
$ rpki-client -vvf rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/34352e3233362e31302e302f32342d3234203d3e20323638323133.roa
File: 34352e3233362e31302e302f32342d3234203d3e20323638323133.roa (raw, json)
Hash identifier: Hfp1DucUOLGX558iN8StPvuFHGp7CQRLaXSkygAZbFQ=
Subject key identifier: 4F:BC:12:4E:7E:56:E6:26:3F:5B:58:66:A5:28:24:7C:DD:97:0F:05
Certificate issuer: /CN=C3254EFA5C4E9FDA6768D0294247DF70DABBEF22
Certificate serial: 3314EDBC5F31697C73FC03892277F944F45EC584
Authority key identifier: C3:25:4E:FA:5C:4E:9F:DA:67:68:D0:29:42:47:DF:70:DA:BB:EF:22
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.cer
Subject info access: rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/34352e3233362e31302e302f32342d3234203d3e20323638323133.roa
Signing time: Fri 10 Oct 2025 19:01:40 +0000
ROA not before: Fri 10 Oct 2025 18:56:40 +0000
ROA not after: Fri 09 Oct 2026 19:01:40 +0000
asID: 268213
IP address blocks: 45.236.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.crl
rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 06:37:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:14:ed:bc:5f:31:69:7c:73:fc:03:89:22:77:f9:44:f4:5e:c5:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3254EFA5C4E9FDA6768D0294247DF70DABBEF22
Validity
Not Before: Oct 10 18:56:40 2025 GMT
Not After : Oct 9 19:01:40 2026 GMT
Subject: CN=4FBC124E7E56E6263F5B5866A528247CDD970F05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:42:2b:ed:8e:a9:70:62:a8:4f:b9:9c:4c:d3:
92:b9:2e:86:73:cc:da:dc:48:b2:45:75:fe:e6:6b:
67:ce:79:2e:08:ee:b6:92:6c:18:0e:ad:12:9a:8a:
df:b8:be:12:b7:23:33:c5:2a:79:d2:58:3a:3e:d3:
65:d3:29:69:82:32:3c:85:c4:22:ab:1f:29:1c:91:
a4:34:9a:74:85:ab:18:4d:16:ea:7a:88:c3:3a:0f:
b0:0d:d2:e0:a1:74:b0:0f:b6:9b:31:52:ef:3b:fe:
10:7c:4a:db:f1:b7:b2:68:70:ee:e1:de:b0:b5:ed:
4a:50:da:92:35:56:14:d8:64:e4:c2:11:2c:95:4e:
d6:1c:73:0b:25:c7:94:6c:5a:bd:c7:74:0f:d7:74:
f5:3b:27:b6:3e:28:c2:96:cc:14:d6:60:06:50:57:
47:97:aa:b9:ab:3d:a7:6f:cf:7b:51:d3:5c:ee:97:
60:e5:6f:5e:98:2a:61:f5:67:fb:6b:d2:ff:57:d1:
a4:08:04:b9:85:7b:f2:9c:ca:f3:b4:35:1e:d0:40:
7f:66:03:b1:bb:34:6e:b9:13:cc:fe:6a:d5:b9:45:
0c:3c:64:52:18:c4:6c:bd:30:7b:4a:a3:6f:a6:a3:
bc:f9:3d:da:be:43:b9:98:96:30:e1:92:27:05:ed:
e0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:BC:12:4E:7E:56:E6:26:3F:5B:58:66:A5:28:24:7C:DD:97:0F:05
X509v3 Authority Key Identifier:
keyid:C3:25:4E:FA:5C:4E:9F:DA:67:68:D0:29:42:47:DF:70:DA:BB:EF:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/34352e3233362e31302e302f32342d3234203d3e20323638323133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.236.10.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:b6:c1:e8:1f:b2:0c:f5:2b:3c:bf:9c:95:73:de:6c:36:a6:
a2:e7:fa:6c:7e:0e:60:86:c4:6a:83:8a:4b:0e:63:6b:80:b0:
44:1c:85:62:2a:ed:08:ed:34:52:de:de:e8:f0:01:eb:33:d7:
82:0c:09:92:a2:9f:e6:f4:96:c6:0e:47:5c:90:90:df:73:79:
09:87:8e:18:72:6b:13:35:53:b0:98:55:e5:cb:d7:2c:b8:58:
be:7c:a2:4d:9a:2a:f2:2c:f4:ac:8a:a8:47:fb:ec:fa:8a:70:
e8:8c:65:b6:6f:72:65:87:85:9e:1e:85:bd:b7:d7:05:0c:f7:
e1:1a:6d:2d:59:f6:46:2b:6e:d9:ba:e0:d4:3e:78:79:c9:82:
b3:c6:00:40:a0:27:55:fb:4e:41:4a:bc:9d:3c:f3:cf:80:a2:
d0:0f:c1:03:3f:96:eb:80:05:2d:fe:49:1f:8b:91:85:25:22:
54:99:be:54:e4:51:a6:4d:eb:37:79:8e:fd:8d:ae:df:8f:eb:
0f:7b:e9:2a:1b:15:74:e9:33:c1:10:37:ff:93:5c:a5:8f:c2:
c1:8a:17:f9:35:a0:de:dd:f3:07:22:a2:af:41:ac:84:a6:a4:
29:e0:4c:d9:b4:7e:f2:f1:06:93:68:29:c2:68:e0:07:b1:89:
d9:72:39:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:27:51 2025 by rpki-client