
$ rpki-client -vvf rpki-repo.registro.br/repo/EZZ67s7Xii2wu2dGqf9nqdJ7YkQhXKRBaZtjPEhXTj4K/0/3230302e33362e3134342e302f32322d3234203d3e20323731333033.roa
File: 3230302e33362e3134342e302f32322d3234203d3e20323731333033.roa (raw, json)
Hash identifier: Uq+wGa4SI7eAAvXe8op278X4ukvmDK2GpgO/geIV/VY=
Subject key identifier: D7:CD:3D:0D:F2:15:14:CE:9E:15:A3:F4:6C:9D:5E:87:80:3F:64:8E
Certificate issuer: /CN=636B79A9B69034C7907429A3D4D5FF5D5A6275E7
Certificate serial: 260344138BB2C6D37B27FE5B19B69F69E9E1DDA8
Authority key identifier: 63:6B:79:A9:B6:90:34:C7:90:74:29:A3:D4:D5:FF:5D:5A:62:75:E7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/636B79A9B69034C7907429A3D4D5FF5D5A6275E7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EZZ67s7Xii2wu2dGqf9nqdJ7YkQhXKRBaZtjPEhXTj4K/0/3230302e33362e3134342e302f32322d3234203d3e20323731333033.roa
Signing time: Tue 21 Jan 2025 17:14:32 +0000
ROA not before: Tue 21 Jan 2025 17:09:32 +0000
ROA not after: Tue 20 Jan 2026 17:14:32 +0000
asID: 271303
IP address blocks: 200.36.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/EZZ67s7Xii2wu2dGqf9nqdJ7YkQhXKRBaZtjPEhXTj4K/0/636B79A9B69034C7907429A3D4D5FF5D5A6275E7.crl
rsync://rpki-repo.registro.br/repo/EZZ67s7Xii2wu2dGqf9nqdJ7YkQhXKRBaZtjPEhXTj4K/0/636B79A9B69034C7907429A3D4D5FF5D5A6275E7.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/636B79A9B69034C7907429A3D4D5FF5D5A6275E7.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 02:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:03:44:13:8b:b2:c6:d3:7b:27:fe:5b:19:b6:9f:69:e9:e1:dd:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=636B79A9B69034C7907429A3D4D5FF5D5A6275E7
Validity
Not Before: Jan 21 17:09:32 2025 GMT
Not After : Jan 20 17:14:32 2026 GMT
Subject: CN=D7CD3D0DF21514CE9E15A3F46C9D5E87803F648E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f4:a7:66:bf:13:1c:f5:64:87:fc:c6:3d:b8:
66:4e:e7:b3:9e:13:ce:2a:ca:68:52:33:06:58:84:
cf:63:46:1b:7f:24:68:76:88:87:ad:80:ae:04:71:
3e:18:bf:e0:77:cb:08:1f:1e:86:2c:b7:4c:ec:3a:
65:f6:bd:28:65:4f:3d:9e:0c:5a:79:83:9b:27:ef:
e1:36:64:e6:06:bb:2b:64:4c:02:13:fb:56:1d:1e:
9b:13:6f:7e:9e:97:08:0d:6a:39:86:f0:77:b5:31:
66:fc:04:a4:d0:94:a7:d8:6c:08:6a:3a:f4:dd:aa:
fc:94:74:d6:bb:58:0f:8a:5b:23:f2:f3:bc:02:88:
0a:ff:f7:8c:25:ec:67:e1:b6:7b:2e:e1:c6:57:45:
2c:39:ff:f3:53:bc:30:f4:26:1d:82:65:65:5b:9d:
e9:97:b3:84:e8:88:f0:a3:ac:74:bf:6e:3a:21:90:
d9:35:8a:8e:8b:b4:00:76:5f:e4:6a:a0:39:a9:68:
ba:a5:11:81:38:7f:27:5f:5f:6c:c9:5a:75:d0:d8:
6e:41:33:ea:06:a0:df:3d:5e:c2:c0:52:39:54:f4:
c7:41:0b:80:a0:04:29:3b:f6:1e:da:86:ba:d9:d5:
11:53:73:97:4f:c6:8c:d2:e7:20:b7:59:d2:77:89:
12:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:CD:3D:0D:F2:15:14:CE:9E:15:A3:F4:6C:9D:5E:87:80:3F:64:8E
X509v3 Authority Key Identifier:
