$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3133382e33362e32302e302f32322d3234203d3e20323633303236.roa File: 3133382e33362e32302e302f32322d3234203d3e20323633303236.roa (raw, json) Hash identifier: c7otnTQ5242wBosVVm31pAYdtSqXJrYDuFe8BEGDyPw= Subject key identifier: D0:F1:FB:68:0F:95:7E:19:31:A5:CF:BD:64:DA:46:42:1C:75:22:EF Certificate issuer: /CN=3F50B1080599A7B91D805ADC9C3E7B90AE734736 Certificate serial: 07D44ECC2D90B4EF8ADF9633D00A2C00F832DB39 Authority key identifier: 3F:50:B1:08:05:99:A7:B9:1D:80:5A:DC:9C:3E:7B:90:AE:73:47:36 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F50B1080599A7B91D805ADC9C3E7B90AE734736.cer Subject info access: rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3133382e33362e32302e302f32322d3234203d3e20323633303236.roa Signing time: Fri 03 Jan 2025 14:21:33 +0000 ROA not before: Fri 03 Jan 2025 14:16:33 +0000 ROA not after: Fri 02 Jan 2026 14:21:33 +0000 asID: 263026 IP address blocks: 138.36.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3F50B1080599A7B91D805ADC9C3E7B90AE734736.crl rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3F50B1080599A7B91D805ADC9C3E7B90AE734736.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F50B1080599A7B91D805ADC9C3E7B90AE734736.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 04 Jul 2025 03:03:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:d4:4e:cc:2d:90:b4:ef:8a:df:96:33:d0:0a:2c:00:f8:32:db:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F50B1080599A7B91D805ADC9C3E7B90AE734736 Validity Not Before: Jan 3 14:16:33 2025 GMT Not After : Jan 2 14:21:33 2026 GMT Subject: CN=D0F1FB680F957E1931A5CFBD64DA46421C7522EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3b:b4:3c:bc:f2:42:35:6f:0a:34:d8:1c:37: a3:0e:41:f1:1d:63:d9:2d:c5:ea:d4:78:4f:45:44: 23:48:f0:a6:41:1a:c7:46:11:a9:60:2e:d9:22:30: 2e:ac:a4:58:81:cd:60:cd:05:61:1d:a0:26:fd:3f: 47:79:66:fa:07:3d:c7:aa:f4:eb:6d:bd:8c:40:09: 26:76:9e:61:0f:a2:6d:40:10:16:ca:ee:34:27:f6: 47:f9:9a:37:9a:3e:ec:a5:15:a0:0b:cd:38:e8:1c: 20:fa:e8:bc:de:d1:50:35:7a:17:41:d8:13:9f:53: cc:08:11:4e:9d:ed:16:c1:1c:13:4a:2c:58:a3:ce: 0e:f6:59:be:bb:7e:6a:c8:67:ed:a8:de:88:0a:f3: 0f:b8:5b:7b:e6:53:ba:c7:ad:ab:f7:42:d7:60:fd: 50:a3:bc:f1:1d:a7:1a:4a:37:0b:19:49:1c:b7:e3: 98:00:f7:f6:54:0b:3e:89:16:7d:fb:db:4f:1c:f6: 6a:6e:2e:35:62:b2:cc:a4:98:72:c5:1e:6b:d4:e8: a6:c1:b4:4e:c1:b4:55:33:ef:76:31:5b:40:d3:3d: 63:ca:a3:d9:fc:b8:4d:cd:82:c3:50:3f:a0:07:f2: 23:b7:44:1e:54:87:f3:8d:b1:0c:91:94:d0:f6:2d: b3:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:F1:FB:68:0F:95:7E:19:31:A5:CF:BD:64:DA:46:42:1C:75:22:EF X509v3 Authority Key Identifier: keyid:3F:50:B1:08:05:99:A7:B9:1D:80:5A:DC:9C:3E:7B:90:AE:73:47:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3F50B1080599A7B91D805ADC9C3E7B90AE734736.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F50B1080599A7B91D805ADC9C3E7B90AE734736.