
$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/34352e3136352e32302e302f32322d3232203d3e20323633363635.roa
File: 34352e3136352e32302e302f32322d3232203d3e20323633363635.roa (raw, json)
Hash identifier: BVb/jut+C8eFviVFvuM2ltcqqqT+gQY09gWhdSqJwbM=
Subject key identifier: 4B:BB:58:28:CE:C6:05:9D:78:93:3A:87:62:19:65:72:39:01:83:52
Certificate issuer: /CN=DDF75D11A85F5023747B20E973994EC53D23A68E
Certificate serial: 4E5FB8F8C6A812795B35BAAA968BAC2838584488
Authority key identifier: DD:F7:5D:11:A8:5F:50:23:74:7B:20:E9:73:99:4E:C5:3D:23:A6:8E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/34352e3136352e32302e302f32322d3232203d3e20323633363635.roa
Signing time: Thu 09 Oct 2025 21:02:31 +0000
ROA not before: Thu 09 Oct 2025 20:57:31 +0000
ROA not after: Thu 08 Oct 2026 21:02:31 +0000
asID: 263665
IP address blocks: 45.165.20.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.crl
rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 08:36:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:5f:b8:f8:c6:a8:12:79:5b:35:ba:aa:96:8b:ac:28:38:58:44:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDF75D11A85F5023747B20E973994EC53D23A68E
Validity
Not Before: Oct 9 20:57:31 2025 GMT
Not After : Oct 8 21:02:31 2026 GMT
Subject: CN=4BBB5828CEC6059D78933A876219657239018352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:46:09:f2:22:a2:ed:cb:cd:a9:78:d2:99:96:
d4:48:df:ad:91:20:72:38:48:d8:4f:f7:7a:da:be:
0b:cc:29:44:d9:41:b4:0b:cf:b3:72:68:a5:ee:b6:
5d:f0:9a:e6:68:f5:80:9e:d6:2f:55:6e:a1:0f:f3:
ad:39:d9:91:9d:f3:dd:b1:51:0c:86:66:da:1f:eb:
97:96:69:40:56:aa:41:5c:f0:ef:c7:0c:df:42:a0:
82:05:d8:9f:d6:bb:b9:97:e5:2f:d0:1a:3f:81:62:
a2:7c:95:d4:1a:64:a2:71:e2:49:26:df:85:37:9d:
d7:95:5f:29:39:f1:c0:8c:a1:9c:6a:7f:4b:77:3b:
3b:f3:94:8a:35:d1:f7:46:14:7f:55:aa:18:db:50:
ee:6e:0e:6f:ba:2b:47:7b:5c:d7:74:e4:ec:86:c5:
df:b6:b6:2a:9c:49:27:94:28:69:8d:ef:c1:a8:39:
6c:b3:3a:f4:da:4c:a8:3c:ec:d0:09:88:f4:9e:1e:
5a:74:29:c1:3f:7c:17:ea:98:51:6e:17:f8:8a:7e:
5a:f1:e9:25:75:8b:76:0e:cb:ce:e0:1b:86:83:8c:
76:bb:11:e1:b8:60:c0:f7:59:c3:42:b6:fa:2b:a1:
2a:80:a0:de:8e:57:e3:5c:0b:4b:d0:8c:4e:e3:9d:
44:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BB:58:28:CE:C6:05:9D:78:93:3A:87:62:19:65:72:39:01:83:52
X509v3 Authority Key Identifier:
keyid:DD:F7:5D:11:A8:5F:50:23:74:7B:20:E9:73:99:4E:C5:3D:23:A6:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/34352e3136352e32302e302f32322d3232203d3e20323633363635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.165.20.0/22
Signature Algorithm: sha256WithRSAEncryption
14:0a:fa:d3:d7:74:02:82:3a:2d:81:1f:ad:e4:4d:87:d8:c2:
fd:50:1e:50:35:47:82:f2:19:05:e2:6a:57:b4:86:a6:55:d9:
b9:30:bd:32:b3:ac:52:c1:0b:e5:c2:1f:7c:c2:ee:20:df:7b:
68:d8:16:01:b7:87:4f:8a:90:ec:28:36:85:43:a2:cc:0b:2e:
8a:99:19:b4:a7:ed:f0:ed:53:bd:da:d5:8f:3d:94:06:0b:ea:
fe:c0:68:7f:83:a1:03:d5:4b:47:81:49:d4:a9:1c:26:47:80:
85:d8:48:b8:57:7e:b6:a8:14:54:7b:5d:e7:44:3a:ba:51:7e:
77:3b:64:e4:f4:cb:91:e9:78:fe:e4:6e:8b:ac:c2:bd:c5:fb:
77:b9:fc:cd:6d:09:33:43:27:84:fa:12:ad:68:47:35:9a:41:
1d:14:7b:d7:b8:17:1c:ed:81:04:11:05:07:b2:a1:e7:6c:6a:
af:86:db:4b:7e:1c:bf:31:f3:6b:1e:a2:42:0d:d2:c4:c6:06:
c4:00:c9:fd:ea:ce:bf:27:ab:98:0d:20:d8:7e:92:d5:3b:7a:
4c:ed:be:92:79:d6:24:cd:5e:3a:ff:21:a6:27:77:5c:c8:e0:
25:75:81:67:8a:59:d8:97:3b:71:ce:00:e6:6e:ae:c7:cd:2c:
b3:1e:64:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:16:13 2025 by rpki-client