
$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a393630303a3a2f34302d3430203d3e20323733333039.roa
File: 323830343a386337633a393630303a3a2f34302d3430203d3e20323733333039.roa (raw, json)
Hash identifier: wUBTeRs7I9ORoUsmrkwTG075/B8To3xQ9Sn7V4ugsXo=
Subject key identifier: 5D:70:41:31:46:B4:A9:F3:B2:C6:2B:E9:41:73:84:22:BB:D0:63:AF
Certificate issuer: /CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
Certificate serial: 55486A7481220C14195D02EAA68702527BA77741
Authority key identifier: 2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a393630303a3a2f34302d3430203d3e20323733333039.roa
Signing time: Wed 09 Apr 2025 13:53:39 +0000
ROA not before: Wed 09 Apr 2025 13:48:39 +0000
ROA not after: Wed 08 Apr 2026 13:53:39 +0000
asID: 273309
IP address blocks: 2804:8c7c:9600::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl
rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 18:12:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:48:6a:74:81:22:0c:14:19:5d:02:ea:a6:87:02:52:7b:a7:77:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
Validity
Not Before: Apr 9 13:48:39 2025 GMT
Not After : Apr 8 13:53:39 2026 GMT
Subject: CN=5D70413146B4A9F3B2C62BE941738422BBD063AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e4:dd:6c:a4:aa:9e:f9:79:61:f9:69:d9:02:
b9:ef:da:02:fd:ac:27:f5:da:7a:6d:33:5e:8b:a0:
25:71:47:d6:4e:fe:c6:55:04:52:90:4f:03:f6:da:
1b:d3:23:a6:03:06:21:a6:35:fe:33:34:39:8b:43:
74:65:e5:7b:21:7d:9e:04:c2:ed:8b:d7:60:8c:14:
d3:66:3e:00:5c:0a:a3:68:1d:76:d3:44:0f:21:1e:
9d:03:88:0b:81:ad:68:30:61:65:2b:c6:d5:92:c5:
fd:f4:09:53:6e:13:72:b8:60:e5:11:97:4a:ba:c5:
89:08:48:97:2c:86:12:bd:00:86:fc:e3:e3:8b:d6:
a1:f8:f0:f3:3f:9b:25:ce:a2:71:72:2d:7a:6e:d7:
15:cd:8a:07:75:53:bd:e4:63:cf:e1:c6:b3:46:6a:
0a:de:dd:87:82:f4:a5:ed:f3:47:78:11:d4:56:12:
9e:d4:ec:72:74:e1:cf:93:99:ee:3a:8f:7e:8e:ff:
84:31:82:e4:c5:58:aa:4b:77:25:e3:d7:51:18:6f:
8f:25:f0:7e:73:b8:12:ad:09:fa:59:a8:6c:e1:38:
23:f6:ff:b0:28:76:83:59:b1:8b:2d:39:08:30:a8:
5e:f5:c2:6b:d2:a1:e9:6d:55:a2:d2:63:d3:0c:2b:
bb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:70:41:31:46:B4:A9:F3:B2:C6:2B:E9:41:73:84:22:BB:D0:63:AF
X509v3 Authority Key Identifier:
keyid:2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a393630303a3a2f34302d3430203d3e20323733333039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8c7c:9600::/40
Signature Algorithm: sha256WithRSAEncryption
78:4b:b0:07:0c:74:73:5c:76:73:b3:1e:eb:1e:16:1c:fe:cd:
86:29:de:07:0b:6f:6f:01:1f:fd:37:3a:41:d1:bd:bd:0b:ab:
4b:81:0e:a7:b0:59:b9:b6:39:cb:58:8b:99:2e:08:fd:25:a2:
88:12:ab:44:32:50:cd:19:0e:be:b5:17:d8:8a:c9:bb:78:3e:
ea:38:f7:0f:8e:a8:6c:d7:e9:26:1a:7c:b5:5b:7e:5b:eb:1c:
06:3d:3b:5d:a1:62:a3:55:45:e2:ad:f4:a1:04:5c:6e:e1:de:
dc:72:11:39:b3:74:7d:ca:07:03:b7:fc:1e:b3:67:fd:2b:ce:
68:af:14:f1:23:fe:2c:ab:f1:ec:94:cb:92:fd:ef:7b:42:e9:
4b:f9:5b:f4:3a:b3:b0:6d:cb:26:19:b5:93:fe:46:5b:8b:b7:
01:95:37:3d:1c:e7:2d:e0:16:19:9d:93:a2:50:24:d2:1a:0c:
cd:a7:e2:e7:35:5c:da:86:4a:88:ec:b6:63:af:cb:a6:7d:0e:
e4:3e:88:0f:d0:55:28:aa:c5:bc:54:b6:aa:b5:cb:95:ff:51:
34:97:a1:92:56:f1:a8:2e:47:37:f4:7e:15:b2:fb:81:78:10:
ce:5f:86:88:df:e2:64:c3:44:e4:14:32:fd:c6:a1:b4:59:2a:
d2:95:4c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:15:44 2025 by rpki-client