
$ rpki-client -vvf rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/34352e372e34332e302f32342d3234203d3e20323636353635.roa
File: 34352e372e34332e302f32342d3234203d3e20323636353635.roa (raw, json)
Hash identifier: FTs0xVsYxIuX8GPJf6xe1XeWm70/IBxfRVc5dFakbxY=
Subject key identifier: D7:17:0D:29:64:39:4F:85:C4:B4:FE:17:65:DE:28:68:10:40:D8:00
Certificate issuer: /CN=8D2922D358225395ABA691BA6723BAA778294D49
Certificate serial: 208027100D7F50A976CCA34975C5736485783EED
Authority key identifier: 8D:29:22:D3:58:22:53:95:AB:A6:91:BA:67:23:BA:A7:78:29:4D:49
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D2922D358225395ABA691BA6723BAA778294D49.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/34352e372e34332e302f32342d3234203d3e20323636353635.roa
Signing time: Sat 19 Jul 2025 02:12:55 +0000
ROA not before: Sat 19 Jul 2025 02:07:55 +0000
ROA not after: Sat 18 Jul 2026 02:12:55 +0000
asID: 266565
IP address blocks: 45.7.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/8D2922D358225395ABA691BA6723BAA778294D49.crl
rsync://rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/8D2922D358225395ABA691BA6723BAA778294D49.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D2922D358225395ABA691BA6723BAA778294D49.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 21:23:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:80:27:10:0d:7f:50:a9:76:cc:a3:49:75:c5:73:64:85:78:3e:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D2922D358225395ABA691BA6723BAA778294D49
Validity
Not Before: Jul 19 02:07:55 2025 GMT
Not After : Jul 18 02:12:55 2026 GMT
Subject: CN=D7170D2964394F85C4B4FE1765DE28681040D800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0c:d7:90:18:81:83:cb:ac:13:7d:f5:5b:75:
27:b6:23:a8:8f:bb:33:da:30:87:7a:07:8a:66:9a:
7d:97:47:13:19:9e:4c:49:43:25:68:7a:e7:07:74:
2d:c1:41:71:5f:91:f4:57:4c:36:47:b4:fa:ef:32:
b6:ca:bb:8e:98:a1:7c:35:eb:43:b3:1a:cf:fd:4d:
7b:70:ea:9c:48:58:7d:1d:59:4b:3c:e5:7e:d9:72:
7a:fd:95:df:37:3d:bb:09:e7:73:ba:87:35:30:db:
9b:44:59:3b:87:ed:b9:6a:eb:28:df:50:1f:c2:f1:
8c:79:db:81:b4:5e:ee:d5:73:01:04:00:de:6e:45:
30:d5:53:db:e0:59:17:52:ca:07:e2:a1:32:fc:89:
a6:79:8e:d2:55:68:5d:91:78:76:13:97:ea:aa:55:
31:1b:23:7c:46:2f:e8:67:8b:eb:6b:71:cc:eb:f8:
f1:7f:00:7c:1a:d4:4a:10:46:55:3d:f9:94:1d:66:
44:80:34:32:0c:42:c3:57:ae:aa:65:94:bf:98:6d:
27:b0:a3:08:f2:1d:c5:1a:00:a9:43:1c:36:71:25:
48:02:6b:21:ad:39:81:9d:e9:58:98:ac:d5:42:a2:
6e:72:10:87:d7:94:68:0b:31:be:97:1f:2d:e3:a4:
b5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:17:0D:29:64:39:4F:85:C4:B4:FE:17:65:DE:28:68:10:40:D8:00
X509v3 Authority Key Identifier:
keyid:8D:29:22:D3:58:22:53:95:AB:A6:91:BA:67:23:BA:A7:78:29:4D:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/8D2922D358225395ABA691BA6723BAA778294D49.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D2922D358225395ABA691BA6723BAA778294D49.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/34352e372e34332e302f32342d3234203d3e20323636353635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.7.43.0/24
Signature Algorithm: sha256WithRSAEncryption
09:8d:48:6c:bb:5d:57:7e:49:be:f8:c4:93:1c:4f:a5:b1:90:
da:3d:64:f0:bd:99:73:c6:8a:6e:6d:67:94:78:7a:08:19:99:
ec:76:76:68:8c:c7:df:fb:ca:2d:50:1a:f9:2d:0b:0f:41:0b:
c0:b6:6c:57:8f:55:da:77:46:c7:e2:f4:65:03:fc:e7:e5:c6:
3f:3e:da:d9:78:21:60:71:4b:6e:b6:e7:92:59:bb:95:aa:17:
ca:ad:19:dc:10:63:03:39:90:e5:48:f8:2c:b1:9b:92:95:a3:
2e:64:e1:d1:e3:b4:23:dc:6c:1a:c4:0e:91:6a:c8:8e:84:81:
03:de:2d:b7:86:38:ab:13:7b:c3:96:b9:cb:cc:d7:5e:fd:bb:
ce:10:5b:99:73:5f:88:1d:d4:13:6a:44:4f:1e:4e:10:41:5e:
1c:fc:67:c4:9f:e4:a1:c7:32:33:76:9b:f0:20:1c:c8:30:54:
07:d1:77:94:a3:04:f4:ea:48:70:f6:fd:e7:18:ca:50:7a:ee:
5f:70:91:88:87:0d:15:57:54:1e:19:b8:59:b4:eb:dc:41:d0:
2e:67:40:c4:33:72:6f:d9:bf:72:db:d7:d4:28:71:43:05:6f:
7e:37:88:73:e6:17:0a:d5:d8:38:c4:3b:4e:1e:b1:08:32:8f:
43:8b:ab:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:44:34 2025 by rpki-client