
$ rpki-client -vvf rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/34352e3136352e3230382e302f32342d3234203d3e20323638363932.roa
File: 34352e3136352e3230382e302f32342d3234203d3e20323638363932.roa (raw, json)
Hash identifier: ifjf9+0t6Oka4PNd7YfBXjaAznSTR9U+4vUbrPUyN/M=
Subject key identifier: E5:02:95:BF:98:FE:84:E0:36:6C:20:96:B2:E8:5F:56:7F:85:20:B0
Certificate issuer: /CN=1D27227F1560DF2B60341C7259E9A068591B18A3
Certificate serial: 02E3D6678A1806D3583BBC65603B3A54EF890E50
Authority key identifier: 1D:27:22:7F:15:60:DF:2B:60:34:1C:72:59:E9:A0:68:59:1B:18:A3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D27227F1560DF2B60341C7259E9A068591B18A3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/34352e3136352e3230382e302f32342d3234203d3e20323638363932.roa
Signing time: Fri 24 Oct 2025 12:39:39 +0000
ROA not before: Fri 24 Oct 2025 12:34:39 +0000
ROA not after: Fri 23 Oct 2026 12:39:39 +0000
asID: 268692
IP address blocks: 45.165.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/1D27227F1560DF2B60341C7259E9A068591B18A3.crl
rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/1D27227F1560DF2B60341C7259E9A068591B18A3.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D27227F1560DF2B60341C7259E9A068591B18A3.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 10:22:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:e3:d6:67:8a:18:06:d3:58:3b:bc:65:60:3b:3a:54:ef:89:0e:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1D27227F1560DF2B60341C7259E9A068591B18A3
Validity
Not Before: Oct 24 12:34:39 2025 GMT
Not After : Oct 23 12:39:39 2026 GMT
Subject: CN=E50295BF98FE84E0366C2096B2E85F567F8520B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ec:a7:43:b3:4a:19:89:c2:ed:c8:03:c1:f0:
79:0c:05:51:cb:78:8f:e7:a5:c3:e5:05:5e:50:cc:
52:07:fe:e4:31:4d:a7:af:89:8a:4d:26:40:34:fe:
ee:77:74:1e:50:91:1b:aa:53:98:28:b2:12:47:e1:
8d:01:7d:2e:c3:00:3d:2a:67:a0:39:f2:b6:0a:24:
8c:e5:22:09:24:4c:cb:2e:52:d1:f1:da:6b:ac:25:
96:29:3d:80:74:dc:6e:01:50:d4:3f:3a:39:ff:8f:
40:1f:f0:dd:67:9d:a6:15:61:e0:d3:cc:9d:3a:bc:
1d:e9:9f:22:21:0f:34:1d:cf:26:1c:75:a5:ea:25:
09:26:9a:12:5e:01:9a:34:84:55:54:ea:71:46:d6:
21:ba:38:e8:02:80:f0:f5:3f:78:2e:88:f4:a7:b7:
8f:64:65:68:85:6c:a9:0d:53:5c:bb:4b:08:b8:0d:
33:8f:e1:0d:3c:06:67:d7:fe:98:f8:7f:fa:8b:fb:
2f:04:29:8f:4d:ec:d8:78:9a:3b:40:1f:94:80:af:
fd:e2:cc:df:ae:d7:3d:81:e3:c9:4f:e2:e1:e4:86:
17:66:65:e5:d3:98:50:b8:e1:b4:ee:f6:57:33:69:
d2:8b:0f:98:af:c3:e6:bf:fc:5d:2f:55:27:b4:8f:
58:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:02:95:BF:98:FE:84:E0:36:6C:20:96:B2:E8:5F:56:7F:85:20:B0
X509v3 Authority Key Identifier:
keyid:1D:27:22:7F:15:60:DF:2B:60:34:1C:72:59:E9:A0:68:59:1B:18:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/1D27227F1560DF2B60341C7259E9A068591B18A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D27227F1560DF2B60341C7259E9A068591B18A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/34352e3136352e3230382e302f32342d3234203d3e20323638363932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.165.208.0/24
