
$ rpki-client -vvf rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/34352e3233372e3231342e302f32342d3234203d3e20323638333033.roa
File: 34352e3233372e3231342e302f32342d3234203d3e20323638333033.roa (raw, json)
Hash identifier: uTP2y0g3xC49RrchxzEhE2vPMueiPDIqiuN3r/u83Fc=
Subject key identifier: B9:A4:FC:1E:BF:03:E1:1F:1B:D4:55:AD:39:85:25:C1:5F:94:45:F7
Certificate issuer: /CN=7E09C85B0E5ACF758DAA966E4C1E2328D0322164
Certificate serial: 1FBFABF111AD86D12867C3B6073AFDA7CE6EC6E4
Authority key identifier: 7E:09:C8:5B:0E:5A:CF:75:8D:AA:96:6E:4C:1E:23:28:D0:32:21:64
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E09C85B0E5ACF758DAA966E4C1E2328D0322164.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/34352e3233372e3231342e302f32342d3234203d3e20323638333033.roa
Signing time: Fri 02 May 2025 14:16:00 +0000
ROA not before: Fri 02 May 2025 14:11:00 +0000
ROA not after: Fri 01 May 2026 14:16:00 +0000
asID: 268303
IP address blocks: 45.237.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/7E09C85B0E5ACF758DAA966E4C1E2328D0322164.crl
rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/7E09C85B0E5ACF758DAA966E4C1E2328D0322164.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E09C85B0E5ACF758DAA966E4C1E2328D0322164.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 15:56:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:bf:ab:f1:11:ad:86:d1:28:67:c3:b6:07:3a:fd:a7:ce:6e:c6:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E09C85B0E5ACF758DAA966E4C1E2328D0322164
Validity
Not Before: May 2 14:11:00 2025 GMT
Not After : May 1 14:16:00 2026 GMT
Subject: CN=B9A4FC1EBF03E11F1BD455AD398525C15F9445F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f5:c3:5c:e7:04:9e:da:68:ce:7a:80:f3:a3:
d5:40:ce:5f:9a:44:da:53:c0:88:af:4c:5d:2c:e5:
e4:34:1d:cb:6c:3a:bc:7c:b1:34:bc:c8:7a:ad:e1:
f4:a3:17:c5:8c:22:8e:3c:f5:bf:33:d1:6b:55:75:
66:bc:2a:f7:db:d4:48:0d:99:9f:e4:58:5e:5e:79:
c7:81:99:e0:a6:c5:3b:a2:04:db:d9:f6:e9:1d:7d:
89:02:b2:2e:b6:bf:67:d8:64:cd:69:b5:7e:ff:dc:
ef:23:e1:da:44:e9:a1:c5:ee:1e:26:5b:07:8e:72:
14:21:4c:44:24:91:11:95:fd:03:82:cc:e7:f7:f2:
76:0f:6e:b7:df:02:9c:4d:39:cf:c3:4f:b1:f6:b9:
58:e9:22:b1:c7:a1:25:fd:ec:07:46:3e:64:20:bf:
ea:91:2d:27:4e:95:8f:ee:dd:b7:e9:1b:e2:79:52:
8b:1b:69:91:b5:81:44:34:1e:99:56:d8:4c:b9:e3:
70:6c:aa:bf:dd:67:91:33:c0:8b:a0:5d:72:28:60:
af:b2:43:ad:81:ce:96:54:3d:73:59:1f:a7:ff:2b:
ad:d4:26:22:57:42:df:05:6b:5d:ed:81:a0:78:63:
76:80:a7:02:00:ad:9b:8f:58:29:67:56:f9:5f:d1:
fb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A4:FC:1E:BF:03:E1:1F:1B:D4:55:AD:39:85:25:C1:5F:94:45:F7
X509v3 Authority Key Identifier:
keyid:7E:09:C8:5B:0E:5A:CF:75:8D:AA:96:6E:4C:1E:23:28:D0:32:21:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/7E09C85B0E5ACF758DAA966E4C1E2328D0322164.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E09C85B0E5ACF758DAA966E4C1E2328D0322164.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/34352e3233372e3231342e302f32342d3234203d3e20323638333033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.237.214.0/24
Signature Algorithm: sha256WithRSAEncryption
98:94:84:26:d5:b0:cb:54:77:ca:3f:c3:3e:fd:60:ab:73:c4:
4c:5d:6f:33:38:10:64:12:4c:78:8b:89:28:92:fa:da:bc:73:
09:2f:d9:37:b2:15:71:3e:46:93:4e:2d:8a:eb:80:7b:6d:8e:
3c:36:43:bd:f8:b5:ed:f2:f3:8d:ac:52:53:f5:2c:65:9a:3f:
52:a2:3c:ce:c3:c1:20:eb:73:d4:7c:42:72:16:d2:b8:de:fa:
71:4a:f4:0b:ab:d5:60:0c:e7:b7:c6:98:41:d1:cf:d7:0d:e8:
85:ad:a7:d2:9e:4f:69:ae:9b:ed:8e:18:c2:84:1c:a7:a7:8a:
8a:67:21:2a:88:c2:4e:9e:e2:0e:01:a1:9a:e0:e9:46:c4:40:
72:4c:5a:43:3e:ab:87:9d:4f:c5:18:33:1b:4b:53:b2:67:a8:
7f:8c:1b:58:79:98:30:d1:7e:c5:b2:24:4d:ab:a3:10:2f:9b:
2e:eb:20:ee:53:79:bd:00:fc:a5:72:a4:be:d1:fa:68:fe:a6:
05:88:2c:bd:54:ac:e3:70:a3:1b:0a:94:08:21:4f:66:52:83:
30:ae:bb:3a:e9:50:67:9e:b2:98:d5:87:f4:01:0d:6d:0d:50:
02:ea:9b:f3:1e:f4:12:0a:bc:75:16:1b:a4:f2:6a:01:7a:96:
b1:aa:7e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:18:53 2025 by rpki-client