
$ rpki-client -vvf rpki-repo.registro.br/repo/4ZY1eHtmhvRVb5j1U1e5aZcZygxmmM2BRxQKFUV6tHdV/0/34352e3136362e3135372e302f32342d3234203d3e20323734343936.roa
File: 34352e3136362e3135372e302f32342d3234203d3e20323734343936.roa (raw, json)
Hash identifier: pXKz574UWq7nhw46zp06y5od/XcshkkA1WlbaxEnc8Y=
Subject key identifier: 43:B6:3A:91:F7:FC:83:FE:CF:CC:81:DF:22:9E:F3:DB:91:3C:31:5C
Certificate issuer: /CN=30982A862F024C058A67B70496FF401E24897F47
Certificate serial: 5FE7363F15E5C57F6AD5EFDEA6C67E6B82D90FAA
Authority key identifier: 30:98:2A:86:2F:02:4C:05:8A:67:B7:04:96:FF:40:1E:24:89:7F:47
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30982A862F024C058A67B70496FF401E24897F47.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4ZY1eHtmhvRVb5j1U1e5aZcZygxmmM2BRxQKFUV6tHdV/0/34352e3136362e3135372e302f32342d3234203d3e20323734343936.roa
Signing time: Fri 31 Oct 2025 15:02:53 +0000
ROA not before: Fri 31 Oct 2025 14:57:53 +0000
ROA not after: Fri 30 Oct 2026 15:02:53 +0000
asID: 274496
IP address blocks: 45.166.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4ZY1eHtmhvRVb5j1U1e5aZcZygxmmM2BRxQKFUV6tHdV/0/30982A862F024C058A67B70496FF401E24897F47.crl
rsync://rpki-repo.registro.br/repo/4ZY1eHtmhvRVb5j1U1e5aZcZygxmmM2BRxQKFUV6tHdV/0/30982A862F024C058A67B70496FF401E24897F47.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30982A862F024C058A67B70496FF401E24897F47.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 21:31:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:e7:36:3f:15:e5:c5:7f:6a:d5:ef:de:a6:c6:7e:6b:82:d9:0f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30982A862F024C058A67B70496FF401E24897F47
Validity
Not Before: Oct 31 14:57:53 2025 GMT
Not After : Oct 30 15:02:53 2026 GMT
Subject: CN=43B63A91F7FC83FECFCC81DF229EF3DB913C315C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:71:7b:2f:25:a8:b6:45:1e:ff:21:36:88:b8:
13:ee:28:b5:a3:3f:07:8c:f8:2c:fb:67:60:ff:b4:
38:8e:d8:49:f1:03:8b:49:39:3f:30:db:b1:92:38:
e9:87:45:6b:ac:e2:2a:12:27:80:73:46:1a:73:6a:
24:e7:35:d2:4b:0d:47:0c:f9:5a:05:a6:12:02:82:
ef:20:a4:72:5d:71:69:c6:a0:c9:ec:ec:8e:23:09:
e0:63:0f:f6:1e:e3:9b:e4:9e:f0:e3:66:88:59:15:
a6:1d:6d:67:1b:ae:70:3e:93:ea:ec:b5:ce:05:45:
30:42:dc:b0:1c:48:d4:26:0a:00:bd:78:3d:3b:80:
af:b7:c5:95:dd:c5:7a:57:83:0e:07:0a:ab:e5:3d:
e7:f3:05:74:cb:f0:a8:2d:f9:22:d9:57:09:d3:b5:
06:3d:01:61:70:37:35:c5:6a:2a:1f:dc:5e:f4:3b:
ed:09:c3:57:59:04:b4:0f:3f:9d:49:df:91:40:25:
ff:75:d9:6f:a2:a3:f0:83:bf:9e:94:7a:66:a2:04:
af:38:05:3d:09:63:69:19:e5:e6:c8:7f:65:d7:22:
07:1e:d4:1a:9b:fb:14:b7:16:74:53:26:16:be:5d:
ef:d4:7d:74:b2:cf:90:75:18:5e:b7:39:d9:76:8d:
a5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B6:3A:91:F7:FC:83:FE:CF:CC:81:DF:22:9E:F3:DB:91:3C:31:5C
X509v3 Authority Key Identifier:
