
$ rpki-client -vvf rpki-repo.registro.br/repo/71xrP7gnBks27G3PgBJUHmoBrMjmmgtpQjAsCDobK3U3/0/323830343a386461303a3a2f33322d3336203d3e20323733333639.roa
File: 323830343a386461303a3a2f33322d3336203d3e20323733333639.roa (raw, json)
Hash identifier: WIz1lEiWOVRmnRh+/a1Qic/qEdB/+44xE/G7kHnckp4=
Subject key identifier: 4C:43:04:D0:D8:9A:0E:45:34:50:15:06:6B:E2:68:00:1A:A8:BF:16
Certificate issuer: /CN=4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032
Certificate serial: 33D502057AB2316933D39E165F1DE4C6999EF19F
Authority key identifier: 4B:D7:CC:FB:86:83:AC:19:AE:AB:3A:61:49:3D:19:01:FA:2F:10:32
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032.cer
Subject info access: rsync://rpki-repo.registro.br/repo/71xrP7gnBks27G3PgBJUHmoBrMjmmgtpQjAsCDobK3U3/0/323830343a386461303a3a2f33322d3336203d3e20323733333639.roa
Signing time: Wed 01 Oct 2025 01:59:23 +0000
ROA not before: Wed 01 Oct 2025 01:54:23 +0000
ROA not after: Wed 30 Sep 2026 01:59:23 +0000
asID: 273369
IP address blocks: 2804:8da0::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/71xrP7gnBks27G3PgBJUHmoBrMjmmgtpQjAsCDobK3U3/0/4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032.crl
rsync://rpki-repo.registro.br/repo/71xrP7gnBks27G3PgBJUHmoBrMjmmgtpQjAsCDobK3U3/0/4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 03:33:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:d5:02:05:7a:b2:31:69:33:d3:9e:16:5f:1d:e4:c6:99:9e:f1:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032
Validity
Not Before: Oct 1 01:54:23 2025 GMT
Not After : Sep 30 01:59:23 2026 GMT
Subject: CN=4C4304D0D89A0E45345015066BE268001AA8BF16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e7:a3:fc:2e:ce:80:29:f1:36:36:f8:11:68:
5c:46:32:d7:cc:20:0f:dc:92:c3:d0:bb:f6:35:23:
b2:a9:c9:4e:d1:dc:22:b6:62:1b:b5:b1:c7:58:e7:
14:de:71:1e:13:bb:89:3f:2b:ea:70:78:4c:04:1d:
11:5a:4d:2f:94:70:f7:05:dc:35:db:b4:17:9c:08:
33:54:f7:d1:fa:a9:2b:cb:bd:4c:4b:10:da:1b:e5:
8a:0c:40:de:8a:fc:66:dc:e9:dc:da:27:76:f6:7b:
21:a9:9e:8b:8e:cd:9b:c5:f5:8d:5f:c0:96:2e:88:
ac:3a:f8:5e:46:70:f0:83:a9:f8:5a:66:4e:a9:40:
e4:ae:30:61:94:66:02:3c:2c:74:d2:a5:f3:ea:b6:
e2:6c:fd:27:b8:1a:2b:e9:bf:9f:46:07:0d:cd:4e:
d8:9d:71:cf:dc:71:59:b1:b6:9c:4c:1c:ea:3a:65:
21:3b:d8:94:11:70:ab:14:6f:a0:10:6d:5f:46:e5:
42:66:01:2d:70:73:cd:a5:2b:5b:8f:3f:52:c9:95:
95:b1:4b:09:d2:75:c3:ac:4b:c7:90:25:31:b0:a7:
6b:f8:e8:1f:0e:f2:e1:96:31:ef:f6:ed:4a:34:34:
eb:28:6c:f2:ab:fd:e1:fc:a2:d9:67:d6:b7:a9:08:
99:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:43:04:D0:D8:9A:0E:45:34:50:15:06:6B:E2:68:00:1A:A8:BF:16
X509v3 Authority Key Identifier:
keyid:4B:D7:CC:FB:86:83:AC:19:AE:AB:3A:61:49:3D:19:01:FA:2F:10:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/71xrP7gnBks27G3PgBJUHmoBrMjmmgtpQjAsCDobK3U3/0/4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/71xrP7gnBks27G3PgBJUHmoBrMjmmgtpQjAsCDobK3U3/0/323830343a386461303a3a2f33322d3336203d3e20323733333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8da0::/32
