
$ rpki-client -vvf rpki-repo.registro.br/repo/8VMipLvPLj58GJQi4c7HdqZJyWSkmuhBsnGNNcui43mE/0/34352e3233372e3230382e302f32322d3332203d3e20323638323938.roa
File: 34352e3233372e3230382e302f32322d3332203d3e20323638323938.roa (raw, json)
Hash identifier: 6c3GdWcjKCcupf3f4vwcEM7/1n5r6TvUI5+yFIQGlag=
Subject key identifier: 43:F7:12:35:1E:40:D1:41:01:C2:69:1E:8C:6C:DB:0C:80:B4:59:6D
Certificate issuer: /CN=F4295DF9D903508C9752EE48D417C2E0F09072B9
Certificate serial: 413901D7007CDE44FDB9871E6491B067DFD811F1
Authority key identifier: F4:29:5D:F9:D9:03:50:8C:97:52:EE:48:D4:17:C2:E0:F0:90:72:B9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4295DF9D903508C9752EE48D417C2E0F09072B9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8VMipLvPLj58GJQi4c7HdqZJyWSkmuhBsnGNNcui43mE/0/34352e3233372e3230382e302f32322d3332203d3e20323638323938.roa
Signing time: Mon 23 Jun 2025 12:04:13 +0000
ROA not before: Mon 23 Jun 2025 11:59:13 +0000
ROA not after: Mon 22 Jun 2026 12:04:13 +0000
asID: 268298
IP address blocks: 45.237.208.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8VMipLvPLj58GJQi4c7HdqZJyWSkmuhBsnGNNcui43mE/0/F4295DF9D903508C9752EE48D417C2E0F09072B9.crl
rsync://rpki-repo.registro.br/repo/8VMipLvPLj58GJQi4c7HdqZJyWSkmuhBsnGNNcui43mE/0/F4295DF9D903508C9752EE48D417C2E0F09072B9.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4295DF9D903508C9752EE48D417C2E0F09072B9.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 05:16:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:39:01:d7:00:7c:de:44:fd:b9:87:1e:64:91:b0:67:df:d8:11:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F4295DF9D903508C9752EE48D417C2E0F09072B9
Validity
Not Before: Jun 23 11:59:13 2025 GMT
Not After : Jun 22 12:04:13 2026 GMT
Subject: CN=43F712351E40D14101C2691E8C6CDB0C80B4596D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:59:fb:06:35:a2:3a:f1:ec:e4:13:9d:1d:93:
4e:fc:12:e9:98:bb:82:cc:82:ac:73:86:01:4a:b7:
98:54:cf:3d:a8:b4:c0:8c:81:96:07:e5:42:60:4f:
42:01:ce:bf:97:40:d3:ac:32:e6:ab:33:eb:a1:b4:
7b:6a:21:99:48:50:18:fd:64:f7:ab:24:6d:02:ab:
b1:8e:40:7c:1f:55:c2:35:d0:64:0c:47:b9:98:40:
21:2f:24:db:5d:4d:68:50:eb:d9:1e:48:ec:2f:f7:
95:41:76:d4:6b:ff:69:64:ec:42:a2:f2:1e:b7:f2:
4d:45:a2:2f:3e:49:de:2d:25:21:a0:c7:f9:47:39:
98:f1:2e:4b:98:58:35:b3:8e:5b:da:40:19:de:52:
6c:fe:7d:d9:bb:0f:25:e1:bd:ec:28:04:8c:24:54:
9a:b1:71:52:2c:68:c5:73:a1:73:89:ce:e4:1c:cf:
13:56:cf:cd:5d:c7:99:da:22:a7:b3:2d:0c:1b:46:
00:0d:88:3c:a5:51:78:a7:d5:d6:9c:84:f5:84:b3:
ad:30:7a:83:e6:a1:13:b0:5b:be:ca:31:a4:47:cb:
76:b4:0d:b5:f1:9f:4e:06:ba:46:82:72:2c:7c:bc:
62:70:6b:66:33:f9:c3:d2:4d:f8:c1:ee:48:56:40:
e9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F7:12:35:1E:40:D1:41:01:C2:69:1E:8C:6C:DB:0C:80:B4:59:6D
X509v3 Authority Key Identifier:
