
$ rpki-client -vvf rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/323830343a323264383a376630303a3a2f34302d3430203d3e20323634313236.roa
File: 323830343a323264383a376630303a3a2f34302d3430203d3e20323634313236.roa (raw, json)
Hash identifier: CQP3HUS35Qz5oIEtwNHruBuoq7MQ+rM1a+MsTLoK+Cc=
Subject key identifier: 9A:67:59:BC:93:ED:6E:B8:A5:4F:3B:AA:B6:29:50:9D:20:5B:5A:C0
Certificate issuer: /CN=2BB1FB85B5A824CE1F12E99D84943C2812338D9C
Certificate serial: 44369D8047C9AC53481A114688625904E6B3DCEF
Authority key identifier: 2B:B1:FB:85:B5:A8:24:CE:1F:12:E9:9D:84:94:3C:28:12:33:8D:9C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/323830343a323264383a376630303a3a2f34302d3430203d3e20323634313236.roa
Signing time: Wed 05 Mar 2025 19:00:00 +0000
ROA not before: Wed 05 Mar 2025 18:55:00 +0000
ROA not after: Wed 04 Mar 2026 19:00:00 +0000
asID: 264126
IP address blocks: 2804:22d8:7f00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl
rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 07:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:36:9d:80:47:c9:ac:53:48:1a:11:46:88:62:59:04:e6:b3:dc:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2BB1FB85B5A824CE1F12E99D84943C2812338D9C
Validity
Not Before: Mar 5 18:55:00 2025 GMT
Not After : Mar 4 19:00:00 2026 GMT
Subject: CN=9A6759BC93ED6EB8A54F3BAAB629509D205B5AC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:92:c2:2a:b7:5f:26:58:7a:62:12:a2:10:e7:
ef:77:38:a3:a0:9b:c8:87:b1:d6:11:43:47:13:0a:
af:7f:c3:ee:36:6a:58:64:f6:4d:c9:fa:b8:62:4b:
24:d4:1f:ff:98:de:8a:16:08:0b:f6:31:66:fc:da:
4b:3b:90:70:7d:30:12:76:97:33:1d:ee:2c:78:f8:
d2:06:3b:59:45:59:85:94:ef:a0:77:c6:6a:81:35:
8e:f9:fc:07:3f:f8:b1:d7:79:b0:6a:6d:41:a1:e0:
9a:de:3d:7e:98:5e:6a:51:cc:e0:e9:fc:44:d9:e0:
5e:a9:a9:7f:b1:06:2a:87:5a:9a:24:63:ca:14:af:
45:f0:e6:9f:dc:f0:ae:8a:b6:db:c2:97:e7:c8:f6:
fe:2b:9e:9b:03:48:33:a0:c7:20:31:ca:d5:62:c0:
23:1c:cc:be:03:72:8f:94:d9:0c:23:aa:de:81:12:
89:ff:18:70:94:d5:a7:fc:f3:d5:4d:ec:5f:75:0e:
05:93:05:d5:cb:bd:6b:f9:54:8d:e9:45:01:87:53:
49:30:ec:4d:9c:ce:ad:67:df:80:96:89:12:ed:97:
0f:f8:03:de:29:05:95:59:1d:3b:a5:9f:84:66:47:
cb:0f:41:28:2f:2d:c6:bd:0c:9b:06:7c:8b:b9:0c:
30:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:67:59:BC:93:ED:6E:B8:A5:4F:3B:AA:B6:29:50:9D:20:5B:5A:C0
X509v3 Authority Key Identifier:
keyid:2B:B1:FB:85:B5:A8:24:CE:1F:12:E9:9D:84:94:3C:28:12:33:8D:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/323830343a323264383a376630303a3a2f34302d3430203d3e20323634313236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:22d8:7f00::/40
Signature Algorithm: sha256WithRSAEncryption
9d:9e:6c:b2:7c:ef:a3:4b:92:b4:77:3e:2e:ce:e8:bc:c8:55:
13:92:2a:2c:7e:c6:5a:c9:30:12:12:f8:24:0c:f2:19:4f:56:
4b:0b:9e:11:14:b1:b1:99:bd:da:54:31:11:64:7d:16:79:41:
06:6c:ec:10:41:e8:55:1d:42:37:af:73:40:0b:27:2a:6d:b5:
09:4c:91:e1:9c:0b:03:a2:cc:f2:f7:ad:0e:15:a7:d2:b5:c8:
0b:25:66:a7:80:ed:0d:d2:33:9c:36:25:4b:dd:df:b9:46:00:
af:e9:ee:1e:38:65:f5:59:de:51:4f:cf:c7:b4:89:36:4d:63:
17:a2:d9:6f:15:e2:54:94:a0:ba:e5:e6:87:80:25:62:b3:23:
e6:87:df:47:2b:e1:c8:48:05:0f:23:ff:82:b2:95:ba:98:bc:
1e:fa:23:a6:9f:ba:7e:45:32:c8:10:a3:e2:44:f4:02:d6:5d:
b1:ef:56:5a:79:8e:77:71:20:da:d1:ac:e3:7c:b0:0a:cd:7a:
a5:12:6d:9e:49:19:4c:30:01:67:8b:3d:b5:4d:d1:6c:a9:44:
a1:d1:97:d2:7b:8c:3b:c8:e4:13:49:b6:b4:be:49:04:bc:df:
61:7c:10:f7:95:dd:7a:13:10:05:da:bd:40:6c:50:80:98:53:
4d:7f:7e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:39:52 2025 by rpki-client