
$ rpki-client -vvf rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/34352e3233382e3137312e302f32342d3234203d3e20323638333431.roa
File: 34352e3233382e3137312e302f32342d3234203d3e20323638333431.roa (raw, json)
Hash identifier: eguUN6Rh/aQVJIE3fCrj8DtxSdCuIpmQ0StziQKnD1U=
Subject key identifier: 4A:B9:EB:28:F8:E3:81:4C:53:AB:96:FB:ED:DD:B9:C8:16:18:32:4C
Certificate issuer: /CN=EF9FE7422108F8FDF6AD86D74818535B1738C9BA
Certificate serial: 640A1D1A99BC4C68E01B8EA1143EEA316760BB04
Authority key identifier: EF:9F:E7:42:21:08:F8:FD:F6:AD:86:D7:48:18:53:5B:17:38:C9:BA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF9FE7422108F8FDF6AD86D74818535B1738C9BA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/34352e3233382e3137312e302f32342d3234203d3e20323638333431.roa
Signing time: Mon 22 Sep 2025 18:40:54 +0000
ROA not before: Mon 22 Sep 2025 18:35:54 +0000
ROA not after: Mon 21 Sep 2026 18:40:54 +0000
asID: 268341
IP address blocks: 45.238.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/EF9FE7422108F8FDF6AD86D74818535B1738C9BA.crl
rsync://rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/EF9FE7422108F8FDF6AD86D74818535B1738C9BA.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF9FE7422108F8FDF6AD86D74818535B1738C9BA.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 19:57:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:0a:1d:1a:99:bc:4c:68:e0:1b:8e:a1:14:3e:ea:31:67:60:bb:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF9FE7422108F8FDF6AD86D74818535B1738C9BA
Validity
Not Before: Sep 22 18:35:54 2025 GMT
Not After : Sep 21 18:40:54 2026 GMT
Subject: CN=4AB9EB28F8E3814C53AB96FBEDDDB9C81618324C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8c:c5:7d:ca:f8:98:dd:56:1b:bb:09:2b:8c:
12:c7:a6:0e:a6:b2:d3:1e:1c:e2:8e:7f:14:31:b5:
5c:f9:41:ca:fe:d3:5f:fb:34:cb:92:9f:42:ca:6f:
cb:cc:53:10:19:7b:27:ab:00:0a:e4:c1:ba:4d:19:
6b:0f:71:c0:0b:af:16:dc:7e:9d:58:c1:c4:f5:73:
cf:ef:b4:69:23:11:72:9f:4c:7f:89:4b:cd:91:87:
42:69:91:10:b4:07:3f:33:60:e4:e1:0f:86:76:2e:
cf:50:a9:e1:c4:d4:e1:d8:8c:5c:cc:25:57:2a:1b:
2e:8f:99:38:9b:0c:e1:38:a9:d7:3e:0e:6b:fc:77:
4a:5c:73:2e:24:52:3b:bb:cd:b5:bf:c6:d3:de:d8:
f2:a4:ce:73:cd:c3:0e:3f:43:55:5d:09:23:c1:3c:
8c:26:bf:99:bd:c1:80:47:cf:1b:76:48:7e:00:e0:
49:29:b2:47:59:b1:bb:81:aa:f3:ea:ab:26:89:f4:
d6:dc:66:7d:0c:01:c5:a9:71:bc:17:f2:f7:6a:13:
cb:01:78:81:54:d5:96:57:d6:e1:04:44:86:28:d4:
54:7d:32:ff:7e:e3:54:9f:4f:21:ab:14:26:3d:d0:
ff:fe:17:70:fd:7e:46:ab:1a:f3:d1:89:09:62:dc:
05:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B9:EB:28:F8:E3:81:4C:53:AB:96:FB:ED:DD:B9:C8:16:18:32:4C
X509v3 Authority Key Identifier:
