
$ rpki-client -vvf rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/323830343a323562303a3a2f33322d3336203d3e20323634323935.roa
File: 323830343a323562303a3a2f33322d3336203d3e20323634323935.roa (raw, json)
Hash identifier: 6JFNis6CMMlRcOn/JP2hG4cErjjDFHI1FiBH7GfiLcc=
Subject key identifier: B7:67:5D:29:AE:23:87:4C:6A:E7:74:71:FE:53:33:FF:FB:B4:14:85
Certificate issuer: /CN=89DCCC087983CCF309AB03F388DFD612618A10BC
Certificate serial: 0FFC4A8C11B64A16B4186FE3DB80762A1E38E838
Authority key identifier: 89:DC:CC:08:79:83:CC:F3:09:AB:03:F3:88:DF:D6:12:61:8A:10:BC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89DCCC087983CCF309AB03F388DFD612618A10BC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/323830343a323562303a3a2f33322d3336203d3e20323634323935.roa
Signing time: Mon 20 Oct 2025 19:02:03 +0000
ROA not before: Mon 20 Oct 2025 18:57:03 +0000
ROA not after: Mon 19 Oct 2026 19:02:03 +0000
asID: 264295
IP address blocks: 2804:25b0::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/89DCCC087983CCF309AB03F388DFD612618A10BC.crl
rsync://rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/89DCCC087983CCF309AB03F388DFD612618A10BC.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89DCCC087983CCF309AB03F388DFD612618A10BC.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 14:46:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:fc:4a:8c:11:b6:4a:16:b4:18:6f:e3:db:80:76:2a:1e:38:e8:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89DCCC087983CCF309AB03F388DFD612618A10BC
Validity
Not Before: Oct 20 18:57:03 2025 GMT
Not After : Oct 19 19:02:03 2026 GMT
Subject: CN=B7675D29AE23874C6AE77471FE5333FFFBB41485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:97:41:f0:04:94:19:11:92:1e:78:f1:22:61:
07:b0:ef:09:f3:fe:d7:28:70:d7:9a:f6:8a:71:af:
d0:b4:17:c7:d2:1d:ff:83:8c:47:fd:5a:05:61:f3:
85:81:21:0d:e6:93:6b:9e:04:11:39:60:87:dc:44:
3e:38:85:db:3c:e2:d3:c7:57:1c:8a:7b:75:44:d2:
74:dc:cd:69:45:17:13:f2:65:54:4c:8b:67:84:82:
d2:e4:fd:55:ff:ae:d6:6f:1f:5a:d9:25:dd:df:c7:
e0:cf:87:c4:54:dd:13:53:09:f3:a5:91:bb:2c:db:
ea:17:3f:44:b7:1b:a1:8b:f9:d7:9d:12:97:a4:d8:
9c:69:16:7a:38:c5:2e:ce:8e:38:45:c7:13:dd:0a:
13:ba:e4:20:b7:ec:8c:23:bb:ff:7b:68:b0:fb:89:
86:91:29:39:c5:72:5b:13:1f:55:8b:ff:6c:8c:dc:
6b:29:66:f2:d4:3c:74:54:8f:d1:d5:91:60:4d:b2:
be:59:67:07:0f:f2:64:bf:5f:aa:26:7e:bd:b5:30:
e6:77:96:2c:f4:32:20:8b:c6:a2:3f:4d:39:fb:55:
5b:a1:5f:33:6e:9b:7e:69:61:4a:a4:cb:d6:ef:9c:
9b:c8:84:17:7d:17:0f:ca:a0:8a:d1:4a:15:fe:75:
2b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:67:5D:29:AE:23:87:4C:6A:E7:74:71:FE:53:33:FF:FB:B4:14:85
X509v3 Authority Key Identifier:
keyid:89:DC:CC:08:79:83:CC:F3:09:AB:03:F3:88:DF:D6:12:61:8A:10:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/89DCCC087983CCF309AB03F388DFD612618A10BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89DCCC087983CCF309AB03F388DFD612618A10BC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/323830343a323562303a3a2f33322d3336203d3e20323634323935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:25b0::/32
Signature Algorithm: sha256WithRSAEncryption
92:f9:5d:7f:ce:01:b5:47:98:01:44:17:4a:97:a4:05:44:62:
7a:ba:ef:45:f8:6d:65:aa:7c:a3:0e:ae:e7:dc:9a:68:fc:03:
f1:0f:5b:87:57:bd:3a:bb:14:dd:85:91:af:39:1c:a6:66:36:
d0:c3:5e:1f:86:98:a4:ad:86:80:80:24:15:4d:19:1d:b8:62:
4d:f4:4e:e3:78:4a:ac:05:be:8c:dd:77:b6:59:58:24:99:0c:
bb:5e:e6:ad:6f:66:0d:5f:0f:6f:3b:97:2f:3a:31:34:60:db:
ad:bf:fc:ec:ca:1c:5c:d0:b7:87:f6:df:58:4d:c3:5b:eb:2a:
4f:28:91:a4:d5:83:4f:0c:6d:7c:a8:51:72:bb:b4:e6:97:e3:
c1:1e:3f:9f:be:be:6c:ba:15:7b:e6:fa:8e:dc:ad:dc:36:84:
51:c4:a8:a4:58:bb:b0:c3:7f:dc:89:8a:3b:51:df:b3:a9:e9:
be:cb:dc:02:02:8e:80:48:7c:ae:32:f0:a8:f4:cd:81:3c:21:
bf:ea:0f:9a:66:d5:94:eb:2b:2a:12:56:8c:ae:a0:a1:0c:8b:
4b:38:3d:0d:cf:c2:0c:e4:0a:46:4b:28:3d:28:80:87:cc:e9:
b6:ee:94:3c:e0:c8:e4:5c:76:0e:12:1a:74:50:fb:6c:b0:ca:
46:8c:87:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:15:39 2025 by rpki-client