
$ rpki-client -vvf rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/3139322e3134302e38352e302f32342d3234203d3e20323731313131.roa
File: 3139322e3134302e38352e302f32342d3234203d3e20323731313131.roa (raw, json)
Hash identifier: FWZ3ripVTBysTD64be5SCnjZettB/hGaEup19vCH8Wg=
Subject key identifier: 2F:C7:59:1B:0E:58:8E:72:05:C4:A4:9B:EE:64:D1:7A:FB:8F:F9:66
Certificate issuer: /CN=AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0
Certificate serial: 145B6DD8FC0C6144ADF67C2B77ADC09A9E0E8CEA
Authority key identifier: AE:25:EE:F7:E6:EE:89:4C:19:7D:BD:78:37:CB:3C:05:DF:B9:E8:E0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/3139322e3134302e38352e302f32342d3234203d3e20323731313131.roa
Signing time: Wed 10 Sep 2025 12:35:01 +0000
ROA not before: Wed 10 Sep 2025 12:30:01 +0000
ROA not after: Wed 09 Sep 2026 12:35:01 +0000
asID: 271111
IP address blocks: 192.140.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.crl
rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 21:33:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:5b:6d:d8:fc:0c:61:44:ad:f6:7c:2b:77:ad:c0:9a:9e:0e:8c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0
Validity
Not Before: Sep 10 12:30:01 2025 GMT
Not After : Sep 9 12:35:01 2026 GMT
Subject: CN=2FC7591B0E588E7205C4A49BEE64D17AFB8FF966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fa:0d:4e:1f:e1:3b:4c:27:b5:5b:a6:30:42:
c6:53:0b:d3:f2:26:f3:2e:8f:5a:a8:f0:0a:01:9e:
0a:7e:3c:aa:fe:22:8a:5c:a2:71:0e:4b:4d:b8:12:
82:75:1d:d0:c2:fe:87:18:91:3b:77:f6:2f:72:4d:
96:d8:58:c4:fe:97:de:47:61:f6:30:c6:ee:07:cf:
c7:05:26:39:7f:a2:f3:0e:a4:b2:f1:92:3b:b9:04:
c9:13:92:1b:d8:8b:ae:9a:0a:b5:63:53:f2:10:b2:
e0:f5:c0:be:b6:28:52:3f:2b:dc:f2:81:5d:6d:d5:
c7:02:45:61:a1:e9:64:df:a2:3e:dc:38:4a:59:e9:
c3:73:2c:3b:9d:f2:99:2e:c5:a7:68:27:52:cb:d0:
b9:2a:4f:da:15:c9:4c:42:cb:dc:e7:43:cb:10:2b:
76:bc:22:2d:2a:32:6e:3f:79:51:07:48:37:ba:7a:
5b:94:58:52:41:63:0e:4e:ce:77:e1:70:cf:5b:9a:
58:c2:9e:f5:22:09:45:12:ed:7e:60:6e:43:fa:88:
c9:dd:d9:2c:4c:c7:5e:82:cf:26:be:fd:74:07:6e:
31:cc:95:72:f8:fb:95:d9:0d:d5:7e:b7:70:2c:05:
1c:42:5d:c9:f1:8f:b2:5b:03:4a:1b:28:d7:fb:3c:
fe:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C7:59:1B:0E:58:8E:72:05:C4:A4:9B:EE:64:D1:7A:FB:8F:F9:66
X509v3 Authority Key Identifier:
keyid:AE:25:EE:F7:E6:EE:89:4C:19:7D:BD:78:37:CB:3C:05:DF:B9:E8:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/3139322e3134302e38352e302f32342d3234203d3e20323731313131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.140.85.0/24
Signature Algorithm: sha256WithRSAEncryption
af:97:a5:0a:15:5e:95:9e:15:a7:29:9d:30:77:dc:44:1b:b9:
82:88:0c:4b:d8:78:e2:db:25:f6:67:bd:ad:c2:8b:1a:d3:2c:
e1:fe:9d:c9:f0:8f:51:4f:9a:a8:64:87:84:d5:cb:45:25:9a:
ce:91:89:09:a9:ad:4e:5a:f9:34:f0:05:68:84:5c:f4:7e:7c:
d9:57:b2:da:ae:16:de:c0:c4:5a:4a:07:fe:8b:c8:56:88:dc:
83:3b:c0:89:d5:f8:4d:34:32:7f:45:45:56:52:a1:1a:ac:ed:
7e:23:d7:dc:42:2f:a5:d7:58:f7:9a:48:d1:23:8e:b4:9c:de:
04:22:d4:5a:8f:65:43:91:cc:c0:dc:88:19:a5:54:6b:1f:21:
52:00:cd:f9:b1:3e:3e:85:4e:ee:3e:e6:04:c7:3d:e9:41:d4:
e9:9d:c1:b7:7d:04:ac:85:e7:b2:0b:fb:e1:c1:29:61:51:85:
a5:81:85:d7:26:4d:5b:65:96:0e:70:93:39:e9:fa:41:4c:e5:
77:2e:d3:16:32:56:e9:db:83:f4:23:57:fb:6e:67:b5:33:47:
3e:3f:f3:f5:4f:35:43:0c:b8:4d:ee:06:08:b4:0b:f2:5b:2e:
be:dd:2a:a0:a2:76:e0:9b:fe:16:9c:de:9a:7b:bb:52:94:8d:
90:68:ba:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:10:50 2025 by rpki-client