keyid:EF:9F:E7:42:21:08:F8:FD:F6:AD:86:D7:48:18:53:5B:17:38:C9:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/EF9FE7422108F8FDF6AD86D74818535B1738C9BA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF9FE7422108F8FDF6AD86D74818535B1738C9BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/34352e3233382e3137312e302f32342d3234203d3e20323638333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.171.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:9c:63:3e:0e:dd:82:99:65:ed:85:84:5b:d8:70:51:43:8d:
dd:49:73:e3:70:02:16:26:b7:86:c1:05:40:05:e2:59:63:39:
23:cb:bf:93:89:89:ee:8d:24:30:7d:a7:ac:7c:19:24:01:0e:
e9:e0:a3:d2:a8:f4:a3:1e:0a:f0:5d:79:18:0d:fd:e8:0b:83:
00:33:e6:f4:df:4e:d7:ce:d0:9d:c6:5b:14:05:7a:7b:97:92:
24:e5:af:69:8a:a5:ce:38:96:f6:97:b7:f1:35:af:5b:02:79:
70:ad:df:99:56:a8:f1:0a:e4:ad:da:33:9b:de:2f:89:02:71:
f6:b1:ff:f6:39:8a:c0:3a:9f:61:d8:fd:6e:ea:a1:50:82:65:
24:8a:40:6a:08:84:d2:c0:0c:74:41:12:b1:c0:c2:07:99:c1:
dc:82:7f:71:44:d2:56:38:2e:aa:fe:dd:a2:11:38:a9:06:71:
53:44:a9:8c:b9:82:96:ea:a6:c8:28:49:b4:38:0f:5c:02:eb:
01:ea:c4:eb:f4:fb:ab:1c:6c:6c:8c:55:ca:c1:97:2d:e7:7b:
13:a3:58:a7:84:25:06:c4:6e:6b:2a:b7:15:7a:4c:3e:17:13:
8d:d7:27:25:4a:dd:f6:ab:75:37:fe:fd:2a:f0:24:cf:46:75:
d9:98:b1:00
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZAodGpm8TGjgG46hFD7qMWdguwQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUY5RkU3NDIyMTA4RjhGREY2QUQ4NkQ3NDgxODUzNUIx
NzM4QzlCQTAeFw0yNTA5MjIxODM1NTRaFw0yNjA5MjExODQwNTRaMDMxMTAvBgNV
BAMTKDRBQjlFQjI4RjhFMzgxNEM1M0FCOTZGQkVERERCOUM4MTYxODMyNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbjMV9yviY3VYbuwkrjBLHpg6m
stMeHOKOfxQxtVz5Qcr+01/7NMuSn0LKb8vMUxAZeyerAArkwbpNGWsPccALrxbc
fp1YwcT1c8/vtGkjEXKfTH+JS82Rh0JpkRC0Bz8zYOThD4Z2Ls9QqeHE1OHYjFzM
JVcqGy6PmTibDOE4qdc+Dmv8d0pccy4kUju7zbW/xtPe2PKkznPNww4/Q1VdCSPB
PIwmv5m9wYBHzxt2SH4A4EkpskdZsbuBqvPqqyaJ9NbcZn0MAcWpcbwX8vdqE8sB
eIFU1ZZX1uEERIYo1FR9Mv9+41SfTyGrFCY90P/+F3D9fkarGvPRiQli3AVdAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUSrnrKPjjgUxTq5b77d25yBYYMkwwHwYDVR0j
BBgwFoAU75/nQiEI+P32rYbXSBhTWxc4ybowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWp4ZWNtbU1RTXBlTUd3WjNhRmJLUGdoYUZLZTRyNllTUXlBcUFGS05p
UFUvMC9FRjlGRTc0MjIxMDhGOEZERjZBRDg2RDc0ODE4NTM1QjE3MzhDOUJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VGOUZFNzQyMjEwOEY4RkRG
NkFEODZENzQ4MTg1MzVCMTczOEM5QkEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVqeGVjbW1NUU1wZU1Hd1ozYUZiS1BnaGFGS2U0cjZZU1F5QXFBRktOaVBVLzAv
MzQzNTJlMzIzMzM4MmUzMTM3MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzMzM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt7qswDQYJKoZIhvcNAQELBQADggEBAE2cYz4O
3YKZZe2FhFvYcFFDjd1Jc+NwAhYmt4bBBUAF4lljOSPLv5OJie6NJDB9p6x8GSQB
Dungo9Ko9KMeCvBdeRgN/egLgwAz5vTfTtfO0J3GWxQFenuXkiTlr2mKpc44lvaX
t/E1r1sCeXCt35lWqPEK5K3aM5veL4kCcfax//Y5isA6n2HY/W7qoVCCZSSKQGoI
hNLADHRBErHAwgeZwdyCf3FE0lY4Lqr+3aIROKkGcVNEqYy5gpbqpsgoSbQ4D1wC
6wHqxOv0+6scbGyMVcrBly3nexOjWKeEJQbEbmsqtxV6TD4XE43XJyVK3fardTf+
/SrwJM9GddmYsQA=
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:17:19 2025 by rpki-client