2bVVqV0FrYkdYTHpiLzAv MzQzNTJlMzEzNzMwMmUzNTM2MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM4 MzEzNDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQCLao4MA0GCSqGSIb3DQEBCwUAA4IBAQAzIrafPgLz eyF2wNBfweco7qSTk7et7H4vdIr/98whmhp3w/uUXp0gScLxxjgLHYRUWWTWEuLG o+24n5VQN2iJKx+aU7u2HI0kznuwQyIjF0t8AVPVuhPM7oSrUjwxCruxE5RVCm9+ nGQkL3XysmoVrihlAYn7EkXm8DDrirHjKVioo0iMvAxHgT/tnl829pSjEtFfPHGV x/KYQ/+R0uVT15LCRJ/s6orwxm/X1uBWgPap0SDP4zjgEfK/DjHnem5VsPbQAGal bV8zJ7OAPqIqHVsdUoUxj9at9CA+/i7HlAanP0wK4efTYBH/QOZCMqNDMcx9Uvad zT7hvrbBI12N -----END CERTIFICATE-----Generated at Sun May 11 22:27:23 2025 by rpki-client