$ rpki-client -vvf rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/3136382e3139372e3135322e302f32332d3233203d3e20323635343834.roa File: 3136382e3139372e3135322e302f32332d3233203d3e20323635343834.roa (raw, json) Hash identifier: I7+GzxzOLMovqWw1X3+jBkfJhsi0JQOxHv2XvVhfK4k= Subject key identifier: A1:7F:C1:47:72:8B:DB:B9:22:4F:F7:F2:0C:01:81:CF:BF:EF:D4:F3 Certificate issuer: /CN=38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6 Certificate serial: 70AE1140ADA5A87485CCD4198F99339D0251544F Authority key identifier: 38:F3:3F:BF:E3:CF:08:A0:D6:BE:7C:8C:73:0F:32:A6:6F:97:3E:D6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.cer Subject info access: rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/3136382e3139372e3135322e302f32332d3233203d3e20323635343834.roa Signing time: Sat 21 Jun 2025 11:48:47 +0000 ROA not before: Sat 21 Jun 2025 11:43:47 +0000 ROA not after: Sat 20 Jun 2026 11:48:47 +0000 asID: 265484 IP address blocks: 168.197.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.crl rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 04 Jul 2025 15:56:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:ae:11:40:ad:a5:a8:74:85:cc:d4:19:8f:99:33:9d:02:51:54:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6 Validity Not Before: Jun 21 11:43:47 2025 GMT Not After : Jun 20 11:48:47 2026 GMT Subject: CN=A17FC147728BDBB9224FF7F20C0181CFBFEFD4F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:76:28:5c:9f:2a:63:10:39:b8:a4:f4:b1:63: 3a:2f:5a:f0:b7:d0:a4:f7:62:77:c6:71:34:b1:22: 9b:53:58:88:f2:7f:d8:45:8d:ec:e9:43:59:4a:e6: 37:86:0b:38:ae:32:22:b7:17:80:10:93:c1:92:ed: 59:94:b5:25:87:c0:b4:2c:b8:a0:42:5e:61:2e:33: 53:6a:e9:4c:e1:5c:3c:04:26:0e:a7:eb:b9:0f:9a: 11:95:75:f9:70:a7:50:68:d1:66:8c:69:e9:ae:f3: 65:dc:5c:1f:3a:5f:b6:52:bd:23:6c:1e:ee:6d:5b: 5a:ba:b6:4e:3e:d1:1a:90:11:2c:16:da:c9:a2:57: d9:ef:ea:91:67:ae:5e:a0:a8:88:10:89:bf:96:3b: b3:57:8d:dd:be:b9:03:f6:03:05:36:6e:6a:ca:ed: 6e:aa:86:a3:66:21:8e:f0:2d:73:6b:ed:de:8e:34: b3:ed:f3:89:3d:b8:cc:35:b0:c9:5c:c3:f5:1c:48: 1e:7d:0a:b0:2b:ac:ac:ae:ae:ec:9c:ec:f5:05:b2: 55:05:c9:a2:1f:6e:79:1b:6c:f5:41:ce:34:63:e0: 30:f9:c7:f7:a9:8c:25:e0:3c:3a:7a:db:7a:7b:66: bf:4d:37:c1:11:2f:36:7e:99:83:0a:34:5f:0e:3b: 3c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:7F:C1:47:72:8B:DB:B9:22:4F:F7:F2:0C:01:81:CF:BF:EF:D4:F3 X509v3 Authority Key Identifier: keyid:38:F3:3F:BF:E3:CF:08:A0:D6:BE:7C:8C:73:0F:32:A6:6F:97:3E:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/3136382e3139372e3135322e302f32332d3233203d3e20323635343834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.197.152.0/23 Signature Algorithm: