
$ rpki-client -vvf rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/3138392e382e39362e302f32302d3234203d3e203238363730.roa
File: 3138392e382e39362e302f32302d3234203d3e203238363730.roa (raw, json)
Hash identifier: hkuHE0uuplkpmlLR3ixKN5vVZRZFkEhI6iVDTNpExP4=
Subject key identifier: 15:B0:3B:A4:EA:EC:C2:50:8F:B2:80:D9:CA:B3:F6:52:05:3F:48:50
Certificate issuer: /CN=4E7EB31B6D4532D1C10444DB3B88D1F6D002F236
Certificate serial: 429349B9B364CBE0F033D32A55563536EF5F834E
Authority key identifier: 4E:7E:B3:1B:6D:45:32:D1:C1:04:44:DB:3B:88:D1:F6:D0:02:F2:36
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/3138392e382e39362e302f32302d3234203d3e203238363730.roa
Signing time: Tue 01 Jul 2025 15:46:34 +0000
ROA not before: Tue 01 Jul 2025 15:41:34 +0000
ROA not after: Tue 30 Jun 2026 15:46:34 +0000
asID: 28670
IP address blocks: 189.8.96.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.crl
rsync://rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 17:24:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:93:49:b9:b3:64:cb:e0:f0:33:d3:2a:55:56:35:36:ef:5f:83:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E7EB31B6D4532D1C10444DB3B88D1F6D002F236
Validity
Not Before: Jul 1 15:41:34 2025 GMT
Not After : Jun 30 15:46:34 2026 GMT
Subject: CN=15B03BA4EAECC2508FB280D9CAB3F652053F4850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b8:8a:c2:4c:9d:11:48:aa:89:e2:b4:1f:92:
e2:51:52:6e:72:89:49:7a:25:53:19:04:23:20:f6:
4f:6d:9a:c7:bf:1c:96:0f:50:ea:7f:32:5f:b9:13:
91:87:6f:b0:22:83:1e:fd:78:6c:6b:f0:d7:0a:48:
a5:77:b2:06:b0:71:15:6a:99:32:24:72:e6:c9:bc:
f6:e2:0a:d5:a6:c9:f2:2e:53:1f:ad:ed:1b:e8:06:
da:17:00:a1:36:a1:ff:99:af:9d:b7:f5:e2:e5:7a:
9c:ed:5a:6a:46:1d:b4:92:22:41:86:2a:b1:d2:29:
63:dd:ee:41:13:c7:67:fa:7c:61:3f:a3:b3:eb:aa:
5e:64:15:89:d1:ab:b9:bf:e5:c6:5b:1a:f1:21:36:
01:b5:e9:6d:19:51:0b:44:9a:00:8f:27:fc:73:31:
fa:e8:0d:04:a0:89:17:d6:c8:42:a7:ed:97:bd:70:
30:17:67:47:13:58:4f:d6:c3:eb:63:dd:77:02:83:
d9:19:78:b1:76:93:fb:10:a4:f3:f7:da:b2:40:fa:
1d:4e:88:a8:a9:93:39:c8:2e:99:1c:90:e2:c2:8a:
63:73:9e:26:ad:d7:20:30:b7:96:01:de:bb:37:6b:
be:41:36:c0:1c:92:ed:0f:33:d6:28:d0:05:94:28:
b0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B0:3B:A4:EA:EC:C2:50:8F:B2:80:D9:CA:B3:F6:52:05:3F:48:50
X509v3 Authority Key Identifier:
keyid:4E:7E:B3:1B:6D:45:32:D1:C1:04:44:DB:3B:88:D1:F6:D0:02:F2:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/3138392e382e39362e302f32302d3234203d3e203238363730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.8.96.0/20
Signature Algorithm: sha256WithRSAEncryption
bf:4e:e7:16:44:84:91:c2:f5:53:3c:fe:c5:d7:d9:19:15:26:
30:8d:2f:59:73:54:67:39:22:78:8a:66:6d:b3:50:36:74:93:
30:87:7c:8d:e3:c7:27:87:a7:84:dd:66:43:c2:47:0b:dc:e7:
e1:34:74:2e:66:eb:76:e0:d3:22:02:8c:1d:d0:71:e7:f8:d4:
f4:2d:29:5f:c3:51:05:a5:b7:f1:49:fd:f6:77:e7:48:13:11:
40:da:68:19:02:96:f8:b9:77:eb:65:ba:50:66:a1:d1:08:e0:
78:b4:b8:7b:73:af:1c:44:4f:44:cc:03:d9:a7:4a:82:94:e0:
42:ea:4d:b5:6f:d4:e5:74:2c:21:ed:b3:dc:9f:fe:f3:b8:6b:
25:23:8d:96:a1:07:3f:02:78:c1:1b:34:f9:d4:37:d9:fc:8e:
75:ff:10:39:60:f0:96:5a:0b:ca:11:7b:f6:73:c6:5f:21:86:
f2:67:91:aa:b4:33:e5:51:b7:7c:06:3c:90:ce:76:cd:e0:40:
08:bb:0c:b9:f7:84:89:1a:05:ad:e9:76:fc:79:a4:33:ea:82:
27:92:45:1e:b1:a9:bb:08:96:b4:53:b6:77:56:5f:35:cb:43:
ff:ca:bd:5c:06:f0:b5:94:34:32:74:a7:8a:50:3f:91:75:ea:
82:86:58:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:03:41 2025 by rpki-client