
$ rpki-client -vvf rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/3230312e32302e3134342e302f32302d3234203d3e203238363035.roa
File: 3230312e32302e3134342e302f32302d3234203d3e203238363035.roa (raw, json)
Hash identifier: mgiFm+AQ1BARPvCimt0jOUhKbYnFekRlOF5rW1eyGgI=
Subject key identifier: 3A:40:F2:26:59:C5:50:AE:9C:28:22:05:23:97:E1:CF:09:CD:AC:ED
Certificate issuer: /CN=5A97D9AB7EB0B4A37A687DF48243A86F6FED596D
Certificate serial: 7CE53947180AA420D196AB4775142873B5F82323
Authority key identifier: 5A:97:D9:AB:7E:B0:B4:A3:7A:68:7D:F4:82:43:A8:6F:6F:ED:59:6D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A97D9AB7EB0B4A37A687DF48243A86F6FED596D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/3230312e32302e3134342e302f32302d3234203d3e203238363035.roa
Signing time: Tue 08 Apr 2025 19:21:09 +0000
ROA not before: Tue 08 Apr 2025 19:16:09 +0000
ROA not after: Tue 07 Apr 2026 19:21:09 +0000
asID: 28605
IP address blocks: 201.20.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/5A97D9AB7EB0B4A37A687DF48243A86F6FED596D.crl
rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/5A97D9AB7EB0B4A37A687DF48243A86F6FED596D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A97D9AB7EB0B4A37A687DF48243A86F6FED596D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 06:37:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:e5:39:47:18:0a:a4:20:d1:96:ab:47:75:14:28:73:b5:f8:23:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A97D9AB7EB0B4A37A687DF48243A86F6FED596D
Validity
Not Before: Apr 8 19:16:09 2025 GMT
Not After : Apr 7 19:21:09 2026 GMT
Subject: CN=3A40F22659C550AE9C2822052397E1CF09CDACED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:df:7f:2b:ff:a1:ef:2a:c6:ec:0e:ca:b2:5a:
c0:c5:b2:79:03:64:08:97:c2:ac:00:42:49:09:d5:
3f:f4:b5:74:27:4f:5a:97:54:68:a4:83:5a:a4:66:
a3:4e:0e:aa:39:8a:ca:a4:d0:09:67:1d:c8:b1:a7:
d1:c1:7a:4a:54:08:8c:e2:bc:c2:c8:cc:d7:df:aa:
f5:6e:29:73:60:62:a8:27:45:ab:aa:ee:e6:ea:c0:
e4:cd:58:10:64:9e:e0:59:7b:0b:ff:f9:84:5a:98:
70:1a:a8:23:75:fd:24:c7:c9:03:d0:7b:d6:18:19:
15:44:79:b8:42:88:98:23:3f:91:85:36:3e:08:49:
f1:1a:96:d2:91:25:17:37:d1:00:04:5b:3c:9a:4d:
15:55:c0:0c:b7:9a:7e:57:47:0b:a1:fb:23:ae:a2:
f2:99:09:ff:e0:8d:f2:90:86:3d:45:20:d2:58:db:
f6:98:be:b8:52:1e:4b:72:21:da:c3:61:27:c1:32:
9e:c9:8b:e6:b3:a6:37:b4:70:c6:a8:8f:5e:8f:4c:
31:00:fb:81:8e:06:67:8f:25:24:55:79:aa:f5:e9:
5e:c8:a1:4f:41:bd:28:42:d7:4d:8a:16:58:3c:c2:
46:e7:e3:15:d6:e2:cd:e3:5a:0a:ba:3f:d8:cb:69:
f8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:40:F2:26:59:C5:50:AE:9C:28:22:05:23:97:E1:CF:09:CD:AC:ED
X509v3 Authority Key Identifier:
keyid:5A:97:D9:AB:7E:B0:B4:A3:7A:68:7D:F4:82:43:A8:6F:6F:ED:59:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/5A97D9AB7EB0B4A37A687DF48243A86F6FED596D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A97D9AB7EB0B4A37A687DF48243A86F6FED596D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/3230312e32302e3134342e302f32302d3234203d3e203238363035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.20.144.0/20
Signature Algorithm: sha256WithRSAEncryption
db:97:ad:31:34:11:af:8b:d0:0f:d6:09:67:de:9c:79:99:02:
13:10:ea:17:f3:e5:71:c3:1c:a5:1b:d7:a6:40:54:85:52:69:
43:d0:ad:28:f4:e3:94:83:4d:b4:e0:02:65:b6:69:65:be:43:
0e:aa:e0:0b:9e:ea:5d:f4:8c:42:1c:d5:55:53:86:30:7a:2e:
a2:c8:73:46:00:1d:01:9d:90:b2:92:38:39:49:7d:ba:1f:21:
61:41:4f:b8:77:1d:6a:29:fd:d5:22:db:77:50:20:b3:8e:65:
39:21:f7:cf:2c:4b:28:f5:08:33:70:7d:df:c4:f8:64:90:06:
6f:8c:39:82:dc:06:a0:bd:ab:10:4e:82:62:74:3c:a3:0a:39:
c8:84:74:10:ec:d6:90:71:5f:ae:ac:0b:e5:6c:c5:bb:82:02:
19:64:b3:fc:11:d5:20:fd:bd:5e:8d:a1:65:58:e5:0e:20:c7:
bf:40:18:88:21:0e:5c:17:9e:9b:1b:de:db:0a:e1:85:c9:19:
06:2a:df:ee:0b:72:10:4d:b9:77:1b:25:9e:f7:05:fb:aa:b7:
d1:56:f7:d9:80:68:88:45:9b:53:d8:e6:fe:2a:af:51:13:c6:
e7:b4:6e:b2:d9:9f:f1:c4:44:07:12:e7:a7:04:dd:a9:7f:a4:
1d:22:36:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:00:22 2025 by rpki-client