
$ rpki-client -vvf rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a313a3a2f34382d3438203d3e20323636343337.roa
File: 323830343a333764303a313a3a2f34382d3438203d3e20323636343337.roa (raw, json)
Hash identifier: 3gaeRamuBRcnrnZFsS6DlYntZen+rJ+bga//SX14/5I=
Subject key identifier: AF:78:9C:02:77:88:65:43:B0:19:B6:91:1D:22:62:D6:9D:E0:ED:C2
Certificate issuer: /CN=1CB2152A8F44BC0B30650B200D8A3BA673D374FD
Certificate serial: 7DDAF5896757F3CDD6C89008DB25AC5F0DC7EE4A
Authority key identifier: 1C:B2:15:2A:8F:44:BC:0B:30:65:0B:20:0D:8A:3B:A6:73:D3:74:FD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a313a3a2f34382d3438203d3e20323636343337.roa
Signing time: Thu 06 Mar 2025 17:28:15 +0000
ROA not before: Thu 06 Mar 2025 17:23:15 +0000
ROA not after: Thu 05 Mar 2026 17:28:15 +0000
asID: 266437
IP address blocks: 2804:37d0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.crl
rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 22:42:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:da:f5:89:67:57:f3:cd:d6:c8:90:08:db:25:ac:5f:0d:c7:ee:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1CB2152A8F44BC0B30650B200D8A3BA673D374FD
Validity
Not Before: Mar 6 17:23:15 2025 GMT
Not After : Mar 5 17:28:15 2026 GMT
Subject: CN=AF789C0277886543B019B6911D2262D69DE0EDC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ba:ed:f4:d1:b6:2e:5c:c8:49:f3:f6:7f:39:
b6:58:ab:e9:53:71:fc:07:e5:dd:3f:68:6e:3f:9a:
71:97:c4:e9:47:d8:54:e4:ca:42:cd:1b:f2:9b:ac:
45:d6:35:3e:9c:ab:3a:9c:e4:c9:ce:a4:1e:32:b7:
52:7a:9e:75:7b:61:1d:14:1e:92:da:14:6e:8c:6b:
1b:29:e0:7c:fc:57:b8:4b:0c:f8:21:3b:01:f7:ea:
57:f8:7a:d8:4d:6f:3a:ff:70:86:3a:41:9a:1c:fa:
e1:f9:34:a5:df:2c:2f:b4:1c:52:fb:e2:75:60:66:
a7:13:15:76:59:19:30:32:f5:f8:7d:38:e3:f9:0c:
1b:08:0a:4d:a5:a1:96:ee:ac:d2:7c:ab:ce:80:01:
b9:b9:a5:61:c0:1d:25:58:c3:14:3e:17:ff:73:a2:
fa:07:a1:db:4f:f3:35:9c:7f:2d:70:3b:10:75:b7:
9f:50:32:ef:98:d5:83:24:e6:19:34:5f:0e:99:52:
cb:65:fd:db:e1:19:75:3b:6e:36:ba:e8:8a:4a:9b:
a6:fe:f5:ff:ef:5d:46:a0:c5:35:7e:20:d5:82:73:
59:a9:8b:15:0d:a3:49:dc:4e:7b:0b:0c:93:9e:9b:
f8:9a:ec:87:d0:aa:4a:0b:8f:e0:3e:95:f4:93:56:
b9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:78:9C:02:77:88:65:43:B0:19:B6:91:1D:22:62:D6:9D:E0:ED:C2
X509v3 Authority Key Identifier:
keyid:1C:B2:15:2A:8F:44:BC:0B:30:65:0B:20:0D:8A:3B:A6:73:D3:74:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a313a3a2f34382d3438203d3e20323636343337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:37d0:1::/48
Signature Algorithm: sha256WithRSAEncryption
15:f0:26:32:5b:dc:a9:56:01:b3:c7:e0:2b:3d:5e:55:90:fb:
77:5e:cf:b0:53:a2:ca:88:f3:65:39:e0:c7:4a:c4:36:aa:06:
37:88:3e:cf:b1:82:b3:c1:1b:ff:88:6d:36:b6:5b:0b:d8:98:
d6:00:12:3e:e0:a0:f2:69:76:b5:4b:d1:18:fb:eb:c6:eb:d2:
c8:c1:29:86:7b:3d:4d:dc:2d:98:c5:3b:6f:fa:fd:d0:e0:a0:
44:75:ec:73:1e:a6:2d:c6:a5:9e:cc:20:87:50:c9:8a:b6:61:
10:c0:1d:ee:21:a9:1d:c1:89:90:ef:d7:02:a7:7d:da:70:8f:
51:76:99:14:ad:fb:39:3b:f3:9b:d8:96:64:75:d7:20:b5:2e:
f5:81:76:07:43:3d:cd:ea:30:09:eb:42:d1:70:0c:5e:5e:c0:
9c:a2:93:a0:4e:06:cf:7d:9a:b1:fd:90:b9:f5:4a:db:43:f8:
f1:30:74:8b:4c:37:87:a0:5a:a4:0a:08:c1:c4:99:51:3e:6d:
f9:d8:69:cb:73:18:0d:a1:4f:ab:9e:d2:ca:32:3d:28:62:35:
6c:39:ec:49:b1:51:ef:05:68:89:3e:10:b0:8d:8f:a8:66:a7:
ab:0a:b4:c5:57:d4:63:64:f3:fb:38:62:66:8a:dc:08:a3:9f:
20:50:f6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:19:40 2025 by rpki-client