keyid:F4:29:5D:F9:D9:03:50:8C:97:52:EE:48:D4:17:C2:E0:F0:90:72:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8VMipLvPLj58GJQi4c7HdqZJyWSkmuhBsnGNNcui43mE/0/F4295DF9D903508C9752EE48D417C2E0F09072B9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4295DF9D903508C9752EE48D417C2E0F09072B9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8VMipLvPLj58GJQi4c7HdqZJyWSkmuhBsnGNNcui43mE/0/34352e3233372e3230382e302f32322d3332203d3e20323638323938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.237.208.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:de:d4:db:28:51:c4:83:37:c0:e3:18:32:0e:32:3c:17:f3:
53:48:37:09:6b:57:1e:fd:73:05:92:88:78:69:56:02:28:34:
20:41:ce:10:c7:8f:11:de:7d:da:f1:3f:3d:bb:23:a1:6f:d3:
c8:cf:62:37:29:73:8e:e7:5f:bd:85:58:c4:bf:6c:58:79:1c:
d1:47:08:3b:cc:d2:9f:35:bf:d2:58:46:57:63:0c:4f:ba:02:
bd:c6:c7:74:ae:2b:02:ad:98:c9:5a:98:a8:11:aa:ba:40:b0:
d8:68:95:00:d2:bc:a5:d4:22:bc:e0:83:f0:ad:00:b2:eb:3d:
38:93:43:c9:3b:28:61:2d:fd:7b:f1:7b:df:30:ca:4a:36:5b:
ed:5a:79:b8:94:39:58:c9:2d:0f:2c:63:a8:b6:e7:75:07:86:
bd:50:f5:8a:ca:c8:7c:72:ce:a6:82:08:bd:07:e3:d7:a2:53:
34:f6:43:91:25:20:a2:1e:4d:d3:47:5d:00:84:9e:0f:5d:6e:
e5:bc:c8:1f:01:d0:16:8e:62:13:bd:95:be:aa:3d:98:16:d6:
ee:0f:dc:21:be:0f:03:48:0f:d7:45:0d:43:71:60:1d:86:e5:
ce:8b:1f:69:92:c8:a9:43:ea:34:bf:ad:3e:a7:64:16:a7:80:
fa:31:05:3e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQTkB1wB83kT9uYceZJGwZ9/YEfEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjQyOTVERjlEOTAzNTA4Qzk3NTJFRTQ4RDQxN0MyRTBG
MDkwNzJCOTAeFw0yNTA2MjMxMTU5MTNaFw0yNjA2MjIxMjA0MTNaMDMxMTAvBgNV
BAMTKDQzRjcxMjM1MUU0MEQxNDEwMUMyNjkxRThDNkNEQjBDODBCNDU5NkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChWfsGNaI68ezkE50dk078EumY
u4LMgqxzhgFKt5hUzz2otMCMgZYH5UJgT0IBzr+XQNOsMuarM+uhtHtqIZlIUBj9
ZPerJG0Cq7GOQHwfVcI10GQMR7mYQCEvJNtdTWhQ69keSOwv95VBdtRr/2lk7EKi
8h638k1Foi8+Sd4tJSGgx/lHOZjxLkuYWDWzjlvaQBneUmz+fdm7DyXhvewoBIwk
VJqxcVIsaMVzoXOJzuQczxNWz81dx5naIqezLQwbRgANiDylUXin1dachPWEs60w
eoPmoROwW77KMaRHy3a0DbXxn04GukaCcix8vGJwa2Yz+cPSTfjB7khWQOmJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUQ/cSNR5A0UEBwmkejGzbDIC0WW0wHwYDVR0j
BBgwFoAU9Cld+dkDUIyXUu5I1BfC4PCQcrkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFZNaXBMdlBMajU4R0pRaTRjN0hkcVpKeVdTa211aEJzbkdOTmN1aTQz
bUUvMC9GNDI5NURGOUQ5MDM1MDhDOTc1MkVFNDhENDE3QzJFMEYwOTA3MkI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y0Mjk1REY5RDkwMzUwOEM5
NzUyRUU0OEQ0MTdDMkUwRjA5MDcyQjkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhWTWlwTHZQTGo1OEdKUWk0YzdIZHFaSnlXU2ttdWhCc25HTk5jdWk0M21FLzAv
MzQzNTJlMzIzMzM3MmUzMjMwMzgyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzgzMjM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt7dAwDQYJKoZIhvcNAQELBQADggEBAE7e1Nso
UcSDN8DjGDIOMjwX81NINwlrVx79cwWSiHhpVgIoNCBBzhDHjxHefdrxPz27I6Fv
08jPYjcpc47nX72FWMS/bFh5HNFHCDvM0p81v9JYRldjDE+6Ar3Gx3SuKwKtmMla
mKgRqrpAsNholQDSvKXUIrzgg/CtALLrPTiTQ8k7KGEt/Xvxe98wyko2W+1aebiU
OVjJLQ8sY6i253UHhr1Q9YrKyHxyzqaCCL0H49eiUzT2Q5ElIKIeTdNHXQCEng9d
buW8yB8B0BaOYhO9lb6qPZgW1u4P3CG+DwNID9dFDUNxYB2G5c6LH2mSyKlD6jS/
rT6nZBangPoxBT4=
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:47:48 2025 by rpki-client