
$ rpki-client -vvf rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/34352e3138372e3132312e302f32342d3234203d3e20323638353436.roa
File: 34352e3138372e3132312e302f32342d3234203d3e20323638353436.roa (raw, json)
Hash identifier: omEnbemDArEhscDOt1sUNnHwRiqWGmkNbbfCZbU0LXo=
Subject key identifier: 7B:19:1F:4F:77:1A:F5:27:1D:56:84:06:8E:E2:44:DE:A9:5B:C7:02
Certificate issuer: /CN=32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4
Certificate serial: 23F206D562BAC8548ED6725D632A454511D60CEF
Authority key identifier: 32:C3:A2:0B:EB:E1:AC:7A:6C:3E:09:58:CC:B9:71:DE:A6:4D:E1:B4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/34352e3138372e3132312e302f32342d3234203d3e20323638353436.roa
Signing time: Wed 04 Jun 2025 01:05:43 +0000
ROA not before: Wed 04 Jun 2025 01:00:43 +0000
ROA not after: Wed 03 Jun 2026 01:05:43 +0000
asID: 268546
IP address blocks: 45.187.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.crl
rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 04:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:f2:06:d5:62:ba:c8:54:8e:d6:72:5d:63:2a:45:45:11:d6:0c:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4
Validity
Not Before: Jun 4 01:00:43 2025 GMT
Not After : Jun 3 01:05:43 2026 GMT
Subject: CN=7B191F4F771AF5271D5684068EE244DEA95BC702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:47:ef:0c:c6:83:ba:52:02:3e:a1:0d:f7:3e:
83:40:1b:b8:d9:5f:9d:ff:cd:f8:d1:e6:ef:3c:9a:
04:21:a4:e8:a4:cd:4b:85:b7:29:53:b4:7c:c8:48:
d5:b1:3d:5f:b6:11:61:cd:bd:4b:af:59:33:17:b1:
fc:9c:5d:d6:98:3c:ff:0c:f2:65:9f:88:82:28:a2:
fe:be:59:fd:2f:0f:8b:00:31:91:c9:ae:b0:6f:e8:
35:7e:97:e9:e5:1c:70:3e:ce:b5:c8:30:73:de:a6:
c3:6e:75:25:bc:a7:b0:11:ea:cf:17:fd:91:b1:88:
cf:22:aa:7d:5f:bf:98:3a:39:1f:bb:ca:c1:be:d4:
36:0a:5f:18:1f:8c:bd:22:41:e6:11:f9:6d:fa:8c:
1e:b1:4f:1c:c5:69:44:02:35:67:d7:2c:64:2c:4d:
87:ff:04:47:67:95:4b:1c:45:d5:7d:49:32:68:8d:
25:1d:e1:6a:63:6e:d1:88:00:62:c7:56:5b:a2:94:
f0:17:03:d3:0f:0b:1f:25:99:d7:53:67:10:32:2d:
08:1b:6e:9c:d3:7c:6b:97:f3:85:13:96:f6:48:2c:
c4:9a:47:62:17:a4:c0:42:2e:b0:71:b9:2b:4c:8e:
78:6d:69:0f:49:c9:70:65:b5:ba:83:a0:e5:18:84:
21:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:19:1F:4F:77:1A:F5:27:1D:56:84:06:8E:E2:44:DE:A9:5B:C7:02
X509v3 Authority Key Identifier:
keyid:32:C3:A2:0B:EB:E1:AC:7A:6C:3E:09:58:CC:B9:71:DE:A6:4D:E1:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/34352e3138372e3132312e302f32342d3234203d3e20323638353436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.187.121.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:63:13:70:d4:29:c9:bd:cd:58:a4:37:f6:85:d2:4f:ed:e6:
b4:ba:bc:b0:7a:4d:a2:71:6d:b0:ce:9e:34:dc:e4:9c:af:c4:
37:62:9f:a5:87:4e:bf:3e:3d:5d:e4:bd:4d:ff:cc:ec:8d:d0:
73:04:16:dc:a9:ab:93:17:b2:b2:1d:fd:be:f1:b1:8f:5d:62:
7c:90:e3:a4:f7:06:c1:66:b9:da:fa:56:69:5d:29:00:54:c8:
30:a3:67:17:31:34:87:6a:98:84:c6:80:8e:d1:4e:3a:3e:5b:
3e:69:90:61:1d:90:79:85:58:0c:8d:c4:47:85:a3:d8:02:76:
da:c6:6a:0e:09:c0:88:ae:db:4e:96:63:f3:25:e5:16:e7:7d:
89:a9:08:22:91:ca:58:bb:93:9f:6b:f6:dc:bd:e6:81:47:8f:
37:21:07:a8:c5:9b:5f:cb:5d:8c:77:fb:cf:d1:56:6b:dd:07:
c3:4a:cf:ce:3e:f2:a5:e5:da:04:27:00:24:2a:eb:7e:7e:fa:
a2:d8:b7:fb:e3:2c:b6:ac:d7:19:83:63:df:5f:9a:b5:67:5a:
41:82:5f:c2:ef:6e:09:86:fc:9d:80:1e:c4:d7:67:10:08:32:
53:33:aa:ab:57:61:20:9b:ff:df:3e:c8:58:5c:b5:77:4a:fc:
0a:32:b9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:36:14 2025 by rpki-client