sha256WithRSAEncryption 8a:ef:c4:cb:44:e6:9b:a7:ed:41:d1:04:33:b3:da:e6:de:06: 24:8c:49:54:ce:87:bf:71:2d:23:64:7a:26:3c:ea:0c:3c:06: 4c:90:83:1f:0c:ce:7b:b3:99:e8:db:3b:41:cb:46:3d:a3:64: df:11:39:96:53:a6:53:6f:2c:8a:89:f4:58:c8:5b:8a:f9:b8: 32:e0:31:ad:dd:87:8a:40:21:8e:c9:93:d0:35:2a:58:04:64: d7:f1:c9:65:f7:2b:d0:9a:ff:24:57:17:01:1f:aa:2b:dc:cc: 01:15:b7:76:98:3e:30:7a:0c:dc:da:86:bb:10:1b:98:48:e6: e6:0e:75:a3:74:d0:3d:30:73:e3:be:fc:8a:b0:6c:2b:8c:36: 63:fd:97:a4:07:fc:08:37:e1:a6:5f:a3:f2:ac:ad:a9:d3:c5: 41:71:2d:91:4c:6e:be:57:4b:62:8b:8a:af:f2:4d:37:f0:3c: 3d:e8:5b:bc:cc:d4:ad:ee:e9:a1:61:94:36:d1:4a:3c:2f:74: 8b:c6:7f:07:7a:f9:b6:7b:66:c9:70:29:10:69:70:4f:87:1d: 14:af:78:fa:72:f8:0a:24:6c:80:f0:7f:6c:0a:39:8b:57:d6: 4a:9a:ee:04:f4:51:39:b0:ae:30:ef:4c:47:1f:64:36:3c:c4: 8c:63:d2:ef -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUcK4RQK2lqHSFzNQZj5kznQJRVE8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhGMzNGQkZFM0NGMDhBMEQ2QkU3QzhDNzMwRjMyQTY2 Rjk3M0VENjAeFw0yNTA2MjExMTQzNDdaFw0yNjA2MjAxMTQ4NDdaMDMxMTAvBgNV BAMTKEExN0ZDMTQ3NzI4QkRCQjkyMjRGRjdGMjBDMDE4MUNGQkZFRkQ0RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTdihcnypjEDm4pPSxYzovWvC3 0KT3YnfGcTSxIptTWIjyf9hFjezpQ1lK5jeGCziuMiK3F4AQk8GS7VmUtSWHwLQs uKBCXmEuM1Nq6UzhXDwEJg6n67kPmhGVdflwp1Bo0WaMaemu82XcXB86X7ZSvSNs Hu5tW1q6tk4+0RqQESwW2smiV9nv6pFnrl6gqIgQib+WO7NXjd2+uQP2AwU2bmrK 7W6qhqNmIY7wLXNr7d6ONLPt84k9uMw1sMlcw/UcSB59CrArrKyuruyc7PUFslUF yaIfbnkbbPVBzjRj4DD5x/epjCXgPDp623p7Zr9NN8ERLzZ+mYMKNF8OOzwZAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUoX/BR3KL27kiT/fyDAGBz7/v1PMwHwYDVR0j BBgwFoAUOPM/v+PPCKDWvnyMcw8ypm+XPtYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRWZNQ20zeUc2OEpia2V0OHBkaTgyOVozaUVKWDg3RjhoZVJ3TVVtb1NS bW0vMC8zOEYzM0ZCRkUzQ0YwOEEwRDZCRTdDOEM3MzBGMzJBNjZGOTczRUQ2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM4RjMzRkJGRTNDRjA4QTBE NkJFN0M4QzczMEYzMkE2NkY5NzNFRDYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0VmTUNtM3lHNjhKYmtldDhwZGk4MjlaM2lFSlg4N0Y4aGVSd01VbW9TUm1tLzAv MzEzNjM4MmUzMTM5MzcyZTMxMzUzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy MzYzNTM0MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAajFmDANBgkqhkiG9w0BAQsFAAOCAQEAiu/E y0Tmm6ftQdEEM7Pa5t4GJIxJVM6Hv3EtI2R6JjzqDDwGTJCDHwzOe7OZ6Ns7QctG PaNk3xE5llOmU28sion0WMhbivm4MuAxrd2HikAhjsmT0DUqWARk1/HJZfcr0Jr/ JFcXAR+qK9zMARW3dpg+MHoM3NqGuxAbmEjm5g51o3TQPTBz4778irBsK4w2Y/2X pAf8CDfhpl+j8qytqdPFQXEtkUxuvldLYouKr/JNN/A8PehbvMzUre7poWGUNtFK PC90i8Z/B3r5tntmyXApEGlwT4cdFK94+nL4CiRsgPB/bAo5i1fWSpruBPRRObCu MO9MRx9kNjzEjGPS7w== -----END CERTIFICATE-----Generated at Thu Jul 3 16:56:34 2025 by rpki-client