
$ rpki-client -vvf rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/323830343a393537633a3a2f33322d3332203d3e20323734353138.roa
File: 323830343a393537633a3a2f33322d3332203d3e20323734353138.roa (raw, json)
Hash identifier: g+bfErnC5Q3MshvfTRGFVmz3DrgAhMm+FVSXUSNdGrU=
Subject key identifier: 20:69:D7:1F:DB:19:EA:89:0F:77:3A:C2:AE:AC:E8:91:8E:DC:75:0C
Certificate issuer: /CN=CDD7619BD4F71987C247C8670D9064F291B3E36F
Certificate serial: 152D32821B608A0A9F83AFD767D00C0CF2077E3D
Authority key identifier: CD:D7:61:9B:D4:F7:19:87:C2:47:C8:67:0D:90:64:F2:91:B3:E3:6F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDD7619BD4F71987C247C8670D9064F291B3E36F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/323830343a393537633a3a2f33322d3332203d3e20323734353138.roa
Signing time: Fri 05 Sep 2025 19:26:32 +0000
ROA not before: Fri 05 Sep 2025 19:21:32 +0000
ROA not after: Fri 04 Sep 2026 19:26:32 +0000
asID: 274518
IP address blocks: 2804:957c::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/CDD7619BD4F71987C247C8670D9064F291B3E36F.crl
rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/CDD7619BD4F71987C247C8670D9064F291B3E36F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDD7619BD4F71987C247C8670D9064F291B3E36F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 18:55:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:2d:32:82:1b:60:8a:0a:9f:83:af:d7:67:d0:0c:0c:f2:07:7e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDD7619BD4F71987C247C8670D9064F291B3E36F
Validity
Not Before: Sep 5 19:21:32 2025 GMT
Not After : Sep 4 19:26:32 2026 GMT
Subject: CN=2069D71FDB19EA890F773AC2AEACE8918EDC750C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d6:3b:8c:61:4b:73:9e:3a:9c:a1:16:88:24:
71:63:fc:e7:92:3c:96:83:a8:34:a2:33:4e:d1:a1:
11:7f:fb:b3:8b:4f:de:38:5a:ed:91:f6:71:04:d8:
25:0f:0b:da:94:53:33:42:d6:3b:4c:28:ae:ce:d3:
3f:26:2f:af:3d:56:2a:f8:0e:ff:7d:82:66:88:9b:
40:51:c9:a6:4b:73:b4:13:68:01:97:3a:47:b2:e8:
08:45:d7:72:f6:1e:41:c2:7a:6f:6a:ef:d8:3c:57:
fc:d9:59:45:d1:e5:41:0a:63:a8:9a:b9:cf:f5:d3:
2a:7e:bd:7b:ec:20:33:86:1d:05:e8:22:4b:f0:84:
fd:16:88:60:7f:04:4e:af:c1:e0:52:ee:a0:fe:96:
fe:83:7a:5e:d3:5b:ea:06:78:28:a6:29:68:98:9e:
13:71:f9:88:78:6b:63:73:3d:75:18:6d:ef:ec:7d:
08:72:a0:9a:6a:f4:78:d5:4b:5f:59:c4:74:d1:6e:
b7:d5:50:c4:82:3c:37:24:7a:48:e1:12:e1:41:ff:
7e:b1:a3:7d:45:9a:79:13:de:cc:60:89:86:c1:92:
f8:b8:a7:52:ab:6a:a9:eb:1b:51:cc:07:06:18:16:
f7:20:3d:61:88:11:b5:de:bd:2d:c7:20:4e:0a:bc:
b1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:69:D7:1F:DB:19:EA:89:0F:77:3A:C2:AE:AC:E8:91:8E:DC:75:0C
X509v3 Authority Key Identifier:
keyid:CD:D7:61:9B:D4:F7:19:87:C2:47:C8:67:0D:90:64:F2:91:B3:E3:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/CDD7619BD4F71987C247C8670D9064F291B3E36F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDD7619BD4F71987C247C8670D9064F291B3E36F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/323830343a393537633a3a2f33322d3332203d3e20323734353138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:957c::/32
Signature Algorithm: sha256WithRSAEncryption
63:79:31:58:bb:3b:ee:ea:2b:a3:fd:6d:54:ec:1a:94:1a:98:
ce:08:5e:92:b7:99:91:53:7d:03:25:c5:35:9d:cd:c4:85:02:
d7:8d:18:59:61:11:d0:fd:71:2e:af:4e:4f:34:19:6d:9b:d9:
4f:88:59:7a:c4:a1:1c:c9:b7:2b:f6:7f:58:85:e6:a9:e1:82:
ba:2a:0f:0e:b2:a6:de:1e:61:71:ee:a8:63:f5:e3:f1:f2:60:
0e:b7:df:8f:02:de:81:83:07:e8:70:7e:fc:77:d5:66:c4:87:
07:14:90:e3:86:2c:96:08:97:0f:75:0e:b5:ef:91:a9:b5:05:
f8:c0:d1:15:48:27:1c:47:01:8b:f0:12:23:14:01:9f:59:ca:
08:6e:38:24:61:f4:23:5d:10:80:ab:10:d5:e1:57:75:66:a5:
63:49:69:a8:e1:14:32:36:88:59:aa:8d:fe:73:01:a6:27:65:
c9:8b:04:00:4e:22:7d:02:11:72:53:3d:d3:c2:e6:27:58:92:
39:cf:9e:3b:30:81:7c:54:48:5f:20:63:90:d9:36:7f:bf:39:
02:1b:07:df:fa:f0:3d:39:ca:82:84:78:38:a7:65:9a:fb:ff:
bd:6a:1b:7d:8e:b3:8c:02:40:a5:fa:a6:d1:74:f5:4d:82:cf:
e8:24:5d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:24:46 2025 by rpki-client