
$ rpki-client -vvf rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3137302e3233332e35322e302f32322d3234203d3e203532353437.roa
File: 3137302e3233332e35322e302f32322d3234203d3e203532353437.roa (raw, json)
Hash identifier: f+dLS6lFS6QntvaUj/oGAyGXboGiBaVhLCL7tDDqBv8=
Subject key identifier: CB:1A:10:FE:71:20:91:10:37:FE:29:ED:C4:75:A8:A7:9C:2A:D0:A5
Certificate issuer: /CN=FF5D171186C7F92AA82E56A3848B9D1390938458
Certificate serial: 7BBD35BD53CA9FD7980339A17B4A29C85351F5A8
Authority key identifier: FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3137302e3233332e35322e302f32322d3234203d3e203532353437.roa
Signing time: Wed 30 Apr 2025 18:28:54 +0000
ROA not before: Wed 30 Apr 2025 18:23:54 +0000
ROA not after: Wed 29 Apr 2026 18:28:54 +0000
asID: 52547
IP address blocks: 170.233.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl
rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 21 Oct 2025 04:57:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:bd:35:bd:53:ca:9f:d7:98:03:39:a1:7b:4a:29:c8:53:51:f5:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF5D171186C7F92AA82E56A3848B9D1390938458
Validity
Not Before: Apr 30 18:23:54 2025 GMT
Not After : Apr 29 18:28:54 2026 GMT
Subject: CN=CB1A10FE7120911037FE29EDC475A8A79C2AD0A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:61:02:08:2b:39:36:2a:bd:7e:11:9a:b0:af:
bd:21:c5:06:0b:a4:78:4e:98:eb:80:b6:09:c3:bb:
b1:f1:a4:13:e6:28:21:69:c8:8b:2d:33:05:4e:4d:
13:df:22:51:22:e1:bb:e8:ba:8e:05:4a:62:01:d4:
70:f3:3b:c2:7f:7b:f8:8a:e0:af:81:10:73:d1:e0:
ae:52:ed:d9:d7:cc:ad:58:aa:5e:25:9d:75:8b:37:
c5:68:e4:31:b7:4b:e6:59:38:1b:de:15:0e:fe:cb:
40:1f:06:fd:0c:aa:73:36:39:7e:5a:e7:ed:0a:02:
a5:ad:e6:f8:a3:11:58:7f:e2:a5:42:83:70:83:01:
f4:93:21:6d:08:45:ad:ef:70:76:9e:f2:5d:de:e6:
1f:ef:73:9d:0e:e1:6b:f9:6a:c6:b8:68:db:ef:24:
e6:58:22:88:b8:d4:59:f2:f5:4f:32:6c:8f:8f:5a:
f6:cf:1c:3a:76:4d:e2:a1:e0:0c:02:f6:fb:e2:64:
aa:8f:c4:2b:52:76:7a:da:d3:d3:4a:4d:10:06:37:
b6:ac:69:eb:78:68:e1:61:d8:2f:51:60:f2:62:93:
9b:a9:42:8e:9b:1b:c8:59:da:c7:29:4c:6c:6c:b1:
fd:4e:32:0e:0b:8e:61:af:62:6a:0b:f8:0b:8d:cc:
d9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:1A:10:FE:71:20:91:10:37:FE:29:ED:C4:75:A8:A7:9C:2A:D0:A5
X509v3 Authority Key Identifier:
keyid:FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3137302e3233332e35322e302f32322d3234203d3e203532353437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.233.52.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:f1:4d:d0:a3:3e:59:b3:13:0a:89:e5:0f:95:41:98:db:d1:
1a:82:b5:ef:29:07:e3:dd:72:a5:01:7a:54:0c:7b:90:22:58:
61:ae:d6:00:7b:80:d3:7a:15:bc:17:7b:7d:e1:02:26:0f:de:
cc:0a:f0:32:35:2b:56:55:59:0c:8f:1c:f1:a1:a1:c4:af:83:
4a:94:cf:7c:c6:f8:82:95:5c:81:7b:83:c5:54:58:97:fb:51:
c9:f7:aa:c7:00:dd:e3:b5:39:b5:36:07:72:07:40:29:fd:ad:
47:bf:81:f3:52:18:97:46:5a:cd:f6:b6:40:54:95:bd:0d:e6:
4b:cc:68:d2:3e:b9:10:23:67:44:97:b7:7a:0a:4f:bd:47:d2:
88:b8:09:6d:2e:62:d8:05:ba:ec:02:35:12:e4:00:d7:c9:ee:
2a:bd:fa:dc:09:05:23:71:93:d3:fb:00:fc:ee:22:ff:b0:ee:
75:0b:e3:55:70:cc:00:27:7f:98:27:17:53:4a:a1:d6:8b:c7:
38:7f:00:06:40:4b:8a:58:37:c1:ef:9c:10:b4:95:49:1e:b0:
a5:88:c9:8a:f4:1c:66:52:0b:7e:8a:45:38:c8:54:8a:d9:84:
e0:92:be:6c:1f:52:80:30:d1:30:d5:e8:6d:bf:cd:b5:00:19:
41:34:6c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:24:18 2025 by rpki-client