
$ rpki-client -vvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e31382e3234302e302f32302d3234203d3e2031323531.roa
File: 3230302e31382e3234302e302f32302d3234203d3e2031323531.roa (raw, json)
Hash identifier: fu4Yj7lhlWiyVOF0NSp8JziFucmPgAL9kY7qGGUbGzE=
Subject key identifier: 70:C5:D6:CA:7B:28:74:D1:5B:85:10:92:1E:39:EE:E0:7A:31:F8:65
Certificate issuer: /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
Certificate serial: 581F684DB483AFADFF5C2EF1BEF817EE5DD20C8E
Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e31382e3234302e302f32302d3234203d3e2031323531.roa
Signing time: Mon 13 Oct 2025 13:46:22 +0000
ROA not before: Mon 13 Oct 2025 13:41:22 +0000
ROA not after: Mon 12 Oct 2026 13:46:22 +0000
asID: 1251
IP address blocks: 200.18.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl
rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 04:04:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:1f:68:4d:b4:83:af:ad:ff:5c:2e:f1:be:f8:17:ee:5d:d2:0c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
Validity
Not Before: Oct 13 13:41:22 2025 GMT
Not After : Oct 12 13:46:22 2026 GMT
Subject: CN=70C5D6CA7B2874D15B8510921E39EEE07A31F865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:13:a8:61:58:2b:76:39:db:dc:6f:a3:33:51:
6e:e2:00:a2:85:cb:69:d5:58:24:7e:ef:4b:bb:63:
35:a6:be:3b:20:db:59:b1:86:58:4d:91:c8:67:82:
83:f2:bc:43:d4:96:0d:14:7b:66:c9:b7:10:a9:84:
e9:a5:bb:d9:7f:aa:e0:1c:4b:4c:23:45:5a:43:0f:
e0:4d:c7:78:14:1d:7b:d6:0a:04:05:fe:60:6d:5f:
68:59:d0:1e:c8:b2:47:e8:e2:1b:21:1d:d5:36:dc:
23:23:dd:a9:37:26:17:5a:d2:b7:e7:ac:9f:a9:9a:
36:2f:17:9b:24:38:30:69:24:b5:fe:f0:3b:cd:38:
92:55:c8:5a:19:b1:13:cd:01:7c:b3:6c:fc:92:1d:
55:2b:47:76:b5:85:1d:b5:54:c5:a7:7e:47:dc:53:
94:fc:f8:d1:77:34:f6:ef:02:c8:2c:84:3a:64:dd:
b2:a0:f9:0b:81:6f:e8:64:e6:13:0f:17:4c:61:a1:
89:10:5d:97:79:41:34:ee:45:9c:68:24:6e:39:d6:
78:8f:3b:8b:94:ae:51:48:bb:97:7e:2f:b7:bd:9a:
2d:c7:df:d5:70:38:fc:c7:e5:05:b8:a0:c1:be:c0:
cd:3d:bb:1e:60:ef:f3:5c:f6:1e:9d:b4:80:14:00:
11:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C5:D6:CA:7B:28:74:D1:5B:85:10:92:1E:39:EE:E0:7A:31:F8:65
X509v3 Authority Key Identifier:
keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e31382e3234302e302f32302d3234203d3e2031323531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.18.240.0/20
Signature Algorithm: sha256WithRSAEncryption
3d:33:5a:0b:5a:f1:97:dd:a8:08:f3:6f:13:d1:af:ea:27:65:
13:95:e1:12:63:20:8d:7f:af:e0:3a:96:66:47:29:67:6c:07:
96:cc:ce:57:d0:17:f8:b1:08:70:f2:d5:67:30:ee:7b:4a:25:
04:e5:f0:ae:e4:a4:8d:4a:60:60:71:cb:31:0a:ab:24:47:47:
4f:44:2b:87:8e:5a:20:4c:0b:03:84:20:6c:79:1d:35:03:76:
80:fa:5a:28:f2:72:03:93:10:04:80:a5:58:d9:5d:48:25:b5:
a5:a5:f2:e1:f4:0e:ff:34:3e:35:39:63:06:94:40:c1:05:b2:
47:45:64:60:41:20:c1:19:c5:54:10:84:dc:95:6a:4b:e7:6d:
81:78:89:31:e0:09:cf:8f:d5:6a:77:15:6a:2a:2a:59:fe:85:
34:68:d2:1e:b5:94:7b:80:76:42:8f:53:5a:12:46:86:27:0f:
e5:77:97:c4:fb:a1:88:58:5f:d9:88:c6:09:20:e8:7f:2f:37:
b5:c7:5e:3f:47:7a:91:92:58:cc:be:03:3f:01:9f:92:bf:e4:
87:25:97:7e:5e:b6:07:6e:06:e8:6a:f6:91:24:c0:2b:0c:0d:
79:aa:36:fe:d4:68:2e:e7:a2:5e:a0:9d:4e:eb:d6:37:0d:e3:
b1:ea:89:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:11:01 2025 by rpki-client