
$ rpki-client -vvf rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a31303a3a2f34382d3438203d3e203631383838.roa
File: 323830343a6536303a31303a3a2f34382d3438203d3e203631383838.roa (raw, json)
Hash identifier: PaDPyP5LayriBhgRf/LNvgxizlu9oI2VuzFaY6lqsOI=
Subject key identifier: 01:71:D9:1A:DD:96:C7:39:27:59:6A:7B:6E:6C:26:7D:56:98:7B:0D
Certificate issuer: /CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
Certificate serial: 21BFDC36B6500DA216AD24458DAB53D1EC6623C8
Authority key identifier: 96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
Subject info access: rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a31303a3a2f34382d3438203d3e203631383838.roa
Signing time: Wed 05 Mar 2025 19:00:01 +0000
ROA not before: Wed 05 Mar 2025 18:55:01 +0000
ROA not after: Wed 04 Mar 2026 19:00:01 +0000
asID: 61888
IP address blocks: 2804:e60:10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl
rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 22:13:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:bf:dc:36:b6:50:0d:a2:16:ad:24:45:8d:ab:53:d1:ec:66:23:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
Validity
Not Before: Mar 5 18:55:01 2025 GMT
Not After : Mar 4 19:00:01 2026 GMT
Subject: CN=0171D91ADD96C73927596A7B6E6C267D56987B0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:82:d3:e5:0c:ab:04:15:d0:49:a2:b5:ce:f4:
4c:5f:e6:af:76:87:6b:54:a0:d5:71:40:83:9c:a7:
33:af:25:62:63:c2:2e:22:08:bc:78:b8:b9:0b:c1:
6b:cc:bb:18:bb:87:07:f2:af:53:71:58:60:00:6c:
7e:0a:fb:8a:d3:b7:86:f7:7e:cd:db:ac:df:1d:87:
e4:95:b0:6f:cf:74:9f:10:3f:2b:1b:4a:1e:9a:55:
6a:c6:a4:61:d1:9c:de:4f:01:1b:e6:8d:10:2f:aa:
15:d6:b9:87:33:a5:63:01:0d:35:10:01:5a:bc:d0:
a8:91:be:56:93:cf:15:33:df:65:8a:6a:20:0f:5b:
82:6e:c4:04:59:2a:7c:22:05:ff:22:1a:a6:28:84:
8c:65:8a:a6:69:97:87:ac:37:40:ca:a9:67:06:f7:
14:9c:61:1c:c9:e8:53:36:9e:05:83:42:dc:33:49:
d4:41:ce:45:b3:91:75:9a:36:7b:a8:d1:22:3f:fd:
e7:74:61:6f:3d:a1:dd:fa:e5:fd:50:0b:45:c2:66:
1b:da:98:f8:c8:38:8b:3e:d6:2b:c9:48:a9:71:77:
47:cd:54:cd:af:1e:51:0c:2c:43:6f:ff:b4:1b:b3:
91:df:dd:e5:68:8c:c8:16:62:44:00:fb:75:20:c9:
76:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:71:D9:1A:DD:96:C7:39:27:59:6A:7B:6E:6C:26:7D:56:98:7B:0D
X509v3 Authority Key Identifier:
keyid:96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a31303a3a2f34382d3438203d3e203631383838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:e60:10::/48
Signature Algorithm: sha256WithRSAEncryption
26:6e:d8:00:ca:d0:40:68:1f:3a:db:89:ec:8e:77:3f:13:69:
6f:a1:b8:79:1a:ee:36:05:41:08:f6:96:06:de:b3:f4:29:ab:
91:8d:10:2c:56:95:4d:6c:e4:ea:89:17:3f:d8:dc:21:7b:d1:
29:c3:29:23:84:18:06:84:6d:68:96:87:63:45:90:6c:95:27:
24:8d:bf:94:2b:3c:9a:6f:52:24:60:00:fa:87:ea:55:b0:10:
b7:e0:3f:5a:c0:5d:08:4c:3f:e3:d5:ee:d2:d8:46:03:60:0a:
ce:50:18:49:05:fd:96:5b:26:0c:3b:8d:6d:01:fe:2d:6c:6c:
46:97:fb:31:c7:4f:c6:7c:74:c8:d0:cb:1e:19:71:fd:ac:3e:
95:ef:7f:86:c9:b8:e2:c7:95:11:a1:b8:61:83:7c:38:24:95:
5c:ca:a1:cc:8d:57:86:e4:92:a0:ed:44:e9:54:42:9c:76:6d:
68:d3:55:66:ef:22:4d:bf:db:86:c8:bf:17:39:b0:32:f4:42:
62:e3:a2:a8:85:ff:aa:2b:70:0c:9b:ba:26:a2:82:9b:7e:23:
63:4e:a4:1e:5d:b6:90:7b:60:3e:4b:b7:60:8d:dc:2e:46:79:
b2:c7:ea:04:d0:73:e9:15:59:98:31:31:79:11:79:9c:de:a2:
96:82:37:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:25:13 2025 by rpki-client