
$ rpki-client -vvf rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/323830343a313937633a3a2f33322d3332203d3e203631373937.roa
File: 323830343a313937633a3a2f33322d3332203d3e203631373937.roa (raw, json)
Hash identifier: 0ZSVLdUq3+tVxkp+5Jk8JwLj/OtpzcZr2/itSS/qQt0=
Subject key identifier: 23:A6:CF:0D:C8:1F:BF:5E:E6:0C:5F:D9:F4:85:DA:C4:8E:BF:B3:ED
Certificate issuer: /CN=698DD058CC44A7087C5B128356D10FB024C7D778
Certificate serial: 36000C688E156F739315F374BE9676E637853A03
Authority key identifier: 69:8D:D0:58:CC:44:A7:08:7C:5B:12:83:56:D1:0F:B0:24:C7:D7:78
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698DD058CC44A7087C5B128356D10FB024C7D778.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/323830343a313937633a3a2f33322d3332203d3e203631373937.roa
Signing time: Mon 03 Nov 2025 15:07:23 +0000
ROA not before: Mon 03 Nov 2025 15:02:23 +0000
ROA not after: Mon 02 Nov 2026 15:07:23 +0000
asID: 61797
IP address blocks: 2804:197c::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/698DD058CC44A7087C5B128356D10FB024C7D778.crl
rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/698DD058CC44A7087C5B128356D10FB024C7D778.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698DD058CC44A7087C5B128356D10FB024C7D778.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 05:41:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:00:0c:68:8e:15:6f:73:93:15:f3:74:be:96:76:e6:37:85:3a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=698DD058CC44A7087C5B128356D10FB024C7D778
Validity
Not Before: Nov 3 15:02:23 2025 GMT
Not After : Nov 2 15:07:23 2026 GMT
Subject: CN=23A6CF0DC81FBF5EE60C5FD9F485DAC48EBFB3ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f9:ea:8e:56:5d:1f:20:18:a1:92:e8:10:28:
d3:0a:5c:be:3c:a9:c0:2d:55:4b:e1:f6:f6:a6:f2:
13:4b:57:78:7c:4c:ca:c2:39:41:f1:e8:26:45:ed:
20:32:cf:bb:2c:b8:b5:6a:83:78:20:b3:96:85:cb:
ed:b0:38:91:59:d8:66:bd:f7:e2:52:06:dc:c7:1a:
d8:fe:28:1a:c1:5f:69:1e:ad:f2:b6:6d:41:90:2e:
b2:1a:d0:b8:bf:1a:03:f3:d6:bf:f3:07:65:08:0b:
b5:89:55:43:a5:4e:c9:ff:4a:5b:95:f0:23:46:f6:
84:55:88:38:8e:aa:6e:2f:47:bb:9b:f5:f8:3c:0b:
70:b5:56:2e:96:8b:a4:cd:a0:38:7b:2d:f0:e3:09:
06:0e:68:b9:78:74:81:35:7f:28:bf:b6:19:9d:4b:
b1:d1:b2:50:ce:80:aa:ab:09:08:64:78:f9:9c:c9:
59:a9:a7:47:7c:a3:ee:a0:90:7a:75:0e:94:d8:04:
6f:40:eb:77:47:bf:89:0a:26:00:f4:d9:1b:03:16:
6e:d7:46:07:59:ec:7a:ed:ff:0c:ac:6a:a1:57:01:
60:67:f8:0a:0d:aa:94:1a:01:e6:a6:0c:8b:51:5f:
83:ba:57:df:73:f7:a2:61:7b:46:c8:ca:5d:d4:c8:
d8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A6:CF:0D:C8:1F:BF:5E:E6:0C:5F:D9:F4:85:DA:C4:8E:BF:B3:ED
X509v3 Authority Key Identifier:
keyid:69:8D:D0:58:CC:44:A7:08:7C:5B:12:83:56:D1:0F:B0:24:C7:D7:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/698DD058CC44A7087C5B128356D10FB024C7D778.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698DD058CC44A7087C5B128356D10FB024C7D778.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/323830343a313937633a3a2f33322d3332203d3e203631373937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:197c::/32
Signature Algorithm: sha256WithRSAEncryption
46:94:0b:a0:31:da:9c:2f:9d:67:a9:fa:20:6b:bc:9d:8b:7b:
1f:33:ea:a2:28:99:c1:5e:3f:e6:70:3f:9e:fc:f8:26:a4:ce:
a9:d6:49:f2:f5:45:2a:ee:f0:b7:2a:54:80:9f:8b:a0:0d:7f:
ca:89:05:d0:9d:24:36:33:c4:cc:70:e5:f2:67:bb:a7:8f:71:
48:b1:b6:71:cc:ed:5c:47:d2:b7:a6:77:c2:72:97:b4:74:b3:
2c:34:c6:11:65:87:0d:ed:46:9e:c4:44:ce:3d:17:8e:9d:e4:
6a:1f:6a:68:4a:ed:c3:e6:e9:1f:e1:0b:f5:d1:33:16:50:b7:
70:f3:1f:54:97:f4:1e:a4:e3:b0:8a:79:3f:b1:c9:54:a2:71:
de:b2:ee:1a:41:ae:6c:c9:2e:e4:ac:91:4c:21:ef:8c:0f:ba:
f4:d8:f2:b4:68:22:a7:bd:af:e4:ab:f3:c4:30:ad:56:16:94:
ab:32:a5:61:9b:3d:23:2a:4b:f4:f5:fe:20:70:34:e0:98:76:
77:64:f9:8b:d0:b1:08:b5:64:4f:b8:92:4e:80:ce:0e:48:28:
b3:3e:3d:3e:e0:93:96:ed:7e:e8:d3:82:75:79:f8:8e:16:d7:
5a:64:eb:eb:ad:93:c8:a8:dc:2c:3c:52:a3:a9:c6:50:e0:09:
fd:13:d5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:48:54 2025 by rpki-client