
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/323830343a3838303a313830303a3a2f33392d3339203d3e203238323230.roa
File: 323830343a3838303a313830303a3a2f33392d3339203d3e203238323230.roa (raw, json)
Hash identifier: HfLqPCF7rqqo5e+pQ51fd0bavXrbSmz1SQtcxf1fxOQ=
Subject key identifier: 9E:32:9D:47:52:89:66:BC:88:0A:50:15:B3:4D:C7:C6:18:24:18:D4
Certificate issuer: /CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72
Certificate serial: 0F02898E71AA3D0B4C46EB0780BE0BB1DB860490
Authority key identifier: DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/323830343a3838303a313830303a3a2f33392d3339203d3e203238323230.roa
Signing time: Thu 23 Oct 2025 17:43:24 +0000
ROA not before: Thu 23 Oct 2025 17:38:24 +0000
ROA not after: Thu 22 Oct 2026 17:43:24 +0000
asID: 28220
IP address blocks: 2804:880:1800::/39 maxlen: 39
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl
rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 05:08:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:02:89:8e:71:aa:3d:0b:4c:46:eb:07:80:be:0b:b1:db:86:04:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72
Validity
Not Before: Oct 23 17:38:24 2025 GMT
Not After : Oct 22 17:43:24 2026 GMT
Subject: CN=9E329D47528966BC880A5015B34DC7C6182418D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4f:bf:c3:23:e5:20:c2:d2:6f:23:74:a7:f3:
c4:38:ad:d7:50:fe:fe:66:b8:7f:23:a1:ad:a7:9d:
f0:2d:dd:1a:a0:06:8e:44:b8:cb:ae:86:0b:2f:28:
f7:99:d3:84:80:06:0e:76:e4:07:c6:fc:fc:3c:ee:
25:ae:6c:aa:30:21:c5:1e:4f:0a:6b:bc:14:e7:8c:
56:5b:9a:e8:f3:30:bf:e0:9b:35:01:d7:2f:9a:9e:
d1:86:f2:0f:4c:18:d3:61:11:f3:d2:31:1f:fa:97:
93:28:69:0b:03:26:20:b2:14:99:fc:0f:23:50:86:
db:41:5f:ad:df:05:49:bf:6e:e6:3a:97:62:37:fd:
2a:37:52:5e:1a:21:a2:d9:d2:d5:67:7b:5d:2a:e1:
13:8e:0e:3f:18:ee:a0:69:bc:5b:72:d4:6f:92:f6:
1b:64:f7:d7:43:c4:48:16:fd:ba:93:1f:16:b6:a1:
47:87:db:a2:02:1f:53:fb:c7:93:d9:73:5e:32:ee:
46:e8:54:e5:f6:c4:6c:5d:57:0b:a4:f0:83:ba:11:
ee:1e:b0:b4:b4:02:74:36:b3:96:5b:da:97:f8:fd:
bd:e2:5d:02:39:94:11:5d:0f:64:6c:ff:25:3f:fc:
cd:64:2c:71:91:2e:56:41:9f:54:f1:2f:4c:85:7f:
81:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:32:9D:47:52:89:66:BC:88:0A:50:15:B3:4D:C7:C6:18:24:18:D4
X509v3 Authority Key Identifier:
keyid:DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/323830343a3838303a313830303a3a2f33392d3339203d3e203238323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:880:1800::/39
Signature Algorithm: sha256WithRSAEncryption
7e:eb:81:f4:2a:06:17:80:92:e6:fa:b8:10:25:e2:84:dd:17:
c7:3a:20:9c:0d:73:64:19:02:de:18:d1:63:fd:3f:f2:93:ba:
97:fb:b4:b1:a5:e3:7f:ae:c0:19:02:19:66:31:27:83:6c:02:
23:81:18:d3:b7:6c:8c:3c:90:c8:0f:5c:d3:f3:55:6c:0d:e6:
48:1d:f8:a6:26:0e:6d:c6:3a:0c:48:e1:2d:e5:de:fb:08:2e:
bc:ff:03:91:e9:64:d8:40:55:8c:d6:2a:5c:2e:34:eb:c2:93:
6f:30:6f:53:6b:bf:7f:ff:70:7d:93:c8:48:91:47:73:a4:b4:
47:d5:32:7b:a0:4f:65:cd:59:6d:9f:cc:4b:4f:39:3b:bd:ec:
d9:45:6b:a7:1b:67:94:26:e2:ee:5c:a1:61:a8:93:b9:df:08:
46:33:0c:6d:e3:91:dd:57:16:90:1d:d6:b2:4a:24:5f:9f:12:
5a:7b:ef:72:5e:e7:e7:94:5c:bc:b9:0c:08:d2:65:4f:95:4d:
8e:07:51:e1:4b:56:8d:2d:37:7e:df:43:e0:f6:8b:69:32:de:
09:3c:c3:8c:06:69:8e:2b:25:dd:38:7c:a4:61:14:32:a0:f5:
f5:01:cd:bb:1a:c3:b8:8e:b6:1e:aa:63:bc:74:78:ca:aa:cd:
fd:5e:d1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:10:58 2025 by rpki-client