$ rpki-client -vvf rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32312e302f32342d3234203d3e20323638343430.roa File: 34352e3136312e32312e302f32342d3234203d3e20323638343430.roa (raw, json) Hash identifier: O5YrjsJlF+wkCqs7u+G7RNEd9xtqo4z0Bd+96QIIQek= Subject key identifier: F5:BF:23:B3:74:A4:A2:D9:25:88:8A:56:5F:C0:08:97:22:5D:EC:3B Certificate issuer: /CN=3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA Certificate serial: 10DB9552D1287D7D92DEDD2B519B783CA5A46042 Authority key identifier: 3E:C1:D6:02:0A:56:64:8E:4D:80:57:9E:DE:6A:9A:E6:4E:D1:AD:CA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA.cer Subject info access: rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32312e302f32342d3234203d3e20323638343430.roa Signing time: Mon 05 May 2025 20:58:38 +0000 ROA not before: Mon 05 May 2025 20:53:38 +0000 ROA not after: Mon 04 May 2026 20:58:38 +0000 asID: 268440 IP address blocks: 45.161.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA.crl rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 15 May 2025 21:54:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:db:95:52:d1:28:7d:7d:92:de:dd:2b:51:9b:78:3c:a5:a4:60:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA Validity Not Before: May 5 20:53:38 2025 GMT Not After : May 4 20:58:38 2026 GMT Subject: CN=F5BF23B374A4A2D925888A565FC00897225DEC3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4a:0b:26:8a:55:26:6c:2b:58:06:4c:6c:9f: 6e:44:5b:79:6c:3c:ec:b5:57:73:16:7c:cb:13:b3: 9b:eb:ca:46:75:a2:42:fc:e8:31:03:0f:ad:2d:6c: a4:6d:d7:86:c3:19:21:08:ad:b3:24:47:5e:d1:47: ec:0d:56:a2:cd:d7:ee:59:91:64:d3:fa:23:bd:0f: af:de:4b:73:83:e7:46:f0:bb:7d:21:fb:e6:16:f9: d3:e0:8f:a2:ec:11:cd:0c:42:16:f7:1f:ed:4c:c4: 55:1c:fd:c4:37:bd:11:f2:9f:7e:89:d8:f6:25:8c: da:9d:0d:0e:65:55:50:2b:09:0d:15:7b:9a:ef:05: 0a:4a:d4:84:4d:00:ad:39:58:58:62:c3:41:c3:3f: 5b:38:b8:19:22:27:7d:c0:6b:2d:9f:c5:b3:80:0d: 8f:9f:a3:6d:50:4c:95:c6:e7:fb:3b:d2:37:dd:52: 73:70:b8:63:e2:11:a1:47:63:46:d8:7f:65:9f:10: 1c:2a:7a:18:9b:b5:18:14:1f:8c:98:b6:ee:86:99: f1:f0:8e:38:76:8b:af:27:40:e0:df:33:33:dc:6c: 28:9d:b5:6d:ae:63:5b:74:c6:6f:83:0a:f8:d5:76: d2:fd:c8:9a:98:aa:27:f7:e0:c6:42:48:96:84:68: a8:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:BF:23:B3:74:A4:A2:D9:25:88:8A:56:5F:C0:08:97:22:5D:EC:3B X509v3 Authority Key Identifier: keyid:3E:C1:D6:02:0A:56:64:8E:4D:80:57:9E:DE:6A:9A:E6:4E:D1:AD:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32312e302f32342d3234203d3e20323638343430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.161.21.