
$ rpki-client -vvf rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/34352e3233392e37322e302f32342d3234203d3e20323638333535.roa
File: 34352e3233392e37322e302f32342d3234203d3e20323638333535.roa (raw, json)
Hash identifier: Ct5VU801pl/x69hQdUUaYoWlR+ugIyvMehViBYvWqsM=
Subject key identifier: 9F:D6:02:A8:C0:E1:EE:60:88:78:B8:75:70:0C:54:BB:91:0C:22:83
Certificate issuer: /CN=28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C
Certificate serial: 0A0138FD6FEE222479916511327E6920E2EEB97C
Authority key identifier: 28:F9:F9:FB:DF:48:9E:86:A2:CB:92:9A:47:E8:BC:0A:BC:2A:1B:1C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/34352e3233392e37322e302f32342d3234203d3e20323638333535.roa
Signing time: Wed 17 Sep 2025 14:36:09 +0000
ROA not before: Wed 17 Sep 2025 14:31:09 +0000
ROA not after: Wed 16 Sep 2026 14:36:09 +0000
asID: 268355
IP address blocks: 45.239.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.crl
rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 21 Oct 2025 05:24:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:01:38:fd:6f:ee:22:24:79:91:65:11:32:7e:69:20:e2:ee:b9:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C
Validity
Not Before: Sep 17 14:31:09 2025 GMT
Not After : Sep 16 14:36:09 2026 GMT
Subject: CN=9FD602A8C0E1EE608878B875700C54BB910C2283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:90:55:62:b0:36:3a:d9:61:a8:ff:24:c6:2d:
09:de:62:96:ec:df:c4:ee:27:04:17:31:bd:9a:82:
7d:8f:e0:68:39:6f:84:89:62:17:2c:81:95:56:65:
c7:cc:f5:6c:24:db:a1:d2:1b:69:04:63:61:8d:19:
8f:6d:dc:39:ba:43:52:6b:32:5c:68:ef:4e:64:69:
c7:fb:dd:ec:9d:b2:9c:62:94:09:bf:79:c2:4e:79:
14:06:7c:74:3c:63:9b:67:e1:7b:7a:17:0e:7f:55:
48:13:84:63:08:e1:c6:82:b6:39:54:d6:12:85:d5:
aa:77:a7:ae:11:78:68:6f:65:61:96:3f:99:dd:e8:
ea:8c:5a:8f:82:f4:8c:82:4b:ca:b7:da:c9:c0:81:
80:30:c0:1e:84:75:36:9a:44:8d:2a:64:42:9d:dd:
35:95:8f:43:b0:f0:a4:ce:b4:2a:c3:58:3a:ae:ba:
45:2d:45:d7:3c:5e:e7:77:e6:c9:91:61:03:a5:3d:
bd:43:fa:ee:15:1d:8b:a6:86:37:9c:73:b8:70:7a:
51:c5:60:e4:af:fb:8c:60:38:98:d2:24:58:26:0e:
2e:1c:2a:1e:94:97:ab:5d:bc:7e:37:1e:a2:b2:ae:
53:79:82:bf:ea:7b:57:f4:5b:db:db:7a:eb:db:c1:
f9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D6:02:A8:C0:E1:EE:60:88:78:B8:75:70:0C:54:BB:91:0C:22:83
X509v3 Authority Key Identifier:
keyid:28:F9:F9:FB:DF:48:9E:86:A2:CB:92:9A:47:E8:BC:0A:BC:2A:1B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/34352e3233392e37322e302f32342d3234203d3e20323638333535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.239.72.0/24
Signature Algorithm: sha256WithRSAEncryption
