
$ rpki-client -vvf rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3133382e33362e37302e302f32332d3233203d3e203631373937.roa
File: 3133382e33362e37302e302f32332d3233203d3e203631373937.roa (raw, json)
Hash identifier: NixRWsfAKfLjuCqWKw8DbR3+NFeZ82tg67btk4oPD8Y=
Subject key identifier: 28:F0:8B:45:57:EE:E3:3C:DE:A7:E2:30:95:7A:84:FA:91:6A:32:A8
Certificate issuer: /CN=698DD058CC44A7087C5B128356D10FB024C7D778
Certificate serial: 50789AD204A915B5CA45E89388EB8280CAF3C00D
Authority key identifier: 69:8D:D0:58:CC:44:A7:08:7C:5B:12:83:56:D1:0F:B0:24:C7:D7:78
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698DD058CC44A7087C5B128356D10FB024C7D778.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3133382e33362e37302e302f32332d3233203d3e203631373937.roa
Signing time: Mon 03 Nov 2025 15:07:25 +0000
ROA not before: Mon 03 Nov 2025 15:02:25 +0000
ROA not after: Mon 02 Nov 2026 15:07:25 +0000
asID: 61797
IP address blocks: 138.36.70.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/698DD058CC44A7087C5B128356D10FB024C7D778.crl
rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/698DD058CC44A7087C5B128356D10FB024C7D778.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698DD058CC44A7087C5B128356D10FB024C7D778.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 05:41:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:78:9a:d2:04:a9:15:b5:ca:45:e8:93:88:eb:82:80:ca:f3:c0:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=698DD058CC44A7087C5B128356D10FB024C7D778
Validity
Not Before: Nov 3 15:02:25 2025 GMT
Not After : Nov 2 15:07:25 2026 GMT
Subject: CN=28F08B4557EEE33CDEA7E230957A84FA916A32A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:60:35:2c:41:75:57:1a:c9:c5:e4:5c:17:7a:
6a:36:a3:36:a4:f8:f4:ca:c4:eb:ea:67:44:80:c9:
5b:05:f1:01:dd:17:35:4d:14:b6:b7:53:16:f9:89:
ef:c5:27:ba:42:d7:e1:c9:64:28:6b:76:fe:3c:3b:
f1:e9:8b:bb:e2:1c:f0:29:0d:59:4d:eb:a7:46:4d:
5a:8a:16:ad:cf:e1:b2:a2:23:1d:0b:2e:25:a8:85:
75:53:04:5e:16:a7:ee:d6:68:0a:0c:36:9e:70:a9:
4e:20:94:be:d5:03:d4:57:24:ed:96:99:1f:dc:81:
0c:8e:8b:5d:4b:09:13:3f:db:0d:31:aa:90:e4:75:
c7:ce:b8:28:92:77:7d:b2:f1:b7:ae:f3:0d:f6:f0:
ed:8d:bc:a3:1c:0e:f1:38:92:de:b9:ee:7b:08:c5:
4e:5c:10:33:9f:e9:f6:86:b4:01:ba:b5:db:5e:c3:
b2:a5:ea:52:2e:43:55:cf:e4:c1:d6:ec:47:f0:fc:
e4:06:d8:54:4d:12:9e:d0:fa:ef:e5:b7:79:1e:a5:
00:ff:6f:f1:91:ca:2a:3a:ee:0d:08:41:eb:85:b9:
9b:05:6e:ca:7e:0a:34:ed:1f:19:53:38:9a:a5:e5:
38:64:7b:8d:76:e8:6c:11:01:3a:af:18:5b:42:c8:
0a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F0:8B:45:57:EE:E3:3C:DE:A7:E2:30:95:7A:84:FA:91:6A:32:A8
X509v3 Authority Key Identifier:
keyid:69:8D:D0:58:CC:44:A7:08:7C:5B:12:83:56:D1:0F:B0:24:C7:D7:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/698DD058CC44A7087C5B128356D10FB024C7D778.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698DD058CC44A7087C5B128356D10FB024C7D778.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3133382e33362e37302e302f32332d3233203d3e203631373937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.36.70.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:ec:59:06:a0:bc:8d:5b:66:e8:21:09:89:e9:4c:da:ef:5b:
bf:36:e5:f6:c9:44:5e:75:d1:5f:95:e3:a9:e7:15:86:83:dc:
38:3b:59:07:f4:45:1b:a6:7f:6d:3f:34:2b:d3:15:a5:b7:74:
ef:77:62:9d:f9:7a:18:56:50:7d:cd:ce:33:c1:f0:7b:33:bd:
eb:d3:8c:0f:d9:6d:67:82:76:11:31:c8:bf:70:7b:3a:d4:ad:
fb:9d:a0:76:37:3f:c5:eb:a1:c1:ab:2d:da:1b:20:00:1c:3e:
7e:fd:96:e0:1a:7d:64:9b:e0:64:36:1b:b4:98:b2:11:bf:25:
2a:1a:1d:bd:91:d0:87:f7:a2:70:89:a8:45:8d:41:a4:1b:77:
e4:62:23:3e:4f:70:d5:a0:b1:c7:9c:a3:d0:8d:c8:65:3a:a3:
a1:7c:26:aa:d2:f0:8a:67:3b:f8:96:55:b1:3c:30:ad:dd:26:
cb:62:2a:70:81:ad:12:a5:9a:40:2a:6f:79:19:84:20:59:b6:
35:e8:80:e4:01:2a:87:4f:f5:92:94:cb:03:ff:f9:8d:8d:d7:
cb:f0:9e:43:d5:07:84:20:35:9b:06:68:3f:22:36:07:d1:2b:
5b:42:b5:9b:5c:17:ce:cb:72:6e:da:87:04:dc:21:64:eb:8a:
d4:22:2f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:04:16 2025 by rpki-client