
$ rpki-client -vvf rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/323830343a323836303a3a2f33322d313238203d3e20323633393539.roa
File: 323830343a323836303a3a2f33322d313238203d3e20323633393539.roa (raw, json)
Hash identifier: oVXD5VaDUqeD9Go0IkrJ158heEh4rOl0USTusw94FRI=
Subject key identifier: 4D:85:CC:7F:96:68:15:31:99:46:20:48:B7:CA:82:39:3A:2A:3D:45
Certificate issuer: /CN=8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F
Certificate serial: 44BED073B2DA32716974C4FED0E8F4239EDE988F
Authority key identifier: 8C:B5:A2:51:6F:71:3C:FF:E9:D1:50:4E:79:A4:BD:3B:9A:FB:0A:0F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/323830343a323836303a3a2f33322d313238203d3e20323633393539.roa
Signing time: Mon 12 May 2025 14:39:02 +0000
ROA not before: Mon 12 May 2025 14:34:02 +0000
ROA not after: Mon 11 May 2026 14:39:02 +0000
asID: 263959
IP address blocks: 2804:2860::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.crl
rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 02:14:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:be:d0:73:b2:da:32:71:69:74:c4:fe:d0:e8:f4:23:9e:de:98:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F
Validity
Not Before: May 12 14:34:02 2025 GMT
Not After : May 11 14:39:02 2026 GMT
Subject: CN=4D85CC7F9668153199462048B7CA82393A2A3D45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:02:12:b1:92:0c:0f:3f:db:25:e3:2b:f1:f0:
1e:f3:47:ba:db:9b:a5:de:5a:04:ac:83:7c:dc:2c:
20:06:40:19:ea:cb:d5:b2:1d:fe:ac:32:20:81:dc:
61:57:fd:77:25:4f:86:86:55:ec:b1:e5:33:81:a6:
85:aa:9a:cf:d5:59:16:0a:54:76:de:41:c8:50:ad:
90:4c:ae:06:01:39:dc:dc:8a:4d:22:fb:83:6b:ba:
a3:25:01:bc:1a:1b:e8:40:0e:70:02:51:a1:1d:42:
a6:a8:0f:0d:f3:81:6f:34:46:8d:95:dc:4f:69:3c:
ba:c2:7a:bd:0a:f8:0f:f2:05:b4:1e:18:30:1b:13:
8c:a8:cf:4e:29:6b:5a:05:d4:27:79:1c:45:ab:5d:
42:ea:b8:d3:96:f5:c7:a1:d8:cb:3c:ed:3a:a4:e4:
cf:ff:1b:28:8d:9a:6d:34:75:10:c8:3d:85:85:08:
8e:b2:d0:2e:86:1c:0a:61:cb:8f:e8:b6:a3:7e:72:
68:f8:f3:1e:ed:7b:8c:c6:d5:47:61:33:75:e8:5d:
0b:2c:19:dc:53:bc:db:55:42:53:2d:a1:43:99:57:
13:64:00:9c:dd:98:e4:14:e8:9c:41:9d:e4:63:76:
69:e3:64:f6:e9:0c:9f:aa:ca:03:2a:ef:e5:53:a4:
c1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:85:CC:7F:96:68:15:31:99:46:20:48:B7:CA:82:39:3A:2A:3D:45
X509v3 Authority Key Identifier:
keyid:8C:B5:A2:51:6F:71:3C:FF:E9:D1:50:4E:79:A4:BD:3B:9A:FB:0A:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/323830343a323836303a3a2f33322d313238203d3e20323633393539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2860::/32
Signature Algorithm: sha256WithRSAEncryption
97:a4:b8:a1:52:30:82:6e:63:69:5c:03:95:84:1d:5d:00:8f:
3d:3c:d6:d3:73:a3:68:d1:39:49:10:f3:89:b2:fc:9f:f2:06:
7f:e8:59:4a:80:e8:e9:a5:e3:67:4d:bb:11:cd:1d:96:fb:6c:
b2:75:44:da:28:8f:5e:9a:5a:ec:1a:3c:43:59:45:e8:95:2e:
05:7e:3b:0a:40:96:3a:7d:2f:b5:99:04:d1:c3:c6:b5:57:a3:
b8:4d:1a:04:d1:f7:e1:a7:3b:2a:8a:b2:78:58:c2:6f:9d:e5:
53:26:89:a8:ea:a7:0e:58:33:58:6b:9c:a6:57:08:63:b6:16:
b7:38:df:43:23:55:33:b5:0b:9d:85:7a:21:ae:cd:bd:db:6c:
9c:9a:80:0d:77:d4:fc:ba:c0:57:04:9d:c1:f3:62:3e:95:53:
b3:ec:9a:c4:e0:ea:b4:c3:ea:ff:b6:3f:d1:98:40:5e:c7:d9:
0d:3d:67:03:55:e1:81:62:54:9a:4a:81:4b:b0:c7:2c:6d:66:
78:ef:30:67:9d:38:47:61:3c:cb:24:f2:3c:f9:8e:23:3d:e1:
7f:6c:ed:03:01:19:df:b5:b1:94:0d:63:57:f9:a3:93:84:44:
5e:a4:e6:74:49:08:8f:2e:d9:a1:16:ca:32:a3:f6:8f:8d:d4:
4d:b8:19:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:33:55 2025 by rpki-client