
$ rpki-client -vvf rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/34352e362e3132352e302f32342d3234203d3e20323733353830.roa
File: 34352e362e3132352e302f32342d3234203d3e20323733353830.roa (raw, json)
Hash identifier: TpvF5oqSkrGxnTMhdxI4tcAKkxjmIAt6VQCAJ7ZT3mU=
Subject key identifier: 9E:D3:5B:89:B1:45:32:B9:30:EB:AD:AD:9C:8A:20:75:2A:97:62:ED
Certificate issuer: /CN=1209D9C857F463458E737B2E278969D81C4F384A
Certificate serial: 36F8E0AE843B3F6EACD076609D971AFEFA0E6DA6
Authority key identifier: 12:09:D9:C8:57:F4:63:45:8E:73:7B:2E:27:89:69:D8:1C:4F:38:4A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1209D9C857F463458E737B2E278969D81C4F384A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/34352e362e3132352e302f32342d3234203d3e20323733353830.roa
Signing time: Sun 02 Nov 2025 04:04:31 +0000
ROA not before: Sun 02 Nov 2025 03:59:31 +0000
ROA not after: Sun 01 Nov 2026 04:04:31 +0000
asID: 273580
IP address blocks: 45.6.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/1209D9C857F463458E737B2E278969D81C4F384A.crl
rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/1209D9C857F463458E737B2E278969D81C4F384A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1209D9C857F463458E737B2E278969D81C4F384A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 07:10:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:f8:e0:ae:84:3b:3f:6e:ac:d0:76:60:9d:97:1a:fe:fa:0e:6d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1209D9C857F463458E737B2E278969D81C4F384A
Validity
Not Before: Nov 2 03:59:31 2025 GMT
Not After : Nov 1 04:04:31 2026 GMT
Subject: CN=9ED35B89B14532B930EBADAD9C8A20752A9762ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3e:31:4b:f4:bd:77:5b:41:35:7d:dd:9d:3b:
de:c3:c0:e8:00:bc:55:e4:6d:aa:5b:78:64:ae:76:
10:6c:84:99:6f:ac:68:f5:8b:6e:40:18:56:78:fc:
af:44:fc:78:c1:15:3a:a7:90:70:92:3b:ff:36:0b:
f6:35:67:3f:41:62:4b:d1:99:57:e5:1f:ee:74:9a:
1d:63:c4:09:18:55:ac:69:3f:f0:77:22:2c:e8:93:
3e:bb:aa:69:fc:94:e7:27:85:4d:a7:d6:c4:ee:32:
b0:ec:55:52:ef:27:df:ea:c8:a0:fb:4a:38:34:cf:
db:52:64:8a:9c:b6:73:1c:43:18:da:87:85:c6:e5:
db:89:8f:4c:35:6b:0a:8e:e2:1f:de:9b:d7:33:9b:
34:c6:02:88:b1:98:11:76:8e:b6:9c:dc:bb:91:de:
33:06:e7:e9:ae:1a:f0:41:90:b7:3b:ad:9b:2b:c2:
4b:23:9c:0f:cf:c5:b9:72:c3:d1:99:5a:79:b3:2a:
6a:cb:a8:7f:83:d2:59:c6:f2:f4:c6:ee:59:0c:a6:
67:35:9d:97:4d:e6:6f:91:15:6c:ac:94:16:38:6a:
dc:c1:0b:ef:41:f6:f8:12:f3:2e:2a:20:ee:c7:a1:
df:11:f7:8f:5f:a7:89:a3:93:fa:69:c4:6c:e6:4f:
d7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D3:5B:89:B1:45:32:B9:30:EB:AD:AD:9C:8A:20:75:2A:97:62:ED
X509v3 Authority Key Identifier:
