
$ rpki-client -vvf rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/34352e3233382e34362e302f32332d3233203d3e20323638333132.roa
File: 34352e3233382e34362e302f32332d3233203d3e20323638333132.roa (raw, json)
Hash identifier: QJH4fYHcsHbgYb/UclILf3opV353t9z08DRHEej1kLQ=
Subject key identifier: B8:20:09:D7:69:01:75:99:62:31:AC:17:2D:39:37:C0:12:E6:19:0B
Certificate issuer: /CN=F977CCF4428A4568379EFF8DC7F9F1A45C92D40C
Certificate serial: 3A99A556A68D7E112A33CCB92424C40AF9C4D598
Authority key identifier: F9:77:CC:F4:42:8A:45:68:37:9E:FF:8D:C7:F9:F1:A4:5C:92:D4:0C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/34352e3233382e34362e302f32332d3233203d3e20323638333132.roa
Signing time: Wed 05 Mar 2025 19:00:01 +0000
ROA not before: Wed 05 Mar 2025 18:55:01 +0000
ROA not after: Wed 04 Mar 2026 19:00:01 +0000
asID: 268312
IP address blocks: 45.238.46.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl
rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 05:48:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:99:a5:56:a6:8d:7e:11:2a:33:cc:b9:24:24:c4:0a:f9:c4:d5:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F977CCF4428A4568379EFF8DC7F9F1A45C92D40C
Validity
Not Before: Mar 5 18:55:01 2025 GMT
Not After : Mar 4 19:00:01 2026 GMT
Subject: CN=B82009D7690175996231AC172D3937C012E6190B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6d:c0:23:ce:f3:29:e5:32:5c:de:93:97:da:
5e:52:ff:fe:73:ba:66:02:64:cd:f8:f0:6f:cb:00:
ba:05:c5:02:6a:74:00:b2:e7:5d:24:4f:a0:5c:04:
de:6f:09:00:19:dd:1a:11:c0:3e:ee:0e:88:74:8c:
e1:96:41:b1:2c:2b:a8:a4:fe:6a:ad:a0:a3:00:1a:
83:65:60:7f:88:3e:7e:eb:a1:8c:69:3a:4a:ed:74:
07:0f:0a:95:22:b8:00:01:af:5c:16:2c:e5:f9:75:
c8:a2:74:0d:bc:c5:eb:71:47:f9:db:83:eb:04:34:
02:c0:d5:a1:d3:49:ac:ea:66:f9:3d:d5:c0:1a:e5:
8c:82:4a:2b:b0:c5:a5:c1:eb:fb:46:26:e9:af:50:
ee:12:86:1d:aa:08:b8:47:17:08:9b:6e:6d:ad:e6:
f8:e9:fb:e0:89:ae:d5:1c:0f:76:b1:5b:ca:0c:bd:
28:bc:57:46:2e:b6:82:dc:7d:27:a1:10:2f:63:e2:
4f:44:b0:43:b9:70:a7:2c:7c:41:8b:d4:31:15:59:
7d:f6:be:9e:c4:d8:9c:ae:f0:29:cc:a1:9b:ec:38:
2d:ee:e5:b9:1f:aa:ba:15:8e:91:7b:2c:e1:85:80:
ab:20:dc:cb:3a:39:6b:a6:40:82:cd:0f:39:b7:b8:
4d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:20:09:D7:69:01:75:99:62:31:AC:17:2D:39:37:C0:12:E6:19:0B
X509v3 Authority Key Identifier:
keyid:F9:77:CC:F4:42:8A:45:68:37:9E:FF:8D:C7:F9:F1:A4:5C:92:D4:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/34352e3233382e34362e302f32332d3233203d3e20323638333132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.46.0/23
Signature Algorithm: sha256WithRSAEncryption
86:7c:b0:30:cf:f5:87:25:b4:89:23:bd:8c:02:35:b9:d7:43:
73:e7:00:40:c2:50:1d:9c:91:ad:e3:8c:65:a4:9b:b6:66:6f:
dc:90:cb:b1:1b:2c:c3:59:e9:be:32:f3:a0:65:75:2e:5c:52:
86:d9:53:ec:25:5e:12:a5:9b:8b:8c:b7:a0:00:3d:a2:ac:9b:
17:63:70:32:d8:e9:ac:af:59:5f:7f:e9:c9:ca:6f:45:84:d9:
88:c4:c2:62:5d:65:c5:d0:d8:a5:56:d3:d0:db:78:ac:15:e2:
08:b9:50:0f:c6:38:e9:46:a3:b8:ea:07:be:57:82:cb:98:08:
8f:8f:a3:18:dc:16:53:f0:2c:b0:a7:7b:a3:bb:98:b5:bf:41:
68:86:7d:1f:eb:73:b1:0f:b9:22:f3:84:f8:26:c4:dd:97:36:
ae:94:49:ee:1b:fb:3b:69:96:d8:87:e7:12:a8:d3:20:77:70:
0d:e8:32:9e:6e:02:9c:cc:61:a7:df:14:87:ed:9b:be:ff:36:
0c:12:5a:b9:cd:63:15:1c:1e:3c:aa:34:b5:37:d5:57:f2:3a:
ca:49:93:5c:3c:e4:79:95:a1:0c:f2:8c:f5:8e:b0:14:ad:1d:
36:0e:d1:6c:4c:90:39:e2:fc:ce:e5:01:a4:11:e1:93:6b:a7:
0a:15:91:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:59:45 2025 by rpki-client