
$ rpki-client -vvf rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/3230302e3132352e3132392e302f32342d3234203d3e20323731313830.roa
File: 3230302e3132352e3132392e302f32342d3234203d3e20323731313830.roa (raw, json)
Hash identifier: ntZ1ArAYp3sb9ElbA2pbCEeKkjRFsWYf3g7xNVHvk/0=
Subject key identifier: 20:5D:2B:34:68:F4:63:FC:3D:50:3C:CD:C6:77:02:FE:0D:80:40:DF
Certificate issuer: /CN=DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A
Certificate serial: 790A6CF1F7AAA532BF4A0397ED77DBCEC4A8D394
Authority key identifier: DA:2C:3B:25:72:C3:BC:A9:22:5E:87:2B:77:D7:EB:EC:51:E4:A0:1A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/3230302e3132352e3132392e302f32342d3234203d3e20323731313830.roa
Signing time: Mon 29 Sep 2025 13:05:29 +0000
ROA not before: Mon 29 Sep 2025 13:00:29 +0000
ROA not after: Mon 28 Sep 2026 13:05:29 +0000
asID: 271180
IP address blocks: 200.125.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.crl
rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 21 Oct 2025 10:15:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:0a:6c:f1:f7:aa:a5:32:bf:4a:03:97:ed:77:db:ce:c4:a8:d3:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A
Validity
Not Before: Sep 29 13:00:29 2025 GMT
Not After : Sep 28 13:05:29 2026 GMT
Subject: CN=205D2B3468F463FC3D503CCDC67702FE0D8040DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b2:ca:7d:89:2c:5a:62:05:6a:49:2c:b5:a0:
5e:20:0d:e5:b5:96:00:ab:28:cf:05:e1:b6:3a:a5:
0f:af:d0:c2:3d:cc:92:66:45:40:cd:9b:80:6b:a7:
86:0c:db:9b:eb:a4:ff:1a:0e:66:ca:15:9a:3b:8f:
68:17:ae:46:45:3d:c2:f5:e6:f0:d3:8c:14:4b:aa:
8f:19:ee:f8:6a:59:a2:a6:2b:ee:1e:8c:bf:50:53:
4f:e0:be:70:93:df:07:f0:12:de:40:70:b1:9b:63:
92:81:4d:04:ba:62:0f:5a:24:ca:2f:70:40:96:79:
b1:41:ca:4d:a2:4d:c2:92:a7:30:5f:7a:99:73:9d:
a4:05:ca:f3:78:e7:e0:9f:cd:b9:09:9d:ce:f1:77:
a6:95:5d:ae:a2:55:eb:de:2e:51:5b:32:13:c1:54:
7a:4d:c7:50:c2:ff:b0:aa:80:e8:ac:ce:95:bd:da:
4f:2a:7e:ca:71:5b:0a:e0:88:8c:63:e6:38:30:4c:
12:8e:8d:55:7b:01:67:bf:e6:8e:df:64:4f:b5:a5:
96:b0:48:67:b5:28:e5:52:a4:1e:dc:4b:58:54:47:
c7:cc:f6:de:d5:76:2f:6d:67:42:cb:29:a9:3f:cd:
d7:f5:80:95:65:2e:e7:66:66:a4:4a:93:f5:2c:62:
1f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:5D:2B:34:68:F4:63:FC:3D:50:3C:CD:C6:77:02:FE:0D:80:40:DF
X509v3 Authority Key Identifier:
keyid:DA:2C:3B:25:72:C3:BC:A9:22:5E:87:2B:77:D7:EB:EC:51:E4:A0:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/3230302e3132352e3132392e302f32342d3234203d3e20323731313830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.125.129.0/24
Signature Algorithm: sha256WithRSAEncryption
44:0c:dd:8e:a7:24:71:25:b8:78:f4:17:19:81:e7:80:27:24:
3d:e4:ba:d7:cf:29:3d:84:33:8d:a9:37:5b:83:14:81:61:fe:
30:15:25:98:da:90:cf:34:a3:d8:4b:67:c9:7d:00:50:c3:21:
0f:5c:fc:4e:ae:70:cf:d8:73:41:bf:e2:6e:f1:78:c5:36:9b:
54:cc:f0:8f:99:e0:59:1d:1e:60:c0:60:ca:37:7d:5e:55:db:
7e:9f:0e:31:c5:eb:c2:f8:7b:67:01:ea:5d:fc:5a:a3:6b:5c:
33:fb:e8:28:6d:71:83:bd:f7:d5:78:11:51:04:35:a5:a2:76:
3a:a6:f1:89:45:c2:20:e6:4f:a4:3c:07:f8:82:90:d0:64:b0:
08:33:b8:7f:49:10:f0:a5:8c:bf:c3:5c:b5:57:72:b8:3c:ed:
43:ea:8b:0b:70:a4:4e:d3:e0:b1:ab:62:0d:79:a6:43:07:2c:
9a:ce:7e:4c:23:10:26:9a:9a:63:50:b6:1c:33:18:b8:f2:14:
c8:65:a0:74:a0:e6:7c:f1:68:0c:5b:59:e6:67:dc:e9:50:5e:
f7:2c:a7:c7:89:53:07:d9:d0:2e:f7:3d:b5:a5:7b:44:d5:05:
22:0e:c7:23:7b:03:07:68:a8:0a:40:c2:8b:ba:d6:67:30:3d:
27:29:ce:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:26:05 2025 by rpki-client