
$ rpki-client -vvf rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/34352e3136342e34312e302f32342d3234203d3e20323638353936.roa
File: 34352e3136342e34312e302f32342d3234203d3e20323638353936.roa (raw, json)
Hash identifier: 3djr4zaaOHBQVszvNS4ML3YDInpoO3/XomP175oDp3c=
Subject key identifier: 3D:18:11:52:45:38:5A:42:D2:0D:92:3D:22:33:99:1F:24:AD:38:88
Certificate issuer: /CN=2A3BAA1CD10D76A97433F376CD6B7474C51797CC
Certificate serial: 166100D71B331C49C6A10F1EE2A15C408DB1C087
Authority key identifier: 2A:3B:AA:1C:D1:0D:76:A9:74:33:F3:76:CD:6B:74:74:C5:17:97:CC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/34352e3136342e34312e302f32342d3234203d3e20323638353936.roa
Signing time: Sat 02 Aug 2025 02:12:14 +0000
ROA not before: Sat 02 Aug 2025 02:07:14 +0000
ROA not after: Sat 01 Aug 2026 02:12:14 +0000
asID: 268596
IP address blocks: 45.164.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.crl
rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 11:39:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:61:00:d7:1b:33:1c:49:c6:a1:0f:1e:e2:a1:5c:40:8d:b1:c0:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A3BAA1CD10D76A97433F376CD6B7474C51797CC
Validity
Not Before: Aug 2 02:07:14 2025 GMT
Not After : Aug 1 02:12:14 2026 GMT
Subject: CN=3D18115245385A42D20D923D2233991F24AD3888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:37:6a:c8:46:f3:f8:bf:d7:a1:7b:1d:26:22:
c0:10:f8:a6:d5:e7:5c:2c:1a:c8:6b:53:1d:72:d8:
f7:b3:8f:10:de:0a:fb:d7:b9:d4:8f:fa:00:91:6e:
ee:96:bb:78:c6:54:6c:11:a3:93:2d:9b:c9:1b:ec:
ef:fb:2f:e3:5e:8a:77:10:1d:ee:e6:57:98:5f:ad:
04:e9:1b:18:f9:d8:bc:63:0e:08:57:cc:76:a0:9c:
7e:08:df:3a:7a:ec:04:f7:ba:86:3b:0f:78:5b:cb:
a0:98:ba:bb:3a:7b:e4:ec:3a:ae:97:b5:14:70:5c:
ad:ec:47:10:df:8f:03:1d:56:ae:a8:f2:eb:d7:e8:
80:67:59:81:04:e6:bd:a1:dc:e1:45:7c:ed:ac:87:
54:3e:70:c2:74:3c:1d:cd:8a:3c:bd:04:bc:b9:98:
ef:87:06:aa:0d:44:55:57:21:cb:a6:fb:6a:2e:ab:
88:1d:9a:24:1c:9e:32:84:18:48:f9:69:a5:49:08:
c0:a3:d8:30:4d:a7:de:35:5d:fc:92:52:f0:78:97:
9c:df:a9:67:8e:d1:4a:33:3b:dc:ee:c5:14:07:aa:
3e:02:26:81:80:81:c2:34:68:99:ff:95:80:8c:be:
be:ce:c6:45:b3:15:f3:16:9e:bf:5d:85:c1:0e:72:
6e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:18:11:52:45:38:5A:42:D2:0D:92:3D:22:33:99:1F:24:AD:38:88
X509v3 Authority Key Identifier:
keyid:2A:3B:AA:1C:D1:0D:76:A9:74:33:F3:76:CD:6B:74:74:C5:17:97:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/34352e3136342e34312e302f32342d3234203d3e20323638353936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.164.41.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:d4:2f:08:8a:af:d0:25:be:72:f7:23:de:b3:10:78:46:83:
dd:78:a6:ce:34:66:91:5c:df:94:ac:a2:e7:1a:b8:57:88:9b:
32:8b:6a:e8:fd:94:42:eb:b3:46:55:b9:01:8c:4c:25:cc:9e:
7d:31:73:56:5b:da:5c:8e:0d:6f:ea:da:6a:e8:9e:e1:b8:df:
8f:8d:19:47:f1:c0:e0:38:90:d0:d2:97:18:fe:0c:ff:ea:d6:
ca:e7:25:35:9a:9e:68:64:01:5b:ed:b9:d5:f4:c7:94:e6:16:
18:2f:59:21:18:6a:e1:50:5f:89:a4:75:be:e4:7d:fd:06:9e:
62:97:fa:7b:76:ba:32:74:e4:1c:30:5b:08:e7:ca:d2:a0:9c:
dc:28:65:e5:c9:85:67:a6:d1:a5:e0:05:05:40:ae:e2:9d:77:
e6:b8:66:b7:27:1b:1e:ce:16:cd:7e:ef:d1:4c:54:a0:17:1a:
07:20:ee:da:07:86:04:f8:98:bf:8c:27:fd:87:b4:d0:34:da:
9b:8c:8b:d2:e4:05:2c:9c:76:ff:e5:a3:be:a7:7d:2f:3e:f2:
77:25:8e:4c:0f:22:21:8d:f3:f7:67:59:da:4c:00:61:dc:51:
78:c0:e9:a6:63:14:45:0d:0c:03:c9:95:a6:e5:67:5e:d6:c3:
3d:b8:ec:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:03:55 2025 by rpki-client