
$ rpki-client -vvf rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/323830343a376161343a3a2f33322d3334203d3e20323731333833.roa
File: 323830343a376161343a3a2f33322d3334203d3e20323731333833.roa (raw, json)
Hash identifier: vxQxmFCt9E0nxYJOt/0X0YNotaJuOGuDeX1OIJZ7JpA=
Subject key identifier: D2:21:89:67:FC:B8:DD:0B:5C:99:DB:C2:45:A1:F3:54:7A:2C:30:07
Certificate issuer: /CN=D45D3138F5EB85594C2205AF938DBA4D8D129CC4
Certificate serial: 1EAC7B3408E40DB786572FDF51E7185001237711
Authority key identifier: D4:5D:31:38:F5:EB:85:59:4C:22:05:AF:93:8D:BA:4D:8D:12:9C:C4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/323830343a376161343a3a2f33322d3334203d3e20323731333833.roa
Signing time: Fri 09 May 2025 18:37:48 +0000
ROA not before: Fri 09 May 2025 18:32:48 +0000
ROA not after: Fri 08 May 2026 18:37:48 +0000
asID: 271383
IP address blocks: 2804:7aa4::/32 maxlen: 34
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.crl
rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 10:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:ac:7b:34:08:e4:0d:b7:86:57:2f:df:51:e7:18:50:01:23:77:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D45D3138F5EB85594C2205AF938DBA4D8D129CC4
Validity
Not Before: May 9 18:32:48 2025 GMT
Not After : May 8 18:37:48 2026 GMT
Subject: CN=D2218967FCB8DD0B5C99DBC245A1F3547A2C3007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b0:bd:e5:ba:74:e4:82:41:ff:45:60:63:05:
03:b1:08:3f:20:fc:4c:ea:4e:9a:c0:cc:a4:f5:94:
79:88:7e:ac:ed:df:be:a2:53:1a:ea:44:84:9a:a1:
b1:92:09:bf:72:91:a5:a1:22:79:cc:07:70:95:4b:
00:a5:b9:96:60:da:0e:ca:52:f9:ee:b3:08:95:fb:
86:f5:73:ca:8d:c2:35:b1:a0:ad:b5:5c:35:fe:11:
5c:a5:85:4a:97:b2:57:84:97:e4:37:bf:4b:43:e3:
45:a4:8a:cf:fd:2d:f6:f0:63:b0:c6:42:0a:27:19:
87:ad:70:a3:d5:69:55:ac:23:1f:59:85:48:b4:de:
33:e4:df:cc:2d:48:46:11:8c:eb:02:95:19:61:d7:
4d:eb:5d:96:c6:50:ec:1a:e7:9e:8d:6f:af:2d:4e:
86:67:fc:1a:93:54:8f:4e:a7:5e:2a:9b:3e:36:03:
f5:b0:47:c5:13:2b:87:14:fc:d6:13:14:94:0d:69:
a2:e1:25:ab:28:b3:ba:01:76:82:bd:e5:18:fa:3b:
65:d8:2a:a6:fb:4b:37:87:73:07:c9:34:a1:fe:fe:
50:5e:cf:35:3d:2f:9a:ec:a4:51:a8:1a:44:ba:f1:
ba:68:b0:b0:80:b8:c3:bd:97:80:8e:25:51:c4:ab:
86:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:21:89:67:FC:B8:DD:0B:5C:99:DB:C2:45:A1:F3:54:7A:2C:30:07
X509v3 Authority Key Identifier:
keyid:D4:5D:31:38:F5:EB:85:59:4C:22:05:AF:93:8D:BA:4D:8D:12:9C:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/323830343a376161343a3a2f33322d3334203d3e20323731333833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7aa4::/32
Signature Algorithm: sha256WithRSAEncryption
