
$ rpki-client -vvf rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/323830343a323931303a383030303a3a2f34342d3434203d3e20323633393935.roa
File: 323830343a323931303a383030303a3a2f34342d3434203d3e20323633393935.roa (raw, json)
Hash identifier: BhcHV4tjIlW567jEhCBEZqVpga5ReVc/oP246ZNsCHc=
Subject key identifier: A1:FA:DC:92:41:D9:AF:07:74:6D:29:CF:B0:3F:40:A4:FB:FB:8C:14
Certificate issuer: /CN=98408164D264D668D190CF3DE6A09CDF1BD9915D
Certificate serial: 4C45C3A04CE1A68D0BA80E04955E7D789AD35962
Authority key identifier: 98:40:81:64:D2:64:D6:68:D1:90:CF:3D:E6:A0:9C:DF:1B:D9:91:5D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98408164D264D668D190CF3DE6A09CDF1BD9915D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/323830343a323931303a383030303a3a2f34342d3434203d3e20323633393935.roa
Signing time: Tue 28 Oct 2025 19:35:29 +0000
ROA not before: Tue 28 Oct 2025 19:30:29 +0000
ROA not after: Tue 27 Oct 2026 19:35:29 +0000
asID: 263995
IP address blocks: 2804:2910:8000::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/98408164D264D668D190CF3DE6A09CDF1BD9915D.crl
rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/98408164D264D668D190CF3DE6A09CDF1BD9915D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98408164D264D668D190CF3DE6A09CDF1BD9915D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 08 Nov 2025 06:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:45:c3:a0:4c:e1:a6:8d:0b:a8:0e:04:95:5e:7d:78:9a:d3:59:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98408164D264D668D190CF3DE6A09CDF1BD9915D
Validity
Not Before: Oct 28 19:30:29 2025 GMT
Not After : Oct 27 19:35:29 2026 GMT
Subject: CN=A1FADC9241D9AF07746D29CFB03F40A4FBFB8C14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9d:4d:1a:6f:16:d6:1a:8a:25:f0:7d:fe:20:
a9:2c:ea:ca:6a:21:2a:3d:fe:01:f1:1c:aa:f2:64:
be:73:a6:b9:89:92:ad:a8:14:b4:24:c3:fc:3e:58:
eb:5f:f4:0a:2c:2e:a5:9b:a4:b4:1e:23:88:b2:ee:
c0:fa:e9:19:e9:cc:35:c6:9d:cf:e6:07:fc:20:52:
82:41:5a:ff:41:9a:6d:ed:e4:7f:a1:07:18:ed:f6:
bd:2d:a3:9d:10:54:36:1d:bf:f9:24:6a:0a:62:80:
e6:31:69:73:0c:14:08:64:b1:ae:c5:4a:7b:32:5c:
23:f9:28:15:a9:d6:e9:f7:f7:4c:c0:24:e6:c6:ca:
89:13:1e:44:bb:5b:e8:bf:5e:c0:15:cd:d9:5e:18:
05:3c:d0:77:38:a5:48:77:91:48:4b:c1:b0:cf:3a:
65:6f:31:bc:46:b8:36:94:c9:4b:2c:a4:1c:84:0f:
97:22:7e:ea:40:46:af:f1:ee:f1:1c:b3:9f:ae:62:
92:c8:9c:01:cd:b0:51:6b:08:73:b7:dc:9e:76:10:
f0:51:af:dd:74:15:b7:b4:90:f8:1b:30:53:72:fb:
eb:cf:e5:1c:b6:69:cd:e8:93:41:6e:e3:ae:25:e0:
0c:21:c9:d0:2b:8f:e6:d0:5f:66:6b:9f:32:7b:e0:
91:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:FA:DC:92:41:D9:AF:07:74:6D:29:CF:B0:3F:40:A4:FB:FB:8C:14
X509v3 Authority Key Identifier:
keyid:98:40:81:64:D2:64:D6:68:D1:90:CF:3D:E6:A0:9C:DF:1B:D9:91:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/98408164D264D668D190CF3DE6A09CDF1BD9915D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98408164D264D668D190CF3DE6A09CDF1BD9915D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/323830343a323931303a383030303a3a2f34342d3434203d3e20323633393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2910:8000::/44
Signature Algorithm: sha256WithRSAEncryption
43:fc:4a:a9:bf:de:61:9d:62:4d:c3:ce:6c:e3:07:b8:d9:99:
1e:e2:c9:0d:e1:97:2b:d9:fb:32:92:93:09:30:36:8c:33:ed:
88:44:0a:80:8a:04:b8:60:70:f3:88:30:0d:62:fd:44:48:f3:
9e:40:6f:ea:3b:90:36:69:9a:e0:57:49:c9:a1:c1:0e:34:55:
dc:cb:31:f6:49:a1:5b:f6:6b:59:fe:22:82:aa:6d:84:d3:fb:
a2:5e:59:5f:aa:64:f0:10:c6:85:e6:de:94:5a:32:eb:25:12:
ca:99:26:16:4f:5d:68:78:f3:42:f2:c8:c8:02:72:ab:86:c9:
67:ff:48:25:42:af:6e:4d:e2:18:4d:b1:a2:6e:ed:a4:3e:68:
32:12:e0:2f:df:fc:f3:62:f1:0d:c6:1f:1f:18:76:e0:7c:71:
06:2c:12:0b:61:65:5f:f5:6b:a0:42:64:80:6c:f4:bd:e7:72:
0f:f4:52:aa:ba:f7:99:e3:4b:91:ed:f4:68:36:cd:6a:0b:e8:
dc:d9:5f:c2:35:a6:ee:fc:27:68:23:20:6d:59:e7:f2:ed:9e:
16:4d:d8:bd:ee:40:e1:b3:f8:00:77:73:98:8c:f8:24:a4:cb:
8d:9d:7a:d8:3f:03:23:d5:5a:e2:e9:0c:62:82:56:91:bf:3a:
4e:70:44:87
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUTEXDoEzhpo0LqA4ElV59eJrTWWIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTg0MDgxNjREMjY0RDY2OEQxOTBDRjNERTZBMDlDREYx
QkQ5OTE1RDAeFw0yNTEwMjgxOTMwMjlaFw0yNjEwMjcxOTM1MjlaMDMxMTAvBgNV
BAMTKEExRkFEQzkyNDFEOUFGMDc3NDZEMjlDRkIwM0Y0MEE0RkJGQjhDMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1nU0abxbWGool8H3+IKks6spq
ISo9/gHxHKryZL5zprmJkq2oFLQkw/w+WOtf9AosLqWbpLQeI4iy7sD66RnpzDXG
nc/mB/wgUoJBWv9Bmm3t5H+hBxjt9r0to50QVDYdv/kkagpigOYxaXMMFAhksa7F
SnsyXCP5KBWp1un390zAJObGyokTHkS7W+i/XsAVzdleGAU80Hc4pUh3kUhLwbDP
OmVvMbxGuDaUyUsspByED5cifupARq/x7vEcs5+uYpLInAHNsFFrCHO33J52EPBR
r910Fbe0kPgbMFNy++vP5Ry2ac3ok0Fu464l4AwhydArj+bQX2ZrnzJ74JF5AgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUofrckkHZrwd0bSnPsD9ApPv7jBQwHwYDVR0j
BBgwFoAUmECBZNJk1mjRkM895qCc3xvZkV0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUZoVHBHQnBvV0FMZHBGeUpWcXRTTW91a0VBOXRxOUhZaVd3SFBFakNV
SFMvMC85ODQwODE2NEQyNjRENjY4RDE5MENGM0RFNkEwOUNERjFCRDk5MTVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk4NDA4MTY0RDI2NEQ2NjhE
MTkwQ0YzREU2QTA5Q0RGMUJEOTkxNUQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FGaFRwR0Jwb1dBTGRwRnlKVnF0U01vdWtFQTl0cTlIWWlXd0hQRWpDVUhTLzAv
MzIzODMwMzQzYTMyMzkzMTMwM2EzODMwMzAzMDNhM2EyZjM0MzQyZDM0MzQyMDNk
M2UyMDMyMzYzMzM5MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCgEKRCAADANBgkqhkiG9w0BAQsF
AAOCAQEAQ/xKqb/eYZ1iTcPObOMHuNmZHuLJDeGXK9n7MpKTCTA2jDPtiEQKgIoE
uGBw84gwDWL9REjznkBv6juQNmma4FdJyaHBDjRV3Msx9kmhW/ZrWf4igqpthNP7
ol5ZX6pk8BDGhebelFoy6yUSypkmFk9daHjzQvLIyAJyq4bJZ/9IJUKvbk3iGE2x
om7tpD5oMhLgL9/882LxDcYfHxh24HxxBiwSC2FlX/VroEJkgGz0vedyD/RSqrr3
meNLke30aDbNagvo3NlfwjWm7vwnaCMgbVnn8u2eFk3Yve5A4bP4AHdzmIz4JKTL
jZ162D8DI9Va4ukMYoJWkb86TnBEhw==
-----END CERTIFICATE-----
Generated at Fri Nov 7 11:48:16 2025 by rpki-client