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:0f:a9:2c:78:2a:82:bf:04:4d:63:3f:34:9b:cb:a4:80:68: 0b:94:25:05:2c:61:6f:e3:44:4f:48:e7:89:4f:ed:16:d2:0e: a3:c5:27:16:8e:fc:bd:f7:db:80:e7:97:54:27:07:b6:a1:bf: 0e:b6:17:b0:87:df:b8:18:b9:13:3b:46:b3:92:30:d0:11:f9: 72:6e:42:f3:0e:20:9a:7a:c9:29:f3:dd:cd:06:0a:87:e4:65: 78:c3:06:db:65:2b:2f:b7:79:d0:83:04:7e:6c:c7:c2:5f:f8: fc:85:e8:bd:11:8a:36:32:bb:1d:1f:65:5e:f3:96:4f:17:ef: a4:29:26:9f:f3:2f:17:00:49:a9:f7:ef:cf:7b:cf:03:f5:a8: 2c:41:d6:30:b4:70:55:b6:49:8f:ab:9f:45:1c:89:16:d7:98: bc:70:eb:9f:41:83:84:4f:b1:7d:fe:f7:19:85:db:15:5d:5f: 09:ec:dd:8f:9a:bc:54:bf:f2:30:2f:0d:8e:21:ee:63:6d:3c: 07:3e:7a:b9:00:8b:00:fe:68:c2:36:fd:6d:7a:bc:da:b7:8f: 26:e1:69:14:5f:a5:89:e2:1b:d3:6c:fe:f9:16:53:2c:22:26: a9:e7:d2:3b:e9:a0:c3:87:08:bd:7b:43:88:ff:d0:a3:4c:fd: 81:73:b0:19 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUENuVUtEofX2S3t0rUZt4PKWkYEIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VDMUQ2MDIwQTU2NjQ4RTREODA1NzlFREU2QTlBRTY0 RUQxQURDQTAeFw0yNTA1MDUyMDUzMzhaFw0yNjA1MDQyMDU4MzhaMDMxMTAvBgNV BAMTKEY1QkYyM0IzNzRBNEEyRDkyNTg4OEE1NjVGQzAwODk3MjI1REVDM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDESgsmilUmbCtYBkxsn25EW3ls POy1V3MWfMsTs5vrykZ1okL86DEDD60tbKRt14bDGSEIrbMkR17RR+wNVqLN1+5Z kWTT+iO9D6/eS3OD50bwu30h++YW+dPgj6LsEc0MQhb3H+1MxFUc/cQ3vRHyn36J 2PYljNqdDQ5lVVArCQ0Ve5rvBQpK1IRNAK05WFhiw0HDP1s4uBkiJ33Aay2fxbOA DY+fo21QTJXG5/s70jfdUnNwuGPiEaFHY0bYf2WfEBwqehibtRgUH4yYtu6GmfHw jjh2i68nQODfMzPcbCidtW2uY1t0xm+DCvjVdtL9yJqYqif34MZCSJaEaKhjAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQU9b8js3SkotkliIpWX8AIlyJd7DswHwYDVR0j BBgwFoAUPsHWAgpWZI5NgFee3mqa5k7RrcowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSGJNM0djRDl2YmhYdVh0NmN6SmRpbjVZQ3Y5MmFzZEVDbmVTc3JwMWRl MlkvMC8zRUMxRDYwMjBBNTY2NDhFNEQ4MDU3OUVERTZBOUFFNjRFRDFBRENBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNFQzFENjAyMEE1NjY0OEU0 RDgwNTc5RURFNkE5QUU2NEVEMUFEQ0EuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0hiTTNHY0Q5dmJoWHVYdDZjekpkaW41WUN2OTJhc2RFQ25lU3NycDFkZTJZLzAv MzQzNTJlMzEzNjMxMmUzMjMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4 MzQzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQALaEVMA0GCSqGSIb3DQEBCwUAA4IBAQAfD6kseCqC vwRNYz80m8ukgGgLlCUFLGFv40RPSOeJT+0W0g6jxScWjvy999uA55dUJwe2ob8O thewh9+4GLkTO0azkjDQEflybkLzDiCaeskp893NBgqH5GV4wwbbZSsvt3nQgwR+ bMfCX/j8hei9EYo2MrsdH2Ve85ZPF++kKSaf8y8XAEmp9+/Pe88D9agsQdYwtHBV tkmPq59FHIkW15i8cOufQYOET7F9/vcZhdsVXV8J7N2PmrxUv/IwLw2OIe5jbTwH Pnq5AIsA/mjCNv1terzat48m4WkUX6WJ4hvTbP75FlMsIiap59I76aDDhwi9e0OI /9CjTP2Bc7AZ -----END CERTIFICATE-----Generated at Thu May 15 10:57:44 2025 by rpki-client