
$ rpki-client -vvf rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/323830343a353339343a3630303a3a2f34302d3430203d3e20323638353933.roa
File: 323830343a353339343a3630303a3a2f34302d3430203d3e20323638353933.roa (raw, json)
Hash identifier: aZr2WMUYWMe4QH+F1n2n5nUYnD/iAYd2j86/CzWOPhI=
Subject key identifier: A1:66:3B:EF:B4:68:D2:17:73:29:BF:36:5A:DC:33:7C:DE:A1:86:EE
Certificate issuer: /CN=D96D671118BFCD5B1FA9225976AA2DE3A8A52F78
Certificate serial: 2A8F3654CBD2C212CA4C8B34EB53A1F9970B5420
Authority key identifier: D9:6D:67:11:18:BF:CD:5B:1F:A9:22:59:76:AA:2D:E3:A8:A5:2F:78
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D96D671118BFCD5B1FA9225976AA2DE3A8A52F78.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/323830343a353339343a3630303a3a2f34302d3430203d3e20323638353933.roa
Signing time: Tue 07 Oct 2025 00:53:25 +0000
ROA not before: Tue 07 Oct 2025 00:48:25 +0000
ROA not after: Tue 06 Oct 2026 00:53:25 +0000
asID: 268593
IP address blocks: 2804:5394:600::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/D96D671118BFCD5B1FA9225976AA2DE3A8A52F78.crl
rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/D96D671118BFCD5B1FA9225976AA2DE3A8A52F78.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D96D671118BFCD5B1FA9225976AA2DE3A8A52F78.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 03:21:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:8f:36:54:cb:d2:c2:12:ca:4c:8b:34:eb:53:a1:f9:97:0b:54:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D96D671118BFCD5B1FA9225976AA2DE3A8A52F78
Validity
Not Before: Oct 7 00:48:25 2025 GMT
Not After : Oct 6 00:53:25 2026 GMT
Subject: CN=A1663BEFB468D2177329BF365ADC337CDEA186EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6d:7c:65:28:a1:9d:56:bd:b3:f9:88:4b:d5:
d1:05:29:74:68:28:bc:7d:b7:5e:ed:07:08:b7:e3:
12:4a:67:ee:ff:97:21:5d:d1:54:16:9c:3f:c4:a9:
f5:fa:bb:5e:c3:2f:fd:3f:c1:ac:21:3e:b3:89:2b:
c9:ec:78:b0:d3:db:00:fa:67:6c:a0:1b:c0:a1:4b:
a2:86:0f:44:e0:83:73:f7:9e:90:f7:43:03:51:a6:
e3:58:f1:00:0d:d0:26:a0:be:f3:7a:81:ff:80:01:
2a:1e:00:d9:82:90:62:e5:de:80:5f:5a:44:55:f2:
05:f7:79:9d:87:fc:49:f5:5c:86:7a:53:a7:7c:80:
bd:67:b6:bb:e7:92:60:81:43:55:36:2a:d9:9b:5c:
2c:18:9b:4e:24:9f:a7:0a:08:e1:a2:c9:5e:79:1e:
55:62:f7:26:79:ee:2c:43:09:f0:31:2b:ec:20:b9:
4c:d9:1a:bc:bb:4f:10:83:96:73:6c:20:84:a4:9a:
9a:9b:ed:9e:94:ee:5c:64:2d:28:e3:97:8e:c2:be:
4a:1e:7e:66:18:3b:89:9d:0d:10:00:89:85:52:96:
65:b8:ab:2c:19:6f:65:50:f2:ba:c4:52:72:b3:b3:
78:01:84:c4:a4:3d:bb:8d:98:11:25:71:63:eb:83:
74:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:66:3B:EF:B4:68:D2:17:73:29:BF:36:5A:DC:33:7C:DE:A1:86:EE
X509v3 Authority Key Identifier:
keyid:D9:6D:67:11:18:BF:CD:5B:1F:A9:22:59:76:AA:2D:E3:A8:A5:2F:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/D96D671118BFCD5B1FA9225976AA2DE3A8A52F78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D96D671118BFCD5B1FA9225976AA2DE3A8A52F78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/323830343a353339343a3630303a3a2f34302d3430203d3e20323638353933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5394:600::/40
Signature Algorithm: sha256WithRSAEncryption
a6:62:ef:3b:f7:f4:ae:00:f4:59:eb:00:97:4b:24:ed:68:f5:
31:b9:ec:3c:3c:fa:5a:d5:c4:59:21:0b:93:f3:45:6c:ae:3d:
0a:2b:64:65:ed:c0:7f:bd:25:75:be:12:88:08:4a:ad:45:19:
5a:d5:12:12:22:88:04:13:ef:eb:03:a9:10:7f:9f:1c:f1:bf:
6c:38:7f:df:23:77:97:5b:94:35:66:48:35:ef:4b:dd:4a:63:
96:f3:05:c5:30:b0:5a:dc:54:ab:22:13:86:1c:67:99:12:31:
04:34:59:91:10:78:f5:be:6b:d9:cc:b4:82:d1:21:de:50:4a:
ea:05:e9:4e:4a:28:9f:88:21:89:42:19:3c:e0:7e:9c:e6:21:
58:bb:e4:30:27:01:cf:0b:7e:56:2b:ed:22:a0:1c:1a:b0:0f:
c0:34:bb:57:f4:60:0b:37:bc:59:40:6d:3e:0e:78:ed:f1:d6:
b0:be:e0:5e:ad:0f:e9:33:d7:15:37:aa:6c:7b:4d:7f:94:1a:
b2:27:96:44:4e:81:b3:98:5f:fa:48:34:ce:32:d7:22:bb:e9:
1a:2b:26:fa:1f:09:d4:22:e5:df:4c:04:f8:ef:60:2b:f3:c3:
9d:67:c5:7d:b3:b2:0a:ac:5e:3a:d4:6f:73:d9:fc:76:f3:9a:
33:5b:b9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:48:08 2025 by rpki-client