
$ rpki-client -vvf rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/34352e3136372e32392e302f32342d3234203d3e20323637393832.roa
File: 34352e3136372e32392e302f32342d3234203d3e20323637393832.roa (raw, json)
Hash identifier: SIbrx2B5742GrdoaylzjlpV8dfnFISkAsYh8SJnHtrY=
Subject key identifier: 0C:DF:6E:9D:AD:96:86:ED:17:67:B6:E5:8B:4F:88:31:74:9A:F7:53
Certificate issuer: /CN=296992941BF10D571CBDC8A16F88FF51FAD9B52C
Certificate serial: 73BE452A6CD71632AFED6571BA279D41ADC1C3E6
Authority key identifier: 29:69:92:94:1B:F1:0D:57:1C:BD:C8:A1:6F:88:FF:51:FA:D9:B5:2C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296992941BF10D571CBDC8A16F88FF51FAD9B52C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/34352e3136372e32392e302f32342d3234203d3e20323637393832.roa
Signing time: Tue 30 Sep 2025 19:05:39 +0000
ROA not before: Tue 30 Sep 2025 19:00:39 +0000
ROA not after: Tue 29 Sep 2026 19:05:39 +0000
asID: 267982
IP address blocks: 45.167.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/296992941BF10D571CBDC8A16F88FF51FAD9B52C.crl
rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/296992941BF10D571CBDC8A16F88FF51FAD9B52C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296992941BF10D571CBDC8A16F88FF51FAD9B52C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 15:32:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:be:45:2a:6c:d7:16:32:af:ed:65:71:ba:27:9d:41:ad:c1:c3:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296992941BF10D571CBDC8A16F88FF51FAD9B52C
Validity
Not Before: Sep 30 19:00:39 2025 GMT
Not After : Sep 29 19:05:39 2026 GMT
Subject: CN=0CDF6E9DAD9686ED1767B6E58B4F8831749AF753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:36:e5:76:ec:f0:7f:4c:3e:10:47:3a:82:f2:
e4:63:77:6b:98:5b:28:fe:10:42:92:de:d4:da:89:
36:04:e7:66:4e:2c:2a:bd:68:6e:75:81:98:35:06:
c8:26:9e:91:0a:21:dc:d5:48:40:d7:e6:23:20:ce:
ad:29:af:7a:d4:0b:15:9e:0b:12:e1:d0:61:0a:16:
4a:2a:d9:28:a8:e0:df:22:72:12:8b:a5:ba:0e:d7:
e9:41:5c:7b:32:a4:15:d5:4c:95:d7:90:e4:66:38:
04:3a:72:e6:ab:ef:14:ed:6d:a5:3c:f2:fa:e0:9f:
8b:72:3c:d4:26:b7:f5:39:5f:83:b7:00:15:ff:3a:
37:0f:a4:9a:68:f0:ca:6d:a0:84:96:8b:9d:97:ed:
42:17:25:f0:66:76:27:1b:9a:17:6c:88:68:3c:5b:
c2:aa:59:f0:1a:b4:bf:7c:ad:2f:94:91:d6:a3:5a:
f1:ec:75:6f:97:95:25:eb:2b:0d:60:ec:d1:07:3b:
41:cc:96:06:f0:a3:9b:45:2b:33:ff:8a:0d:8b:1c:
b3:0c:3e:81:9c:f5:7f:f9:73:f4:83:89:47:7b:c1:
6c:3c:18:ec:99:04:0d:57:30:4c:f5:4f:ef:0b:73:
dc:37:34:a8:fb:ae:d3:13:d7:66:8f:7b:e8:26:08:
ea:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:DF:6E:9D:AD:96:86:ED:17:67:B6:E5:8B:4F:88:31:74:9A:F7:53
X509v3 Authority Key Identifier:
keyid:29:69:92:94:1B:F1:0D:57:1C:BD:C8:A1:6F:88:FF:51:FA:D9:B5:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/296992941BF10D571CBDC8A16F88FF51FAD9B52C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296992941BF10D571CBDC8A16F88FF51FAD9B52C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/34352e3136372e32392e302f32342d3234203d3e20323637393832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.167.29.0/24
