
$ rpki-client -vvf rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/323830343a336437343a613a3a2f34382d313238203d3e20323636353332.roa
File: 323830343a336437343a613a3a2f34382d313238203d3e20323636353332.roa (raw, json)
Hash identifier: us2DcMOTb2Z9kbSNUL9Ss4wzGf7K1g/iVqm9aLZFCZg=
Subject key identifier: DD:2B:5C:C7:13:C6:DE:8D:70:ED:DF:94:03:A4:9B:5A:8B:22:85:78
Certificate issuer: /CN=2DC0F242ADDA7136D95141422051D1361143E486
Certificate serial: 602E3F1E47D6133594F93293B32110A333872B0E
Authority key identifier: 2D:C0:F2:42:AD:DA:71:36:D9:51:41:42:20:51:D1:36:11:43:E4:86
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DC0F242ADDA7136D95141422051D1361143E486.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/323830343a336437343a613a3a2f34382d313238203d3e20323636353332.roa
Signing time: Wed 24 Sep 2025 20:27:46 +0000
ROA not before: Wed 24 Sep 2025 20:22:46 +0000
ROA not after: Wed 23 Sep 2026 20:27:46 +0000
asID: 266532
IP address blocks: 2804:3d74:a::/48 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/2DC0F242ADDA7136D95141422051D1361143E486.crl
rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/2DC0F242ADDA7136D95141422051D1361143E486.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DC0F242ADDA7136D95141422051D1361143E486.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 21:31:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:2e:3f:1e:47:d6:13:35:94:f9:32:93:b3:21:10:a3:33:87:2b:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DC0F242ADDA7136D95141422051D1361143E486
Validity
Not Before: Sep 24 20:22:46 2025 GMT
Not After : Sep 23 20:27:46 2026 GMT
Subject: CN=DD2B5CC713C6DE8D70EDDF9403A49B5A8B228578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:75:f7:05:bb:bb:37:11:7d:15:f8:9c:31:c0:
0f:3b:97:cb:9b:d6:95:6d:c8:a2:b1:a2:0c:ae:5a:
96:c5:0f:c8:48:82:32:23:77:aa:68:36:b6:e7:38:
44:5a:92:8f:d0:0e:5f:65:b7:35:0b:e7:00:31:b9:
4d:02:09:d4:8a:3f:9e:8e:ef:2a:5a:db:b7:d2:66:
3f:d1:84:d7:24:a8:99:05:41:9e:fd:0d:62:b3:bb:
e9:5d:a2:80:95:72:a7:fe:b2:30:fb:2a:68:96:7a:
ac:4e:45:98:0f:32:ba:c2:49:ce:f0:15:02:bd:a3:
de:ae:ef:f5:5d:66:88:91:f9:a2:5b:af:f1:4a:c3:
b1:b1:89:d7:5c:38:43:31:25:2c:24:f1:b0:b5:c7:
95:d8:6d:5b:81:2f:ac:ab:55:7d:b6:4c:f3:80:37:
04:10:67:c4:bb:71:85:cf:4a:25:25:eb:19:cc:0f:
3f:28:b9:a5:87:56:dc:e2:ec:1f:a9:a3:12:39:94:
50:d0:ff:a0:c9:02:ad:e3:61:2a:4b:c3:d5:f4:55:
20:79:9f:bd:0b:68:6f:cd:08:77:db:b1:95:d5:9d:
1e:9f:62:a8:35:8c:81:54:13:6a:77:04:60:13:f5:
2a:aa:19:db:a6:b7:99:4c:b1:d5:2c:f9:a3:bf:85:
1e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2B:5C:C7:13:C6:DE:8D:70:ED:DF:94:03:A4:9B:5A:8B:22:85:78
X509v3 Authority Key Identifier:
keyid:2D:C0:F2:42:AD:DA:71:36:D9:51:41:42:20:51:D1:36:11:43:E4:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/2DC0F242ADDA7136D95141422051D1361143E486.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DC0F242ADDA7136D95141422051D1361143E486.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/323830343a336437343a613a3a2f34382d313238203d3e20323636353332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3d74:a::/48
Signature Algorithm: sha256WithRSAEncryption
5a:ae:0b:07:7c:e3:68:80:a0:a3:52:30:4b:81:44:ec:01:ba:
e7:ca:7e:d8:ef:42:63:a6:e5:49:5c:a3:b7:2d:57:f0:5b:74:
0a:aa:fc:95:b9:35:60:a7:3c:12:ff:15:52:16:69:8b:f4:9a:
c8:11:4d:c4:99:7e:e5:e2:40:88:2c:35:f7:f5:0a:51:d2:88:
72:2b:28:e7:8e:2c:a8:d9:2b:c5:62:99:de:45:59:97:c7:5b:
c3:04:2e:ee:2f:b7:24:6b:7f:15:1d:c0:e3:13:14:fc:86:91:
ad:f2:a9:68:a3:bd:c4:95:b6:5a:79:8d:fd:7c:18:8b:39:ca:
a1:27:41:85:e8:e9:66:57:1f:bf:46:3f:55:88:38:ac:da:56:
55:e5:b5:c1:29:30:80:12:b6:32:57:7b:e9:8f:f4:ea:06:3a:
05:b6:cf:d5:0e:7b:de:51:b4:6c:63:24:04:c5:c9:ea:bd:01:
b0:72:c6:0a:8f:f6:d1:26:d8:a1:58:4f:59:c7:0a:5a:2e:2a:
af:fe:e3:27:a4:01:ce:c5:12:f9:07:bf:54:a0:fb:6d:b5:28:
5b:f1:1d:4a:e4:af:2a:f3:9a:2b:eb:46:fb:73:99:1a:3c:f6:
47:f0:4e:6a:2b:7b:97:b5:8e:34:41:63:6b:ce:0e:92:52:25:
2b:c8:b8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:21:50 2025 by rpki-client