
$ rpki-client -vvf rpki-repo.registro.br/repo/2TJnLMFz36csZxidBrhAnaR88pYzpGadyNYbrvMKr5WD/0/323830343a393432633a3a2f33322d3438203d3e20323734383236.roa
File: 323830343a393432633a3a2f33322d3438203d3e20323734383236.roa (raw, json)
Hash identifier: Z311etJiWQKLn+JmnE48W3qZSkPhLk9m6+lP+52N5B0=
Subject key identifier: 8E:85:09:7A:C9:08:5A:F2:BE:CB:2E:77:F6:0A:FA:6D:C0:30:B2:EF
Certificate issuer: /CN=1D1328217C2BD2863C87D2938A271517414BABF6
Certificate serial: 500400E098E13769167420993E4BA6AFCB31C6E2
Authority key identifier: 1D:13:28:21:7C:2B:D2:86:3C:87:D2:93:8A:27:15:17:41:4B:AB:F6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D1328217C2BD2863C87D2938A271517414BABF6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2TJnLMFz36csZxidBrhAnaR88pYzpGadyNYbrvMKr5WD/0/323830343a393432633a3a2f33322d3438203d3e20323734383236.roa
Signing time: Thu 05 Jun 2025 17:20:20 +0000
ROA not before: Thu 05 Jun 2025 17:15:20 +0000
ROA not after: Thu 04 Jun 2026 17:20:20 +0000
asID: 274826
IP address blocks: 2804:942c::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2TJnLMFz36csZxidBrhAnaR88pYzpGadyNYbrvMKr5WD/0/1D1328217C2BD2863C87D2938A271517414BABF6.crl
rsync://rpki-repo.registro.br/repo/2TJnLMFz36csZxidBrhAnaR88pYzpGadyNYbrvMKr5WD/0/1D1328217C2BD2863C87D2938A271517414BABF6.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D1328217C2BD2863C87D2938A271517414BABF6.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 19:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:04:00:e0:98:e1:37:69:16:74:20:99:3e:4b:a6:af:cb:31:c6:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1D1328217C2BD2863C87D2938A271517414BABF6
Validity
Not Before: Jun 5 17:15:20 2025 GMT
Not After : Jun 4 17:20:20 2026 GMT
Subject: CN=8E85097AC9085AF2BECB2E77F60AFA6DC030B2EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8f:b3:36:d1:c7:4f:0d:15:38:f5:29:ed:8f:
c8:47:54:4d:54:03:4d:47:b1:47:62:b0:56:e2:fe:
4a:91:43:a0:9a:01:e4:fa:19:6f:c8:41:af:df:f8:
16:02:48:d2:81:38:6d:ba:a3:59:bb:72:9d:50:bf:
51:77:0a:ce:1a:02:13:1f:3d:a6:09:90:78:75:69:
6e:b5:87:cb:ca:e8:5e:ea:90:5e:68:ee:7d:e4:8b:
33:56:d5:7d:68:75:88:f3:b7:67:e2:d1:1b:04:b6:
79:48:05:3a:90:ec:11:99:25:67:24:03:d5:7a:1b:
70:34:71:95:37:c5:30:19:dd:9c:e6:77:ec:4f:9a:
00:68:c4:20:98:d8:70:aa:c1:da:f5:a1:91:fe:ed:
66:73:6f:29:d3:e2:fe:d8:5e:da:5d:43:d1:65:16:
43:3c:f1:9e:78:2f:bc:ad:48:52:f7:c4:a6:49:4c:
97:2e:01:94:5a:8e:c6:36:4e:13:28:99:00:41:07:
5e:ac:f7:d2:f6:97:f8:c2:f5:90:a7:7b:b9:9e:f1:
45:72:13:65:a8:56:f6:9b:00:12:a6:6c:15:36:af:
4b:bd:cf:1f:c6:b4:19:bb:81:16:88:3c:21:57:5c:
da:f6:d4:d6:f7:8f:50:4a:26:96:70:00:fc:25:c4:
40:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:85:09:7A:C9:08:5A:F2:BE:CB:2E:77:F6:0A:FA:6D:C0:30:B2:EF
X509v3 Authority Key Identifier:
keyid:1D:13:28:21:7C:2B:D2:86:3C:87:D2:93:8A:27:15:17:41:4B:AB:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2TJnLMFz36csZxidBrhAnaR88pYzpGadyNYbrvMKr5WD/0/1D1328217C2BD2863C87D2938A271517414BABF6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D1328217C2BD2863C87D2938A271517414BABF6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2TJnLMFz36csZxidBrhAnaR88pYzpGadyNYbrvMKr5WD/0/323830343a393432633a3a2f33322d3438203d3e20323734383236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:942c::/32
Signature Algorithm: sha256WithRSAEncryption
a6:61:23:40:9e:72:74:48:4c:52:17:33:6b:10:ab:09:fe:4f:
25:4d:24:a2:7e:e5:e4:c4:8f:9b:85:09:dd:08:7c:08:69:30:
01:8e:ac:cc:ad:f6:00:88:55:5f:ac:73:8b:77:cb:e4:d5:70:
2b:9b:8f:b1:97:21:60:cb:67:31:f8:5a:12:5f:ce:11:8b:6c:
80:f5:06:67:00:77:df:bc:87:6b:7a:04:31:03:fa:17:96:57:
6c:35:f5:01:50:e1:f6:db:35:61:47:cd:2a:3c:23:da:ca:bf:
6a:84:52:81:fa:6d:dc:a2:7a:7b:79:19:27:48:f1:74:9e:1f:
09:98:c7:69:f2:d8:a1:9c:cb:90:55:3e:ac:2e:e3:79:76:8c:
ae:bc:a1:b7:e9:6c:7f:84:9e:8c:4b:8a:f9:46:1b:7e:3a:18:
6b:ef:0d:aa:ea:c7:4c:d5:0d:e7:e6:85:a6:61:11:e9:c3:cf:
74:d4:83:a0:2f:7d:c7:5a:5c:fd:8b:54:eb:e3:0c:7d:03:a9:
60:0d:32:6f:e5:34:fc:5e:93:8b:d7:1d:99:b5:5b:47:ff:75:
e3:95:32:3b:98:7d:40:15:ad:00:f0:29:76:9f:2c:f6:19:c2:
59:37:bd:5e:23:15:b3:c9:95:dd:6d:c2:a4:e4:08:4d:45:a2:
59:0e:ba:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:39:06 2025 by rpki-client