
$ rpki-client -vvf rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/32342e3135322e33362e302f32342d3234203d3e20323730353634.roa
File: 32342e3135322e33362e302f32342d3234203d3e20323730353634.roa (raw, json)
Hash identifier: yBiClJzV9mXZsvr8LUQMXVSkBMy5QRoAd2I6awIU8iU=
Subject key identifier: E9:B8:1A:A9:E9:03:6B:C1:CE:F4:2D:10:16:7A:B2:C9:E4:FF:8C:7D
Certificate issuer: /CN=296C1957CA1EAD9BA9385FA528C36D900C425F48
Certificate serial: 199ABCD4A0D3B7BE73B111508B62327D453ECC38
Authority key identifier: 29:6C:19:57:CA:1E:AD:9B:A9:38:5F:A5:28:C3:6D:90:0C:42:5F:48
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296C1957CA1EAD9BA9385FA528C36D900C425F48.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/32342e3135322e33362e302f32342d3234203d3e20323730353634.roa
Signing time: Mon 14 Apr 2025 14:13:15 +0000
ROA not before: Mon 14 Apr 2025 14:08:15 +0000
ROA not after: Mon 13 Apr 2026 14:13:15 +0000
asID: 270564
IP address blocks: 24.152.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/296C1957CA1EAD9BA9385FA528C36D900C425F48.crl
rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/296C1957CA1EAD9BA9385FA528C36D900C425F48.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296C1957CA1EAD9BA9385FA528C36D900C425F48.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 29 Oct 2025 00:04:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:9a:bc:d4:a0:d3:b7:be:73:b1:11:50:8b:62:32:7d:45:3e:cc:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296C1957CA1EAD9BA9385FA528C36D900C425F48
Validity
Not Before: Apr 14 14:08:15 2025 GMT
Not After : Apr 13 14:13:15 2026 GMT
Subject: CN=E9B81AA9E9036BC1CEF42D10167AB2C9E4FF8C7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:95:f4:a2:21:0f:39:c1:a9:b1:ff:2b:c9:3c:
c4:1c:40:5f:ee:3a:87:e0:d7:e3:7c:76:62:cb:cb:
34:3b:5c:43:c1:7f:b6:62:87:de:01:8b:84:15:a9:
ab:38:38:25:40:3f:88:82:0f:93:68:3d:77:0f:c3:
58:c4:9a:53:25:8e:1c:b6:18:5d:ba:61:42:d4:62:
6a:eb:5b:29:4f:ac:6b:4a:61:11:af:1b:1c:3d:9a:
0c:36:17:6c:b8:c1:07:f3:81:99:19:e8:b5:75:54:
ff:5d:30:55:bf:36:f8:fd:c8:40:7c:e9:62:0a:b6:
d3:bb:86:e9:e4:0d:e8:d3:82:06:8f:dd:4e:58:8a:
8d:44:ab:c9:1f:91:7e:c1:05:49:4d:81:80:ba:d0:
04:15:a2:a3:ca:d3:6a:6b:3b:4c:7d:39:d3:2c:49:
86:f5:44:5c:6c:80:d8:24:9b:9f:4a:75:96:e7:0e:
6b:e1:6a:95:e8:83:79:20:ce:2f:5a:4c:4c:50:f1:
df:e1:77:be:89:13:55:a3:f0:d0:8a:dc:55:49:a2:
97:51:9a:69:2e:98:70:0f:15:5d:ed:a4:5a:71:51:
e6:1d:d0:45:64:4e:03:5e:2b:52:92:f5:2a:9f:74:
b0:ac:1b:bf:32:0d:db:f9:5c:53:ae:e0:ac:34:83:
cc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B8:1A:A9:E9:03:6B:C1:CE:F4:2D:10:16:7A:B2:C9:E4:FF:8C:7D
X509v3 Authority Key Identifier:
keyid:29:6C:19:57:CA:1E:AD:9B:A9:38:5F:A5:28:C3:6D:90:0C:42:5F:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/296C1957CA1EAD9BA9385FA528C36D900C425F48.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296C1957CA1EAD9BA9385FA528C36D900C425F48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/32342e3135322e33362e302f32342d3234203d3e20323730353634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.152.36.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:36:54:dd:4f:b9:71:e0:15:65:53:a8:c7:24:a0:40:26:88:
e9:2e:91:19:63:72:98:5b:26:bd:6d:5b:5f:e1:0b:7a:18:19:
f6:bb:27:c9:0d:43:4c:90:b2:92:ca:e2:e8:47:be:52:7c:08:
af:ef:de:e2:b8:ef:bc:d0:33:21:8c:57:0b:ac:0e:d2:19:b1:
82:dd:1e:1d:3e:4b:aa:14:47:0f:96:5f:2b:f5:26:33:79:1a:
aa:81:18:c6:47:4a:6a:5a:31:ec:6e:b4:43:e2:42:3b:6d:5a:
32:f5:70:59:b3:bc:a1:27:0e:c7:33:4a:14:69:f9:12:60:32:
9e:da:f4:f0:e7:0b:fe:23:52:5f:a6:54:83:45:5f:e0:62:56:
bf:9b:49:63:a0:68:49:8a:e0:c6:94:16:35:c4:f8:fa:46:53:
33:9d:2e:76:27:93:f5:d8:e5:9f:50:47:f8:c5:75:e9:55:32:
ba:b9:ed:3a:75:a9:9d:bf:a1:ff:3d:8f:57:7e:49:e3:9b:eb:
46:68:fc:ce:77:d1:84:8f:80:0e:83:47:71:63:1c:fa:70:56:
5b:0c:a1:a2:e0:57:f3:e2:4e:d7:70:2b:95:7e:99:68:6b:13:
49:cc:d0:6d:1c:27:a8:79:99:06:4a:1d:fb:05:21:ad:75:6c:
3a:16:37:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 16:41:20 2025 by rpki-client