
$ rpki-client -vvf rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/323830343a316533343a3a2f33322d3438203d3e20323634343134.roa
File: 323830343a316533343a3a2f33322d3438203d3e20323634343134.roa (raw, json)
Hash identifier: RHzfWlmyT+GDNaub4ZdnDTBPhmfhXe6ZfuhuThBP/EE=
Subject key identifier: CC:9C:AD:B6:6B:F8:DB:15:E9:8D:7A:49:A3:17:FA:AE:74:79:D7:85
Certificate issuer: /CN=0F0B8A867772B2436759E0F012765DC77C12ACB5
Certificate serial: 7C9CC1E574AC35186E7F378777FB18870301F57D
Authority key identifier: 0F:0B:8A:86:77:72:B2:43:67:59:E0:F0:12:76:5D:C7:7C:12:AC:B5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F0B8A867772B2436759E0F012765DC77C12ACB5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/323830343a316533343a3a2f33322d3438203d3e20323634343134.roa
Signing time: Wed 07 May 2025 19:31:22 +0000
ROA not before: Wed 07 May 2025 19:26:22 +0000
ROA not after: Wed 06 May 2026 19:31:22 +0000
asID: 264414
IP address blocks: 2804:1e34::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/0F0B8A867772B2436759E0F012765DC77C12ACB5.crl
rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/0F0B8A867772B2436759E0F012765DC77C12ACB5.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F0B8A867772B2436759E0F012765DC77C12ACB5.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 17:29:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:9c:c1:e5:74:ac:35:18:6e:7f:37:87:77:fb:18:87:03:01:f5:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0F0B8A867772B2436759E0F012765DC77C12ACB5
Validity
Not Before: May 7 19:26:22 2025 GMT
Not After : May 6 19:31:22 2026 GMT
Subject: CN=CC9CADB66BF8DB15E98D7A49A317FAAE7479D785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f5:5f:cf:fd:49:f2:33:e4:ed:a4:c5:7e:9c:
8d:09:2a:96:ea:0b:2d:ec:2f:3f:6a:58:6d:03:fc:
37:4c:9f:3e:28:8e:61:52:ad:3e:ba:28:00:aa:58:
c2:4d:6f:92:4b:ef:4c:dc:fb:f5:96:2c:06:77:67:
bf:d2:01:7d:51:a0:8f:07:ef:c0:3f:b3:0d:47:df:
80:88:2b:32:91:de:b1:b8:c2:43:95:78:78:c5:98:
c5:bf:91:2f:e8:42:4d:00:ee:0e:0e:f7:39:0c:ac:
b4:39:c7:85:52:fc:87:77:6e:f3:8c:bb:37:2f:83:
90:db:19:fc:79:0e:65:b6:b3:13:47:2d:57:b8:15:
4e:bc:87:77:08:d7:1b:8e:ef:e0:44:18:1d:4b:93:
50:53:6c:3c:1e:d9:cf:d6:02:3b:7d:d5:b3:e6:04:
5e:ee:ca:3b:28:41:7c:d1:c5:62:77:99:b9:6c:42:
77:4b:16:f6:fe:60:01:ba:cd:3b:cf:fb:4a:e1:bd:
ab:68:26:0f:23:f0:c2:05:cf:91:0f:22:4c:42:fa:
34:0b:c7:3a:b5:81:21:50:04:1d:71:de:23:99:98:
2c:01:20:94:14:a5:2b:65:bd:37:ef:25:3c:86:2b:
1e:b2:60:d4:b0:00:49:da:76:22:5c:c7:41:72:88:
3a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:9C:AD:B6:6B:F8:DB:15:E9:8D:7A:49:A3:17:FA:AE:74:79:D7:85
X509v3 Authority Key Identifier:
keyid:0F:0B:8A:86:77:72:B2:43:67:59:E0:F0:12:76:5D:C7:7C:12:AC:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/0F0B8A867772B2436759E0F012765DC77C12ACB5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F0B8A867772B2436759E0F012765DC77C12ACB5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/323830343a316533343a3a2f33322d3438203d3e20323634343134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1e34::/32