keyid:30:98:2A:86:2F:02:4C:05:8A:67:B7:04:96:FF:40:1E:24:89:7F:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4ZY1eHtmhvRVb5j1U1e5aZcZygxmmM2BRxQKFUV6tHdV/0/30982A862F024C058A67B70496FF401E24897F47.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30982A862F024C058A67B70496FF401E24897F47.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZY1eHtmhvRVb5j1U1e5aZcZygxmmM2BRxQKFUV6tHdV/0/34352e3136362e3135372e302f32342d3234203d3e20323734343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.166.157.0/24
Signature Algorithm: sha256WithRSAEncryption
70:11:47:b5:7b:32:89:e9:de:aa:e5:56:4a:46:64:ea:e3:12:
98:87:9e:ba:00:45:70:2f:14:d1:e8:51:f0:56:dd:eb:6c:41:
c4:bd:45:b7:24:a4:04:f0:bd:06:e6:2e:38:b5:09:31:56:5e:
fb:77:5c:33:94:57:67:2f:ce:90:f2:9f:e0:c3:88:52:c6:02:
62:91:56:cb:7f:e6:de:f9:1a:30:0d:98:c8:20:17:76:da:51:
00:90:de:88:e4:bb:37:83:cc:f5:3a:61:0b:16:9f:2a:b7:21:
84:b1:af:e1:21:16:7d:8a:ec:c8:66:25:72:47:03:03:e9:fc:
54:72:5b:7a:6a:ce:c1:13:d8:fd:a5:bd:f0:8d:2b:fe:1c:18:
45:55:2f:24:e7:58:24:d3:be:53:98:32:c7:f7:9b:55:38:e6:
b1:5b:83:48:33:32:5a:cc:3f:db:52:a5:7e:0d:73:65:1e:bb:
8c:e3:e6:89:e7:f7:55:7e:14:e5:72:48:c4:85:cf:28:51:f9:
72:cb:21:c5:ec:ac:1e:be:8c:a2:58:bf:a4:2c:49:1f:59:40:
fd:de:3a:9b:fb:5f:eb:b4:23:7d:0b:57:f7:b0:f5:85:b5:db:
b9:42:c3:53:5b:cc:3b:bc:cc:01:b0:92:9e:ea:93:b2:fe:fa:
63:e4:5f:2a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUX+c2PxXlxX9q1e/epsZ+a4LZD6owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzA5ODJBODYyRjAyNEMwNThBNjdCNzA0OTZGRjQwMUUy
NDg5N0Y0NzAeFw0yNTEwMzExNDU3NTNaFw0yNjEwMzAxNTAyNTNaMDMxMTAvBgNV
BAMTKDQzQjYzQTkxRjdGQzgzRkVDRkNDODFERjIyOUVGM0RCOTEzQzMxNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrcXsvJai2RR7/ITaIuBPuKLWj
PweM+Cz7Z2D/tDiO2EnxA4tJOT8w27GSOOmHRWus4ioSJ4BzRhpzaiTnNdJLDUcM
+VoFphICgu8gpHJdcWnGoMns7I4jCeBjD/Ye45vknvDjZohZFaYdbWcbrnA+k+rs
tc4FRTBC3LAcSNQmCgC9eD07gK+3xZXdxXpXgw4HCqvlPefzBXTL8Kgt+SLZVwnT
tQY9AWFwNzXFaiof3F70O+0Jw1dZBLQPP51J35FAJf912W+io/CDv56UemaiBK84
BT0JY2kZ5ebIf2XXIgce1Bqb+xS3FnRTJha+Xe/UfXSyz5B1GF63Odl2jaX9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUQ7Y6kff8g/7PzIHfIp7z25E8MVwwHwYDVR0j
BBgwFoAUMJgqhi8CTAWKZ7cElv9AHiSJf0cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFpZMWVIdG1odlJWYjVqMVUxZTVhWmNaeWd4bW1NMkJSeFFLRlVWNnRI
ZFYvMC8zMDk4MkE4NjJGMDI0QzA1OEE2N0I3MDQ5NkZGNDAxRTI0ODk3RjQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMwOTgyQTg2MkYwMjRDMDU4
QTY3QjcwNDk2RkY0MDFFMjQ4OTdGNDcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRaWTFlSHRtaHZSVmI1ajFVMWU1YVpjWnlneG1tTTJCUnhRS0ZVVjZ0SGRWLzAv
MzQzNTJlMzEzNjM2MmUzMTM1MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzQzNDM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtpp0wDQYJKoZIhvcNAQELBQADggEBAHARR7V7
Monp3qrlVkpGZOrjEpiHnroARXAvFNHoUfBW3etsQcS9RbckpATwvQbmLji1CTFW
Xvt3XDOUV2cvzpDyn+DDiFLGAmKRVst/5t75GjANmMggF3baUQCQ3ojkuzeDzPU6
YQsWnyq3IYSxr+EhFn2K7MhmJXJHAwPp/FRyW3pqzsET2P2lvfCNK/4cGEVVLyTn
WCTTvlOYMsf3m1U45rFbg0gzMlrMP9tSpX4Nc2Ueu4zj5onn91V+FOVySMSFzyhR
+XLLIcXsrB6+jKJYv6QsSR9ZQP3eOpv7X+u0I30LV/ew9YW127lCw1NbzDu8zAGw
kp7qk7L++mPkXyo=
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:59:48 2025 by rpki-client