keyid:12:09:D9:C8:57:F4:63:45:8E:73:7B:2E:27:89:69:D8:1C:4F:38:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/1209D9C857F463458E737B2E278969D81C4F384A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1209D9C857F463458E737B2E278969D81C4F384A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/34352e362e3132352e302f32342d3234203d3e20323733353830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.6.125.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:4f:3b:3b:1d:61:b8:1f:26:88:ef:31:1a:2a:a2:21:ed:32:
82:d9:a8:64:55:76:c4:98:b5:01:19:44:9d:0f:69:21:80:2f:
1c:75:37:c1:a3:1a:d2:0c:e1:4c:99:f5:7d:b5:74:4f:57:7d:
75:0a:f2:37:bc:5c:4a:cb:4c:8b:6b:a2:d6:94:41:a5:5b:99:
4d:b8:00:53:17:64:ee:36:b6:91:87:5b:dd:6a:97:c5:61:8e:
e4:5d:60:40:75:93:f1:36:03:ff:19:46:47:43:6c:5d:ac:ca:
f1:d0:60:69:41:7f:0c:59:26:2e:20:d2:7f:fe:f3:88:5d:3f:
b9:86:b6:09:c7:1e:c4:03:a6:af:0b:2c:9f:d3:53:81:9b:b9:
ed:2c:81:fb:c5:bb:13:7d:90:d1:23:f0:46:14:66:8a:40:13:
d5:68:54:f1:47:9d:13:4d:ba:97:d8:75:95:80:d9:10:a2:ed:
2f:1b:1c:f3:fd:12:f9:90:7e:c1:63:aa:e1:71:e2:a7:60:91:
4d:de:e3:3c:d1:13:bc:22:e5:2c:85:a6:bd:38:66:7e:f0:39:
e5:af:98:98:dd:ce:8a:81:03:2a:97:52:90:f3:93:c0:a6:76:
ff:14:ae:e1:a2:e1:7a:01:c2:b1:f9:58:92:97:d9:f1:f2:5b:
24:68:81:af
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUNvjgroQ7P26s0HZgnZca/voObaYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTIwOUQ5Qzg1N0Y0NjM0NThFNzM3QjJFMjc4OTY5RDgx
QzRGMzg0QTAeFw0yNTExMDIwMzU5MzFaFw0yNjExMDEwNDA0MzFaMDMxMTAvBgNV
BAMTKDlFRDM1Qjg5QjE0NTMyQjkzMEVCQURBRDlDOEEyMDc1MkE5NzYyRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcPjFL9L13W0E1fd2dO97DwOgA
vFXkbapbeGSudhBshJlvrGj1i25AGFZ4/K9E/HjBFTqnkHCSO/82C/Y1Zz9BYkvR
mVflH+50mh1jxAkYVaxpP/B3Iizokz67qmn8lOcnhU2n1sTuMrDsVVLvJ9/qyKD7
Sjg0z9tSZIqctnMcQxjah4XG5duJj0w1awqO4h/em9czmzTGAoixmBF2jrac3LuR
3jMG5+muGvBBkLc7rZsrwksjnA/Pxblyw9GZWnmzKmrLqH+D0lnG8vTG7lkMpmc1
nZdN5m+RFWyslBY4atzBC+9B9vgS8y4qIO7Hod8R949fp4mjk/ppxGzmT9e5AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUntNbibFFMrkw662tnIogdSqXYu0wHwYDVR0j
BBgwFoAUEgnZyFf0Y0WOc3suJ4lp2BxPOEowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGF1emZBZkxoZHpaVnJQVTdWTDdNVVBjV2NTNzNEWmNHYTlCcURpd0th
M3UvMC8xMjA5RDlDODU3RjQ2MzQ1OEU3MzdCMkUyNzg5NjlEODFDNEYzODRBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEyMDlEOUM4NTdGNDYzNDU4
RTczN0IyRTI3ODk2OUQ4MUM0RjM4NEEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hhdXpmQWZMaGR6WlZyUFU3Vkw3TVVQY1djUzczRFpjR2E5QnFEaXdLYTN1LzAv
MzQzNTJlMzYyZTMxMzIzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMzM1
MzgzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAC0GfTANBgkqhkiG9w0BAQsFAAOCAQEAmk87Ox1huB8m
iO8xGiqiIe0ygtmoZFV2xJi1ARlEnQ9pIYAvHHU3waMa0gzhTJn1fbV0T1d9dQry
N7xcSstMi2ui1pRBpVuZTbgAUxdk7ja2kYdb3WqXxWGO5F1gQHWT8TYD/xlGR0Ns
XazK8dBgaUF/DFkmLiDSf/7ziF0/uYa2CccexAOmrwssn9NTgZu57SyB+8W7E32Q
0SPwRhRmikAT1WhU8UedE026l9h1lYDZEKLtLxsc8/0S+ZB+wWOq4XHip2CRTd7j
PNETvCLlLIWmvThmfvA55a+YmN3OioEDKpdSkPOTwKZ2/xSu4aLhegHCsflYkpfZ
8fJbJGiBrw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 17:16:58 2025 by rpki-client