$ rpki-client -vvf rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/AS268218.roa File: AS268218.roa (raw, json) Hash identifier: pRdUMrsJOyGVlvTqInKvOFnRkcDP2nt88WmcQlm81BE= Subject key identifier: 9E:78:C4:22:1C:83:59:DC:2B:97:55:26:41:94:41:8C:A4:02:82:5F Certificate issuer: /CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C Certificate serial: 2C30DDB5C4576A7261133DD8E572096C0ABC5507 Authority key identifier: 02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer Subject info access: rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/AS268218.roa Signing time: Mon 20 Jan 2025 16:28:47 +0000 ROA not before: Mon 20 Jan 2025 16:23:47 +0000 ROA not after: Mon 19 Jan 2026 16:28:47 +0000 asID: 268218 IP address blocks: 45.235.236.0/22 maxlen: 22 45.235.236.0/23 maxlen: 23 45.235.236.0/24 maxlen: 24 45.235.237.0/24 maxlen: 24 45.235.238.0/23 maxlen: 23 45.235.238.0/24 maxlen: 24 45.235.239.0/24 maxlen: 24 2804:4dc4::/32 maxlen: 32 2804:4dc4::/33 maxlen: 33 2804:4dc4::/34 maxlen: 34 2804:4dc4::/35 maxlen: 35 2804:4dc4::/36 maxlen: 36 2804:4dc4::/48 maxlen: 48 2804:4dc4:1000::/36 maxlen: 36 2804:4dc4:2000::/35 maxlen: 35 2804:4dc4:2000::/36 maxlen: 36 2804:4dc4:3000::/36 maxlen: 36 2804:4dc4:4000::/34 maxlen: 34 2804:4dc4:4000::/35 maxlen: 35 2804:4dc4:4000::/36 maxlen: 36 2804:4dc4:5000::/36 maxlen: 36 2804:4dc4:6000::/35 maxlen: 35 2804:4dc4:6000::/36 maxlen: 36 2804:4dc4:7000::/36 maxlen: 36 2804:4dc4:8000::/33 maxlen: 33 2804:4dc4:8000::/34 maxlen: 34 2804:4dc4:8000::/35 maxlen: 35 2804:4dc4:8000::/36 maxlen: 36 2804:4dc4:8400::/40 maxlen: 40 2804:4dc4:9000::/36 maxlen: 36 2804:4dc4:a000::/35 maxlen: 35 2804:4dc4:a000::/36 maxlen: 36 2804:4dc4:b000::/36 maxlen: 36 2804:4dc4:c000::/35 maxlen: 35 2804:4dc4:c000::/36 maxlen: 36 2804:4dc4:d000::/36 maxlen: 36 2804:4dc4:e000::/35 maxlen: 35 2804:4dc4:e000::/36 maxlen: 36 2804:4dc4:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.crl rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 02:53:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:30:dd:b5:c4:57:6a:72:61:13:3d:d8:e5:72:09:6c:0a:bc:55:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C Validity Not Before: Jan 20 16:23:47 2025 GMT Not After : Jan 19 16:28:47 2026 GMT Subject: CN=9E78C4221C8359DC2B9755264194418CA402825F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ca:f1:04:c7:77:f8:74:03:67:49:17:74:a0: d7:c2:fd:62:12:d2:69:09:13:6a:34:57:2c:c2:02: 86:71:d2:34:bc:5e:78:40:45:c2:cc:b1:7d:86:48: 1a:82:14:53:6d:40:05:4c:d9:b2:6c:3f:2c:a3:a7: c6:4c:ed:c9:33:06:68:e0:6a:39:f7:25:b0:a9:60: 27:74:9a:74:f0:b8:14:04:8e:62:76:98:cb:c4:8f: 4d:91:fa:be:22:5a:c4:a5:42:eb:01:9b:c4:4a:32: 72:dc:a2:72:39:bf:3a:d6:3e:a7:72:d2:7b:8a:6f: 8a:2e:39:f6:b1:ff:c4:26:e5:95:35:4b:fe:c4:e3: 62:2a:23:0f:8f:13:f3:5d:07:94:d9:83:43:e3:22: 25:29:24:4d:e4:65:cf:b7:c0:5a:a9:ec:cb:92:50: 03:e0:df:8f:73:89:b9:b1:b8:bf:3f:f1:c1:c0:83: 1c:c9:ed:c8:de:15:bb:92:58:63:11:69:33:a4:d0: e0:52:1a:2d:68:8a:29:13:21:bb:00:67:f7:f3:b5: 7d:e4:01:a0:17:41:d4:6e:b2:fe:ff:7e:69:6e:12: d7:84:fa:40:cf:b9:08:f7:10:d5:96:2f:58:7c:d1: a4:71:3b:27:91:9e:73:1e:b7:af:df:e8:38:96:01: fd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:78:C4:22:1C:83:59:DC:2B:97:55:26:41:94:41:8C:A4:02:82:5F X509v3 Authority Key Identifier: keyid:02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/AS268218.