
$ rpki-client -vvf rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a363030303a3a2f33362d3336203d3e20323636343337.roa
File: 323830343a333764303a363030303a3a2f33362d3336203d3e20323636343337.roa (raw, json)
Hash identifier: 9mbb251rieLCXagj9NOtnLbN3RZbGB7Nn8RH2Hn6/4k=
Subject key identifier: 10:43:3F:07:0F:76:C6:40:BD:67:A5:8D:0C:D5:B1:37:07:A7:25:1E
Certificate issuer: /CN=1CB2152A8F44BC0B30650B200D8A3BA673D374FD
Certificate serial: 698C37CB53E87CEF6280F6F2E3834400DE34E190
Authority key identifier: 1C:B2:15:2A:8F:44:BC:0B:30:65:0B:20:0D:8A:3B:A6:73:D3:74:FD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a363030303a3a2f33362d3336203d3e20323636343337.roa
Signing time: Thu 06 Mar 2025 17:28:16 +0000
ROA not before: Thu 06 Mar 2025 17:23:16 +0000
ROA not after: Thu 05 Mar 2026 17:28:16 +0000
asID: 266437
IP address blocks: 2804:37d0:6000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.crl
rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 22:42:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:8c:37:cb:53:e8:7c:ef:62:80:f6:f2:e3:83:44:00:de:34:e1:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1CB2152A8F44BC0B30650B200D8A3BA673D374FD
Validity
Not Before: Mar 6 17:23:16 2025 GMT
Not After : Mar 5 17:28:16 2026 GMT
Subject: CN=10433F070F76C640BD67A58D0CD5B13707A7251E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:33:94:94:e7:9b:05:cb:57:0d:10:78:93:02:
56:5b:e7:07:51:d9:05:6e:9e:fb:00:06:fd:ee:72:
25:06:7e:25:53:00:35:92:ed:23:cd:bd:f6:57:7f:
f2:46:3c:9d:74:5e:33:84:d8:ca:80:a2:11:ce:81:
fe:c5:0b:60:82:5a:23:27:2f:4e:ff:f0:a7:06:a3:
9a:1d:a3:2a:9b:19:ba:20:10:1f:60:46:54:bd:fd:
72:dc:cc:a3:75:9a:10:bf:93:a8:d7:e7:04:52:3b:
94:11:78:ef:51:01:5f:b3:fe:5f:c9:52:a2:27:ec:
08:ed:e3:0a:b3:0d:cd:2c:f9:d5:d2:39:7b:f8:cf:
2e:ea:6a:6c:53:59:9c:b7:dc:4f:e6:07:bc:e2:eb:
bc:28:e9:d6:40:fe:d2:76:31:2b:20:61:26:84:b7:
45:26:41:7b:88:6b:76:34:aa:63:c9:f3:15:e9:e5:
6c:9c:00:2e:6c:48:46:dc:36:3e:7e:24:1b:3e:1f:
16:8a:d7:91:a1:43:63:e1:c0:b0:73:a1:44:1b:1c:
dd:56:31:6a:57:4c:1a:4c:fe:cb:80:9f:69:20:5b:
79:61:d8:70:86:c5:ad:2e:e5:00:39:c4:50:ca:80:
c9:f8:08:3b:d2:66:01:5a:c4:e4:f5:6e:39:3b:91:
5b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:43:3F:07:0F:76:C6:40:BD:67:A5:8D:0C:D5:B1:37:07:A7:25:1E
X509v3 Authority Key Identifier:
keyid:1C:B2:15:2A:8F:44:BC:0B:30:65:0B:20:0D:8A:3B:A6:73:D3:74:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a363030303a3a2f33362d3336203d3e20323636343337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:37d0:6000::/36
Signature Algorithm: sha256WithRSAEncryption
63:a4:ce:e3:9d:fe:b4:ba:35:ad:43:10:3d:81:84:f8:b2:06:
51:3b:4c:57:14:b2:9b:2b:b3:ea:df:bc:1a:9d:84:49:f0:f5:
be:84:b3:fd:9d:56:7e:59:3d:64:43:b2:92:3e:3d:5c:14:f0:
c3:2e:40:40:25:7f:0c:f5:87:05:dd:87:02:eb:e3:a1:93:96:
7b:6a:4e:ea:f4:fa:85:1b:18:84:8a:16:e6:2b:f4:92:7f:ec:
c4:9d:44:3c:1d:72:65:16:11:3c:5d:19:37:63:9d:54:8b:15:
6c:80:b4:0f:f7:5e:ba:59:01:97:6b:76:88:1c:92:69:5a:d4:
c7:8a:ed:39:88:a0:35:51:38:6e:a9:d5:2a:59:ba:92:c1:f6:
ea:9f:77:f1:41:ba:50:3a:d6:36:dc:22:f2:62:77:cf:ea:d3:
cc:8a:1f:d7:04:6a:05:e0:0c:69:5c:ab:ac:4a:47:c0:47:c1:
08:01:68:f0:4d:3b:a4:75:de:c1:09:92:e5:cd:39:45:00:f6:
2c:69:3d:59:a6:42:ee:66:a2:3a:92:8a:90:d5:55:9a:de:85:
c7:8a:5b:26:4e:27:ff:ae:ab:26:d8:b6:b7:ad:05:e5:5c:15:
9d:8b:2a:52:1c:af:79:7f:13:4e:32:de:63:8f:85:4a:83:00:
ae:d3:d5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:15:29 2025 by rpki-client