
$ rpki-client -vvf rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/323830343a363762633a343030303a3a2f33342d3334203d3e20323639363437.roa
File: 323830343a363762633a343030303a3a2f33342d3334203d3e20323639363437.roa (raw, json)
Hash identifier: a1C+hpzUTZtHk2FHBwHGm01zz+wU4bo5iettVF0Z6Ls=
Subject key identifier: 13:CA:36:A6:EA:A9:05:60:53:46:25:8A:98:DA:79:30:BF:F2:83:2F
Certificate issuer: /CN=D95F78E630398477E9BAE976B3EAEDB0059994DB
Certificate serial: 33FB405539CAAC4DEB3A6A11DE86E5ADCB21F2C2
Authority key identifier: D9:5F:78:E6:30:39:84:77:E9:BA:E9:76:B3:EA:ED:B0:05:99:94:DB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/323830343a363762633a343030303a3a2f33342d3334203d3e20323639363437.roa
Signing time: Thu 06 Mar 2025 08:32:29 +0000
ROA not before: Thu 06 Mar 2025 08:27:29 +0000
ROA not after: Thu 05 Mar 2026 08:32:29 +0000
asID: 269647
IP address blocks: 2804:67bc:4000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.crl
rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:fb:40:55:39:ca:ac:4d:eb:3a:6a:11:de:86:e5:ad:cb:21:f2:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D95F78E630398477E9BAE976B3EAEDB0059994DB
Validity
Not Before: Mar 6 08:27:29 2025 GMT
Not After : Mar 5 08:32:29 2026 GMT
Subject: CN=13CA36A6EAA905605346258A98DA7930BFF2832F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:20:f1:3f:48:fa:c3:6b:1c:00:dc:28:5d:98:
a2:85:4b:82:d7:68:36:65:23:26:b4:13:c6:bf:bd:
68:8a:b0:e8:a4:30:00:12:e7:4c:96:13:fd:9d:c4:
0a:a8:87:fc:4d:4e:28:ba:32:ed:98:6b:3f:9a:73:
bf:b8:44:b0:99:22:da:5e:a4:74:77:5d:62:25:92:
ca:13:17:fc:bc:ee:6c:8e:5e:0a:14:c2:f4:3b:05:
41:09:42:b0:68:61:3f:32:53:72:0a:d2:bc:e9:38:
ba:10:a2:fd:c0:64:8c:5f:9a:53:ae:f4:b2:21:d1:
84:dd:4b:c6:0b:b2:e0:7b:4d:e7:98:05:0e:15:f8:
ea:6e:91:67:da:21:20:9a:24:25:36:0f:82:5d:37:
f7:05:26:a8:36:ca:9b:85:41:d1:f4:79:01:55:1f:
53:86:df:fe:0f:f7:72:26:a8:21:57:10:fe:80:96:
4b:81:0a:a9:25:a2:d1:af:b9:ca:d2:6a:7e:bb:1c:
52:bb:4d:90:98:46:73:3b:d4:23:9f:02:8b:06:df:
ce:0a:5b:a1:fe:95:e5:42:30:82:5d:2e:ad:d8:c3:
93:f9:13:c0:25:45:7e:be:a6:f3:2a:c2:85:dd:29:
7f:32:47:75:13:5d:17:43:92:c7:f2:ae:be:e4:f0:
1c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:CA:36:A6:EA:A9:05:60:53:46:25:8A:98:DA:79:30:BF:F2:83:2F
X509v3 Authority Key Identifier:
keyid:D9:5F:78:E6:30:39:84:77:E9:BA:E9:76:B3:EA:ED:B0:05:99:94:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/323830343a363762633a343030303a3a2f33342d3334203d3e20323639363437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:67bc:4000::/34
Signature Algorithm: sha256WithRSAEncryption
52:c5:2a:cc:de:22:22:a6:31:46:00:13:1d:e4:7f:25:72:80:
8a:92:04:5d:52:10:80:20:3e:00:32:43:dc:7e:bb:a8:f5:08:
a1:c5:c5:90:a7:86:3b:41:f3:86:b7:33:7e:81:db:b3:53:ad:
ef:93:0e:b0:1d:14:e1:77:67:3c:ab:03:59:6d:bf:a7:ac:a0:
c2:c4:b4:1c:84:be:cf:a6:d5:68:e2:92:39:72:13:c7:e1:88:
ed:8f:00:3a:4e:8d:6c:d3:1c:8d:63:e3:db:4d:46:00:4e:a3:
5c:39:37:1b:4c:4f:ef:a5:55:7c:c9:b9:06:7d:47:e4:ee:49:
a9:e0:21:69:5a:85:de:d0:7b:16:53:ba:83:0c:d8:86:d2:52:
5f:82:b6:ad:94:b6:72:ca:07:5c:e2:d8:58:94:8a:51:42:87:
78:1b:c6:77:77:84:dc:87:f4:b4:4a:38:36:72:c7:3b:ef:4b:
9a:fb:36:f0:2e:7f:49:fb:76:07:a0:0e:11:8d:5d:2d:c6:d0:
1e:8a:98:69:be:b7:e9:e1:a3:b2:0c:ad:4c:ef:d0:7e:21:2a:
29:19:07:71:da:c3:e0:e9:fb:c2:34:7e:85:f9:eb:cb:1a:96:
b5:f0:4e:ac:be:98:47:77:3a:71:c3:4c:72:0f:ff:3f:33:cb:
9b:36:ee:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:27:19 2025 by rpki-client