
$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e322e302f32342d3234203d3e203238333338.roa
File: 3138392e34352e322e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier: 6G2M5M2AwlhkyjFIHfaJscu1M+z5qkDEDMhMuZmB3b8=
Subject key identifier: 13:08:CA:E7:E0:DA:40:23:6F:B0:E0:5E:D9:0B:E8:14:78:BA:01:15
Certificate issuer: /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial: 4C51EC974E5E3A8E58629BF5C56433370182C614
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e322e302f32342d3234203d3e203238333338.roa
Signing time: Wed 30 Apr 2025 19:00:00 +0000
ROA not before: Wed 30 Apr 2025 18:55:00 +0000
ROA not after: Wed 29 Apr 2026 19:00:00 +0000
asID: 28338
IP address blocks: 189.45.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 13:50:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:51:ec:97:4e:5e:3a:8e:58:62:9b:f5:c5:64:33:37:01:82:c6:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Validity
Not Before: Apr 30 18:55:00 2025 GMT
Not After : Apr 29 19:00:00 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:47:05:77:7b:ad:94:cf:4a:ab:53:56:41:51:
19:96:de:87:6a:c0:dd:d1:21:4e:61:e4:3f:35:d2:
a9:53:14:1a:34:f6:a8:10:6c:3f:7c:e1:7d:e2:4d:
56:63:ec:31:72:33:34:92:97:d0:cb:f5:2b:f8:21:
06:42:ea:64:f2:94:ba:47:ee:3c:57:35:15:58:d1:
5b:c7:b7:f7:77:10:b6:e9:90:ef:06:44:a8:b3:68:
88:da:64:10:3d:4b:99:ee:b4:f9:f3:81:b7:99:fe:
b0:02:93:78:67:43:90:0e:2c:b9:bb:ca:b4:59:b5:
29:bd:69:42:5f:cc:f3:ab:4d:cd:9d:da:dc:7c:2e:
f6:c0:12:65:bb:50:c2:9a:bc:84:93:e9:92:57:c8:
7a:f0:ad:57:7f:78:a9:98:42:ed:99:61:65:14:08:
b6:e8:e9:ab:c3:b4:8f:1e:7c:c9:f9:fb:05:3c:c1:
86:be:a4:4d:e2:a4:d5:62:88:1a:13:c2:bd:8e:c5:
16:fe:9d:11:35:0d:0c:e2:b7:9b:3b:b4:7f:bb:01:
3b:6c:6c:aa:f5:26:03:e0:dd:79:0c:b1:4f:dc:78:
aa:5c:a3:7f:12:00:a9:65:29:46:13:39:ab:5a:70:
ff:45:56:97:af:49:5c:dc:f7:70:9c:33:be:50:2c:
df:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:08:CA:E7:E0:DA:40:23:6F:B0:E0:5E:D9:0B:E8:14:78:BA:01:15
X509v3 Authority Key Identifier:
keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e34352e322e302f32342d3234203d3e203238333338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.45.2.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:10:2f:34:2a:eb:f2:55:d4:0e:15:40:dc:3f:09:e7:89:06:
10:1f:ab:27:f4:f2:d9:bf:82:ce:94:eb:cb:ee:b4:7f:41:91:
e3:80:2a:42:b4:42:dd:f4:3a:69:bd:be:e7:1a:a8:6e:8a:91:
b2:57:51:c4:cc:ab:8d:3a:20:0f:7d:73:a7:7e:9a:4a:9b:80:
f9:79:50:a4:ab:06:77:5c:5b:82:8d:b3:00:e5:bc:55:7a:25:
89:00:1b:57:d4:74:c7:ca:b1:3c:11:eb:ce:06:da:6c:37:66:
84:27:f8:7b:0d:1f:fc:53:ac:29:c1:c7:40:88:83:aa:bc:2f:
ef:91:a8:c6:ca:7c:02:17:2c:ce:fc:24:ac:6b:b8:33:28:96:
92:f3:0a:2c:9b:7b:02:ae:25:b0:d9:5a:da:29:5a:ca:4d:6a:
37:a2:28:7b:fd:d0:b8:a6:7f:27:ed:63:19:b0:f1:7e:3a:d5:
be:e8:d0:11:5a:ca:e2:e5:9d:f6:09:ed:b2:7a:b5:07:a7:3a:
5a:bb:7e:e8:03:99:d9:10:29:3d:e2:54:9a:6c:27:c4:aa:fd:
c5:db:f1:23:80:c6:04:dc:97:b2:72:3f:10:3f:af:48:b8:89:
ab:4e:a7:73:ec:99:e3:9e:20:6d:28:48:21:a6:bc:1e:ff:b1:
13:12:c6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:31:50 2025 by rpki-client