Signature Algorithm: sha256WithRSAEncryption
03:86:bd:af:04:33:54:1c:34:3d:5c:47:a1:26:f1:b4:3d:58:
38:09:44:6a:d1:63:24:2b:0e:b9:34:cb:a4:91:79:03:5d:a6:
7c:98:eb:b4:3d:53:bc:0c:db:09:2b:65:91:5b:e0:a0:5f:f9:
37:4d:41:17:ec:20:67:6c:07:9d:82:e4:04:f7:e6:1f:29:11:
57:e7:98:4b:db:1d:ce:4a:c8:47:9c:7b:35:dd:5d:80:6f:33:
04:1c:5e:14:d0:99:66:c2:c0:49:8f:44:0a:06:d1:68:a4:34:
15:32:f4:e0:f9:6e:26:42:1e:54:61:fb:33:e1:c4:66:b1:2a:
0a:0d:7b:08:99:ad:a1:48:ac:9e:54:dc:6d:70:da:84:84:c3:
12:e5:d1:2c:b3:98:8a:00:e4:31:0c:b1:e5:da:32:02:98:18:
03:e8:36:38:f2:50:b5:fc:3d:39:66:43:24:fb:03:b3:5a:1f:
5e:be:40:04:1d:4b:03:9f:98:3c:98:70:3f:7a:7d:55:80:89:
22:f9:ce:7e:b6:fa:7b:de:52:73:f2:18:a4:83:55:94:cd:2f:
6c:67:69:1d:56:12:36:fd:5b:67:47:42:b1:28:bd:44:c1:3e:
e7:f5:8a:ac:67:ed:11:04:78:00:52:15:2f:2d:8e:04:0d:5f:
7c:09:05:a1
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUc75FKmzXFjKv7WVxuiedQa3Bw+YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjk2OTkyOTQxQkYxMEQ1NzFDQkRDOEExNkY4OEZGNTFG
QUQ5QjUyQzAeFw0yNTA5MzAxOTAwMzlaFw0yNjA5MjkxOTA1MzlaMDMxMTAvBgNV
BAMTKDBDREY2RTlEQUQ5Njg2RUQxNzY3QjZFNThCNEY4ODMxNzQ5QUY3NTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2NuV27PB/TD4QRzqC8uRjd2uY
Wyj+EEKS3tTaiTYE52ZOLCq9aG51gZg1BsgmnpEKIdzVSEDX5iMgzq0pr3rUCxWe
CxLh0GEKFkoq2Sio4N8ichKLpboO1+lBXHsypBXVTJXXkORmOAQ6cuar7xTtbaU8
8vrgn4tyPNQmt/U5X4O3ABX/OjcPpJpo8MptoISWi52X7UIXJfBmdicbmhdsiGg8
W8KqWfAatL98rS+UkdajWvHsdW+XlSXrKw1g7NEHO0HMlgbwo5tFKzP/ig2LHLMM
PoGc9X/5c/SDiUd7wWw8GOyZBA1XMEz1T+8Lc9w3NKj7rtMT12aPe+gmCOrTAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUDN9una2Whu0XZ7bli0+IMXSa91MwHwYDVR0j
BBgwFoAUKWmSlBvxDVccvcihb4j/UfrZtSwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2RwRm9lYThrUVlaakpoUnJ2V2syODU3WDhMOFRjWnJmWm9iSGVZYWZa
SzMvMC8yOTY5OTI5NDFCRjEwRDU3MUNCREM4QTE2Rjg4RkY1MUZBRDlCNTJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5Njk5Mjk0MUJGMTBENTcx
Q0JEQzhBMTZGODhGRjUxRkFEOUI1MkMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NkcEZvZWE4a1FZWmpKaFJydldrMjg1N1g4TDhUY1pyZlpvYkhlWWFmWkszLzAv
MzQzNTJlMzEzNjM3MmUzMjM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzkzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALacdMA0GCSqGSIb3DQEBCwUAA4IBAQADhr2vBDNU
HDQ9XEehJvG0PVg4CURq0WMkKw65NMukkXkDXaZ8mOu0PVO8DNsJK2WRW+CgX/k3
TUEX7CBnbAedguQE9+YfKRFX55hL2x3OSshHnHs13V2AbzMEHF4U0JlmwsBJj0QK
BtFopDQVMvTg+W4mQh5UYfsz4cRmsSoKDXsIma2hSKyeVNxtcNqEhMMS5dEss5iK
AOQxDLHl2jICmBgD6DY48lC1/D05ZkMk+wOzWh9evkAEHUsDn5g8mHA/en1VgIki
+c5+tvp73lJz8hikg1WUzS9sZ2kdVhI2/VtnR0KxKL1EwT7n9YqsZ+0RBHgAUhUv
LY4EDV98CQWh
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:09:00 2025 by rpki-client