
$ rpki-client -vvf rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/323830343a343838633a3a2f33322d3334203d3e20323637313238.roa
File: 323830343a343838633a3a2f33322d3334203d3e20323637313238.roa (raw, json)
Hash identifier: 7ioWv+IRXQuJci/BwSCDSwxhkzBb2TZETCwqNrFzMro=
Subject key identifier: D3:12:A5:E1:DC:0B:24:8E:82:7D:66:5B:45:08:8C:08:E4:F8:A5:77
Certificate issuer: /CN=206D33F3A8B725D8326CB6CF3F2E8CBBB714859E
Certificate serial: 118D913D8C7D543F4BE6EB648C5DECA3AF98A5FC
Authority key identifier: 20:6D:33:F3:A8:B7:25:D8:32:6C:B6:CF:3F:2E:8C:BB:B7:14:85:9E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/206D33F3A8B725D8326CB6CF3F2E8CBBB714859E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/323830343a343838633a3a2f33322d3334203d3e20323637313238.roa
Signing time: Mon 11 Aug 2025 14:01:01 +0000
ROA not before: Mon 11 Aug 2025 13:56:01 +0000
ROA not after: Mon 10 Aug 2026 14:01:01 +0000
asID: 267128
IP address blocks: 2804:488c::/32 maxlen: 34
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/206D33F3A8B725D8326CB6CF3F2E8CBBB714859E.crl
rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/206D33F3A8B725D8326CB6CF3F2E8CBBB714859E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/206D33F3A8B725D8326CB6CF3F2E8CBBB714859E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 13:08:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:8d:91:3d:8c:7d:54:3f:4b:e6:eb:64:8c:5d:ec:a3:af:98:a5:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206D33F3A8B725D8326CB6CF3F2E8CBBB714859E
Validity
Not Before: Aug 11 13:56:01 2025 GMT
Not After : Aug 10 14:01:01 2026 GMT
Subject: CN=D312A5E1DC0B248E827D665B45088C08E4F8A577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:81:36:e0:52:a5:90:9c:83:95:db:4d:d8:6b:
6f:bf:c3:5f:03:2d:b9:d3:f6:85:b4:9f:ef:e0:64:
e9:92:4f:a9:48:cc:fe:52:2b:bb:27:b2:6f:c2:92:
e7:3d:53:06:fa:e1:46:53:4f:8b:c0:ae:ed:4d:81:
24:ac:9e:31:04:76:e0:13:ef:ad:d5:57:bd:d9:16:
3c:97:72:16:bf:77:aa:bd:98:00:5f:20:42:b0:6c:
3d:70:60:aa:57:4a:ba:02:aa:06:1b:f0:71:c7:fa:
00:a8:36:3c:bf:a9:8f:bf:3c:37:dc:b0:91:97:a0:
5c:8f:71:19:05:b4:ba:78:cf:45:c0:e0:35:47:06:
99:f8:ed:91:08:69:15:7f:92:9f:0f:08:19:db:f5:
43:1e:9c:19:f4:d3:96:0e:5e:d5:b4:ad:6b:30:42:
60:56:7b:9d:d0:c7:6f:a2:3b:a0:0b:99:66:63:b5:
a2:19:74:36:c7:d6:83:38:7c:4a:69:a6:ad:c9:97:
41:cc:75:a4:74:b9:b0:9e:d8:0c:3d:8a:d0:8a:3a:
95:a6:79:4c:68:36:fb:71:78:f0:d0:cb:47:ca:e9:
80:3c:72:0d:5f:ed:d9:86:06:e9:a7:00:f6:3c:a1:
b5:76:49:d2:3e:c4:8d:f6:97:e8:c5:e6:8d:54:6e:
15:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:12:A5:E1:DC:0B:24:8E:82:7D:66:5B:45:08:8C:08:E4:F8:A5:77
X509v3 Authority Key Identifier:
keyid:20:6D:33:F3:A8:B7:25:D8:32:6C:B6:CF:3F:2E:8C:BB:B7:14:85:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/206D33F3A8B725D8326CB6CF3F2E8CBBB714859E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/206D33F3A8B725D8326CB6CF3F2E8CBBB714859E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/323830343a343838633a3a2f33322d3334203d3e20323637313238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:488c::/32
Signature Algorithm: sha256WithRSAEncryption
9c:f0:47:17:f9:3b:ef:32:5c:f4:0e:32:69:f8:23:30:b9:02:
3f:07:67:53:5c:28:8d:23:20:fe:ce:f6:89:6a:26:4c:dd:34:
63:c3:80:8d:a7:1b:fd:ac:e3:8d:c4:f0:20:5c:9f:b3:5b:a5:
11:74:b2:b3:be:a3:3f:2c:a1:a2:5b:4e:93:1e:a7:26:3c:bb:
85:a6:1f:03:ed:86:dd:49:3f:78:b0:39:25:65:90:af:2f:d8:
b3:90:31:90:6d:d5:2d:ba:48:92:af:26:97:49:6c:cd:be:bd:
7c:c6:f3:10:52:bf:00:07:f5:2d:b9:f8:c8:e8:7d:86:14:2e:
58:fe:72:09:7a:b3:9e:f2:73:3e:cb:3b:d1:88:0c:5f:b8:d1:
f1:da:5a:7d:56:ec:9f:fb:2e:83:6b:1f:84:de:42:84:23:42:
5b:4a:07:8d:2a:b4:f3:dc:8d:3c:a2:92:b6:aa:87:81:76:6d:
02:07:5f:d2:95:f3:ce:f2:8a:c0:8d:7d:09:1f:e3:3f:48:56:
a9:5d:2f:5f:29:3d:96:50:9c:cb:87:fe:5c:d7:f0:f9:1e:a5:
44:f8:46:9c:bc:34:9f:ab:54:af:dc:58:06:36:7c:90:a8:ad:
76:0b:4a:3d:fd:bb:79:98:d9:85:69:79:62:99:cf:b7:25:db:
00:17:9e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:10:48 2025 by rpki-client