
$ rpki-client -vvf rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/3133382e39372e3230342e302f32322d3234203d3e20323634313936.roa
File: 3133382e39372e3230342e302f32322d3234203d3e20323634313936.roa (raw, json)
Hash identifier: IYklB/U3RfE/oKJVLy/Xsr2JbD+zmVsGt59LebpV5y4=
Subject key identifier: 9B:5C:66:01:6A:40:99:39:41:66:4F:B7:19:38:C6:7F:C8:17:88:4F
Certificate issuer: /CN=42361EAB494B759A64EFEB313189F9E2DF6603C8
Certificate serial: 40C1ED91348AF5AAC8F5A6F151E3BE302F0FD31A
Authority key identifier: 42:36:1E:AB:49:4B:75:9A:64:EF:EB:31:31:89:F9:E2:DF:66:03:C8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/3133382e39372e3230342e302f32322d3234203d3e20323634313936.roa
Signing time: Wed 05 Mar 2025 22:42:43 +0000
ROA not before: Wed 05 Mar 2025 22:37:43 +0000
ROA not after: Wed 04 Mar 2026 22:42:43 +0000
asID: 264196
IP address blocks: 138.97.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.crl
rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 21 Oct 2025 15:39:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:c1:ed:91:34:8a:f5:aa:c8:f5:a6:f1:51:e3:be:30:2f:0f:d3:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42361EAB494B759A64EFEB313189F9E2DF6603C8
Validity
Not Before: Mar 5 22:37:43 2025 GMT
Not After : Mar 4 22:42:43 2026 GMT
Subject: CN=9B5C66016A40993941664FB71938C67FC817884F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8f:b7:99:ec:62:03:c6:cd:e3:09:a4:c4:77:
5c:24:59:e1:92:15:f3:44:c3:3f:43:b4:ea:59:5d:
76:2c:3e:67:9b:52:5e:38:96:2b:84:51:af:96:d0:
63:45:74:2d:a8:a6:4a:72:c1:44:95:05:57:25:bb:
53:0f:f2:ba:d2:cd:e8:de:dd:57:0d:83:d6:0c:d7:
d2:d3:fc:d9:ec:78:7f:ae:8b:f5:5f:da:68:4b:eb:
88:94:a5:ee:59:65:37:fc:23:23:84:08:58:16:ac:
84:fb:a3:f3:50:b1:23:2a:b6:1e:98:4f:7c:79:1e:
c4:1e:25:3e:4e:d1:bd:70:d1:87:d9:ec:31:8d:1a:
2d:f1:07:4e:b8:98:2a:b1:86:1c:58:6a:c8:cb:ec:
ff:af:51:28:87:e5:ab:40:16:c5:02:17:57:ee:0d:
d2:c8:76:4e:07:be:7c:c3:30:1e:45:14:10:e9:44:
b2:0b:76:30:cc:8d:ca:04:b4:1d:f8:4f:e6:91:98:
df:75:cb:63:a8:da:73:5f:92:eb:76:65:36:c3:75:
21:54:72:e5:be:54:a7:ea:87:18:6e:9e:09:0e:96:
0c:ba:20:d1:63:85:d4:18:f6:c6:9d:1c:54:30:cb:
1f:ab:4d:9a:56:f8:04:84:d0:10:fb:55:16:3c:a4:
a4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:5C:66:01:6A:40:99:39:41:66:4F:B7:19:38:C6:7F:C8:17:88:4F
X509v3 Authority Key Identifier:
keyid:42:36:1E:AB:49:4B:75:9A:64:EF:EB:31:31:89:F9:E2:DF:66:03:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/3133382e39372e3230342e302f32322d3234203d3e20323634313936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.97.204.0/22
Signature Algorithm: sha256WithRSAEncryption
59:60:0f:c7:41:7e:e2:5b:e5:ed:df:81:17:45:15:e5:32:50:
28:28:92:24:c0:10:3f:71:86:12:70:86:5f:59:7d:eb:22:b7:
d6:9a:61:4f:31:9a:c2:0c:73:89:6e:ec:28:8e:6b:c6:1d:b7:
ab:26:e9:ba:0a:e4:78:b0:e4:ff:8c:91:04:de:a9:32:53:32:
b3:5f:28:fc:d9:23:f1:76:fe:f3:c2:64:66:af:9f:68:03:3a:
9c:95:0f:d9:19:9d:d9:04:c7:d9:15:25:1a:d6:e0:55:83:a4:
f7:01:1a:8e:42:ff:b0:60:bc:1e:b6:25:d2:c9:07:c4:a8:0b:
13:68:78:ab:e0:62:57:2c:f3:83:6c:73:04:ef:59:86:88:5c:
08:af:5e:a0:ee:60:99:5a:d2:73:4f:d6:3d:6c:c8:31:83:60:
5d:22:1c:7f:71:b7:99:b7:fc:46:4b:47:11:d9:a5:fe:23:7c:
24:18:a0:3e:f4:61:74:ca:8b:21:75:05:7e:1f:54:9d:9a:2f:
76:24:66:b4:75:89:41:c4:ba:cf:96:b7:0b:fa:31:93:dd:93:
85:b9:b7:4c:b4:91:d2:91:c8:a8:9f:6c:32:08:2c:63:c8:e3:
9e:14:d4:21:5d:11:32:f9:06:07:7d:d6:0a:46:71:a9:da:1b:
ec:c4:7f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:24:40 2025 by rpki-client