
$ rpki-client -vvf rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/323830343a323763303a3a2f33322d3438203d3e20323633393230.roa
File: 323830343a323763303a3a2f33322d3438203d3e20323633393230.roa (raw, json)
Hash identifier: /r3PcgERgJ45Sa8m0u/izoO95Z5adsvX0cA0azm8B8c=
Subject key identifier: 22:65:03:16:70:D0:5E:CB:25:25:5E:09:C2:1D:A2:C4:EF:51:BA:14
Certificate issuer: /CN=C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B
Certificate serial: 0A9B222E540AE5192C3041C8E8A46707C8F05311
Authority key identifier: C8:68:A6:8B:2B:0C:AA:98:D2:EE:3E:E6:87:3F:60:BE:9E:33:BD:4B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/323830343a323763303a3a2f33322d3438203d3e20323633393230.roa
Signing time: Fri 29 Aug 2025 00:19:50 +0000
ROA not before: Fri 29 Aug 2025 00:14:50 +0000
ROA not after: Fri 28 Aug 2026 00:19:50 +0000
asID: 263920
IP address blocks: 2804:27c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.crl
rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 04:54:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:9b:22:2e:54:0a:e5:19:2c:30:41:c8:e8:a4:67:07:c8:f0:53:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B
Validity
Not Before: Aug 29 00:14:50 2025 GMT
Not After : Aug 28 00:19:50 2026 GMT
Subject: CN=2265031670D05ECB25255E09C21DA2C4EF51BA14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:bd:dd:2a:22:43:cb:a7:54:e5:4d:86:59:aa:
c0:8c:1f:e2:19:ab:b9:2d:db:33:56:51:f2:26:b2:
b2:3f:a5:94:f3:e9:4a:8b:62:22:a5:47:6b:39:1e:
5c:71:b7:e1:50:79:d1:de:b3:2e:50:95:fc:99:91:
30:bb:d5:cb:e0:2d:e2:cf:b0:76:ac:e4:b7:9b:17:
24:1d:56:fa:f3:50:e3:5b:9e:e8:2e:ee:2c:d9:ae:
c4:b3:27:a1:2a:2e:82:46:4c:b7:4d:8a:58:c3:a2:
71:28:6e:47:a3:51:db:78:d8:1e:03:79:3f:a6:a9:
70:de:d1:db:77:70:a2:71:d1:33:4b:e1:a1:65:ad:
ca:a7:e1:cb:f5:28:6e:18:48:91:fa:f7:8c:46:22:
6b:b5:d0:16:20:cb:83:3e:03:da:e6:5e:67:6a:d4:
cb:ac:b0:6b:7f:08:df:e5:34:a0:2c:00:21:f1:27:
e1:cd:c6:70:f4:74:a9:ed:d6:c0:03:92:9c:28:bd:
e8:ea:48:59:44:84:bc:02:15:6a:ce:44:81:d4:c2:
bb:d4:32:17:cb:11:90:dd:f6:d4:b0:dd:dc:ad:4c:
65:87:f1:26:4c:72:19:4e:67:8d:ef:7e:ec:41:70:
88:ae:a9:0f:ca:29:43:7e:64:7c:64:e3:07:f4:cd:
d9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:65:03:16:70:D0:5E:CB:25:25:5E:09:C2:1D:A2:C4:EF:51:BA:14
X509v3 Authority Key Identifier:
keyid:C8:68:A6:8B:2B:0C:AA:98:D2:EE:3E:E6:87:3F:60:BE:9E:33:BD:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/323830343a323763303a3a2f33322d3438203d3e20323633393230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:27c0::/32
Signature Algorithm: sha256WithRSAEncryption
