
$ rpki-client -vvf rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/34352e3136342e3232302e302f32322d3332203d3e20323638363638.roa
File: 34352e3136342e3232302e302f32322d3332203d3e20323638363638.roa (raw, json)
Hash identifier: Fe3slJe0kAz3P+lnt9VNZRIbJY9aNCulq95Hm/heJSI=
Subject key identifier: 15:50:50:22:5E:FE:2D:4C:BE:31:48:D4:F5:9B:77:14:C8:C1:F1:88
Certificate issuer: /CN=2FF3BD981631E49037509A952007559286688690
Certificate serial: 0D7FF169376CAB5D1587CF71BCC9009445ADE337
Authority key identifier: 2F:F3:BD:98:16:31:E4:90:37:50:9A:95:20:07:55:92:86:68:86:90
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FF3BD981631E49037509A952007559286688690.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/34352e3136342e3232302e302f32322d3332203d3e20323638363638.roa
Signing time: Mon 26 May 2025 13:39:06 +0000
ROA not before: Mon 26 May 2025 13:34:06 +0000
ROA not after: Mon 25 May 2026 13:39:06 +0000
asID: 268668
IP address blocks: 45.164.220.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/2FF3BD981631E49037509A952007559286688690.crl
rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/2FF3BD981631E49037509A952007559286688690.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FF3BD981631E49037509A952007559286688690.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 07:12:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:7f:f1:69:37:6c:ab:5d:15:87:cf:71:bc:c9:00:94:45:ad:e3:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FF3BD981631E49037509A952007559286688690
Validity
Not Before: May 26 13:34:06 2025 GMT
Not After : May 25 13:39:06 2026 GMT
Subject: CN=155050225EFE2D4CBE3148D4F59B7714C8C1F188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:11:62:27:35:19:75:82:fd:3f:b5:68:14:55:
a6:0c:01:f0:0c:40:85:32:6e:4f:f5:2b:66:04:55:
32:db:f2:03:4d:96:d7:d4:a4:a8:69:4f:05:29:61:
d9:d5:0a:1e:85:bb:65:84:2d:46:82:c8:c4:63:08:
b6:d6:15:1d:40:22:bd:89:56:24:59:02:84:6a:dc:
fe:2d:3b:c6:6e:7c:fe:e9:f9:43:43:64:92:22:97:
f1:c6:fa:40:16:7c:dc:78:7e:8a:67:98:b0:f6:78:
3f:d3:e6:d7:7f:c3:12:90:4e:ad:57:d2:ea:28:a5:
54:65:3e:ed:91:c4:03:0a:2f:cf:1a:23:2d:4e:1d:
f9:5e:49:c5:31:79:3a:51:13:81:58:f7:b6:b7:d3:
62:f2:81:19:91:0f:b5:8c:93:6e:03:98:45:e8:15:
9c:4a:b7:8b:eb:3b:46:bf:22:27:2f:6d:ee:d4:54:
e3:4a:7a:42:01:b4:44:1d:90:23:bc:74:c4:0d:6f:
17:7b:e3:a1:07:85:e0:19:15:24:24:5a:c0:5f:e9:
ee:c9:2a:57:b3:5d:10:7c:61:11:50:32:1c:20:15:
24:e4:ac:f4:a5:24:16:54:f0:b8:04:55:d0:ac:81:
cb:25:8e:6c:a7:dd:6c:dd:cc:d2:1e:c0:5c:a8:f3:
92:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:50:50:22:5E:FE:2D:4C:BE:31:48:D4:F5:9B:77:14:C8:C1:F1:88
X509v3 Authority Key Identifier:
keyid:2F:F3:BD:98:16:31:E4:90:37:50:9A:95:20:07:55:92:86:68:86:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/2FF3BD981631E49037509A952007559286688690.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FF3BD981631E49037509A952007559286688690.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/34352e3136342e3232302e302f32322d3332203d3e20323638363638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.164.220.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:a9:85:cd:5e:15:1b:a5:24:2a:5e:67:eb:50:df:2c:d1:a1:
a2:51:43:ec:db:49:8c:7e:50:38:e0:04:16:04:82:c3:e0:5e:
f7:72:cc:81:f6:4d:80:83:6e:c5:1d:ba:30:92:13:ef:55:85:
9d:7c:d1:58:f1:79:5a:9e:b5:7b:12:75:74:03:cb:47:93:8d:
9a:a2:75:70:d5:2a:cb:62:eb:5a:cb:4d:9c:b2:4a:18:72:2a:
2d:73:b7:cc:6e:b9:5b:ad:17:4c:3f:a6:9c:2d:52:7a:b6:3e:
32:f3:16:aa:c2:b8:fa:60:cd:41:75:a1:5f:a6:6a:2b:d4:66:
72:ee:19:22:97:b2:fe:59:fd:1e:d3:8d:64:a9:d9:b2:c4:14:
be:86:ce:6b:4d:5d:0a:3d:73:d2:18:0b:d2:1e:80:29:02:cb:
9b:60:fd:a5:28:b0:9f:ec:70:38:39:ef:bf:c6:0c:04:57:5b:
82:ca:28:38:a6:f5:9e:03:33:05:00:48:43:9e:bf:eb:7d:ce:
e1:e3:6c:0f:bd:5a:fd:dd:b5:86:7e:4b:03:8d:c8:79:43:ba:
d6:04:ab:9f:ad:b2:3c:cc:d3:fd:aa:eb:8a:7e:ef:a9:e3:6f:
a2:98:c5:ee:20:90:b7:43:91:51:f1:7c:ed:61:ed:2b:7d:ca:
b5:bb:91:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:47:52 2025 by rpki-client