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.235.236.0/22 IPv6: 2804:4dc4::/32 Signature Algorithm: sha256WithRSAEncryption 09:f8:31:7d:cd:5c:9e:a4:0d:68:a7:94:6f:db:9e:01:80:f9: 3a:ec:80:12:2e:d7:d1:b7:1d:55:66:84:00:aa:45:f8:50:05: dc:60:a0:00:55:86:a7:36:73:50:d2:7e:a5:5a:a4:2d:c4:f4: 31:30:95:64:83:ab:b5:45:61:e0:d3:d9:f4:d4:6b:89:55:cb: ea:50:64:67:94:a2:1a:13:02:d7:ef:e4:94:e2:89:95:9b:b3: 70:3a:30:e9:cb:1b:c2:58:64:49:3d:c8:9b:e6:18:08:e1:4c: f8:6b:b3:51:43:f5:d8:8e:5a:02:dd:15:f2:ab:6d:d1:99:82: 5b:28:07:2c:de:fc:e0:cc:ac:18:a4:aa:f7:13:31:59:8b:ea: ea:cb:41:e2:d8:5d:3a:a7:df:f8:4f:19:03:5b:6f:ac:56:77: 00:dd:58:47:d4:b5:77:44:26:b5:61:59:14:86:c5:1d:7d:a1: 3a:7d:f5:3d:a7:9d:3e:d2:ff:a1:94:d4:a6:6b:d2:5d:4c:10: c3:48:05:c9:07:ab:21:ea:15:80:bf:cb:03:3c:5e:e0:87:f3: c2:fe:c8:9b:99:a5:00:a0:d9:d3:dc:88:1d:ca:bb:07:ca:1c: f8:b9:b6:f7:16:83:57:64:8b:3b:6e:14:e5:3c:8c:bf:98:4f: b9:ea:c2:bd -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgIULDDdtcRXanJhEz3Y5XIJbAq8VQcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDJEOEEyQUQ1MzFGMTI5RTIxRDkyRDI3NUUwRUZEMzgw QzkzRkMzQzAeFw0yNTAxMjAxNjIzNDdaFw0yNjAxMTkxNjI4NDdaMDMxMTAvBgNV BAMTKDlFNzhDNDIyMUM4MzU5REMyQjk3NTUyNjQxOTQ0MThDQTQwMjgyNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsyvEEx3f4dANnSRd0oNfC/WIS 0mkJE2o0VyzCAoZx0jS8XnhARcLMsX2GSBqCFFNtQAVM2bJsPyyjp8ZM7ckzBmjg ajn3JbCpYCd0mnTwuBQEjmJ2mMvEj02R+r4iWsSlQusBm8RKMnLconI5vzrWPqdy 0nuKb4ouOfax/8Qm5ZU1S/7E42IqIw+PE/NdB5TZg0PjIiUpJE3kZc+3wFqp7MuS UAPg349zibmxuL8/8cHAgxzJ7cjeFbuSWGMRaTOk0OBSGi1oiikTIbsAZ/fztX3k AaAXQdRusv7/fmluEteE+kDPuQj3ENWWL1h80aRxOyeRnnMet6/f6DiWAf0pAgMB AAGjggIrMIICJzAdBgNVHQ4EFgQUnnjEIhyDWdwrl1UmQZRBjKQCgl8wHwYDVR0j BBgwFoAUAtiirVMfEp4h2S0nXg79OAyT/DwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0JwV2pFWGlQRFNMTXhYZUVLdEIyM01UdGVpcXNOdUFMUFlKdzV6V1lW a1gvMS8wMkQ4QTJBRDUzMUYxMjlFMjFEOTJEMjc1RTBFRkQzODBDOTNGQzNDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAyRDhBMkFENTMxRjEyOUUy MUQ5MkQyNzVFMEVGRDM4MEM5M0ZDM0MuY2VyMHoGCCsGAQUFBwELBG4wbDBqBggr BgEFBQcwC4ZecnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9DQnBX akVYaVBEU0xNeFhlRUt0QjIzTVR0ZWlxc051QUxQWUp3NXpXWVZrWC8xL0FTMjY4 MjE4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/ BB8wHTAMBAIAATAGAwQCLevsMA0EAgACMAcDBQAoBE3EMA0GCSqGSIb3DQEBCwUA A4IBAQAJ+DF9zVyepA1op5Rv254BgPk67IASLtfRtx1VZoQAqkX4UAXcYKAAVYan NnNQ0n6lWqQtxPQxMJVkg6u1RWHg09n01GuJVcvqUGRnlKIaEwLX7+SU4omVm7Nw OjDpyxvCWGRJPcib5hgI4Uz4a7NRQ/XYjloC3RXyq23RmYJbKAcs3vzgzKwYpKr3 EzFZi+rqy0Hi2F06p9/4TxkDW2+sVncA3VhH1LV3RCa1YVkUhsUdfaE6ffU9p50+ 0v+hlNSma9JdTBDDSAXJB6sh6hWAv8sDPF7gh/PC/sibmaUAoNnT3IgdyrsHyhz4 ubb3FoNXZIs7bhTlPIy/mE+56sK9 -----END CERTIFICATE-----Generated at Mon Apr 28 10:49:28 2025 by rpki-client on console.sobornost.net