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3133382e33362e32302e302f32322d3234203d3e20323633303236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.36.20.0/22 Signature Algorithm: sha256WithRSAEncryption 0b:b4:2a:9c:3f:49:86:40:df:a0:26:89:66:39:2c:7e:2a:66: 33:57:47:15:9d:44:57:49:39:ef:e5:02:ec:91:60:f1:db:a0: e0:30:74:f0:df:68:2e:d6:fd:d4:f1:5a:97:bf:bc:75:fe:17: 60:35:27:7f:74:d2:e7:34:b2:90:3b:82:76:3a:e0:59:2c:59: 3d:40:dc:c2:67:ca:a7:70:cd:f3:3b:dd:e1:97:b8:41:3d:ce: c3:d6:0c:2b:96:9e:dc:98:9e:3b:6b:50:fb:1e:b6:bc:70:da: f9:91:9f:ce:4e:41:ff:83:e6:04:6b:74:c5:80:22:a2:03:c6: 86:f8:b4:ce:3c:f0:dd:9e:17:d8:3b:99:44:fd:11:a0:4f:95: f1:41:52:12:a4:b1:9f:6d:a5:5d:a2:81:1b:9a:00:c6:cd:e8: 2e:82:80:63:a4:d5:0b:ac:c5:da:86:c6:02:0d:7a:54:8c:ba: 3f:e8:81:7e:15:7a:8a:d1:12:e2:53:97:d2:2e:52:46:77:0a: 67:37:aa:d3:16:5f:d7:5a:e6:54:f3:eb:89:ef:9f:c5:95:53: 68:aa:9d:23:e4:46:57:87:03:c2:0e:ca:d7:97:cc:bd:80:5f: cc:09:9e:76:f2:20:62:c6:79:72:a6:a9:0c:75:12:a5:de:41: c5:f7:ed:83 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgIUB9ROzC2QtO+K35Yz0AosAPgy2zkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Y1MEIxMDgwNTk5QTdCOTFEODA1QURDOUMzRTdCOTBB RTczNDczNjAeFw0yNTAxMDMxNDE2MzNaFw0yNjAxMDIxNDIxMzNaMDMxMTAvBgNV BAMTKEQwRjFGQjY4MEY5NTdFMTkzMUE1Q0ZCRDY0REE0NjQyMUM3NTIyRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7O7Q8vPJCNW8KNNgcN6MOQfEd Y9ktxerUeE9FRCNI8KZBGsdGEalgLtkiMC6spFiBzWDNBWEdoCb9P0d5ZvoHPceq 9OttvYxACSZ2nmEPom1AEBbK7jQn9kf5mjeaPuylFaALzTjoHCD66Lze0VA1ehdB 2BOfU8wIEU6d7RbBHBNKLFijzg72Wb67fmrIZ+2o3ogK8w+4W3vmU7rHrav3Qtdg /VCjvPEdpxpKNwsZSRy345gA9/ZUCz6JFn37208c9mpuLjVissykmHLFHmvU6KbB tE7BtFUz73YxW0DTPWPKo9n8uE3NgsNQP6AH8iO3RB5Uh/ONsQyRlND2LbNnAgMB AAGjggJMMIICSDAdBgNVHQ4EFgQU0PH7aA+Vfhkxpc+9ZNpGQhx1Iu8wHwYDVR0j BBgwFoAUP1CxCAWZp7kdgFrcnD57kK5zRzYwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby94WHBzQWd2cDY5dEttcDNQNUJFOVlkaWR1QXoyZEJOOEVXYW4xdFZBQ2Jj LzAvM0Y1MEIxMDgwNTk5QTdCOTFEODA1QURDOUMzRTdCOTBBRTczNDczNi5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8zRjUwQjEwODA1OTlBN0I5MUQ4 MDVBREM5QzNFN0I5MEFFNzM0NzM2LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby94 WHBzQWd2cDY5dEttcDNQNUJFOVlkaWR1QXoyZEJOOEVXYW4xdFZBQ2JjLzAvMzEz MzM4MmUzMzM2MmUzMjMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMzMzAz MjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQCiiQUMA0GCSqGSIb3DQEBCwUAA4IBAQALtCqcP0mGQN+g JolmOSx+KmYzV0cVnURXSTnv5QLskWDx26DgMHTw32gu1v3U8VqXv7x1/hdgNSd/ dNLnNLKQO4J2OuBZLFk9QNzCZ8qncM3zO93hl7hBPc7D1gwrlp7cmJ47a1D7Hra8 cNr5kZ/OTkH/g+YEa3TFgCKiA8aG+LTOPPDdnhfYO5lE/RGgT5XxQVISpLGfbaVd ooEbmgDGzegugoBjpNULrMXahsYCDXpUjLo/6IF+FXqK0RLiU5fSLlJGdwpnN6rT Fl/XWuZU8+uJ75/FlVNoqp0j5EZXhwPCDsrXl8y9gF/MCZ528iBixnlypqkMdRKl 3kHF9+2D -----END CERTIFICATE-----Generated at Thu Jul 3 17:41:58 2025 by rpki-client