Signature Algorithm: sha256WithRSAEncryption
11:62:91:39:db:30:6a:f6:05:0e:93:ba:ca:91:fa:7b:8a:85:
ed:bc:0b:4a:81:90:75:05:73:2e:a6:5d:f3:68:1d:99:8e:9c:
9b:ed:32:87:62:00:07:93:c7:9f:c1:2f:3b:97:26:05:0b:8d:
5a:e8:bd:b4:db:fc:7e:df:03:3d:11:5f:73:0f:41:9c:17:0b:
ff:b2:28:04:00:d9:72:c4:39:53:16:e6:8d:02:2f:03:99:9b:
62:52:72:04:7c:cd:da:2a:6c:ae:ce:2d:58:39:1c:c0:7f:1d:
3a:30:62:80:0d:1d:fb:98:4a:e5:50:5c:87:52:7c:32:04:b9:
31:ff:d0:fe:24:73:d7:30:c4:c0:ea:a7:56:7d:8b:25:1a:6e:
e0:3c:15:39:7b:33:66:74:58:e3:7f:d5:0d:7a:0a:07:c2:75:
f9:55:6e:f5:9c:11:45:c7:7b:7f:1b:ec:0d:c7:03:44:d5:40:
08:3c:d7:ad:ca:75:23:12:ab:e4:a6:c5:65:6a:de:92:74:68:
4d:a7:76:5b:ad:56:39:8f:b0:6e:17:21:84:c4:a1:50:ed:5f:
5e:35:af:7a:50:54:67:47:a9:00:2b:22:db:20:97:97:69:7e:
07:c3:c2:b1:1c:dd:a8:4d:98:db:3d:f1:cb:77:9c:98:7f:3d:
9e:ad:fb:f9
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUAuPWZ4oYBtNYO7xlYDs6VO+JDlAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUQyNzIyN0YxNTYwREYyQjYwMzQxQzcyNTlFOUEwNjg1
OTFCMThBMzAeFw0yNTEwMjQxMjM0MzlaFw0yNjEwMjMxMjM5MzlaMDMxMTAvBgNV
BAMTKEU1MDI5NUJGOThGRTg0RTAzNjZDMjA5NkIyRTg1RjU2N0Y4NTIwQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC7KdDs0oZicLtyAPB8HkMBVHL
eI/npcPlBV5QzFIH/uQxTaeviYpNJkA0/u53dB5QkRuqU5goshJH4Y0BfS7DAD0q
Z6A58rYKJIzlIgkkTMsuUtHx2musJZYpPYB03G4BUNQ/Ojn/j0Af8N1nnaYVYeDT
zJ06vB3pnyIhDzQdzyYcdaXqJQkmmhJeAZo0hFVU6nFG1iG6OOgCgPD1P3guiPSn
t49kZWiFbKkNU1y7Swi4DTOP4Q08BmfX/pj4f/qL+y8EKY9N7Nh4mjtAH5SAr/3i
zN+u1z2B48lP4uHkhhdmZeXTmFC44bTu9lczadKLD5ivw+a//F0vVSe0j1g/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU5QKVv5j+hOA2bCCWsuhfVn+FILAwHwYDVR0j
BBgwFoAUHScifxVg3ytgNBxyWemgaFkbGKMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGZrblZEZW1vNnJhMmpnbmJkaUU2WnhlMUZzdzRRQTNocXQybXNwZVRV
TksvMC8xRDI3MjI3RjE1NjBERjJCNjAzNDFDNzI1OUU5QTA2ODU5MUIxOEEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFEMjcyMjdGMTU2MERGMkI2
MDM0MUM3MjU5RTlBMDY4NTkxQjE4QTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzhma25WRGVtbzZyYTJqZ25iZGlFNlp4ZTFGc3c0UUEzaHF0Mm1zcGVUVU5LLzAv
MzQzNTJlMzEzNjM1MmUzMjMwMzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzNjM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtpdAwDQYJKoZIhvcNAQELBQADggEBABFikTnb
MGr2BQ6TusqR+nuKhe28C0qBkHUFcy6mXfNoHZmOnJvtModiAAeTx5/BLzuXJgUL
jVrovbTb/H7fAz0RX3MPQZwXC/+yKAQA2XLEOVMW5o0CLwOZm2JScgR8zdoqbK7O
LVg5HMB/HTowYoANHfuYSuVQXIdSfDIEuTH/0P4kc9cwxMDqp1Z9iyUabuA8FTl7
M2Z0WON/1Q16CgfCdflVbvWcEUXHe38b7A3HA0TVQAg8163KdSMSq+SmxWVq3pJ0
aE2ndlutVjmPsG4XIYTEoVDtX141r3pQVGdHqQArItsgl5dpfgfDwrEc3ahNmNs9
8ct3nJh/PZ6t+/k=
-----END CERTIFICATE-----
Generated at Mon Nov 3 19:16:32 2025 by rpki-client