
$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3133322e3234302e302f32312d3231203d3e20323638373434.roa
File: 3230302e3133322e3234302e302f32312d3231203d3e20323638373434.roa (raw, json)
Hash identifier: qRXFq4VFj/ZLp9odruJhBrKSHmQzfbGjZ57LqG8gTPU=
Subject key identifier: 0C:C2:A8:9B:D5:90:9C:1F:44:C5:09:89:1D:A6:F5:20:27:F6:68:58
Certificate issuer: /CN=D54C376960A26972A0B767BDA084048DFFE3673E
Certificate serial: 4C66C6A6F03768D18001A3710BAD64799203BFA4
Authority key identifier: D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3133322e3234302e302f32312d3231203d3e20323638373434.roa
Signing time: Tue 22 Jul 2025 15:09:02 +0000
ROA not before: Tue 22 Jul 2025 15:04:02 +0000
ROA not after: Tue 21 Jul 2026 15:09:02 +0000
asID: 268744
IP address blocks: 200.132.240.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl
rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 11:45:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:66:c6:a6:f0:37:68:d1:80:01:a3:71:0b:ad:64:79:92:03:bf:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D54C376960A26972A0B767BDA084048DFFE3673E
Validity
Not Before: Jul 22 15:04:02 2025 GMT
Not After : Jul 21 15:09:02 2026 GMT
Subject: CN=0CC2A89BD5909C1F44C509891DA6F52027F66858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:54:e6:cc:4e:dd:b7:20:3d:10:81:67:1c:b8:
ca:5d:d8:08:1d:3e:46:15:fd:8d:d1:74:ac:90:2d:
d0:ef:26:00:39:9c:84:10:17:81:27:16:27:82:7f:
7e:da:3b:32:ce:31:9e:6b:7f:9f:6a:30:e9:64:5a:
7f:61:94:15:a9:af:3a:83:49:50:a2:db:d1:62:bb:
5b:4a:15:79:90:be:c4:9f:8d:9a:56:c6:e3:f9:3a:
82:22:e5:03:77:73:3c:3e:f0:f2:68:d8:93:a1:52:
f3:5e:c9:8d:10:d6:cb:3c:ce:c3:e7:e6:e3:4d:5a:
16:2e:df:a6:0f:d6:a4:9c:39:f9:80:e3:16:2a:f0:
c7:2d:6d:71:1f:e0:00:db:73:59:df:07:ba:15:36:
fd:72:fb:85:ea:cb:c7:ff:1f:33:ea:06:a4:61:c4:
b5:ab:3c:ca:7d:61:a0:58:13:a4:30:d9:f4:cc:ed:
6c:af:9e:ed:ba:87:b7:d4:3f:06:e2:49:6d:55:e2:
16:99:08:05:e7:12:33:6f:51:7d:66:62:d7:5f:f9:
c9:3c:50:91:99:bb:69:e0:6d:b5:61:04:17:7c:c8:
76:4b:b0:70:02:96:3a:b3:d6:f0:f6:89:fc:88:1b:
16:8d:3b:07:a2:9f:7c:94:fd:98:07:1f:b3:84:ca:
3e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C2:A8:9B:D5:90:9C:1F:44:C5:09:89:1D:A6:F5:20:27:F6:68:58
X509v3 Authority Key Identifier:
keyid:D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3133322e3234302e302f32312d3231203d3e20323638373434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.132.240.0/21
Signature Algorithm: sha256WithRSAEncryption
43:88:01:4c:16:a3:6e:3d:3c:4b:3f:a6:6c:f2:36:da:18:7c:
ef:45:ce:f6:d5:a0:07:82:55:6c:5d:93:6e:5e:2b:31:93:b6:
30:d2:ca:b9:99:f3:cd:6a:87:96:66:7d:b6:64:57:32:48:cd:
93:78:3b:f8:4d:66:c5:7d:a5:1e:17:96:92:f0:da:2f:dd:7f:
d7:71:51:c5:47:ad:58:c5:32:47:83:26:9a:5b:ef:df:84:9c:
61:14:db:8f:aa:70:0a:01:c4:d4:f2:de:44:50:d1:13:a6:71:
1c:d3:40:c1:e7:8f:92:e9:f3:2c:df:07:68:9a:68:7c:4a:f3:
48:9f:56:dc:d9:f4:ee:bf:bc:27:ea:d5:a4:6d:55:3a:c1:d0:
ff:d5:70:ea:3f:2f:de:70:4d:cc:dc:eb:d4:ef:80:16:70:79:
f3:ea:39:dc:1d:44:8c:70:bf:2d:e3:90:49:61:d0:8e:fc:c6:
cf:eb:31:e6:df:ee:06:5e:78:fc:74:1c:fe:b5:d2:bc:97:66:
e8:6c:6d:1b:d2:62:e0:89:14:10:be:10:89:7e:01:8a:bc:d2:
14:28:89:3e:6f:7d:9a:ff:d6:17:b3:7f:36:00:98:ee:10:7c:
b4:9f:3c:37:80:ac:ee:e3:ab:29:68:4c:2a:3f:c6:5f:2a:14:
da:f1:97:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:08:02 2025 by rpki-client