
$ rpki-client -vvf rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e34342e302f32342d3234203d3e203533303532.roa
File: 3138372e38342e34342e302f32342d3234203d3e203533303532.roa (raw, json)
Hash identifier: 9Uw/JLq355+siGWWAMU/CgDbUsZIqm/MEzVaCAYKBtk=
Subject key identifier: 6D:1D:1A:B2:1D:B3:FD:0B:6C:BE:4A:EE:C7:C5:99:4D:B8:27:28:F7
Certificate issuer: /CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D
Certificate serial: 2CC62ABACADC5630F5832C315EDEC489D01767E7
Authority key identifier: CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e34342e302f32342d3234203d3e203533303532.roa
Signing time: Mon 01 Sep 2025 18:45:32 +0000
ROA not before: Mon 01 Sep 2025 18:40:32 +0000
ROA not after: Mon 31 Aug 2026 18:45:32 +0000
asID: 53052
IP address blocks: 187.84.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.crl
rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 14:09:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:c6:2a:ba:ca:dc:56:30:f5:83:2c:31:5e:de:c4:89:d0:17:67:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D
Validity
Not Before: Sep 1 18:40:32 2025 GMT
Not After : Aug 31 18:45:32 2026 GMT
Subject: CN=6D1D1AB21DB3FD0B6CBE4AEEC7C5994DB82728F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:06:f8:e3:fc:8f:23:f5:c1:cd:2c:af:32:56:
8f:b4:6e:d1:b7:6a:42:26:7f:23:15:3e:13:14:97:
9b:ad:6a:a6:5c:d5:4d:8a:cf:06:7b:a2:b6:70:b9:
5b:68:bb:59:50:dd:c6:2e:41:57:6c:96:39:d0:7f:
11:36:60:95:0d:c4:37:62:95:5a:fb:be:29:71:3c:
28:b5:84:5f:59:23:d8:59:db:78:f9:4d:02:5b:7c:
c7:79:38:34:6b:71:27:27:d7:fb:e4:4a:fc:40:df:
3a:cb:5b:e0:ef:12:ae:51:7d:52:6e:92:3a:2c:a8:
51:7e:be:db:a9:78:b9:4d:da:7e:b4:34:28:1b:9b:
cb:3f:d1:4f:d9:d7:fa:1e:bf:12:fb:a5:b5:97:d3:
91:72:f9:92:ea:ea:6b:a8:ae:20:d3:92:5a:5d:65:
dd:3e:b1:19:d0:97:cd:3a:81:be:a7:90:1a:02:f7:
b4:a1:60:97:08:91:ab:a0:15:3c:31:f1:ca:ca:e4:
71:60:6c:99:dc:3d:cf:6e:0c:7a:a0:83:ab:8c:6f:
28:60:54:29:a4:37:ce:0a:93:50:c5:25:a0:45:ae:
73:0c:dd:2b:45:ea:d6:ca:2b:27:6e:86:02:4e:13:
2d:88:2b:9f:e8:2c:ff:3d:64:f2:4e:47:ab:13:3e:
4d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:1D:1A:B2:1D:B3:FD:0B:6C:BE:4A:EE:C7:C5:99:4D:B8:27:28:F7
X509v3 Authority Key Identifier:
keyid:CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e34342e302f32342d3234203d3e203533303532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.84.44.0/24
Signature Algorithm: sha256WithRSAEncryption
28:42:f1:e4:08:1e:81:e7:0e:bc:38:7c:d1:37:ad:b9:28:9e:
97:7c:99:00:42:42:ad:53:f8:14:cd:53:e3:ca:f1:d9:fe:50:
18:69:91:4f:f0:32:d4:3c:ce:54:a6:a1:78:a3:b5:23:0f:27:
b4:4e:bb:39:2f:07:1b:c4:06:65:10:82:46:06:b2:d4:b8:20:
d8:09:26:d6:de:79:fc:50:ad:4f:07:d7:e3:86:96:77:44:f8:
a3:aa:17:9d:24:a6:bd:b1:14:0f:97:cf:2c:c6:d4:74:63:ad:
4b:78:ba:ae:dc:93:33:cf:57:e7:c9:76:4c:ff:5d:6b:7b:9e:
36:6e:7f:cd:d6:6b:12:6f:08:5f:03:48:32:9a:0a:67:13:69:
40:e9:a5:74:b0:46:b3:6b:00:0a:fc:f7:9c:8d:cb:53:c7:a4:
46:9b:be:de:58:5b:6e:11:42:f9:c1:e7:c5:24:14:bf:93:fd:
21:62:af:94:76:74:68:00:e0:0d:b1:6a:d3:be:ca:00:88:e6:
eb:a1:28:19:12:5e:64:ff:d6:28:4a:80:da:a3:c5:34:b1:97:
bd:7a:62:02:fd:8a:00:10:7a:34:7b:7f:97:88:f5:46:58:8a:
74:9e:18:b0:70:4f:ad:2a:78:33:04:98:27:f5:8d:ae:6c:83:
8a:5c:e7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:18:29 2025 by rpki-client