
$ rpki-client -vvf rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/34352e3136342e3138382e302f32322d3234203d3e20323638363238.roa
File: 34352e3136342e3138382e302f32322d3234203d3e20323638363238.roa (raw, json)
Hash identifier: MFaOGmG3uk10MnFBlQJ/Pj6U7TcWeAadSbIdDIDPMAE=
Subject key identifier: 1D:E4:23:BF:51:18:59:6A:AF:5B:0B:27:59:BF:55:29:38:F5:34:F4
Certificate issuer: /CN=2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB
Certificate serial: 0955EC21336EDA720BCDD8D195C24A43D5766027
Authority key identifier: 2C:9C:59:4E:93:6E:1E:28:AD:5A:D7:3A:6B:F2:8A:E3:8C:00:28:FB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/34352e3136342e3138382e302f32322d3234203d3e20323638363238.roa
Signing time: Fri 02 May 2025 14:05:47 +0000
ROA not before: Fri 02 May 2025 14:00:47 +0000
ROA not after: Fri 01 May 2026 14:05:47 +0000
asID: 268628
IP address blocks: 45.164.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl
rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 11:40:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:55:ec:21:33:6e:da:72:0b:cd:d8:d1:95:c2:4a:43:d5:76:60:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB
Validity
Not Before: May 2 14:00:47 2025 GMT
Not After : May 1 14:05:47 2026 GMT
Subject: CN=1DE423BF5118596AAF5B0B2759BF552938F534F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a0:e4:e3:ec:8f:88:aa:c0:4e:c9:f3:95:34:
42:e3:2f:c1:85:18:2a:85:67:64:5f:2d:ef:3b:5b:
4d:0d:1b:42:2a:d3:99:81:f4:54:da:fb:3a:b7:c2:
ac:6a:7d:56:5e:c9:d6:eb:e8:74:16:dd:1a:58:3a:
20:07:38:15:74:a4:d9:01:77:51:9e:d9:78:45:46:
ca:a3:d3:cb:22:f2:0c:b1:fa:9b:62:71:37:32:63:
ea:9d:f8:c1:b5:c2:b0:9c:66:32:44:d3:32:11:25:
9f:54:d8:1f:7a:5e:5b:4f:e5:32:93:b8:3a:d1:df:
14:c4:bc:be:fa:42:ef:66:37:86:72:eb:36:17:3e:
0c:0f:f7:6f:13:4f:c5:a4:1d:1b:63:4d:3c:7b:65:
ed:c1:a2:15:fb:af:54:49:58:69:ec:5d:7e:51:63:
01:9c:9d:49:f1:87:de:d9:71:d9:b0:67:ef:d0:65:
3d:7c:20:37:80:9f:08:fd:c7:f5:d8:5b:61:6e:c0:
76:08:b8:58:b5:3b:58:e4:8c:b4:83:1a:b3:36:dd:
42:7d:ba:66:bb:b6:7b:1f:a6:25:f1:07:eb:94:50:
60:f9:08:41:28:a1:2d:50:5b:8d:6a:e5:9c:17:8c:
61:dd:0c:5c:fe:99:ee:c9:05:de:3e:fb:c1:d2:f6:
11:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E4:23:BF:51:18:59:6A:AF:5B:0B:27:59:BF:55:29:38:F5:34:F4
X509v3 Authority Key Identifier:
keyid:2C:9C:59:4E:93:6E:1E:28:AD:5A:D7:3A:6B:F2:8A:E3:8C:00:28:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/34352e3136342e3138382e302f32322d3234203d3e20323638363238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.164.188.0/22
Signature Algorithm: sha256WithRSAEncryption
07:85:c5:e2:7b:92:07:83:b4:52:31:62:2d:e5:27:78:7d:2e:
91:65:20:e1:2c:50:74:03:ac:5a:43:53:e7:0f:0f:af:65:ca:
12:24:1e:6b:15:0b:f7:22:8f:08:b3:ec:25:91:ab:bd:eb:1f:
20:f6:98:6d:8d:48:9a:57:f1:be:55:32:01:db:f1:3d:dd:88:
2b:6c:8b:d7:4f:47:59:ea:a2:05:97:3d:1b:dd:d5:fc:da:03:
e6:3b:d9:51:6a:a6:f5:f1:0d:47:42:c1:51:8a:df:d4:87:ed:
e4:a6:a8:b1:99:3a:0c:83:a2:fd:26:d7:66:f7:eb:f6:32:f3:
46:d5:9f:81:7b:ea:df:2e:01:46:f9:0e:17:8c:5c:b6:dc:64:
9c:0b:1c:6b:51:70:2c:81:ae:87:7f:1e:40:7d:1f:dc:f1:7b:
98:fe:e2:11:80:45:cc:a5:2b:a5:5a:2f:00:2d:a3:2c:c8:f3:
a4:f3:0d:a0:d7:a0:5d:9d:0e:83:f9:ba:e9:c4:dc:43:d5:a1:
52:12:f8:e8:36:81:c0:8b:22:5c:e0:e7:3e:fd:7e:f0:dc:bd:
ee:7f:64:ce:39:a7:93:8b:88:2b:fb:5a:ec:f8:63:c5:12:cd:
b3:6b:c2:a7:54:10:0d:b5:bd:8f:0e:17:9e:f4:dc:3c:20:49:
7d:fd:f1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:03:36 2025 by rpki-client