
$ rpki-client -vvf rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/34352e3233362e3135362e302f32342d3234203d3e20323638323534.roa
File: 34352e3233362e3135362e302f32342d3234203d3e20323638323534.roa (raw, json)
Hash identifier: g+h7ZeJQoiwltb4pTrWxNjM0uMiKUgQuoMSR90spDQE=
Subject key identifier: 27:4E:84:36:48:0B:64:7D:7D:AA:D8:55:F7:71:C9:3A:8A:F5:3A:21
Certificate issuer: /CN=AFC529FB243B7780A20B27A2C4E73DAF65C25021
Certificate serial: 583CAB42F85442E8B944A76A56B708642C4DC7
Authority key identifier: AF:C5:29:FB:24:3B:77:80:A2:0B:27:A2:C4:E7:3D:AF:65:C2:50:21
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/34352e3233362e3135362e302f32342d3234203d3e20323638323534.roa
Signing time: Wed 05 Mar 2025 19:00:21 +0000
ROA not before: Wed 05 Mar 2025 18:55:21 +0000
ROA not after: Wed 04 Mar 2026 19:00:21 +0000
asID: 268254
IP address blocks: 45.236.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl
rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 11:10:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:3c:ab:42:f8:54:42:e8:b9:44:a7:6a:56:b7:08:64:2c:4d:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFC529FB243B7780A20B27A2C4E73DAF65C25021
Validity
Not Before: Mar 5 18:55:21 2025 GMT
Not After : Mar 4 19:00:21 2026 GMT
Subject: CN=274E8436480B647D7DAAD855F771C93A8AF53A21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d4:d1:c0:c6:f9:a4:02:8c:9d:48:64:16:0d:
77:b8:7f:8e:c2:65:c2:f1:e6:36:b6:aa:ef:a2:21:
9f:a1:e1:7e:4d:6f:d7:a2:5d:83:21:22:b4:01:7c:
d7:d8:87:bd:21:21:98:4e:65:2f:0f:fd:93:82:85:
8f:4a:58:8a:2d:c0:44:5e:8b:d8:6e:03:80:42:4c:
fb:23:73:85:42:0f:a6:dd:d9:1c:1b:58:c2:b3:f5:
26:70:11:00:c1:b9:2d:d1:da:93:23:91:67:aa:13:
61:79:bd:2a:77:80:09:9b:58:8c:df:60:7d:dc:88:
7e:3f:2b:63:56:c8:43:a3:f7:6b:a2:ee:3c:a1:2b:
34:77:09:bb:a3:4a:46:cd:9c:6f:a8:3a:36:d3:4e:
9e:87:5c:2a:dd:14:e1:ab:98:97:14:96:d1:6a:30:
ee:66:d8:38:f2:5f:c4:a8:19:fd:d2:ed:fa:0f:52:
81:7d:72:1f:4e:be:3b:42:13:02:0f:8a:de:0c:eb:
66:e4:75:af:80:a8:52:0f:6e:11:57:64:51:22:f6:
2c:80:e5:5d:b9:e6:e1:20:cc:87:3a:2e:d4:3c:60:
d3:60:94:69:ba:bd:2d:b5:26:f4:63:ca:4b:42:b5:
e5:1a:28:85:1f:16:bc:f5:f3:21:f2:bf:8a:71:8a:
3e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:4E:84:36:48:0B:64:7D:7D:AA:D8:55:F7:71:C9:3A:8A:F5:3A:21
X509v3 Authority Key Identifier:
keyid:AF:C5:29:FB:24:3B:77:80:A2:0B:27:A2:C4:E7:3D:AF:65:C2:50:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/34352e3233362e3135362e302f32342d3234203d3e20323638323534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.236.156.0/24
Signature Algorithm: sha256WithRSAEncryption
71:c2:73:e9:8b:01:01:f9:55:1e:43:f5:dd:fa:70:7f:ab:88:
cb:65:8b:d4:75:89:94:57:45:5a:ca:3f:71:c0:f9:28:7c:80:
e5:56:16:91:cb:ab:ff:c4:95:c0:33:28:bc:98:04:16:40:51:
68:24:2b:98:05:f1:51:f6:da:61:b3:03:04:df:fd:18:2e:33:
05:56:2a:f9:3d:8f:4b:71:a1:94:57:40:0e:96:47:1d:de:03:
30:43:af:bf:6f:b2:81:a7:28:09:0f:89:c8:34:72:a8:76:18:
fd:b0:b0:d2:ed:22:65:05:aa:80:6e:d9:3c:e4:56:97:2d:89:
e6:af:98:f2:5c:74:2f:01:11:78:b8:68:1f:a5:67:42:12:98:
ad:e3:ec:93:a6:83:0a:9c:c6:7c:56:d0:20:10:18:7a:d1:aa:
d5:15:37:0b:5b:5b:3d:4a:c0:fb:27:3a:66:f1:43:8a:98:db:
e4:ec:8c:1e:38:c1:6c:56:13:1e:23:e9:9c:1a:76:d0:76:61:
cd:ed:5b:ea:f3:9a:77:8d:fc:4b:dc:13:cf:0d:43:df:da:0f:
5f:99:e2:a8:3b:04:3c:5b:89:56:cc:8a:85:2f:b6:f3:de:fb:
37:6a:22:d4:42:d2:54:7e:c8:84:e0:1a:47:4f:c1:66:7f:25:
f5:37:dc:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 00:39:40 2025 by rpki-client