
$ rpki-client -vvf rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/34352e3138322e35332e302f32342d3234203d3e20323639323835.roa
File: 34352e3138322e35332e302f32342d3234203d3e20323639323835.roa (raw, json)
Hash identifier: 095KOiCgelfFAJaEWZp4FBq2DB3dXDZ9yQVjrdfn984=
Subject key identifier: 28:0F:6F:BB:DA:C8:D9:E4:43:9B:A1:F5:C8:99:16:67:94:85:CE:06
Certificate issuer: /CN=3D4867F11A1D652682FA95ED911B20D81139853D
Certificate serial: 7340EC076631567D3B12CA657D3F45912B220632
Authority key identifier: 3D:48:67:F1:1A:1D:65:26:82:FA:95:ED:91:1B:20:D8:11:39:85:3D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/34352e3138322e35332e302f32342d3234203d3e20323639323835.roa
Signing time: Wed 30 Jul 2025 17:02:28 +0000
ROA not before: Wed 30 Jul 2025 16:57:28 +0000
ROA not after: Wed 29 Jul 2026 17:02:28 +0000
asID: 269285
IP address blocks: 45.182.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.crl
rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 12:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:40:ec:07:66:31:56:7d:3b:12:ca:65:7d:3f:45:91:2b:22:06:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D4867F11A1D652682FA95ED911B20D81139853D
Validity
Not Before: Jul 30 16:57:28 2025 GMT
Not After : Jul 29 17:02:28 2026 GMT
Subject: CN=280F6FBBDAC8D9E4439BA1F5C89916679485CE06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ac:65:2a:e1:e7:74:e1:13:02:ba:c3:fd:e4:
0f:43:30:52:1d:85:64:ca:74:df:44:0b:d3:b5:15:
d4:51:d3:38:41:e9:41:0f:4f:b2:0c:0e:4a:c6:1f:
f1:5d:b2:14:27:1f:bc:ee:db:e7:fc:dc:00:89:c4:
d6:5b:01:08:8e:c9:d4:b0:67:ca:db:2c:9a:ba:2f:
be:97:90:21:41:35:94:0a:7a:e1:3f:14:5b:63:6b:
a2:96:32:72:76:8b:7a:9a:7b:29:9c:5b:37:8e:76:
18:44:69:e8:43:4a:8e:65:22:a3:62:02:4c:9e:98:
b7:cc:48:90:e1:b8:91:c6:4c:58:16:c0:03:21:27:
ba:d6:fc:d4:f5:bf:98:28:2f:29:d6:3e:c7:69:97:
e6:a8:fb:96:05:28:42:41:ea:92:28:45:55:13:54:
b0:8e:bb:a3:4a:7c:3e:f1:08:7b:ca:9e:3b:2d:ed:
56:d7:ce:c1:3e:56:43:e0:c4:79:91:10:a9:13:56:
80:19:82:e7:24:ec:96:86:6e:5a:7a:4c:f7:ad:b7:
57:f4:86:7d:d8:5a:0c:8f:2f:5e:9d:d6:f5:58:6e:
3a:6f:b6:46:0e:ec:a0:3c:15:ed:a6:da:dd:ff:75:
49:6d:52:5c:60:3c:f5:7d:9a:3a:04:7e:6d:a8:b0:
c4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:0F:6F:BB:DA:C8:D9:E4:43:9B:A1:F5:C8:99:16:67:94:85:CE:06
X509v3 Authority Key Identifier:
keyid:3D:48:67:F1:1A:1D:65:26:82:FA:95:ED:91:1B:20:D8:11:39:85:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/34352e3138322e35332e302f32342d3234203d3e20323639323835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.182.53.0/24
Signature Algorithm: sha256WithRSAEncryption
55:99:77:2f:c8:e0:94:89:88:82:4c:2a:7f:9e:51:40:11:c8:
a7:75:08:e0:7a:a6:67:fc:9d:79:b1:40:01:a1:13:8b:c5:12:
64:8e:ec:57:1d:5a:a6:34:c9:2a:5e:1b:5e:02:08:c2:ef:1a:
1d:33:38:54:c1:00:b0:67:0f:be:03:fd:90:ab:1f:28:e5:75:
ab:71:65:71:c2:0d:a8:fd:0b:a2:f6:23:74:7e:43:d9:dc:32:
c5:a3:44:0f:19:bd:7a:e7:f3:ab:f7:da:d6:e6:aa:77:16:24:
d7:d6:77:e7:85:f9:9e:1f:49:51:84:37:71:8b:87:15:85:d6:
ae:6a:b3:f3:a7:5d:d3:a1:66:35:f5:89:d0:b5:83:5c:d4:48:
d7:5d:e0:71:13:18:6a:f1:eb:1c:1c:1a:7e:5b:ec:65:72:f8:
c8:59:b6:aa:b0:4c:af:c8:15:e4:c6:c8:12:1b:dd:65:1c:e3:
01:48:29:81:91:f9:62:16:1d:a0:40:21:a8:d5:7b:a2:2f:f1:
10:82:f6:88:2d:e7:5f:29:37:02:c9:f8:54:c6:b1:dd:dd:0d:
94:29:58:dd:9c:85:80:7d:65:c4:f7:44:7f:57:7a:29:08:94:
1f:89:c3:99:70:a8:09:60:34:3e:af:e5:a9:c1:e7:2a:ee:28:
b9:5d:ad:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:36:54 2025 by rpki-client