
$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233322e35362e302f32342d3234203d3e20323733363833.roa
File: 34352e3233322e35362e302f32342d3234203d3e20323733363833.roa (raw, json)
Hash identifier: p/S/BsCoE1GVwZ44t8SL9+MOy5s2SQ4CS0SlC7ENh5k=
Subject key identifier: 64:BC:D5:58:F6:A3:37:DD:DC:96:18:A3:6E:47:6F:2C:75:98:AE:96
Certificate issuer: /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial: 17DB9DCAA7974F151525BF793D3D5D32B4589DF6
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233322e35362e302f32342d3234203d3e20323733363833.roa
Signing time: Wed 01 Oct 2025 22:07:41 +0000
ROA not before: Wed 01 Oct 2025 22:02:41 +0000
ROA not after: Wed 30 Sep 2026 22:07:41 +0000
asID: 273683
IP address blocks: 45.232.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 21 Oct 2025 17:44:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:db:9d:ca:a7:97:4f:15:15:25:bf:79:3d:3d:5d:32:b4:58:9d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Validity
Not Before: Oct 1 22:02:41 2025 GMT
Not After : Sep 30 22:07:41 2026 GMT
Subject: CN=64BCD558F6A337DDDC9618A36E476F2C7598AE96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bf:6e:4b:32:05:70:95:d8:ce:e2:05:9a:5b:
80:03:04:10:fc:95:ab:cd:61:59:8a:61:8c:18:77:
05:81:4f:6f:d7:b5:f7:bf:60:11:00:f3:6f:88:ad:
b0:a0:78:a6:9b:08:68:ad:2c:7c:ee:3e:6b:c1:10:
21:2f:a5:86:43:0e:d2:e2:96:fb:78:60:99:dd:ea:
07:4d:45:8f:c3:75:06:50:d6:c9:43:54:14:45:0d:
d0:bc:f6:d6:7b:23:ec:ab:41:18:2c:ed:b3:52:f1:
6d:f1:fc:91:03:18:ea:d3:c0:02:7e:77:75:b0:31:
b0:c9:32:38:e5:96:a0:4c:39:8c:1e:92:c6:82:3c:
43:54:4c:61:82:0f:e2:fe:cc:93:7b:6a:99:3e:11:
3d:1a:05:6d:c6:7c:c8:54:78:0f:79:82:f2:ba:eb:
42:24:32:8d:77:73:8d:4d:a0:7a:27:4e:a8:f9:db:
ff:ea:63:af:a9:f4:80:3e:92:f6:19:ac:24:56:dd:
e9:dc:d1:b4:21:a9:94:bf:26:cb:94:70:dd:3d:77:
5a:74:5e:71:dc:cf:70:aa:8f:2c:01:1f:dd:e6:56:
1d:4e:c6:e2:01:79:7f:59:51:88:19:5e:09:86:96:
29:ae:c8:0b:8d:6d:d1:ae:c5:2d:14:7d:f6:92:43:
e4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:BC:D5:58:F6:A3:37:DD:DC:96:18:A3:6E:47:6F:2C:75:98:AE:96
X509v3 Authority Key Identifier:
keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233322e35362e302f32342d3234203d3e20323733363833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.232.56.0/24
Signature Algorithm: sha256WithRSAEncryption
77:10:b4:2b:1b:24:b3:ef:cb:59:c2:cb:48:59:9b:c7:94:e9:
50:e0:82:70:b4:d6:55:17:c0:e6:58:e2:27:3b:a9:4d:d5:c2:
a0:25:90:bd:3b:83:b3:4e:6b:6d:38:f5:f5:c3:ef:d9:04:da:
51:99:c6:b3:4d:e9:4c:0c:6a:13:33:de:25:35:07:98:25:3a:
c0:32:d4:64:9f:18:07:8f:b6:11:08:1b:dd:e4:b3:d4:44:d2:
5a:4e:be:6f:11:23:8c:dd:09:95:23:5f:cc:c1:df:92:1b:59:
31:77:34:bf:61:b8:04:85:de:73:bc:6a:be:14:f7:ce:0b:59:
f1:b5:85:e6:72:0d:7d:b5:ca:89:b9:72:bd:e8:88:83:60:5f:
d5:72:26:7d:0d:cb:2b:f7:9c:a4:63:5e:1b:03:0e:6d:ff:ae:
8e:90:dc:29:cf:4f:b3:a6:b1:32:45:c7:89:59:2f:21:22:62:
21:81:f3:44:1d:25:bb:a8:f6:f2:74:9c:26:c8:35:b9:3a:d3:
ea:e6:58:bc:6c:a8:9b:10:81:9d:ca:cd:6b:2b:2f:ed:02:b5:
5d:c5:4d:36:e4:77:1b:c8:d8:3e:37:ab:10:b9:93:88:0e:8a:
cc:5d:13:06:f7:38:37:91:8a:42:5d:97:db:c8:8f:ed:99:c5:
ff:35:79:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:23:49 2025 by rpki-client