
$ rpki-client -vvf rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/34352e37302e35322e302f32322d3234203d3e20323634313632.roa
File: 34352e37302e35322e302f32322d3234203d3e20323634313632.roa (raw, json)
Hash identifier: jDgX7ey1tSeSvn7u4WrWFWIU2pgt/MxdfFgRvLrl1WM=
Subject key identifier: 99:23:17:44:33:C7:61:3A:FE:E4:EE:1F:7C:4D:4D:6C:EC:78:FD:A6
Certificate issuer: /CN=1EC190957ABC0EC0432EF48C9BCB45C81982D3E7
Certificate serial: 05101AEA7B3CCEF872C8AC470FFE087C7990EC3D
Authority key identifier: 1E:C1:90:95:7A:BC:0E:C0:43:2E:F4:8C:9B:CB:45:C8:19:82:D3:E7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EC190957ABC0EC0432EF48C9BCB45C81982D3E7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/34352e37302e35322e302f32322d3234203d3e20323634313632.roa
Signing time: Wed 02 Jul 2025 13:03:44 +0000
ROA not before: Wed 02 Jul 2025 12:58:44 +0000
ROA not after: Wed 01 Jul 2026 13:03:44 +0000
asID: 264162
IP address blocks: 45.70.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/1EC190957ABC0EC0432EF48C9BCB45C81982D3E7.crl
rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/1EC190957ABC0EC0432EF48C9BCB45C81982D3E7.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EC190957ABC0EC0432EF48C9BCB45C81982D3E7.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:10:1a:ea:7b:3c:ce:f8:72:c8:ac:47:0f:fe:08:7c:79:90:ec:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1EC190957ABC0EC0432EF48C9BCB45C81982D3E7
Validity
Not Before: Jul 2 12:58:44 2025 GMT
Not After : Jul 1 13:03:44 2026 GMT
Subject: CN=9923174433C7613AFEE4EE1F7C4D4D6CEC78FDA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:af:70:4d:14:c4:b7:6a:a0:f0:3c:2b:77:93:
55:43:fe:c3:78:18:0d:34:d8:47:55:24:82:59:18:
78:0b:93:dc:20:a3:8f:f8:d1:9a:51:ec:66:93:68:
1d:db:e5:59:6b:c1:00:14:fd:9d:f1:41:b5:cc:4f:
4e:15:2b:9b:5f:f9:02:87:24:ba:73:42:5f:75:c8:
e0:aa:13:ec:91:d4:99:98:a9:f8:d7:c2:82:47:21:
a0:91:3a:0d:2e:f1:ba:68:55:9c:05:cf:b8:ef:03:
a6:d3:0b:db:06:81:ce:ae:ef:ec:ad:ee:b7:bf:bb:
dc:cb:e0:6e:be:1e:43:57:0d:aa:7d:2d:4f:76:d8:
c9:9c:c5:25:e3:9d:3c:0a:c9:f5:6f:eb:e8:84:64:
3f:c6:7a:52:8d:02:27:30:2e:34:db:9f:4c:6b:8f:
5b:10:ad:98:b3:7e:fc:6e:76:55:44:a8:a5:5f:55:
22:db:cd:b6:ac:6b:f4:c3:90:90:d3:fc:d6:45:78:
ec:50:94:1d:45:03:69:47:15:32:59:51:a3:25:90:
63:1c:15:96:0c:59:b2:a6:b6:e1:0a:85:b8:d9:e2:
70:1d:96:7d:34:c3:f8:35:6c:f9:67:6d:6d:ee:e9:
0d:8f:25:39:f2:90:57:db:5b:ee:aa:aa:3f:9c:88:
db:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:23:17:44:33:C7:61:3A:FE:E4:EE:1F:7C:4D:4D:6C:EC:78:FD:A6
X509v3 Authority Key Identifier:
keyid:1E:C1:90:95:7A:BC:0E:C0:43:2E:F4:8C:9B:CB:45:C8:19:82:D3:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/1EC190957ABC0EC0432EF48C9BCB45C81982D3E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EC190957ABC0EC0432EF48C9BCB45C81982D3E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/34352e37302e35322e302f32322d3234203d3e20323634313632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.70.52.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:a9:37:79:a4:97:5b:ab:c9:55:a9:13:54:84:7e:c0:c9:a1:
e9:6e:19:c9:28:5e:63:81:6d:cb:28:c2:d5:f3:9b:47:9f:77:
f0:b3:43:e5:fa:49:2f:20:97:c3:5a:df:dc:73:d1:31:81:2e:
c9:e0:48:fa:b0:f9:37:dd:a0:ab:ab:29:8d:40:30:c5:6f:07:
27:3d:bf:3d:ca:0d:58:45:77:f9:73:2f:48:73:35:49:62:c4:
78:ff:48:ba:64:5d:23:bf:31:3d:ed:90:9a:7e:c7:2d:02:66:
7a:88:eb:d8:5f:31:72:55:78:61:df:5c:78:dc:ca:e1:5d:fc:
c1:1c:0d:87:76:88:72:1d:18:1b:ff:9b:7a:cf:fb:19:40:58:
fb:0d:96:6d:97:66:bc:dc:d1:7c:c1:46:55:45:e4:84:f4:39:
b7:34:3c:96:4a:38:0d:c9:f4:e2:95:f4:04:b9:0f:b0:21:8e:
fd:80:c3:4d:8a:a0:8f:bc:29:4d:d2:6e:9f:11:7f:bb:ba:6c:
be:53:fb:09:75:be:9d:41:4a:18:51:62:82:72:1f:10:35:df:
e7:3a:71:83:39:71:31:c8:f4:7b:1b:96:6f:a0:5e:3d:7a:aa:
2c:e4:3a:97:87:92:17:06:18:5f:85:4e:f2:f7:90:dc:d0:ec:
46:4d:60:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:59:25 2025 by rpki-client