
$ rpki-client -vvf rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/34352e3233362e382e302f32342d3234203d3e20323638323133.roa
File: 34352e3233362e382e302f32342d3234203d3e20323638323133.roa (raw, json)
Hash identifier: ctFV3kPNJK3bV9B3MLschItzKM1ihhzRapNYYOJyJ2c=
Subject key identifier: 5B:6C:BD:4D:3B:F4:2F:5E:25:FB:B3:11:79:79:1D:D3:DA:FB:CC:E8
Certificate issuer: /CN=C3254EFA5C4E9FDA6768D0294247DF70DABBEF22
Certificate serial: 34ACCA0324CE65A554BDA8E54D1790CCDBF1ADDD
Authority key identifier: C3:25:4E:FA:5C:4E:9F:DA:67:68:D0:29:42:47:DF:70:DA:BB:EF:22
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.cer
Subject info access: rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/34352e3233362e382e302f32342d3234203d3e20323638323133.roa
Signing time: Fri 10 Oct 2025 19:01:40 +0000
ROA not before: Fri 10 Oct 2025 18:56:40 +0000
ROA not after: Fri 09 Oct 2026 19:01:40 +0000
asID: 268213
IP address blocks: 45.236.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.crl
rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 06:37:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:ac:ca:03:24:ce:65:a5:54:bd:a8:e5:4d:17:90:cc:db:f1:ad:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3254EFA5C4E9FDA6768D0294247DF70DABBEF22
Validity
Not Before: Oct 10 18:56:40 2025 GMT
Not After : Oct 9 19:01:40 2026 GMT
Subject: CN=5B6CBD4D3BF42F5E25FBB31179791DD3DAFBCCE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7b:87:52:49:1e:35:4b:ec:77:e3:b9:50:d6:
69:4a:16:a1:7c:75:d8:ae:60:96:bf:2d:a3:69:0c:
18:e4:2a:78:ff:b3:ad:58:66:a2:35:d5:f9:bc:20:
9f:36:ff:5b:71:40:24:f2:20:cc:70:79:74:32:fa:
81:32:74:54:6e:35:4a:fa:e4:51:4f:9a:11:0b:59:
00:02:35:18:08:7e:ff:fd:e7:b7:6d:d8:67:a5:a2:
3c:a9:f1:b1:7b:3c:b6:46:3c:58:95:e4:13:95:39:
34:69:05:7f:d8:6e:de:93:6a:4d:f5:57:1f:cd:d2:
c5:2b:9a:0f:ad:33:19:d3:44:b0:f4:73:64:ae:30:
49:ec:a1:f2:d9:57:20:90:10:97:ef:63:60:1d:6e:
0b:f5:45:8b:14:b4:04:6b:d2:4b:d3:a2:ba:d4:4d:
98:90:86:66:6b:a3:fa:0b:6d:f7:75:80:fb:5a:82:
f1:23:8f:3b:5f:b8:7d:b1:7c:67:dd:7b:c2:6a:b2:
0c:8f:9d:8a:c7:16:da:44:e3:ce:05:46:a7:95:74:
ff:75:7c:47:f4:8d:80:02:a3:f3:f8:7c:8d:fe:79:
f6:aa:78:a8:ce:4e:73:54:b0:f8:27:89:b5:39:96:
5f:9c:6a:78:4c:95:5e:a8:e9:89:c8:da:05:7a:95:
b7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:6C:BD:4D:3B:F4:2F:5E:25:FB:B3:11:79:79:1D:D3:DA:FB:CC:E8
X509v3 Authority Key Identifier:
keyid:C3:25:4E:FA:5C:4E:9F:DA:67:68:D0:29:42:47:DF:70:DA:BB:EF:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/34352e3233362e382e302f32342d3234203d3e20323638323133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.236.8.0/24
Signature Algorithm: sha256WithRSAEncryption
