
$ rpki-client -vvf rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/34352e3136342e34322e302f32332d3233203d3e20323638353936.roa
File: 34352e3136342e34322e302f32332d3233203d3e20323638353936.roa (raw, json)
Hash identifier: 6KlQD+pV8geK79mH9wLDg7MsB4W34HBF9ATCCOIaeos=
Subject key identifier: A6:85:BF:7C:CF:D9:A0:23:6C:75:CA:1C:93:5E:E7:97:DE:C4:27:42
Certificate issuer: /CN=2A3BAA1CD10D76A97433F376CD6B7474C51797CC
Certificate serial: 6139B807BBB3AEE8B1237F1F85F95B19825C4BFC
Authority key identifier: 2A:3B:AA:1C:D1:0D:76:A9:74:33:F3:76:CD:6B:74:74:C5:17:97:CC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/34352e3136342e34322e302f32332d3233203d3e20323638353936.roa
Signing time: Sat 02 Aug 2025 02:12:20 +0000
ROA not before: Sat 02 Aug 2025 02:07:20 +0000
ROA not after: Sat 01 Aug 2026 02:12:20 +0000
asID: 268596
IP address blocks: 45.164.42.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.crl
rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 18:49:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:39:b8:07:bb:b3:ae:e8:b1:23:7f:1f:85:f9:5b:19:82:5c:4b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A3BAA1CD10D76A97433F376CD6B7474C51797CC
Validity
Not Before: Aug 2 02:07:20 2025 GMT
Not After : Aug 1 02:12:20 2026 GMT
Subject: CN=A685BF7CCFD9A0236C75CA1C935EE797DEC42742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:48:94:b4:94:73:d2:fd:a8:c6:84:25:46:99:
85:a0:00:47:df:df:73:32:ac:44:f6:41:7a:8e:9b:
8d:7f:d7:8c:94:f9:87:6f:8f:c5:2c:07:b0:21:63:
fb:15:2f:d4:f3:78:17:d0:df:82:e9:9a:bd:37:19:
e1:cf:cb:d4:8f:f5:46:25:6f:df:a8:33:8a:44:ae:
9d:24:63:f3:78:1a:fa:bc:60:b4:ba:01:19:67:35:
b1:fc:40:7b:bf:6e:bf:8b:a0:0b:0c:e7:55:97:bd:
d9:72:30:45:14:c5:07:4d:a1:f1:78:31:bc:27:12:
69:5a:60:e4:dd:dc:cf:00:f9:5c:8f:df:9e:2c:e4:
23:53:a3:b6:a4:ae:25:6d:0f:ac:7c:c1:11:1e:19:
4e:ac:8a:92:f5:28:a2:3f:34:01:90:66:b1:d9:75:
6d:dc:e5:36:5f:96:d3:ed:c6:ca:a4:5b:4b:f0:41:
49:a0:c0:5c:d5:4e:1f:c7:fb:2c:71:6a:d5:54:e8:
0c:93:8c:79:95:6d:2e:11:70:97:21:e2:49:93:f5:
b1:29:b0:2e:d6:29:5c:72:84:03:d8:35:9a:c6:48:
11:cf:ba:09:eb:ba:98:4c:1c:23:5f:f9:3f:72:6d:
bf:4d:c2:da:a2:54:6a:1a:10:14:a4:05:7d:86:d7:
0c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:85:BF:7C:CF:D9:A0:23:6C:75:CA:1C:93:5E:E7:97:DE:C4:27:42
X509v3 Authority Key Identifier:
keyid:2A:3B:AA:1C:D1:0D:76:A9:74:33:F3:76:CD:6B:74:74:C5:17:97:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/34352e3136342e34322e302f32332d3233203d3e20323638353936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.164.42.0/23
Signature Algorithm: sha256WithRSAEncryption
44:26:13:44:c5:72:ce:c7:0b:f3:6b:37:2a:28:23:cd:03:79:
17:07:92:bb:b6:4a:cd:26:09:49:da:eb:1e:a2:0a:20:72:df:
92:36:6b:69:67:f8:ad:1b:11:7c:41:2c:bd:27:17:8c:d2:82:
9c:4d:bc:01:e6:94:95:5f:b5:9e:0d:c2:09:df:c9:6d:5a:0a:
a3:8e:3e:b8:21:bd:f1:30:78:ac:2a:48:68:71:71:5e:a5:f6:
49:fe:0c:05:72:f1:4a:38:1b:77:dd:15:79:d9:a9:9b:39:7b:
21:1a:f9:d5:3c:66:63:7a:43:ac:f2:bf:03:2e:60:c1:62:2c:
44:82:49:f8:56:36:42:8c:b3:09:d8:44:6a:5d:2f:6d:4a:ad:
fe:52:7b:49:7f:06:6c:ed:0c:84:de:43:e2:ce:32:6c:84:d9:
a2:82:1b:66:99:49:be:a7:53:6c:3b:d0:ee:59:d3:e4:54:fc:
31:b5:b7:f2:83:47:c5:ac:8a:16:97:09:51:96:f7:d4:ac:95:
41:b1:e3:ac:2d:9d:88:b3:f7:c3:07:7d:3d:1a:01:82:94:f3:
c1:f5:ae:ee:36:e9:fa:e3:5f:18:2c:1c:c5:3d:81:8d:dc:c4:
5c:00:3b:a6:f1:9b:99:79:1c:de:1f:c1:66:bd:b4:0d:09:b9:
d9:e0:80:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:12:04 2025 by rpki-client