
$ rpki-client -vvf rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/34352e3137312e3138392e302f32342d3234203d3e203533313037.roa
File: 34352e3137312e3138392e302f32342d3234203d3e203533313037.roa (raw, json)
Hash identifier: ZfM83HfKeKzzsIlJvLRkpTey+TNllfkHWy25NrM+coc=
Subject key identifier: 42:8D:97:70:EA:70:5D:7A:A1:CC:48:3D:45:D9:84:BF:D5:EF:24:E5
Certificate issuer: /CN=67A81E20D9B7972AADDB1C394778320F56BE023B
Certificate serial: 65619293B203F66AC26999DC1E712D54FA7B7BAE
Authority key identifier: 67:A8:1E:20:D9:B7:97:2A:AD:DB:1C:39:47:78:32:0F:56:BE:02:3B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67A81E20D9B7972AADDB1C394778320F56BE023B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/34352e3137312e3138392e302f32342d3234203d3e203533313037.roa
Signing time: Mon 26 May 2025 13:53:53 +0000
ROA not before: Mon 26 May 2025 13:48:53 +0000
ROA not after: Mon 25 May 2026 13:53:53 +0000
asID: 53107
IP address blocks: 45.171.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.crl
rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67A81E20D9B7972AADDB1C394778320F56BE023B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 06:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:61:92:93:b2:03:f6:6a:c2:69:99:dc:1e:71:2d:54:fa:7b:7b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67A81E20D9B7972AADDB1C394778320F56BE023B
Validity
Not Before: May 26 13:48:53 2025 GMT
Not After : May 25 13:53:53 2026 GMT
Subject: CN=428D9770EA705D7AA1CC483D45D984BFD5EF24E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:71:39:f5:29:ad:f2:a0:e2:47:fe:3e:bf:21:
28:8a:87:e1:56:e6:84:7c:75:ad:89:5e:02:3f:76:
7f:49:8d:61:21:35:ac:f3:c1:0a:09:c3:22:c2:a6:
ee:3c:04:e6:e7:91:91:ee:d8:db:da:24:1c:e3:38:
4d:83:c0:f1:c0:80:de:25:5e:8e:e6:3f:fc:98:ed:
f9:69:78:9f:cc:33:e8:8c:60:e4:c7:03:4f:b5:77:
f7:3a:a4:ea:d4:fe:03:22:89:80:ad:5b:4b:09:5f:
a2:a7:8a:d5:6c:81:0a:8a:f5:77:f8:96:fc:4a:09:
12:1b:96:ec:15:86:f7:9c:bf:b6:f9:b6:2f:1c:11:
50:43:58:19:d6:e7:2e:ab:41:20:95:56:f7:40:84:
35:04:b5:a2:93:65:f5:48:ba:c7:39:67:ca:98:64:
b6:47:a6:a8:82:80:c5:16:7b:5c:92:d6:be:c7:ed:
c6:1e:e2:c1:ed:8e:58:9f:16:26:27:05:bd:6d:6e:
b7:39:2d:94:66:98:58:b8:8c:b5:76:b4:49:97:71:
af:68:be:8b:a6:85:f4:2b:a0:b6:0c:fe:9c:b3:42:
9e:d0:05:7f:84:e4:0e:0d:d6:15:c3:c9:c4:c6:e3:
c6:ae:9d:88:ae:0a:a8:e6:39:63:a7:66:49:f6:80:
97:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8D:97:70:EA:70:5D:7A:A1:CC:48:3D:45:D9:84:BF:D5:EF:24:E5
X509v3 Authority Key Identifier:
keyid:67:A8:1E:20:D9:B7:97:2A:AD:DB:1C:39:47:78:32:0F:56:BE:02:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67A81E20D9B7972AADDB1C394778320F56BE023B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/34352e3137312e3138392e302f32342d3234203d3e203533313037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.171.189.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:7b:ca:6b:df:ca:6c:7b:ec:77:5b:c5:c3:a9:24:e0:cc:ac:
a5:a1:48:a5:e2:38:4a:42:a6:1a:19:0f:1a:ec:55:a3:1a:c8:
29:85:7e:5a:b4:48:b3:74:37:a3:52:17:12:2b:d9:3f:7a:3b:
19:9f:92:83:7e:7e:f0:f9:f0:f7:8d:24:0f:92:5c:7f:00:5f:
6f:b7:58:a1:c5:8d:ea:ce:39:10:01:9a:c4:ed:45:83:a3:66:
18:8b:bc:2d:ec:a2:e9:cd:f7:76:6a:b0:6f:2b:36:24:48:45:
d7:01:ac:32:60:16:c7:72:80:88:7a:b3:05:e0:a3:03:fa:93:
0a:48:67:1a:dd:37:e3:27:5b:13:5c:7a:9f:11:4a:ab:62:9e:
85:57:f7:e1:8f:31:c9:1d:89:4d:a6:97:33:6d:12:9d:ce:09:
4a:39:6b:72:4a:7d:03:3a:83:90:44:9a:93:5c:88:8b:a4:6c:
54:92:52:cd:89:bf:46:a9:45:30:3b:5b:04:b8:c6:71:84:5a:
0d:1b:c7:13:62:39:53:92:a0:fc:73:67:ff:31:66:42:e0:02:
20:be:08:77:da:23:c4:f0:38:1a:7b:ad:86:ef:ad:31:b0:62:
d4:eb:2f:8b:53:e5:ac:2e:01:2e:d0:32:61:9a:1d:ee:7f:2d:
a7:40:88:e2
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUZWGSk7ID9mrCaZncHnEtVPp7e64wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjdBODFFMjBEOUI3OTcyQUFEREIxQzM5NDc3ODMyMEY1
NkJFMDIzQjAeFw0yNTA1MjYxMzQ4NTNaFw0yNjA1MjUxMzUzNTNaMDMxMTAvBgNV
BAMTKDQyOEQ5NzcwRUE3MDVEN0FBMUNDNDgzRDQ1RDk4NEJGRDVFRjI0RTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+cTn1Ka3yoOJH/j6/ISiKh+FW
5oR8da2JXgI/dn9JjWEhNazzwQoJwyLCpu48BObnkZHu2NvaJBzjOE2DwPHAgN4l
Xo7mP/yY7flpeJ/MM+iMYOTHA0+1d/c6pOrU/gMiiYCtW0sJX6KnitVsgQqK9Xf4
lvxKCRIbluwVhvecv7b5ti8cEVBDWBnW5y6rQSCVVvdAhDUEtaKTZfVIusc5Z8qY
ZLZHpqiCgMUWe1yS1r7H7cYe4sHtjlifFiYnBb1tbrc5LZRmmFi4jLV2tEmXca9o
voumhfQroLYM/pyzQp7QBX+E5A4N1hXDycTG48aunYiuCqjmOWOnZkn2gJcLAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUQo2XcOpwXXqhzEg9RdmEv9XvJOUwHwYDVR0j
BBgwFoAUZ6geINm3lyqt2xw5R3gyD1a+AjswDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9reVdwR0EydlA5VUVEWWZWTlh3RGt0QkNORGdzVFJySmt4elE1QmptMjM3
LzIvNjdBODFFMjBEOUI3OTcyQUFEREIxQzM5NDc3ODMyMEY1NkJFMDIzQi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS82N0E4MUUyMEQ5Qjc5NzJBQURE
QjFDMzk0Nzc4MzIwRjU2QkUwMjNCLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9r
eVdwR0EydlA5VUVEWWZWTlh3RGt0QkNORGdzVFJySmt4elE1QmptMjM3LzIvMzQz
NTJlMzEzNzMxMmUzMTM4MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMzMzEz
MDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQALau9MA0GCSqGSIb3DQEBCwUAA4IBAQBMe8pr38pse+x3
W8XDqSTgzKyloUil4jhKQqYaGQ8a7FWjGsgphX5atEizdDejUhcSK9k/ejsZn5KD
fn7w+fD3jSQPklx/AF9vt1ihxY3qzjkQAZrE7UWDo2YYi7wt7KLpzfd2arBvKzYk
SEXXAawyYBbHcoCIerMF4KMD+pMKSGca3TfjJ1sTXHqfEUqrYp6FV/fhjzHJHYlN
ppczbRKdzglKOWtySn0DOoOQRJqTXIiLpGxUklLNib9GqUUwO1sEuMZxhFoNG8cT
YjlTkqD8c2f/MWZC4AIgvgh32iPE8Dgae62G760xsGLU6y+LU+WsLgEu0DJhmh3u
fy2nQIji
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:04:21 2025 by rpki-client