
$ rpki-client -vvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3134342e34382e302f32302d3234203d3e203238353731.roa
File: 3230302e3134342e34382e302f32302d3234203d3e203238353731.roa (raw, json)
Hash identifier: QmBcOp/2MWj+oHYMyLaKlQO/4ARKscdn1+wlSv1VFZc=
Subject key identifier: 8F:D8:7D:8A:56:83:61:92:F4:A2:B1:50:7E:18:98:04:8F:BE:5C:05
Certificate issuer: /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
Certificate serial: 343BA34FB0950817844D379E3E0848AF4C9A323E
Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3134342e34382e302f32302d3234203d3e203238353731.roa
Signing time: Mon 13 Oct 2025 13:46:24 +0000
ROA not before: Mon 13 Oct 2025 13:41:24 +0000
ROA not after: Mon 12 Oct 2026 13:46:24 +0000
asID: 28571
IP address blocks: 200.144.48.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl
rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 04:04:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:3b:a3:4f:b0:95:08:17:84:4d:37:9e:3e:08:48:af:4c:9a:32:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
Validity
Not Before: Oct 13 13:41:24 2025 GMT
Not After : Oct 12 13:46:24 2026 GMT
Subject: CN=8FD87D8A56836192F4A2B1507E1898048FBE5C05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:88:00:47:09:af:aa:71:84:b0:96:43:1e:47:
11:54:13:e1:59:1a:1c:2b:03:21:91:51:39:7a:1c:
09:15:46:6c:eb:ae:d3:de:d3:4e:f3:77:f7:64:be:
ff:a6:1f:e7:1b:2b:f1:f3:30:cf:2b:19:10:14:34:
f1:16:59:c9:7e:30:1c:99:d8:de:d6:95:22:63:3d:
1c:27:71:9a:94:44:90:1a:0d:78:11:40:c9:67:6e:
6d:c0:82:9c:c7:62:21:56:ba:8b:6e:4b:17:e7:83:
69:a9:8c:45:d8:36:16:95:ae:a5:13:d1:a2:3f:58:
fc:cb:d6:f7:5a:58:22:95:e6:15:0b:1b:7a:85:f4:
e7:f4:1c:d8:92:f2:4e:35:75:d7:3d:c4:6e:f6:24:
73:af:da:07:43:a8:26:21:60:4d:16:eb:d9:d4:0b:
86:d1:25:34:8c:e5:f6:41:11:65:14:48:c9:ad:73:
19:2d:38:a1:ce:d1:97:7b:6a:52:05:b5:e3:a3:33:
fb:97:3d:ee:e2:68:3a:8c:7a:96:5c:f5:25:9a:d4:
3e:74:cb:2e:91:7d:f8:ac:06:fd:9c:ab:8b:3c:9c:
6d:ae:99:1d:8e:ee:d5:73:04:80:58:22:dd:a0:37:
d3:ee:3a:ef:f7:56:28:9f:76:e2:27:6b:c4:b3:a8:
5e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D8:7D:8A:56:83:61:92:F4:A2:B1:50:7E:18:98:04:8F:BE:5C:05
X509v3 Authority Key Identifier:
keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3134342e34382e302f32302d3234203d3e203238353731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.144.48.0/20
Signature Algorithm: sha256WithRSAEncryption
16:af:80:0a:42:65:a2:6d:9b:94:88:13:8c:2f:56:f1:fa:a4:
ca:30:53:fd:26:4a:12:90:e1:96:a8:df:64:e1:01:07:b1:13:
53:55:78:61:80:3c:00:e6:61:6c:c4:10:e8:0b:2c:46:37:60:
5d:3f:13:cd:fb:d4:ed:6b:c9:45:7a:53:55:9e:39:79:ec:2c:
b8:e0:55:65:48:04:0a:57:33:5a:ce:59:22:da:73:bc:46:7d:
be:a9:c6:2c:0e:54:42:55:a0:ef:a1:97:ec:b2:62:c0:66:37:
dc:6d:3a:38:35:21:f3:21:e4:81:d7:69:75:9c:b5:b3:7f:c1:
8b:ac:e2:8c:b2:50:a7:9e:6d:9b:45:d6:db:dc:61:fc:23:43:
0d:43:5d:99:fc:0c:eb:74:e1:9a:a1:8e:af:7c:b1:a8:ab:43:
8b:76:d5:1d:04:55:9c:93:3a:fc:4e:30:fd:74:14:22:2f:4d:
d9:60:3e:c6:6a:0d:d0:af:e9:9d:e5:a1:24:95:0d:62:67:2f:
1d:74:ba:ae:f9:64:23:0c:17:1f:76:92:2f:36:04:67:7d:81:
94:2c:73:5e:7d:57:ef:27:22:05:d4:0e:16:07:a7:53:43:71:
96:2e:07:48:23:6f:e9:77:4e:79:6e:13:61:99:1d:bb:32:0c:
9e:5f:c0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:11:10 2025 by rpki-client