
$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/34352e3233342e3130332e302f32342d3234203d3e203631353932.roa
File: 34352e3233342e3130332e302f32342d3234203d3e203631353932.roa (raw, json)
Hash identifier: xHS956d9WIvY7EjOGQDTcqpzoQ2yNyLTL7RDvP2x8Gk=
Subject key identifier: B5:7D:37:17:E7:02:91:2A:8D:98:FE:DE:20:01:EB:11:DE:B9:05:66
Certificate issuer: /CN=909E9FEA566321BE0782982D2D8BAB3FE3A8D22B
Certificate serial: 62AAD279F88D358628821274B76CCD9DAE49B349
Authority key identifier: 90:9E:9F:EA:56:63:21:BE:07:82:98:2D:2D:8B:AB:3F:E3:A8:D2:2B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/34352e3233342e3130332e302f32342d3234203d3e203631353932.roa
Signing time: Fri 28 Mar 2025 19:34:13 +0000
ROA not before: Fri 28 Mar 2025 19:29:13 +0000
ROA not after: Fri 27 Mar 2026 19:34:13 +0000
asID: 61592
IP address blocks: 45.234.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.crl
rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 21:26:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:aa:d2:79:f8:8d:35:86:28:82:12:74:b7:6c:cd:9d:ae:49:b3:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=909E9FEA566321BE0782982D2D8BAB3FE3A8D22B
Validity
Not Before: Mar 28 19:29:13 2025 GMT
Not After : Mar 27 19:34:13 2026 GMT
Subject: CN=B57D3717E702912A8D98FEDE2001EB11DEB90566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b3:19:34:c3:28:a8:f7:20:b0:64:29:b2:81:
f3:1d:09:93:e5:79:11:2f:da:8c:37:42:96:0a:53:
ba:a1:16:63:2a:e9:a5:dc:11:b0:52:b6:13:55:b9:
5c:f3:e9:c9:b7:5b:67:2f:36:f6:b7:69:9a:dc:9e:
6a:66:33:fc:21:5a:2b:d7:c5:2d:2f:54:e5:3f:0e:
25:a1:f0:21:5a:91:bd:0f:47:3c:21:60:42:7a:82:
13:1d:2b:76:6a:a3:e8:06:6f:9b:73:2d:70:6b:69:
a4:1c:8c:de:12:10:10:45:64:8b:42:a8:09:92:a3:
29:19:21:b5:be:bc:97:45:97:0d:ad:77:33:11:47:
38:af:a5:09:2a:01:83:f6:f2:7d:19:93:10:e3:2f:
04:53:93:62:38:e9:bc:d3:1d:d6:8c:a8:32:84:b5:
74:b1:4e:76:f7:02:5a:cf:5b:f6:4f:00:05:f8:9a:
ee:49:e8:ac:c7:f5:87:d1:9f:cb:57:df:67:49:74:
19:df:d2:34:f8:08:fd:dd:a1:56:51:f8:fb:26:8a:
53:f1:56:1e:a3:88:e1:c0:ca:32:bb:1e:29:aa:29:
3c:6e:9c:77:39:f1:69:35:d5:db:c5:94:bb:ea:85:
57:7f:d3:02:9d:ab:ef:a4:10:f3:ab:0d:e5:22:2a:
e8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7D:37:17:E7:02:91:2A:8D:98:FE:DE:20:01:EB:11:DE:B9:05:66
X509v3 Authority Key Identifier:
keyid:90:9E:9F:EA:56:63:21:BE:07:82:98:2D:2D:8B:AB:3F:E3:A8:D2:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/34352e3233342e3130332e302f32342d3234203d3e203631353932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.234.103.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:f6:f4:40:36:17:32:79:1a:e4:d1:9e:9a:bb:7e:c9:53:96:
d2:0d:cb:e5:8d:04:bf:07:75:90:1f:92:d7:57:4c:df:fc:c4:
a1:1e:d1:6d:57:21:70:fd:27:ec:2c:87:d3:41:73:fe:b5:04:
32:d2:d3:96:97:e6:95:54:96:ef:42:ee:3a:69:4b:44:17:eb:
b6:20:87:c6:7d:d8:a2:51:34:67:60:77:4c:1f:92:47:05:c9:
52:46:61:6f:94:f4:27:51:4e:35:77:b0:bc:ae:c1:87:c6:fa:
4d:7e:5e:4b:6a:36:45:24:74:6d:8f:1f:95:0c:33:fa:44:c8:
b1:ea:a6:dd:09:0d:f7:59:5a:7c:67:04:65:e7:10:9f:40:1b:
92:20:70:86:af:89:fb:f4:a6:0f:83:21:12:64:1a:93:f1:bf:
62:40:bc:51:9e:6b:0c:3e:1b:19:b8:0b:ad:2d:1f:0c:b0:cc:
7a:b4:af:20:10:6c:88:84:9c:4b:ea:1a:6c:23:07:19:ae:ef:
45:01:0e:e4:5b:ff:a8:c1:0b:93:7f:6c:98:b6:a6:1f:f0:50:
4e:3c:a6:fe:30:1a:55:07:26:d1:91:97:19:02:c3:d3:25:9e:
4c:11:dc:be:6e:3c:f4:e8:02:54:49:9a:e1:ac:f8:10:20:3d:
c9:57:ee:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:29:55 2025 by rpki-client