85:33:00:25:23:50:ee:12:34:57:25:e6:48:ae:b8:cd:b1:8a:
19:95:70:34:02:72:a5:e1:8d:90:2f:a7:ef:26:d9:f9:3a:20:
b0:72:47:77:58:cf:1f:71:d9:c4:03:35:42:ea:3e:b5:1c:99:
c9:0d:9c:5b:10:61:56:52:3a:0d:a3:f2:b4:12:8f:d4:d5:38:
1a:70:86:8f:66:a0:b9:ac:ed:de:28:f9:a3:22:07:45:24:45:
b2:fc:5e:d7:ed:10:14:ca:ca:1b:84:c1:0c:bb:82:0a:2c:80:
32:8c:1b:be:dd:7f:a1:fd:22:8c:93:a5:01:c9:ac:ec:14:ad:
2a:c3:7d:36:2d:b2:fa:60:16:a9:14:bd:f1:ed:2b:a5:62:54:
be:d0:7b:4b:5d:5f:f8:81:9e:b2:5e:0f:7f:d3:d3:b2:28:03:
e1:49:30:5a:e9:52:4c:34:aa:4a:be:c1:2e:70:c9:c4:bc:d7:
fe:66:67:7d:6e:07:f7:9f:cf:f3:a1:2c:e8:82:84:18:3c:7a:
26:04:4e:ea:99:78:92:fa:54:54:fa:ec:62:54:1e:e1:5b:ec:
ba:1f:0d:75:e6:a8:5c:e4:68:fa:6b:7c:d6:42:d2:1c:19:d2:
81:70:a3:cb:89:6f:a6:d5:d5:93:62:33:ec:3b:ad:e3:a4:ec:
84:25:4d:b0
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUCgE4/W/uIiR5kWURMn5pIOLuuXwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhGOUY5RkJERjQ4OUU4NkEyQ0I5MjlBNDdFOEJDMEFC
QzJBMUIxQzAeFw0yNTA5MTcxNDMxMDlaFw0yNjA5MTYxNDM2MDlaMDMxMTAvBgNV
BAMTKDlGRDYwMkE4QzBFMUVFNjA4ODc4Qjg3NTcwMEM1NEJCOTEwQzIyODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgkFVisDY62WGo/yTGLQneYpbs
38TuJwQXMb2agn2P4Gg5b4SJYhcsgZVWZcfM9Wwk26HSG2kEY2GNGY9t3Dm6Q1Jr
Mlxo705kacf73eydspxilAm/ecJOeRQGfHQ8Y5tn4Xt6Fw5/VUgThGMI4caCtjlU
1hKF1ap3p64ReGhvZWGWP5nd6OqMWo+C9IyCS8q32snAgYAwwB6EdTaaRI0qZEKd
3TWVj0Ow8KTOtCrDWDquukUtRdc8Xud35smRYQOlPb1D+u4VHYumhjecc7hwelHF
YOSv+4xgOJjSJFgmDi4cKh6Ul6tdvH43HqKyrlN5gr/qe1f0W9vbeuvbwflJAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUn9YCqMDh7mCIeLh1cAxUu5EMIoMwHwYDVR0j
BBgwFoAUKPn5+99Inoaiy5KaR+i8CrwqGxwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHJOVHdLVmRlblRSSzdkWFZQY0MzMVNwUnJUSFF5aXdFdnlYaFFVQll0
aTkvMC8yOEY5RjlGQkRGNDg5RTg2QTJDQjkyOUE0N0U4QkMwQUJDMkExQjFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4RjlGOUZCREY0ODlFODZB
MkNCOTI5QTQ3RThCQzBBQkMyQTFCMUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hyTlR3S1ZkZW5UUks3ZFhWUGNDMzFTcFJyVEhReWl3RXZ5WGhRVUJZdGk5LzAv
MzQzNTJlMzIzMzM5MmUzNzMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzMzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALe9IMA0GCSqGSIb3DQEBCwUAA4IBAQCFMwAlI1Du
EjRXJeZIrrjNsYoZlXA0AnKl4Y2QL6fvJtn5OiCwckd3WM8fcdnEAzVC6j61HJnJ
DZxbEGFWUjoNo/K0Eo/U1TgacIaPZqC5rO3eKPmjIgdFJEWy/F7X7RAUysobhMEM
u4IKLIAyjBu+3X+h/SKMk6UByazsFK0qw302LbL6YBapFL3x7SulYlS+0HtLXV/4
gZ6yXg9/09OyKAPhSTBa6VJMNKpKvsEucMnEvNf+Zmd9bgf3n8/zoSzogoQYPHom
BE7qmXiS+lRU+uxiVB7hW+y6Hw115qhc5Gj6a3zWQtIcGdKBcKPLiW+m1dWTYjPs
O63jpOyEJU2w
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:25:22 2025 by rpki-client