
$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a333330303a3a2f33322d3332203d3e203631353837.roa
File: 323830343a333330303a3a2f33322d3332203d3e203631353837.roa (raw, json)
Hash identifier: CHufkcreOMoRm/d+eu9Q0e3b5NGygOXgGyjU/MtjkEw=
Subject key identifier: 67:9E:18:61:BD:17:F8:BA:BF:24:51:55:67:39:23:D8:33:F4:62:21
Certificate issuer: /CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
Certificate serial: 471D8DDD8ED8027B8566E3C6845FABAD5B89B8E3
Authority key identifier: 1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a333330303a3a2f33322d3332203d3e203631353837.roa
Signing time: Tue 31 Dec 2024 18:11:18 +0000
ROA not before: Tue 31 Dec 2024 18:06:18 +0000
ROA not after: Tue 30 Dec 2025 18:11:18 +0000
asID: 61587
IP address blocks: 2804:3300::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl
rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 04:41:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:1d:8d:dd:8e:d8:02:7b:85:66:e3:c6:84:5f:ab:ad:5b:89:b8:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
Validity
Not Before: Dec 31 18:06:18 2024 GMT
Not After : Dec 30 18:11:18 2025 GMT
Subject: CN=679E1861BD17F8BABF245155673923D833F46221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:51:4e:a0:a8:6a:fd:50:d2:a9:96:66:fa:33:
8d:88:c8:e3:25:2e:1d:8e:7d:46:9d:f7:19:29:0a:
b1:9d:d4:a8:b2:5b:e7:aa:6f:34:99:48:ff:49:81:
a4:00:27:f9:81:e6:d8:a9:37:ee:99:ea:c3:36:11:
76:75:0a:12:1a:e8:64:bc:9d:ff:32:ce:a6:95:f0:
64:05:dd:91:12:bf:d1:8e:93:44:39:4d:68:f2:e4:
9e:81:78:3e:87:23:06:44:38:47:dc:ac:68:ee:4f:
34:d6:60:f1:eb:a1:bd:6d:99:25:ad:29:57:3a:d3:
9c:f4:4f:74:9e:b7:13:33:24:b3:84:75:c0:03:bb:
89:86:7c:19:b7:bb:36:f8:80:2a:90:41:83:6f:87:
2f:f7:a8:1c:3a:f1:bf:d8:05:01:ca:e3:72:e4:92:
9e:19:79:f7:b4:f2:a8:fa:32:34:85:0d:74:a4:08:
47:c0:21:21:96:77:ff:54:e7:8f:b8:0c:c3:0d:fb:
1f:13:5c:41:f4:ae:dc:64:54:f6:4a:5e:4c:9f:cb:
25:e8:de:b0:30:fa:95:00:bd:e6:16:2c:37:f5:67:
b9:48:eb:cf:51:22:e2:22:1f:75:d7:f1:99:39:4b:
ff:36:dd:31:02:6b:80:05:aa:c3:66:1a:81:c4:77:
53:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:9E:18:61:BD:17:F8:BA:BF:24:51:55:67:39:23:D8:33:F4:62:21
X509v3 Authority Key Identifier:
keyid:1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a333330303a3a2f33322d3332203d3e203631353837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3300::/32
Signature Algorithm: sha256WithRSAEncryption
81:d2:bf:22:27:dd:22:01:40:e8:70:5e:0e:76:f7:88:ff:a7:
11:b6:44:c6:fc:c1:9d:e0:87:34:78:04:80:a4:16:85:a8:14:
a7:69:31:88:cb:81:d5:f1:83:fc:37:cf:37:91:90:7a:42:6b:
3a:b4:6f:9c:4d:18:bb:ca:16:1e:5b:7a:b9:82:4f:52:80:55:
95:ac:3d:64:aa:67:4e:65:1d:68:f8:dc:6c:e2:9c:e0:b9:2d:
b1:28:f7:9b:12:54:7e:2c:a8:ad:91:71:c1:7e:24:87:ea:98:
b4:1c:6c:32:d9:30:a2:81:e4:d4:15:96:7d:58:ec:f4:c6:57:
92:6f:8c:86:f8:e4:42:3a:3b:b2:8b:f1:2a:06:be:94:9e:cd:
37:c8:b8:7b:0c:5c:dc:31:75:52:1b:5f:c2:e4:b8:b7:97:5d:
55:af:05:07:5b:4a:50:9a:e2:82:e9:f3:b8:3c:53:2e:bc:aa:
0a:97:f9:14:32:26:00:b8:5f:0e:4c:64:5a:9c:9f:df:6d:f7:
2d:34:a4:c9:82:3d:53:9e:0f:db:57:92:32:56:54:ec:de:22:
71:47:0e:38:16:60:fa:f8:62:06:4d:94:4f:91:53:8d:9b:db:
e7:0c:87:56:ee:fc:c9:34:e6:79:d4:0d:87:d6:43:31:64:5c:
80:45:78:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:45:09 2025 by rpki-client