
$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e3132362e3136382e302f32312d3234203d3e203238333439.roa
File: 3138392e3132362e3136382e302f32312d3234203d3e203238333439.roa (raw, json)
Hash identifier: DMFowxirDYgxwAmw8kv+r2fImhKq0mtZ3wS0bR8hLBk=
Subject key identifier: 3A:48:4A:DF:FA:AE:7C:3F:2D:84:15:01:C4:DA:70:40:BA:FD:70:94
Certificate issuer: /CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
Certificate serial: 09C1DC3D8D014A8E4EC07CF34A21ED76E7905351
Authority key identifier: A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e3132362e3136382e302f32312d3234203d3e203238333439.roa
Signing time: Mon 10 Feb 2025 14:29:00 +0000
ROA not before: Mon 10 Feb 2025 14:24:00 +0000
ROA not after: Mon 09 Feb 2026 14:29:00 +0000
asID: 28349
IP address blocks: 189.126.168.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl
rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 23:38:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:c1:dc:3d:8d:01:4a:8e:4e:c0:7c:f3:4a:21:ed:76:e7:90:53:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
Validity
Not Before: Feb 10 14:24:00 2025 GMT
Not After : Feb 9 14:29:00 2026 GMT
Subject: CN=3A484ADFFAAE7C3F2D841501C4DA7040BAFD7094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8f:c6:37:67:f4:0e:f7:9c:43:45:d8:eb:bf:
a0:16:1f:09:62:8c:1d:42:65:e9:57:5f:c9:e1:53:
39:21:e5:00:9c:32:25:ae:b7:c1:0e:a2:53:86:30:
1f:0f:98:7c:fe:46:ac:ce:99:75:34:d2:68:be:32:
57:7a:05:1f:7d:3b:66:03:73:dd:7b:9e:cd:2c:29:
1e:00:67:2e:58:dd:60:79:57:27:6a:aa:39:bc:ff:
30:0c:e3:92:c6:e5:d4:d8:cc:b3:6b:f9:e6:6e:8f:
22:96:04:20:4c:13:38:62:0f:d1:94:91:d7:46:9d:
16:b4:a5:08:3c:54:1e:51:04:79:b7:63:5d:7a:9d:
66:93:b5:4e:4b:93:a5:45:66:4d:5b:99:b5:7b:42:
f0:29:91:57:00:ea:15:4f:3d:19:14:5e:a5:a7:0a:
8a:24:c8:e3:e0:0b:a6:ba:81:e9:1b:61:49:5e:e8:
0b:41:bd:40:77:77:19:77:a3:96:57:c7:d4:f3:ac:
cd:90:57:4b:69:18:31:a2:ad:f1:a8:f5:85:26:fb:
62:7d:8b:6f:7a:c2:dc:3d:78:fd:89:ba:a9:28:b5:
58:3a:42:b4:9e:98:2f:b8:81:87:bc:5b:41:1a:28:
fa:0b:16:8d:a3:db:77:5a:e5:b2:7b:2b:36:09:82:
63:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:48:4A:DF:FA:AE:7C:3F:2D:84:15:01:C4:DA:70:40:BA:FD:70:94
X509v3 Authority Key Identifier:
keyid:A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e3132362e3136382e302f32312d3234203d3e203238333439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.126.168.0/21
Signature Algorithm: sha256WithRSAEncryption
22:86:47:08:16:69:a5:a4:37:17:93:33:f3:7c:20:4a:54:04:
48:60:17:8c:4d:a4:96:46:45:ad:95:cc:60:6a:51:a6:db:6d:
17:fa:2d:83:d9:66:bb:cc:53:8a:8a:15:84:0e:f3:64:7e:74:
67:8e:a7:a8:82:d6:37:55:19:86:13:5d:87:27:e3:04:05:ff:
c6:29:07:23:0c:4c:c3:68:7a:aa:a2:58:41:ed:cb:bd:a2:a2:
f6:6f:5b:e2:75:c7:81:10:97:bb:18:cf:75:25:85:d2:2b:88:
af:83:bc:a5:22:13:0a:c1:36:03:3c:ba:25:50:9a:55:18:76:
da:47:7b:e2:87:91:21:a5:b8:7e:83:b1:78:c0:ef:60:c5:8b:
f0:5f:e9:b5:b4:ce:24:52:08:bc:27:8b:7c:03:77:83:e4:7f:
35:8e:96:b5:4b:5b:f9:e5:af:95:6f:85:4e:c9:49:4c:ad:76:
be:ab:f0:f3:b7:60:97:86:a1:cc:d0:9a:7b:e4:4c:ae:24:6d:
e1:3a:6a:74:85:d4:5a:d2:7e:bc:d2:d6:55:c8:d7:81:a4:a8:
30:8a:49:65:e2:35:88:3b:e9:29:32:30:89:14:b2:99:9a:db:
d1:cc:a5:57:79:5b:27:5b:b2:77:74:93:20:84:f9:f7:da:a4:
bc:21:44:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:49:08 2025 by rpki-client