13:46:ec:91:6c:10:96:5e:ea:58:85:84:e8:c4:63:1e:32:4f:
48:d8:7d:03:33:18:2e:a3:52:54:11:a4:b4:bc:36:74:20:32:
dc:24:8b:92:5c:73:f4:77:bc:e9:4a:f2:73:8a:02:19:55:c5:
65:30:2d:60:f2:07:d6:b5:37:e7:de:92:fc:3e:14:a9:5a:68:
40:67:bb:a1:6c:45:16:dd:11:07:46:3b:64:ec:ca:e0:86:87:
5f:f1:cf:15:5b:fe:be:44:eb:c2:1f:05:3c:f0:1e:b8:11:7f:
dd:15:b3:5b:91:36:1d:f4:3b:c5:a2:52:06:0e:7e:aa:19:32:
12:06:7a:0b:8c:14:cf:48:9e:5b:7d:4f:c5:af:46:0e:0e:fa:
57:7b:99:9b:f1:94:55:71:e3:14:a2:3e:b3:df:0e:44:8d:9e:
8f:c8:2a:1b:56:78:66:53:0a:a3:ee:8b:af:f1:5c:b6:c9:4d:
b8:a0:21:56:1d:6e:6c:78:b1:a4:f6:18:06:b2:8f:87:1f:04:
65:ef:b1:47:f1:cc:9f:70:f8:b2:87:d5:65:b2:6a:c2:5a:62:
eb:53:40:bd:f6:2d:6f:65:1d:47:35:39:4a:69:f2:3f:b1:82:
e4:6c:a5:c7:41:b8:d4:3b:3b:f2:ee:23:eb:73:ad:f8:7c:dd:
99:1e:ca:f2
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUHqx7NAjkDbeGVy/fUecYUAEjdxEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQ1RDMxMzhGNUVCODU1OTRDMjIwNUFGOTM4REJBNEQ4
RDEyOUNDNDAeFw0yNTA1MDkxODMyNDhaFw0yNjA1MDgxODM3NDhaMDMxMTAvBgNV
BAMTKEQyMjE4OTY3RkNCOEREMEI1Qzk5REJDMjQ1QTFGMzU0N0EyQzMwMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7sL3lunTkgkH/RWBjBQOxCD8g
/EzqTprAzKT1lHmIfqzt376iUxrqRISaobGSCb9ykaWhInnMB3CVSwCluZZg2g7K
UvnuswiV+4b1c8qNwjWxoK21XDX+EVylhUqXsleEl+Q3v0tD40Wkis/9LfbwY7DG
QgonGYetcKPVaVWsIx9ZhUi03jPk38wtSEYRjOsClRlh103rXZbGUOwa556Nb68t
ToZn/BqTVI9Op14qmz42A/WwR8UTK4cU/NYTFJQNaaLhJasos7oBdoK95Rj6O2XY
Kqb7SzeHcwfJNKH+/lBezzU9L5rspFGoGkS68bposLCAuMO9l4COJVHEq4Z5AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU0iGJZ/y43QtcmdvCRaHzVHosMAcwHwYDVR0j
BBgwFoAU1F0xOPXrhVlMIgWvk426TY0SnMQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkZZWlNNNXJ1RTFCbnY2alYxclNzUFpQOG9UWmluUU5zWlJNMUtBUEN6
MXIvMC9ENDVEMzEzOEY1RUI4NTU5NEMyMjA1QUY5MzhEQkE0RDhEMTI5Q0M0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0NUQzMTM4RjVFQjg1NTk0
QzIyMDVBRjkzOERCQTREOEQxMjlDQzQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJGWVpTTTVydUUxQm52NmpWMXJTc1BaUDhvVFppblFOc1pSTTFLQVBDejFyLzAv
MzIzODMwMzQzYTM3NjE2MTM0M2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNzMx
MzMzODMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR6pDANBgkqhkiG9w0BAQsFAAOCAQEAE0bskWwQ
ll7qWIWE6MRjHjJPSNh9AzMYLqNSVBGktLw2dCAy3CSLklxz9He86Uryc4oCGVXF
ZTAtYPIH1rU3596S/D4UqVpoQGe7oWxFFt0RB0Y7ZOzK4IaHX/HPFVv+vkTrwh8F
PPAeuBF/3RWzW5E2HfQ7xaJSBg5+qhkyEgZ6C4wUz0ieW31Pxa9GDg76V3uZm/GU
VXHjFKI+s98ORI2ej8gqG1Z4ZlMKo+6Lr/FctslNuKAhVh1ubHixpPYYBrKPhx8E
Ze+xR/HMn3D4sofVZbJqwlpi61NAvfYtb2UdRzU5SmnyP7GC5Gylx0G41Ds78u4j
63Ot+HzdmR7K8g==
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:47:40 2025 by rpki-client