
$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/323830343a35633a3a2f33322d3438203d3e203238323031.roa
File: 323830343a35633a3a2f33322d3438203d3e203238323031.roa (raw, json)
Hash identifier: Vh71bYKQz74JYaTBOOyAmeebcem8Vxh0vnxD3ny0fwE=
Subject key identifier: F6:50:BF:BC:AF:94:B0:53:8C:1E:6C:B4:40:88:C0:E7:3D:F2:4E:59
Certificate issuer: /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial: 1912C230A10C907A7D1887FD0DCA9099411CDBD0
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/323830343a35633a3a2f33322d3438203d3e203238323031.roa
Signing time: Sat 02 Aug 2025 12:58:11 +0000
ROA not before: Sat 02 Aug 2025 12:53:11 +0000
ROA not after: Sat 01 Aug 2026 12:58:11 +0000
asID: 28201
IP address blocks: 2804:5c::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 17:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:12:c2:30:a1:0c:90:7a:7d:18:87:fd:0d:ca:90:99:41:1c:db:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Validity
Not Before: Aug 2 12:53:11 2025 GMT
Not After : Aug 1 12:58:11 2026 GMT
Subject: CN=F650BFBCAF94B0538C1E6CB44088C0E73DF24E59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:20:09:49:39:5f:e5:1e:37:9b:c0:a1:b9:09:
22:72:fb:8a:9c:b6:7a:10:4f:dc:49:b3:de:c2:0c:
86:07:f4:10:d6:98:2b:77:8d:20:77:a6:a5:64:34:
a8:d0:b7:80:76:30:b6:8d:2c:97:f7:24:ac:33:d1:
33:dd:63:2a:26:32:6e:20:6f:82:2d:43:52:af:aa:
e7:ea:fe:64:cc:61:92:8a:60:d6:b0:69:45:11:b0:
d0:ec:22:bd:73:0d:b4:9f:92:6f:a2:6e:5e:dc:a6:
fc:88:bc:05:ca:4c:13:16:ad:d2:db:bb:27:2e:d8:
f8:68:28:6e:7b:4a:e9:82:da:15:b3:e7:24:4e:cc:
9f:ff:15:1e:17:34:35:6f:ca:a9:41:5b:58:8e:9b:
12:14:c1:89:70:bf:2d:40:74:81:8c:5f:ce:4b:10:
4a:b4:03:7d:e0:62:56:c1:44:b3:2a:68:d8:20:53:
92:b5:e4:4a:66:b0:a9:07:89:c7:b3:f1:be:3d:af:
09:10:4f:f6:8f:84:cc:31:4a:1c:6c:3a:98:b4:17:
2a:9e:c8:65:cf:d9:18:be:41:66:78:a6:83:c4:f8:
47:19:42:82:46:a3:be:c2:17:a5:ac:51:3e:7c:48:
e7:55:34:9a:fa:d0:26:0a:ca:fa:66:14:04:3c:92:
f2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:50:BF:BC:AF:94:B0:53:8C:1E:6C:B4:40:88:C0:E7:3D:F2:4E:59
X509v3 Authority Key Identifier:
keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/323830343a35633a3a2f33322d3438203d3e203238323031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5c::/32
Signature Algorithm: sha256WithRSAEncryption
0f:43:0d:49:de:f1:4e:c4:40:bc:77:9f:49:9e:02:0c:9c:3c:
8f:63:af:70:04:3e:a2:da:bf:ef:e8:8b:e0:4f:5d:04:1d:7c:
f1:f3:0f:11:8a:d5:ee:39:f2:07:c1:9a:ae:79:cd:a9:16:ef:
a5:c7:fc:13:10:14:81:3e:a4:7b:4d:52:dc:97:4d:a5:96:4e:
cf:27:f5:c5:55:4f:78:1f:40:ed:eb:ae:8b:ad:f7:18:50:7a:
2a:3a:8e:62:be:de:74:3c:84:af:49:19:17:d5:31:89:67:05:
a5:55:b0:e9:1f:c4:ac:30:34:55:c3:29:14:d5:67:72:24:b3:
98:41:78:92:24:c9:a2:6d:42:49:d8:ff:e3:82:3a:c2:17:57:
2c:14:b7:23:89:c3:dc:1a:e7:7a:6b:39:90:f1:cd:89:a2:fc:
76:14:84:cc:8f:4d:55:43:dd:27:74:7c:bb:84:c4:10:fc:f1:
6f:3f:e4:80:f0:31:4a:90:75:aa:50:a8:15:e1:50:62:15:ae:
9b:be:e4:be:75:2e:d2:c2:68:9c:e2:9c:87:15:bc:cb:a7:e3:
40:5a:ff:9b:d7:f3:7a:10:c8:cb:ec:be:2a:aa:50:a9:9a:a3:
75:57:6b:4d:08:e5:16:f9:a2:0c:bf:4a:c5:39:c6:fb:2c:d7:
1d:10:81:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:29:01 2025 by rpki-client