04:54:52:9e:22:af:9d:d7:cc:bc:b0:ca:21:7f:51:85:0f:5d:
60:da:e8:1f:dc:ea:9f:e3:c2:28:b6:f6:33:de:bd:71:85:3c:
0c:1a:97:ae:4e:e5:11:e3:c3:27:5e:73:14:0e:96:5d:74:f8:
3d:db:a6:13:b8:1f:6a:3e:9d:be:d2:3e:c1:cd:f3:bd:1c:b1:
1b:c7:f0:e8:4e:94:9c:a9:3d:c0:7b:a4:e6:c8:ea:4c:4c:18:
a4:19:8b:ae:9a:ca:1a:3b:6d:d2:6a:8a:c3:e5:db:b1:36:04:
95:93:82:30:7c:d4:57:8a:50:6c:f3:cb:5d:9d:eb:56:36:0d:
0d:8d:42:35:4a:96:31:89:4c:70:cf:d3:11:5c:65:e0:98:8d:
0b:6e:70:9d:fc:3a:b1:22:32:1f:34:af:85:ba:b5:f8:46:3c:
a2:a7:93:34:89:d1:d9:38:ab:8e:cb:36:a3:75:16:6c:b3:cf:
d8:47:37:23:28:09:94:89:35:28:36:99:c6:ec:da:01:b5:a0:
ca:4a:8b:4d:17:d8:21:0d:22:9d:94:53:b1:10:0a:1c:c1:55:
27:e3:da:e5:54:83:f8:1a:66:9a:f3:03:21:4e:b6:5f:f2:ff:
d2:c1:0a:25:38:69:db:12:ce:18:59:3e:1d:c7:9a:a5:ff:2c:
81:84:9c:53
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUNKzKAyTOZaVUvajlTReQzNvxrd0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzMyNTRFRkE1QzRFOUZEQTY3NjhEMDI5NDI0N0RGNzBE
QUJCRUYyMjAeFw0yNTEwMTAxODU2NDBaFw0yNjEwMDkxOTAxNDBaMDMxMTAvBgNV
BAMTKDVCNkNCRDREM0JGNDJGNUUyNUZCQjMxMTc5NzkxREQzREFGQkNDRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXe4dSSR41S+x347lQ1mlKFqF8
ddiuYJa/LaNpDBjkKnj/s61YZqI11fm8IJ82/1txQCTyIMxweXQy+oEydFRuNUr6
5FFPmhELWQACNRgIfv/957dt2Gelojyp8bF7PLZGPFiV5BOVOTRpBX/Ybt6Tak31
Vx/N0sUrmg+tMxnTRLD0c2SuMEnsofLZVyCQEJfvY2Adbgv1RYsUtARr0kvTorrU
TZiQhmZro/oLbfd1gPtagvEjjztfuH2xfGfde8JqsgyPnYrHFtpE484FRqeVdP91
fEf0jYACo/P4fI3+efaqeKjOTnNUsPgnibU5ll+canhMlV6o6YnI2gV6lbdlAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUW2y9TTv0L14l+7MReXkd09r7zOgwHwYDVR0j
BBgwFoAUwyVO+lxOn9pnaNApQkffcNq77yIwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9XQlptZ3dmV3RKcHlVUzJKeDhMeUs4YUJkNGd2R1JRU0xYSE5xN1hlN0hV
LzAvQzMyNTRFRkE1QzRFOUZEQTY3NjhEMDI5NDI0N0RGNzBEQUJCRUYyMi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9DMzI1NEVGQTVDNEU5RkRBNjc2
OEQwMjk0MjQ3REY3MERBQkJFRjIyLmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYG
CCsGAQUFBzALhoGJcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9X
QlptZ3dmV3RKcHlVUzJKeDhMeUs4YUJkNGd2R1JRU0xYSE5xN1hlN0hVLzAvMzQz
NTJlMzIzMzM2MmUzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzODMyMzEz
My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC3sCDANBgkqhkiG9w0BAQsFAAOCAQEABFRSniKvndfMvLDK
IX9RhQ9dYNroH9zqn+PCKLb2M969cYU8DBqXrk7lEePDJ15zFA6WXXT4PdumE7gf
aj6dvtI+wc3zvRyxG8fw6E6UnKk9wHuk5sjqTEwYpBmLrprKGjtt0mqKw+XbsTYE
lZOCMHzUV4pQbPPLXZ3rVjYNDY1CNUqWMYlMcM/TEVxl4JiNC25wnfw6sSIyHzSv
hbq1+EY8oqeTNInR2Tirjss2o3UWbLPP2Ec3IygJlIk1KDaZxuzaAbWgykqLTRfY
IQ0inZRTsRAKHMFVJ+Pa5VSD+BpmmvMDIU62X/L/0sEKJThp2xLOGFk+Hceapf8s
gYScUw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:27:50 2025 by rpki-client