Signature Algorithm: sha256WithRSAEncryption
20:73:26:ae:e1:ed:b9:0b:4d:75:13:e3:e1:0a:87:7a:61:9c:
3f:f5:01:ca:19:6d:a4:b1:be:aa:c8:ee:dc:26:d4:60:86:6a:
fb:d8:02:a5:14:a1:8e:32:6b:e5:0d:32:0e:ec:1b:f1:86:5d:
8f:f7:ff:7e:6f:3f:b0:37:9f:74:4c:0f:93:36:b9:40:74:1c:
24:b4:50:30:46:91:65:30:41:94:d2:e0:0d:4e:21:50:fa:60:
02:7c:1b:96:9e:1d:07:e8:24:b2:a8:d5:52:1e:ba:f0:cf:5e:
17:81:07:63:ad:a2:60:61:aa:ba:9d:8d:8f:18:d7:93:4f:fc:
85:18:0d:e1:23:77:5a:28:50:7d:1a:39:07:f6:69:87:ff:2b:
a1:3d:5c:23:80:d3:d5:cc:6e:4e:ce:91:a9:cf:35:e5:31:44:
87:c3:32:8f:a5:31:6d:5a:e2:ba:1f:f9:a9:f5:e5:20:2a:16:
e1:12:ef:1c:14:11:e2:6e:d2:1e:b3:f9:26:b2:73:83:cb:eb:
4b:24:da:a3:37:d9:42:ec:c6:80:3d:a3:89:f9:43:da:d3:6c:
f3:00:86:32:ed:5b:f3:fb:3c:85:b5:da:f4:2f:80:c8:de:72:
b1:f9:1a:7a:bf:b0:67:26:68:4c:e5:e4:5d:1e:40:2f:2b:40:
61:a6:bd:78
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUfJzB5XSsNRhufzeHd/sYhwMB9X0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEYwQjhBODY3NzcyQjI0MzY3NTlFMEYwMTI3NjVEQzc3
QzEyQUNCNTAeFw0yNTA1MDcxOTI2MjJaFw0yNjA1MDYxOTMxMjJaMDMxMTAvBgNV
BAMTKENDOUNBREI2NkJGOERCMTVFOThEN0E0OUEzMTdGQUFFNzQ3OUQ3ODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC39V/P/UnyM+TtpMV+nI0JKpbq
Cy3sLz9qWG0D/DdMnz4ojmFSrT66KACqWMJNb5JL70zc+/WWLAZ3Z7/SAX1RoI8H
78A/sw1H34CIKzKR3rG4wkOVeHjFmMW/kS/oQk0A7g4O9zkMrLQ5x4VS/Id3bvOM
uzcvg5DbGfx5DmW2sxNHLVe4FU68h3cI1xuO7+BEGB1Lk1BTbDwe2c/WAjt91bPm
BF7uyjsoQXzRxWJ3mblsQndLFvb+YAG6zTvP+0rhvatoJg8j8MIFz5EPIkxC+jQL
xzq1gSFQBB1x3iOZmCwBIJQUpStlvTfvJTyGKx6yYNSwAEnadiJcx0FyiDoJAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUzJyttmv42xXpjXpJoxf6rnR514UwHwYDVR0j
BBgwFoAUDwuKhndyskNnWeDwEnZdx3wSrLUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3RFemZZNG9tTXRKeDM0TEZ1eUtXb2prNDh0QnVEVE04d3RMakV4amZh
OE0vMC8wRjBCOEE4Njc3NzJCMjQzNjc1OUUwRjAxMjc2NURDNzdDMTJBQ0I1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGMEI4QTg2Nzc3MkIyNDM2
NzU5RTBGMDEyNzY1REM3N0MxMkFDQjUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN0RXpmWTRvbU10SngzNExGdXlLV29qazQ4dEJ1RFRNOHd0TGpFeGpmYThNLzAv
MzIzODMwMzQzYTMxNjUzMzM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM0
MzQzMTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQeNDANBgkqhkiG9w0BAQsFAAOCAQEAIHMmruHt
uQtNdRPj4QqHemGcP/UByhltpLG+qsju3CbUYIZq+9gCpRShjjJr5Q0yDuwb8YZd
j/f/fm8/sDefdEwPkza5QHQcJLRQMEaRZTBBlNLgDU4hUPpgAnwblp4dB+gksqjV
Uh668M9eF4EHY62iYGGqup2NjxjXk0/8hRgN4SN3WihQfRo5B/Zph/8roT1cI4DT
1cxuTs6Rqc815TFEh8Myj6UxbVriuh/5qfXlICoW4RLvHBQR4m7SHrP5JrJzg8vr
SyTaozfZQuzGgD2jiflD2tNs8wCGMu1b8/s8hbXa9C+AyN5ysfkaer+wZyZoTOXk
XR5ALytAYaa9eA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 22:31:46 2025 by rpki-client