
$ rpki-client -vvf rpki-repo.registro.br/repo/CmnCbp8v7iDMurgVtADrM17wgTJuFiozSkksoxv54AjP/0/323830343a3739303a3a2f33322d3438203d3e203238363533.roa
File: 323830343a3739303a3a2f33322d3438203d3e203238363533.roa (raw, json)
Hash identifier: KjO9HHbv/U5dGfYHzV6HQeR9wWMJIZhbW/pXoh0rCOA=
Subject key identifier: 1D:9F:21:9C:2D:35:56:89:A8:05:12:9C:2F:21:96:5F:95:CB:E9:5F
Certificate issuer: /CN=667E147F41B8931495CA63574998633ECA590500
Certificate serial: 31F98478B06F137AFB3AE9D00FE9F1CE2416E8D6
Authority key identifier: 66:7E:14:7F:41:B8:93:14:95:CA:63:57:49:98:63:3E:CA:59:05:00
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/667E147F41B8931495CA63574998633ECA590500.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CmnCbp8v7iDMurgVtADrM17wgTJuFiozSkksoxv54AjP/0/323830343a3739303a3a2f33322d3438203d3e203238363533.roa
Signing time: Fri 22 Aug 2025 17:59:00 +0000
ROA not before: Fri 22 Aug 2025 17:54:00 +0000
ROA not after: Fri 21 Aug 2026 17:59:00 +0000
asID: 28653
IP address blocks: 2804:790::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CmnCbp8v7iDMurgVtADrM17wgTJuFiozSkksoxv54AjP/0/667E147F41B8931495CA63574998633ECA590500.crl
rsync://rpki-repo.registro.br/repo/CmnCbp8v7iDMurgVtADrM17wgTJuFiozSkksoxv54AjP/0/667E147F41B8931495CA63574998633ECA590500.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/667E147F41B8931495CA63574998633ECA590500.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 10:49:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:f9:84:78:b0:6f:13:7a:fb:3a:e9:d0:0f:e9:f1:ce:24:16:e8:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=667E147F41B8931495CA63574998633ECA590500
Validity
Not Before: Aug 22 17:54:00 2025 GMT
Not After : Aug 21 17:59:00 2026 GMT
Subject: CN=1D9F219C2D355689A805129C2F21965F95CBE95F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:52:4d:b2:11:bd:9d:4e:02:0e:04:5c:fe:60:
4d:9b:c7:89:5e:52:c9:2a:6f:01:9e:f3:f8:9c:95:
aa:8a:85:d7:69:d7:cd:98:49:52:d0:34:5c:b1:b9:
f3:1f:dd:f0:28:87:ab:6b:68:f0:e8:35:1e:79:38:
6a:82:31:fc:76:5a:26:a0:42:d7:b4:79:2c:d5:13:
15:d8:f0:cd:0a:2b:d3:08:4f:da:8d:db:38:a2:08:
32:dc:94:20:40:59:49:4b:92:dd:14:0a:20:62:ab:
3d:69:75:5c:a2:86:98:eb:22:b6:d2:97:96:9c:6e:
42:12:fb:6d:e6:1b:4d:0e:e7:6c:b6:cc:6b:04:b2:
72:99:4c:a9:d4:3b:02:af:f5:da:2b:1d:0c:34:45:
c5:08:4c:d8:27:16:7b:46:1d:ae:f2:ab:71:26:c5:
85:05:89:92:f4:e3:db:72:30:f8:90:ea:8b:a4:e0:
86:f8:46:ee:66:e0:c4:63:02:86:86:b3:7d:9a:f7:
77:a8:e7:7c:0f:b0:e3:33:d2:ee:48:46:7e:5e:1d:
b4:b7:e3:e6:b9:1c:7e:3e:fa:2c:04:4b:bb:ba:8c:
dd:7b:01:9f:35:12:47:23:a4:f4:7a:5f:e6:0b:cd:
bb:b1:4c:c9:30:25:e1:7b:dd:f9:9a:78:a2:74:5f:
97:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:9F:21:9C:2D:35:56:89:A8:05:12:9C:2F:21:96:5F:95:CB:E9:5F
X509v3 Authority Key Identifier:
keyid:66:7E:14:7F:41:B8:93:14:95:CA:63:57:49:98:63:3E:CA:59:05:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CmnCbp8v7iDMurgVtADrM17wgTJuFiozSkksoxv54AjP/0/667E147F41B8931495CA63574998633ECA590500.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/667E147F41B8931495CA63574998633ECA590500.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnCbp8v7iDMurgVtADrM17wgTJuFiozSkksoxv54AjP/0/323830343a3739303a3a2f33322d3438203d3e203238363533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:790::/32
Signature Algorithm: sha256WithRSAEncryption
28:1a:cb:d5:13:fb:8f:8e:03:a4:ae:6b:dd:a4:3e:d3:f2:60:
b6:8a:5a:04:63:c1:46:7e:c0:f4:20:0e:f0:db:fa:7b:3b:ed:
1e:97:4a:da:e1:54:ac:e7:04:7b:04:a4:8e:24:d4:48:d1:ee:
df:36:fc:fd:ad:32:9f:82:d6:ee:fd:5d:8a:b5:65:39:e0:da:
29:83:41:c0:1e:b5:ef:a7:79:ea:b2:de:ec:4e:e8:79:8e:18:
1b:d8:46:61:a0:d9:8b:8a:bb:d0:ed:e9:51:fa:0c:21:b9:be:
96:92:ff:b5:4f:e1:e3:08:4b:fb:75:0e:81:49:a0:6a:dd:0e:
a9:5b:98:94:71:43:1c:55:74:a3:83:e2:db:19:ba:9b:e3:65:
d4:c6:ae:5b:c9:d4:7a:6c:34:4e:14:9a:37:99:68:07:06:1a:
1e:b1:99:0c:07:e8:f7:25:01:1a:00:54:f3:91:58:8c:73:e4:
0d:c8:88:7f:78:fc:f3:44:03:df:a8:62:48:ff:10:61:2e:62:
64:d5:08:df:e4:52:f2:36:55:28:5b:7f:c2:82:a9:b2:54:bf:
37:7b:43:1c:53:f0:94:f7:17:9c:2f:83:c2:7d:13:e7:f3:d3:
31:df:85:6c:47:d5:5d:f9:1b:6e:43:8d:fd:42:7b:cc:17:60:
3e:89:d2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:27:18 2025 by rpki-client