
$ rpki-client -vvf rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/34352e3137302e342e302f32322d3234203d3e20323638313335.roa
File: 34352e3137302e342e302f32322d3234203d3e20323638313335.roa (raw, json)
Hash identifier: SoeCL0aZ+l3TLgazhWCoIgR3tjyNLppAEi6iu2aQgvU=
Subject key identifier: 04:62:BF:0F:71:46:7F:BF:95:5D:B0:18:92:D8:85:73:02:1F:50:A6
Certificate issuer: /CN=F34586E5FEADD624205CA9CAA175D3DCA59D32B3
Certificate serial: 6E4CFC9F9BEBB072609D4B8947E9450A1062287B
Authority key identifier: F3:45:86:E5:FE:AD:D6:24:20:5C:A9:CA:A1:75:D3:DC:A5:9D:32:B3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/34352e3137302e342e302f32322d3234203d3e20323638313335.roa
Signing time: Wed 05 Mar 2025 21:49:54 +0000
ROA not before: Wed 05 Mar 2025 21:44:54 +0000
ROA not after: Wed 04 Mar 2026 21:49:54 +0000
asID: 268135
IP address blocks: 45.170.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.crl
rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 03:18:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:4c:fc:9f:9b:eb:b0:72:60:9d:4b:89:47:e9:45:0a:10:62:28:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F34586E5FEADD624205CA9CAA175D3DCA59D32B3
Validity
Not Before: Mar 5 21:44:54 2025 GMT
Not After : Mar 4 21:49:54 2026 GMT
Subject: CN=0462BF0F71467FBF955DB01892D88573021F50A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6a:20:4f:aa:6c:ef:e7:92:10:46:97:25:35:
8c:a4:be:9e:e5:1b:6b:12:56:3d:64:01:0c:c2:f7:
14:ea:d9:86:04:c4:35:4c:e1:49:59:44:b0:eb:3d:
04:93:7b:62:a0:bb:aa:42:76:a4:97:3a:a3:d7:38:
6f:e0:6b:6a:3b:91:1e:67:61:4e:87:f8:85:21:5c:
9d:8b:7e:83:c9:35:59:59:e8:74:07:0f:30:1c:66:
0b:b9:7b:18:da:b4:f3:4c:ff:ec:db:ef:08:8b:5e:
a4:b6:f1:45:48:f4:df:6c:87:a8:9f:67:1a:98:ec:
37:86:26:7f:0c:38:fc:d0:e2:20:d0:ef:14:cc:fb:
f8:33:23:c1:4f:c9:ac:e8:a1:7b:17:f8:11:9f:13:
d1:fc:2c:25:2d:0e:48:0f:4e:e6:0c:61:10:49:dd:
87:0e:51:9a:91:90:b2:b9:48:87:71:cd:ac:13:89:
5b:63:ad:eb:b4:d1:62:26:54:4c:e2:80:61:ef:81:
02:18:9c:c1:40:3f:53:72:ac:a3:13:7a:21:81:f2:
ed:e5:ac:dd:1f:5d:1c:ca:c2:17:cf:94:ce:00:d3:
a1:00:ba:12:bf:49:36:74:38:97:a6:64:51:6d:5f:
55:17:12:1c:08:f4:c9:63:6e:52:da:5b:61:20:0f:
d4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:62:BF:0F:71:46:7F:BF:95:5D:B0:18:92:D8:85:73:02:1F:50:A6
X509v3 Authority Key Identifier:
keyid:F3:45:86:E5:FE:AD:D6:24:20:5C:A9:CA:A1:75:D3:DC:A5:9D:32:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/34352e3137302e342e302f32322d3234203d3e20323638313335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.170.4.0/22
Signature Algorithm: sha256WithRSAEncryption
45:ab:7a:38:62:b7:6f:06:56:81:bc:11:dc:e7:6b:30:b0:bd:
60:2f:d5:01:d4:dd:b1:42:76:64:a8:42:b1:98:81:f5:97:aa:
9a:a3:d6:3d:a2:a1:78:8b:4e:16:2c:27:02:39:94:10:32:bc:
49:87:56:80:0e:2b:7a:af:e9:4d:60:f0:dd:89:ad:6e:72:ad:
40:45:94:c4:cb:93:42:40:9d:4e:ba:cb:56:95:c5:69:ff:7b:
b1:3a:b0:dc:38:07:c7:2b:f5:3d:58:70:21:26:30:93:77:e2:
6e:35:d3:7a:c3:84:87:0c:90:92:4d:40:29:df:d3:91:a2:d4:
21:09:03:06:0e:b1:55:63:50:d7:88:75:37:0a:3e:e5:ff:4f:
67:94:03:aa:a9:ca:94:e7:13:78:69:71:21:b1:5d:b2:3b:ca:
c4:04:3f:5c:88:c3:d1:0b:4e:0a:2c:d2:fa:2a:6b:68:c0:88:
81:12:1a:86:99:0a:cc:1c:7d:c3:20:86:d3:4d:d1:2f:30:4f:
26:64:53:01:1e:d9:f1:54:2b:cd:70:75:c2:64:fd:fe:9d:02:
10:bc:93:38:35:78:68:c8:9e:19:61:98:f9:ca:d3:98:6c:00:
6c:09:8d:96:35:69:c1:7a:a1:ed:73:be:16:04:1b:36:28:27:
c9:fa:31:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:25:36 2025 by rpki-client