
$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/34352e3233302e3130382e302f32342d3234203d3e203631353839.roa
File: 34352e3233302e3130382e302f32342d3234203d3e203631353839.roa (raw, json)
Hash identifier: BV2Fcz3AYgC0RmkBrC/e0ucnPWd4iCybsP1vL0ts2dk=
Subject key identifier: 97:47:21:DE:24:16:BE:03:50:E0:C5:78:91:88:34:81:97:DE:89:F0
Certificate issuer: /CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
Certificate serial: 36373D1E4A027B20A9C4A893D43D1CCC5F4D930F
Authority key identifier: 1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/34352e3233302e3130382e302f32342d3234203d3e203631353839.roa
Signing time: Tue 31 Dec 2024 18:13:42 +0000
ROA not before: Tue 31 Dec 2024 18:08:42 +0000
ROA not after: Tue 30 Dec 2025 18:13:42 +0000
asID: 61589
IP address blocks: 45.230.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl
rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 22:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:37:3d:1e:4a:02:7b:20:a9:c4:a8:93:d4:3d:1c:cc:5f:4d:93:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
Validity
Not Before: Dec 31 18:08:42 2024 GMT
Not After : Dec 30 18:13:42 2025 GMT
Subject: CN=974721DE2416BE0350E0C5789188348197DE89F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:a1:25:4f:b8:08:6d:a1:60:c0:80:51:48:f8:
e0:3c:a0:1e:c2:b9:57:8b:03:33:43:6f:5a:bd:ca:
9f:bd:ea:90:30:c6:6d:46:b5:99:34:65:bf:a3:9d:
19:eb:d8:fb:24:a5:92:7b:49:18:68:dc:69:b9:18:
64:91:9e:c3:c0:48:90:00:ea:e9:93:76:c0:93:e1:
4f:64:43:6f:5e:a4:cf:cf:31:60:c4:66:34:fb:c0:
e4:4d:20:a3:de:1a:4f:e7:a5:28:0d:f8:85:a1:06:
b3:74:99:b4:d4:19:49:25:08:23:c7:93:41:97:8d:
b9:4a:4b:72:c3:1f:c4:9c:a0:bd:9e:65:77:fb:cf:
d1:ef:43:8b:bb:53:f9:72:f5:b4:03:64:6d:cf:78:
c9:2f:62:f2:f3:0c:15:76:5d:f5:3f:dd:d0:09:b2:
93:97:2a:08:83:6c:24:24:ef:54:11:90:0a:e0:45:
39:08:0c:5e:38:57:ff:84:67:46:25:5f:24:4d:5c:
14:78:88:ab:8b:96:9c:a7:95:4f:c2:80:b5:02:18:
fa:96:c9:2c:40:aa:71:4c:ea:c7:db:ad:dc:b2:0e:
d6:0c:23:4e:9f:1c:29:c1:05:72:f7:ac:db:79:74:
b4:68:aa:33:cb:c0:92:2c:95:e0:38:63:19:23:a4:
2e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:47:21:DE:24:16:BE:03:50:E0:C5:78:91:88:34:81:97:DE:89:F0
X509v3 Authority Key Identifier:
keyid:1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/34352e3233302e3130382e302f32342d3234203d3e203631353839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.230.108.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:bb:96:17:02:25:5c:27:4f:49:16:f0:c1:44:bf:dd:67:81:
89:f8:75:61:27:77:72:3b:cb:5d:88:e1:9c:6d:f6:83:23:40:
85:ce:9b:1c:fe:60:3d:61:26:b3:a7:bf:2e:59:f9:24:08:cd:
88:3c:eb:41:2e:a9:39:6d:a9:32:ca:f5:34:a6:96:19:b0:31:
05:c9:ff:23:b1:42:f3:43:28:1e:58:44:f1:d3:cb:3a:2e:9d:
fc:40:d2:d9:50:72:2d:f4:f2:fa:c1:84:2c:dc:77:1c:f0:53:
5b:69:1a:74:bd:88:7c:f3:e9:61:18:3f:9d:c7:a0:6f:b5:8b:
da:85:e2:6a:00:40:48:54:90:c0:ea:91:51:3f:d9:96:30:ed:
7d:a6:9c:99:7d:35:54:7c:05:a4:9b:c5:13:06:0f:33:f3:b6:
6e:b3:50:de:06:a1:94:13:ff:82:63:ad:76:5b:4b:63:92:d2:
b2:fa:e6:c8:e4:e0:7f:4f:7a:93:2c:ea:60:3e:49:d1:16:59:
ce:3a:c0:39:9c:f8:f0:f9:15:f9:1b:c4:63:ee:fc:f1:fe:ee:
b2:bb:ae:f7:cd:72:24:a9:4d:0d:63:ec:ca:4f:2a:da:f5:ae:
fa:94:60:d7:99:91:b8:20:ab:fa:31:d4:61:d4:27:02:07:b7:
80:bb:9b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:17:01 2025 by rpki-client