
$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/323830343a3837303a3a2f33322d3438203d3e203532383731.roa
File: 323830343a3837303a3a2f33322d3438203d3e203532383731.roa (raw, json)
Hash identifier: vkuFEBuriyY7Wc5M+tN3csW+2HbLE2+XEb6xWudBp34=
Subject key identifier: F4:B5:AB:17:09:A2:C9:71:78:A9:D0:CF:A4:90:A2:3C:FC:DE:5D:4D
Certificate issuer: /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial: 3CA2F4B4E9AEA24A2653D6870B35ED8345B9D047
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/323830343a3837303a3a2f33322d3438203d3e203532383731.roa
Signing time: Wed 05 Mar 2025 23:40:25 +0000
ROA not before: Wed 05 Mar 2025 23:35:25 +0000
ROA not after: Wed 04 Mar 2026 23:40:25 +0000
asID: 52871
IP address blocks: 2804:870::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 07 Nov 2025 06:24:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:a2:f4:b4:e9:ae:a2:4a:26:53:d6:87:0b:35:ed:83:45:b9:d0:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Validity
Not Before: Mar 5 23:35:25 2025 GMT
Not After : Mar 4 23:40:25 2026 GMT
Subject: CN=F4B5AB1709A2C97178A9D0CFA490A23CFCDE5D4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7e:b9:cd:79:9c:c9:66:0c:f6:14:14:ee:8b:
f8:8a:c7:95:ba:f5:0c:24:74:eb:49:6e:4b:43:a6:
88:7d:ee:9e:58:d8:b3:e5:e2:1f:a7:6d:82:b1:62:
95:84:13:cd:ee:8d:56:d4:a1:8b:45:fb:44:56:a4:
b0:25:81:ba:c0:21:91:9f:1e:90:da:1c:59:4f:4a:
32:cc:58:58:62:e7:bd:40:7b:d3:09:68:38:d4:15:
99:83:18:fb:de:57:5a:2b:b6:3c:09:8a:82:ad:0f:
e1:73:b8:6b:20:ed:1f:57:c0:1c:72:3f:2a:5b:21:
fc:76:fa:ac:02:15:60:18:66:dc:35:87:7b:e9:35:
5d:c4:89:0e:d6:2e:52:83:8c:ce:0f:be:0e:0d:bd:
e8:06:7c:1c:35:4b:22:40:4a:1c:4a:51:0c:d2:15:
33:51:2c:de:11:61:bb:22:99:c1:f5:73:85:45:2f:
a9:4c:55:3f:02:26:62:61:f3:65:0e:7b:fe:ce:d9:
88:f6:fe:f0:3a:1e:dc:78:75:36:69:f9:a0:87:8b:
d8:37:d0:ca:0b:b3:34:85:d0:57:9b:d0:13:de:9b:
46:f7:6f:67:7e:76:4e:84:45:cd:81:4d:ef:88:e4:
20:48:5e:e2:d8:93:f0:f5:81:33:b6:da:05:91:3c:
e3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B5:AB:17:09:A2:C9:71:78:A9:D0:CF:A4:90:A2:3C:FC:DE:5D:4D
X509v3 Authority Key Identifier:
keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/323830343a3837303a3a2f33322d3438203d3e203532383731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:870::/32
Signature Algorithm: sha256WithRSAEncryption
45:c6:57:74:f7:5c:fc:e2:d3:e4:9a:82:ef:5f:5d:c8:94:1f:
7d:1a:a5:59:90:6d:00:40:10:97:ce:1b:35:f6:82:67:8b:c1:
bf:dc:64:81:9a:1e:95:c3:8b:d7:81:1f:a4:79:1e:5f:ea:e6:
6c:f2:a6:9e:a9:3d:7a:57:0e:87:28:79:30:a8:8e:aa:d3:11:
b6:5c:da:87:a8:a2:54:0a:0f:10:38:e6:8b:bb:6f:eb:d4:87:
cb:0f:79:60:c3:d0:3b:c3:8f:8c:7e:56:91:20:07:03:62:ac:
d0:00:d7:c2:cf:bc:56:18:dd:66:0e:6b:64:f1:43:d4:2c:84:
b0:9c:ca:e3:f0:61:ea:02:36:a8:f9:0a:ce:0b:bd:45:8a:c5:
08:e9:87:cc:92:21:c4:9e:6a:fb:e4:62:54:b0:d8:2c:12:8f:
8c:eb:44:bd:88:6e:66:ec:9c:aa:36:5a:18:46:7e:d0:48:b9:
9f:2a:d0:a3:1e:ec:d2:07:11:22:bb:69:49:e4:4f:0a:39:47:
b5:6f:b9:68:bf:a2:0e:8a:d6:21:32:8b:be:1c:82:46:13:7e:
e9:97:7a:e3:08:69:6c:a5:3f:a4:c1:02:2f:fa:a7:5e:ae:48:
db:22:a4:6b:bd:b9:07:4c:fe:51:39:4d:1f:8c:35:f4:78:32:
86:9e:2f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 06:52:28 2025 by rpki-client