Signature Algorithm: sha256WithRSAEncryption
bd:e0:8d:fb:30:10:54:b5:44:92:6f:a5:6c:b2:5d:10:0d:51:
55:43:a1:f2:f7:59:79:0d:94:d0:41:8f:09:38:1f:4c:ab:19:
9e:86:37:b0:d6:a5:0a:b5:00:86:67:e8:b6:a2:a7:af:cb:88:
17:71:78:b8:60:1d:f0:8b:f5:bb:55:c9:dc:65:52:30:c9:c3:
9f:78:e6:24:99:4f:1f:20:78:8a:ec:68:23:2a:1e:20:8f:8d:
48:a5:1c:c3:4b:21:39:76:d2:bf:34:f7:81:3c:0f:2b:ec:61:
49:5c:f4:aa:47:74:1a:2e:ed:fb:1f:d4:f6:ed:74:fc:79:6c:
f6:99:f0:94:9d:43:ec:f6:cf:b9:8d:3f:9c:92:15:ee:e2:d3:
68:9d:f3:63:ec:bd:3b:c4:70:74:f2:7d:d2:6e:93:1a:4e:9e:
76:af:01:32:a0:40:29:75:39:91:f6:c6:e2:2f:61:51:d4:47:
8c:f2:c8:cf:46:c1:60:b3:52:d6:60:2f:40:da:f6:70:fa:d0:
fa:94:e6:ba:bd:86:34:dc:6e:03:09:6c:6e:fc:95:fa:26:94:
ac:5c:c6:c8:d3:62:65:4b:0b:28:2a:09:42:b6:32:24:77:f3:
fe:d6:e8:e7:12:db:59:15:0f:d9:46:df:97:65:ae:21:cd:42:
08:61:59:06
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUM9UCBXqyMWkz054WXx3kxpme8Z8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEJEN0NDRkI4NjgzQUMxOUFFQUIzQTYxNDkzRDE5MDFG
QTJGMTAzMjAeFw0yNTEwMDEwMTU0MjNaFw0yNjA5MzAwMTU5MjNaMDMxMTAvBgNV
BAMTKDRDNDMwNEQwRDg5QTBFNDUzNDUwMTUwNjZCRTI2ODAwMUFBOEJGMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC956P8Ls6AKfE2NvgRaFxGMtfM
IA/cksPQu/Y1I7KpyU7R3CK2Yhu1scdY5xTecR4Tu4k/K+pweEwEHRFaTS+UcPcF
3DXbtBecCDNU99H6qSvLvUxLENob5YoMQN6K/Gbc6dzaJ3b2eyGpnouOzZvF9Y1f
wJYuiKw6+F5GcPCDqfhaZk6pQOSuMGGUZgI8LHTSpfPqtuJs/Se4Givpv59GBw3N
Ttidcc/ccVmxtpxMHOo6ZSE72JQRcKsUb6AQbV9G5UJmAS1wc82lK1uPP1LJlZWx
SwnSdcOsS8eQJTGwp2v46B8O8uGWMe/27Uo0NOsobPKr/eH8otln1repCJnlAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUTEME0NiaDkU0UBUGa+JoABqovxYwHwYDVR0j
BBgwFoAUS9fM+4aDrBmuqzphST0ZAfovEDIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzF4clA3Z25Ca3MyN0czUGdCSlVIbW9Cck1qbW1ndHBRakFzQ0RvYksz
VTMvMC80QkQ3Q0NGQjg2ODNBQzE5QUVBQjNBNjE0OTNEMTkwMUZBMkYxMDMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCRDdDQ0ZCODY4M0FDMTlB
RUFCM0E2MTQ5M0QxOTAxRkEyRjEwMzIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzcxeHJQN2duQmtzMjdHM1BnQkpVSG1vQnJNam1tZ3RwUWpBc0NEb2JLM1UzLzAv
MzIzODMwMzQzYTM4NjQ2MTMwM2EzYTJmMzMzMjJkMzMzNjIwM2QzZTIwMzIzNzMz
MzMzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASNoDANBgkqhkiG9w0BAQsFAAOCAQEAveCN+zAQ
VLVEkm+lbLJdEA1RVUOh8vdZeQ2U0EGPCTgfTKsZnoY3sNalCrUAhmfotqKnr8uI
F3F4uGAd8Iv1u1XJ3GVSMMnDn3jmJJlPHyB4iuxoIyoeII+NSKUcw0shOXbSvzT3
gTwPK+xhSVz0qkd0Gi7t+x/U9u10/Hls9pnwlJ1D7PbPuY0/nJIV7uLTaJ3zY+y9
O8RwdPJ90m6TGk6edq8BMqBAKXU5kfbG4i9hUdRHjPLIz0bBYLNS1mAvQNr2cPrQ
+pTmur2GNNxuAwlsbvyV+iaUrFzGyNNiZUsLKCoJQrYyJHfz/tbo5xLbWRUP2Ubf
l2WuIc1CCGFZBg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:12:51 2025 by rpki-client