
$ rpki-client -vvf rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/3230312e372e3232302e302f32322d3234203d3e20323635303431.roa
File: 3230312e372e3232302e302f32322d3234203d3e20323635303431.roa (raw, json)
Hash identifier: 0998SrT1d8GdpeURCa+He/JwBQla+iaerKdNS6qbqJE=
Subject key identifier: FF:AA:69:D6:E3:AE:24:34:B8:0F:11:1D:D3:EF:FE:C3:08:4D:B2:E1
Certificate issuer: /CN=A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF
Certificate serial: 08A712FC1752D6168A96163324ACB8BF439B9733
Authority key identifier: A7:BC:3B:DB:C2:87:71:E2:3B:6A:3A:F8:FB:D3:66:4A:C4:C0:EC:BF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/3230312e372e3232302e302f32322d3234203d3e20323635303431.roa
Signing time: Mon 01 Sep 2025 07:06:20 +0000
ROA not before: Mon 01 Sep 2025 07:01:20 +0000
ROA not after: Mon 31 Aug 2026 07:06:20 +0000
asID: 265041
IP address blocks: 201.7.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.crl
rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 14:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:a7:12:fc:17:52:d6:16:8a:96:16:33:24:ac:b8:bf:43:9b:97:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF
Validity
Not Before: Sep 1 07:01:20 2025 GMT
Not After : Aug 31 07:06:20 2026 GMT
Subject: CN=FFAA69D6E3AE2434B80F111DD3EFFEC3084DB2E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f7:28:f4:5a:bb:e2:0a:ca:e8:ec:fd:8b:65:
fb:31:51:24:d5:41:3c:97:bc:d5:b3:7d:22:ca:7a:
02:04:65:94:58:c8:e0:23:00:2f:ab:57:40:7c:71:
6a:59:73:55:ee:35:de:16:a6:60:5e:e7:5b:5f:ad:
ba:eb:82:40:dd:de:12:1e:30:04:c9:0f:74:a6:22:
53:5a:ab:f1:a6:ac:52:b5:bd:04:48:80:0e:59:93:
c6:cd:1e:7c:20:42:df:9a:2a:77:66:dd:ca:88:8a:
2a:cf:bb:3f:12:d4:11:ac:50:78:75:e2:1c:20:21:
69:54:9b:b5:a2:a2:24:21:b3:73:4c:cd:84:69:e5:
0b:52:bc:2c:4a:36:66:11:44:15:63:a6:17:84:a1:
80:12:52:d8:ad:fc:c7:21:0d:b3:06:99:fa:e0:5d:
f0:d7:6c:4e:0e:c3:a3:1d:b6:f6:40:f4:32:bf:1c:
a5:86:de:05:f1:f3:d8:69:6e:16:8d:4c:73:30:a1:
dc:3f:8b:28:25:96:73:40:35:97:12:46:4d:69:0f:
6f:eb:cb:8c:dc:05:55:d5:31:d1:df:40:97:d7:9a:
5c:a1:fc:a9:2c:dd:f4:08:fa:ae:54:47:5f:ae:1b:
42:7e:09:7c:61:69:2e:68:aa:c0:d3:a5:86:17:f1:
bb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:AA:69:D6:E3:AE:24:34:B8:0F:11:1D:D3:EF:FE:C3:08:4D:B2:E1
X509v3 Authority Key Identifier:
keyid:A7:BC:3B:DB:C2:87:71:E2:3B:6A:3A:F8:FB:D3:66:4A:C4:C0:EC:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/3230312e372e3232302e302f32322d3234203d3e20323635303431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.7.220.0/22
Signature Algorithm: sha256WithRSAEncryption
35:e1:57:ee:3a:d1:c9:0d:91:b3:4e:f9:8b:6b:19:65:d5:4d:
df:a7:0f:df:86:ee:ba:46:13:82:12:b9:1b:3a:be:ba:10:c5:
58:0c:60:72:ed:68:40:16:78:4c:44:ad:6d:55:9c:8f:68:a2:
b3:10:76:80:d2:b5:c6:bd:d2:11:ca:94:16:4c:ee:d1:48:be:
51:76:e3:ee:76:c5:31:33:df:b5:e5:16:89:fa:d2:24:99:df:
7f:cd:f9:17:33:70:3a:9c:78:5f:e7:cc:bf:3a:65:2a:36:5d:
ee:19:74:9f:82:8f:df:0c:5d:2d:e6:5f:80:12:40:6d:38:a7:
06:5f:91:0e:97:29:c6:8a:3a:50:71:2d:8f:ef:a7:2a:e3:69:
72:46:9b:ec:ac:6c:78:c4:ba:76:b2:f3:1e:ff:65:d5:da:27:
dd:9b:6f:be:7f:df:ab:6d:4f:e8:ff:10:9e:cd:ec:39:06:00:
05:34:e6:61:f8:83:20:38:73:b5:1b:be:e4:74:9c:0b:82:78:
fe:23:ee:38:ab:df:87:ae:03:44:6e:a8:02:e0:89:58:d2:0e:
1e:9e:04:40:66:32:ef:be:7b:62:82:89:09:23:ea:4d:df:0b:
29:cc:b6:24:af:2e:d3:65:26:a6:30:90:b4:83:b0:c6:84:5f:
a4:55:36:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:29:54 2025 by rpki-client