
$ rpki-client -vvf rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/34352e342e3132342e302f32332d3233203d3e20323636303636.roa
File: 34352e342e3132342e302f32332d3233203d3e20323636303636.roa (raw, json)
Hash identifier: WgJfXJxPn/zfRkbNXOIcA5yb6LYFCl7IGzLsOarix10=
Subject key identifier: AF:C2:09:07:E1:4E:75:19:D5:EF:63:5B:9E:21:2B:BA:DD:46:17:23
Certificate issuer: /CN=7F2FB0D3B7927571948A2C39EF13D9F9C3C323F0
Certificate serial: 112475553DC71B4DA2B83C85E2C01B788D7608CF
Authority key identifier: 7F:2F:B0:D3:B7:92:75:71:94:8A:2C:39:EF:13:D9:F9:C3:C3:23:F0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F2FB0D3B7927571948A2C39EF13D9F9C3C323F0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/34352e342e3132342e302f32332d3233203d3e20323636303636.roa
Signing time: Mon 03 Mar 2025 22:11:50 +0000
ROA not before: Mon 03 Mar 2025 22:06:50 +0000
ROA not after: Mon 02 Mar 2026 22:11:50 +0000
asID: 266066
IP address blocks: 45.4.124.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/7F2FB0D3B7927571948A2C39EF13D9F9C3C323F0.crl
rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/7F2FB0D3B7927571948A2C39EF13D9F9C3C323F0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F2FB0D3B7927571948A2C39EF13D9F9C3C323F0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 21 Oct 2025 12:27:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:24:75:55:3d:c7:1b:4d:a2:b8:3c:85:e2:c0:1b:78:8d:76:08:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F2FB0D3B7927571948A2C39EF13D9F9C3C323F0
Validity
Not Before: Mar 3 22:06:50 2025 GMT
Not After : Mar 2 22:11:50 2026 GMT
Subject: CN=AFC20907E14E7519D5EF635B9E212BBADD461723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5b:6f:6d:cc:41:8f:9e:6d:19:07:02:35:38:
aa:0f:42:4f:8f:56:a8:35:54:ca:8f:ee:4d:1f:df:
ec:40:dd:b9:65:e7:59:05:35:2b:cf:73:68:0d:fa:
e8:87:b1:b9:4c:6e:40:19:f9:25:3a:cf:27:6b:55:
c9:29:e7:01:75:aa:dc:cf:74:a6:db:40:20:e9:cb:
d9:e3:6d:a4:96:f9:0f:b8:8e:12:77:30:e4:e7:81:
26:fb:5c:c8:70:99:84:80:d6:c5:bf:a9:e8:0e:24:
8c:df:44:8f:53:88:06:74:fa:0c:cf:5e:99:4f:49:
93:fd:60:2c:bf:63:2a:33:c0:c8:b0:f1:b8:39:41:
b6:81:45:7e:ff:75:39:70:07:25:19:26:bb:1c:9f:
24:26:92:7b:dd:04:4e:a1:60:15:63:84:32:eb:e9:
51:5a:30:a8:40:e2:bb:5c:0d:40:d6:0c:20:6d:98:
d7:77:b5:47:42:8f:ed:8e:57:51:b5:7a:0c:d2:a8:
02:81:c6:21:5d:a7:32:d2:bf:da:51:1d:11:41:75:
2a:d0:cc:14:21:87:ee:f5:2e:39:cb:61:e8:70:2b:
31:f4:ab:b9:b6:07:e4:1f:2b:5f:cb:82:a3:c4:1d:
a9:13:37:6f:13:98:77:d0:bb:15:38:1d:89:f8:55:
32:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C2:09:07:E1:4E:75:19:D5:EF:63:5B:9E:21:2B:BA:DD:46:17:23
X509v3 Authority Key Identifier:
keyid:7F:2F:B0:D3:B7:92:75:71:94:8A:2C:39:EF:13:D9:F9:C3:C3:23:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/7F2FB0D3B7927571948A2C39EF13D9F9C3C323F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F2FB0D3B7927571948A2C39EF13D9F9C3C323F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/34352e342e3132342e302f32332d3233203d3e20323636303636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.124.0/23