68:55:d5:c1:a3:d8:09:e4:74:7a:2d:17:24:f0:d8:31:11:9f:
5a:20:ed:e1:c1:f4:bd:94:a6:be:18:89:10:e7:94:05:94:b2:
8f:f3:dd:b4:ed:c7:84:dd:f9:49:6c:66:96:f6:09:5c:d0:3d:
af:e3:6f:f9:60:15:f8:6c:1b:20:61:25:e9:54:55:23:18:72:
5a:63:ac:f6:ef:44:25:5d:f8:39:cf:d7:14:35:ed:70:71:73:
49:c1:cd:e8:e2:b1:c6:c3:cc:91:47:78:2d:4e:48:f1:29:45:
7c:6d:2c:dd:9c:1f:f2:ac:ea:86:64:16:7a:3d:10:c8:09:26:
36:a4:03:68:73:f0:69:13:e0:10:ed:c7:10:ac:3d:06:fe:2c:
ea:14:6c:13:13:ae:db:3a:d8:0e:de:44:dd:2e:0d:cb:2a:b3:
89:bc:2b:52:a7:75:2e:5d:65:a2:7c:53:ef:90:38:67:2a:65:
88:40:ce:ea:d4:86:2d:41:25:f5:9f:52:e4:58:a7:40:39:62:
d2:33:95:8b:fa:f2:a1:e5:e6:d9:d4:06:c2:7b:10:54:7f:86:
94:aa:70:76:38:92:98:56:b8:ce:54:4e:2d:7a:9a:bc:74:3b:
05:ec:9d:68:17:55:79:08:3b:6e:8d:d7:c0:8f:7e:7c:11:3d:
43:b7:f7:fc
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUCpsiLlQK5RksMEHI6KRnB8jwUxEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg2OEE2OEIyQjBDQUE5OEQyRUUzRUU2ODczRjYwQkU5
RTMzQkQ0QjAeFw0yNTA4MjkwMDE0NTBaFw0yNjA4MjgwMDE5NTBaMDMxMTAvBgNV
BAMTKDIyNjUwMzE2NzBEMDVFQ0IyNTI1NUUwOUMyMURBMkM0RUY1MUJBMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhvd0qIkPLp1TlTYZZqsCMH+IZ
q7kt2zNWUfImsrI/pZTz6UqLYiKlR2s5Hlxxt+FQedHesy5QlfyZkTC71cvgLeLP
sHas5LebFyQdVvrzUONbnugu7izZrsSzJ6EqLoJGTLdNiljDonEobkejUdt42B4D
eT+mqXDe0dt3cKJx0TNL4aFlrcqn4cv1KG4YSJH694xGImu10BYgy4M+A9rmXmdq
1MussGt/CN/lNKAsACHxJ+HNxnD0dKnt1sADkpwovejqSFlEhLwCFWrORIHUwrvU
MhfLEZDd9tSw3dytTGWH8SZMchlOZ43vfuxBcIiuqQ/KKUN+ZHxk4wf0zdlzAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUImUDFnDQXsslJV4Jwh2ixO9RuhQwHwYDVR0j
BBgwFoAUyGimiysMqpjS7j7mhz9gvp4zvUswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUY3Mk1KZTE4c3BCQWJMTlZEdWM2QjNCaXBDZk5LbnRRTnd1aFpBd2U4
OG8vMC9DODY4QTY4QjJCMENBQTk4RDJFRTNFRTY4NzNGNjBCRTlFMzNCRDRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M4NjhBNjhCMkIwQ0FBOThE
MkVFM0VFNjg3M0Y2MEJFOUUzM0JENEIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VGNzJNSmUxOHNwQkFiTE5WRHVjNkIzQmlwQ2ZOS250UU53dWhaQXdlODhvLzAv
MzIzODMwMzQzYTMyMzc2MzMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjMz
MzkzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQnwDANBgkqhkiG9w0BAQsFAAOCAQEAaFXVwaPY
CeR0ei0XJPDYMRGfWiDt4cH0vZSmvhiJEOeUBZSyj/PdtO3HhN35SWxmlvYJXNA9
r+Nv+WAV+GwbIGEl6VRVIxhyWmOs9u9EJV34Oc/XFDXtcHFzScHN6OKxxsPMkUd4
LU5I8SlFfG0s3Zwf8qzqhmQWej0QyAkmNqQDaHPwaRPgEO3HEKw9Bv4s6hRsExOu
2zrYDt5E3S4NyyqzibwrUqd1Ll1lonxT75A4ZypliEDO6tSGLUEl9Z9S5FinQDli
0jOVi/ryoeXm2dQGwnsQVH+GlKpwdjiSmFa4zlROLXqavHQ7BeydaBdVeQg7bo3X
wI9+fBE9Q7f3/A==
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:04:39 2025 by rpki-client