
$ rpki-client -vvf rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/34352e372e32302e302f32322d3234203d3e203532383932.roa
File: 34352e372e32302e302f32322d3234203d3e203532383932.roa (raw, json)
Hash identifier: uuNPMai8ndRuVx6IUex5iCAghpCldvzcb3y7pne/o20=
Subject key identifier: DF:66:49:DF:6F:E4:33:30:CA:91:06:61:3E:09:B5:AD:16:87:E9:47
Certificate issuer: /CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C
Certificate serial: 33B69A4E98EE052F919E8D91D4467628DF0DF7AA
Authority key identifier: 02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/34352e372e32302e302f32322d3234203d3e203532383932.roa
Signing time: Thu 19 Jun 2025 19:01:36 +0000
ROA not before: Thu 19 Jun 2025 18:56:36 +0000
ROA not after: Thu 18 Jun 2026 19:01:36 +0000
asID: 52892
IP address blocks: 45.7.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.crl
rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 09:08:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:b6:9a:4e:98:ee:05:2f:91:9e:8d:91:d4:46:76:28:df:0d:f7:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C
Validity
Not Before: Jun 19 18:56:36 2025 GMT
Not After : Jun 18 19:01:36 2026 GMT
Subject: CN=DF6649DF6FE43330CA9106613E09B5AD1687E947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e9:6f:a5:be:e6:8e:a8:8e:5d:29:7b:34:db:
c8:f4:8c:d3:0e:5e:20:ef:5d:c8:8c:a9:22:f2:f0:
9c:d3:2f:5e:6e:8c:0b:2a:72:da:45:7b:30:4f:1f:
38:73:a4:c7:52:ba:e1:39:e2:2e:80:4a:c5:d5:af:
31:fb:d2:74:ce:ed:fe:11:f2:84:71:08:24:2e:7c:
a4:49:79:e1:74:5f:f2:bf:61:44:fd:2d:7f:8e:77:
18:05:fc:c7:80:b5:72:0b:db:7e:49:e9:54:f4:af:
f8:7d:a9:6c:58:63:7f:d1:1a:de:8d:b3:24:16:4d:
56:f5:2b:74:26:b4:a5:25:cd:4e:72:be:1f:db:bf:
86:d9:dc:2c:5c:0e:cc:4e:58:32:54:70:63:45:0d:
7c:50:4e:dd:98:a8:3c:81:19:9c:33:08:40:68:74:
9b:11:26:22:71:b4:ce:87:a6:37:cc:3b:60:c1:d2:
b1:af:94:f7:16:93:b8:14:79:85:ee:0e:3e:63:ee:
75:1f:2a:23:d2:b9:84:8e:0d:9a:e8:be:5d:53:18:
ad:be:b6:72:c4:2b:6c:0c:b5:be:87:b7:f9:2b:43:
e2:38:0d:c9:6c:c8:61:bd:87:3f:d6:59:3f:1f:3d:
46:73:d7:2d:a8:78:75:87:fb:5c:5f:47:ad:2a:c6:
6a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:66:49:DF:6F:E4:33:30:CA:91:06:61:3E:09:B5:AD:16:87:E9:47
X509v3 Authority Key Identifier:
keyid:02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/34352e372e32302e302f32322d3234203d3e203532383932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.7.20.0/22
Signature Algorithm: sha256WithRSAEncryption
49:39:41:be:28:39:73:1d:8f:70:15:eb:14:c9:5d:c8:b0:3f:
70:e9:e3:7a:8e:ba:b2:7d:e7:58:14:f5:74:14:b0:fd:64:ec:
4f:66:bf:2c:62:a9:13:50:56:95:75:2a:b1:7d:43:4c:93:97:
88:29:65:ea:f3:b4:d5:d7:6f:cb:88:fb:77:9c:ae:09:76:d3:
40:d8:53:72:0a:73:ea:f9:71:ab:69:86:3a:c0:45:6b:29:72:
2a:ff:37:f5:ac:83:b0:a9:db:26:26:99:35:49:41:6e:ca:c1:
bb:34:54:d7:99:c8:31:58:f3:2a:2a:15:89:b6:4e:ca:4f:7d:
94:c2:04:fb:2b:ad:68:84:f4:0a:fe:bf:31:c5:b1:0a:b7:54:
59:c6:90:ab:25:33:c3:44:61:24:70:d9:ec:f8:2a:3b:03:e6:
58:bd:ae:39:f9:f2:49:b2:68:1a:36:23:17:52:c1:6d:75:d4:
d8:9a:1c:7e:ce:f1:8e:d0:4a:37:d1:a9:ea:71:9f:ba:57:2c:
29:97:c1:2f:a1:cf:9d:4b:b4:b3:cc:32:b9:33:cc:1d:da:76:
e2:73:8e:f6:5e:67:df:10:4e:86:9e:dd:ab:8f:b6:0e:8b:91:
01:f8:42:2e:36:cf:6f:97:c6:e0:ed:05:13:7f:66:30:c3:1c:
58:51:f4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:33:03 2025 by rpki-client