Signature Algorithm: sha256WithRSAEncryption
30:a8:3c:e9:12:ce:91:b0:9d:a5:74:5d:cf:67:a2:f8:a4:01:
56:1a:90:2f:66:41:6f:95:a2:c8:d8:e6:24:ec:7a:26:fc:d4:
9d:c6:93:3c:e7:62:74:4c:9d:64:bc:59:a3:8e:7a:65:72:39:
96:30:59:24:5c:2b:a0:5d:3d:46:49:84:23:d8:5c:bb:3a:7d:
29:9a:c2:ff:f6:a5:d3:a9:5a:11:51:61:06:d0:c6:10:d5:79:
b7:d9:2f:af:1b:33:86:95:5e:8d:31:59:83:59:62:3c:5a:d9:
d1:71:87:b0:86:76:a2:3d:60:75:ac:6f:56:e3:b0:ad:1a:0f:
ad:30:8e:ca:c7:f2:7a:79:ad:e7:81:c6:15:52:8b:9e:f0:5f:
20:0d:0d:28:2f:8e:36:bb:d3:d7:f3:d6:07:43:81:8f:c4:8f:
4b:73:7d:64:bd:9b:f7:c5:e7:85:a3:36:28:51:fd:3c:bc:9c:
0c:b4:26:f0:db:58:b4:3e:85:ad:95:d8:1e:24:eb:ab:90:19:
bd:d3:f7:1b:26:b1:9d:f1:96:67:11:eb:52:ad:d5:7f:eb:aa:
66:7c:77:fc:cf:78:0d:46:95:29:85:4e:97:e2:2e:ad:2d:28:
59:c7:e5:9a:97:ea:4b:78:0d:62:5e:d7:35:e1:3c:83:b0:e4:
e6:2e:bc:8e
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUESR1VT3HG02iuDyF4sAbeI12CM8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0YyRkIwRDNCNzkyNzU3MTk0OEEyQzM5RUYxM0Q5RjlD
M0MzMjNGMDAeFw0yNTAzMDMyMjA2NTBaFw0yNjAzMDIyMjExNTBaMDMxMTAvBgNV
BAMTKEFGQzIwOTA3RTE0RTc1MTlENUVGNjM1QjlFMjEyQkJBREQ0NjE3MjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsW29tzEGPnm0ZBwI1OKoPQk+P
Vqg1VMqP7k0f3+xA3bll51kFNSvPc2gN+uiHsblMbkAZ+SU6zydrVckp5wF1qtzP
dKbbQCDpy9njbaSW+Q+4jhJ3MOTngSb7XMhwmYSA1sW/qegOJIzfRI9TiAZ0+gzP
XplPSZP9YCy/YyozwMiw8bg5QbaBRX7/dTlwByUZJrscnyQmknvdBE6hYBVjhDLr
6VFaMKhA4rtcDUDWDCBtmNd3tUdCj+2OV1G1egzSqAKBxiFdpzLSv9pRHRFBdSrQ
zBQhh+71LjnLYehwKzH0q7m2B+QfK1/LgqPEHakTN28TmHfQuxU4HYn4VTItAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUr8IJB+FOdRnV72NbniErut1GFyMwHwYDVR0j
BBgwFoAUfy+w07eSdXGUiiw57xPZ+cPDI/AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQk1DV1hQdXhDd0FjRUxidHo4WHdNek5IaWloM2NHd2VQU21IWGdBekI5
NncvMC83RjJGQjBEM0I3OTI3NTcxOTQ4QTJDMzlFRjEzRDlGOUMzQzMyM0YwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdGMkZCMEQzQjc5Mjc1NzE5
NDhBMkMzOUVGMTNEOUY5QzNDMzIzRjAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JNQ1dYUHV4Q3dBY0VMYnR6OFh3TXpOSGlpaDNjR3dlUFNtSFhnQXpCOTZ3LzAv
MzQzNTJlMzQyZTMxMzIzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzNjMw
MzYzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAS0EfDANBgkqhkiG9w0BAQsFAAOCAQEAMKg86RLOkbCd
pXRdz2ei+KQBVhqQL2ZBb5WiyNjmJOx6JvzUncaTPOdidEydZLxZo456ZXI5ljBZ
JFwroF09RkmEI9hcuzp9KZrC//al06laEVFhBtDGENV5t9kvrxszhpVejTFZg1li
PFrZ0XGHsIZ2oj1gdaxvVuOwrRoPrTCOysfyenmt54HGFVKLnvBfIA0NKC+ONrvT
1/PWB0OBj8SPS3N9ZL2b98XnhaM2KFH9PLycDLQm8NtYtD6FrZXYHiTrq5AZvdP3
GyaxnfGWZxHrUq3Vf+uqZnx3/M94DUaVKYVOl+IurS0oWcflmpfqS3gNYl7XNeE8
g7Dk5i68jg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 20:43:24 2025 by rpki-client