
$ rpki-client -vvf rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/34352e3138392e36382e302f32322d3332203d3e20323639353732.roa
File: 34352e3138392e36382e302f32322d3332203d3e20323639353732.roa (raw, json)
Hash identifier: ngoWma8TsSEzSWbq6GfRF4ba2k9dPiM3jeI36G1Dcfo=
Subject key identifier: A1:9B:31:82:D8:44:F4:20:7A:0E:34:55:14:7D:F6:60:38:53:5C:41
Certificate issuer: /CN=D54D28DD1135EB4EA68416B42CFD19DF502929D2
Certificate serial: 689F40929586B59776CCA4AFDCC4F2A98D1F963E
Authority key identifier: D5:4D:28:DD:11:35:EB:4E:A6:84:16:B4:2C:FD:19:DF:50:29:29:D2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54D28DD1135EB4EA68416B42CFD19DF502929D2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/34352e3138392e36382e302f32322d3332203d3e20323639353732.roa
Signing time: Mon 30 Jun 2025 14:28:39 +0000
ROA not before: Mon 30 Jun 2025 14:23:39 +0000
ROA not after: Mon 29 Jun 2026 14:28:39 +0000
asID: 269572
IP address blocks: 45.189.68.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/D54D28DD1135EB4EA68416B42CFD19DF502929D2.crl
rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/D54D28DD1135EB4EA68416B42CFD19DF502929D2.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54D28DD1135EB4EA68416B42CFD19DF502929D2.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 19:50:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:9f:40:92:95:86:b5:97:76:cc:a4:af:dc:c4:f2:a9:8d:1f:96:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D54D28DD1135EB4EA68416B42CFD19DF502929D2
Validity
Not Before: Jun 30 14:23:39 2025 GMT
Not After : Jun 29 14:28:39 2026 GMT
Subject: CN=A19B3182D844F4207A0E3455147DF66038535C41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cf:3d:ce:9a:a4:1b:f8:e9:8f:ac:d6:f3:03:
96:34:ea:7e:41:d2:2a:9d:78:d9:56:f1:9d:c1:8a:
02:d4:d8:95:6d:74:c3:13:45:48:fc:76:ca:ee:04:
5e:01:f8:70:6c:27:3f:07:7a:86:43:a4:1d:17:8a:
19:73:23:87:3c:98:d4:fa:7b:7f:7a:1e:11:38:7b:
9f:e3:7a:20:ac:c2:eb:a6:c6:24:31:99:2b:a1:f9:
53:ad:ec:87:56:c3:1d:89:7c:b0:11:4d:b8:6f:28:
23:3b:68:85:7f:9c:5e:c1:2f:4e:5d:16:4f:8f:5a:
36:42:2b:8b:25:65:4c:de:fe:6f:fe:3d:54:24:43:
9d:47:70:bf:b0:8e:06:99:7c:d9:9d:ba:b1:2d:db:
0c:3f:a8:91:dc:a7:d3:e7:ea:f7:61:62:5e:55:3d:
15:05:1f:cd:0e:5f:96:09:6b:35:5f:d6:5d:17:ce:
6e:41:7e:f3:ae:b4:f8:e3:ca:1e:4e:0e:0c:4a:56:
02:e3:7a:39:4d:fe:01:44:6c:19:03:09:98:83:f3:
b7:5b:c0:95:2a:e5:af:27:0a:26:2a:25:4d:83:ca:
21:81:90:39:f8:36:49:3e:29:98:ce:41:70:8e:1a:
3d:f5:89:10:63:d5:c0:16:8d:5e:29:c2:cf:02:dd:
35:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9B:31:82:D8:44:F4:20:7A:0E:34:55:14:7D:F6:60:38:53:5C:41
X509v3 Authority Key Identifier:
keyid:D5:4D:28:DD:11:35:EB:4E:A6:84:16:B4:2C:FD:19:DF:50:29:29:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/D54D28DD1135EB4EA68416B42CFD19DF502929D2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54D28DD1135EB4EA68416B42CFD19DF502929D2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/34352e3138392e36382e302f32322d3332203d3e20323639353732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.189.68.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:38:1c:4f:c6:44:b0:f0:96:64:ee:67:1a:ca:e7:47:08:80:
7b:29:01:e3:a8:1c:c1:e4:27:81:f7:51:0e:e7:8e:c1:a1:ea:
79:12:c0:ca:1a:5c:a0:87:d0:43:85:1d:e6:97:33:20:8f:fd:
c7:1a:b1:03:78:a0:a1:dc:c9:28:22:f2:22:8a:f3:f3:67:4a:
05:dd:74:47:33:1b:70:a3:3f:bc:48:f0:9a:b4:76:99:9f:4b:
3c:69:28:69:c8:06:3f:b1:75:05:dc:f6:8b:77:d9:4a:0a:25:
1c:00:aa:ef:60:82:a0:d6:88:28:14:b5:a8:ee:f1:c1:36:8c:
93:b3:0a:98:38:f6:d0:77:6a:ae:6d:70:a9:56:a5:38:a1:79:
6d:3e:8f:dc:f6:b6:b3:b3:d5:ea:1a:b4:73:dc:34:ae:3b:2f:
fd:a9:24:7c:f5:44:b3:3a:31:69:0e:39:11:5d:d6:45:be:11:
74:38:f6:70:a3:e2:98:82:4f:ab:d4:4e:0e:5f:77:59:ba:21:
52:26:70:1f:c6:b3:07:be:21:80:80:ae:73:43:ad:c0:08:9c:
92:65:a5:84:d3:05:ba:d1:4f:46:e1:86:42:0d:81:05:26:e7:
53:5b:8f:e4:1f:bc:3c:e5:e2:58:41:89:65:4c:07:0e:66:0d:
d4:b3:10:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:55:05 2025 by rpki-client