keyid:63:6B:79:A9:B6:90:34:C7:90:74:29:A3:D4:D5:FF:5D:5A:62:75:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EZZ67s7Xii2wu2dGqf9nqdJ7YkQhXKRBaZtjPEhXTj4K/0/636B79A9B69034C7907429A3D4D5FF5D5A6275E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/636B79A9B69034C7907429A3D4D5FF5D5A6275E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZZ67s7Xii2wu2dGqf9nqdJ7YkQhXKRBaZtjPEhXTj4K/0/3230302e33362e3134342e302f32322d3234203d3e20323731333033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.36.144.0/22
Signature Algorithm: sha256WithRSAEncryption
65:3d:f3:77:af:2c:9e:df:11:51:b8:75:72:4b:7f:ea:59:34:
5d:06:50:ef:af:ac:b1:64:07:43:5b:2a:4d:8c:45:37:f3:c0:
b4:d2:e1:6e:ec:37:7e:2e:46:67:30:3d:43:49:a6:90:25:37:
a4:e8:ba:47:e4:a4:ba:17:23:79:61:b6:23:22:d6:84:75:a8:
b0:15:46:ac:3d:a2:f1:af:61:d0:93:24:c1:d1:97:a5:52:13:
59:56:9e:f1:81:67:2c:f9:bf:8d:66:db:97:39:68:58:e1:b4:
66:1c:15:48:cf:1f:83:e5:7c:9e:b0:d8:60:9b:05:92:da:70:
13:dd:a2:7f:f3:fc:f2:f9:04:4b:91:19:37:bf:ca:dd:63:0f:
e0:a2:95:a9:85:c4:3d:a7:37:8a:6c:3f:74:0c:6b:b3:cb:87:
43:0d:dc:0c:f2:88:42:71:6f:d6:ce:d2:41:ed:60:71:74:1b:
9b:ad:a6:20:77:e4:da:e2:c1:04:91:ef:65:8d:76:d2:c2:4f:
b2:60:d3:ff:9b:7b:66:16:30:63:97:84:19:ab:81:0c:bc:d3:
8d:64:10:c0:ec:62:dc:3f:b0:c5:aa:1a:1c:1d:c1:34:34:d5:
12:27:60:c5:8f:79:9b:4b:62:fb:9f:a5:4f:54:51:4d:07:d1:
c8:fd:a0:af
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJgNEE4uyxtN7J/5bGbafaenh3agwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM2Qjc5QTlCNjkwMzRDNzkwNzQyOUEzRDRENUZGNUQ1
QTYyNzVFNzAeFw0yNTAxMjExNzA5MzJaFw0yNjAxMjAxNzE0MzJaMDMxMTAvBgNV
BAMTKEQ3Q0QzRDBERjIxNTE0Q0U5RTE1QTNGNDZDOUQ1RTg3ODAzRjY0OEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg9KdmvxMc9WSH/MY9uGZO57Oe
E84qymhSMwZYhM9jRht/JGh2iIetgK4EcT4Yv+B3ywgfHoYst0zsOmX2vShlTz2e
DFp5g5sn7+E2ZOYGuytkTAIT+1YdHpsTb36elwgNajmG8He1MWb8BKTQlKfYbAhq
OvTdqvyUdNa7WA+KWyPy87wCiAr/94wl7Gfhtnsu4cZXRSw5//NTvDD0Jh2CZWVb
nemXs4ToiPCjrHS/bjohkNk1io6LtAB2X+RqoDmpaLqlEYE4fydfX2zJWnXQ2G5B
M+oGoN89XsLAUjlU9MdBC4CgBCk79h7ahrrZ1RFTc5dPxozS5yC3WdJ3iRLLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU1809DfIVFM6eFaP0bJ1eh4A/ZI4wHwYDVR0j
BBgwFoAUY2t5qbaQNMeQdCmj1NX/XVpidecwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVpaNjdzN1hpaTJ3dTJkR3FmOW5xZEo3WWtRaFhLUkJhWnRqUEVoWFRq
NEsvMC82MzZCNzlBOUI2OTAzNEM3OTA3NDI5QTNENEQ1RkY1RDVBNjI3NUU3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYzNkI3OUE5QjY5MDM0Qzc5
MDc0MjlBM0Q0RDVGRjVENUE2Mjc1RTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VaWjY3czdYaWkyd3UyZEdxZjlucWRKN1lrUWhYS1JCYVp0alBFaFhUajRLLzAv
MzIzMDMwMmUzMzM2MmUzMTM0MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3
MzEzMzMwMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALIJJAwDQYJKoZIhvcNAQELBQADggEBAGU983ev
LJ7fEVG4dXJLf+pZNF0GUO+vrLFkB0NbKk2MRTfzwLTS4W7sN34uRmcwPUNJppAl
N6ToukfkpLoXI3lhtiMi1oR1qLAVRqw9ovGvYdCTJMHRl6VSE1lWnvGBZyz5v41m
25c5aFjhtGYcFUjPH4PlfJ6w2GCbBZLacBPdon/z/PL5BEuRGTe/yt1jD+CilamF
xD2nN4psP3QMa7PLh0MN3AzyiEJxb9bO0kHtYHF0G5utpiB35NriwQSR72WNdtLC
T7Jg0/+be2YWMGOXhBmrgQy8041kEMDsYtw/sMWqGhwdwTQ01RInYMWPeZtLYvuf
pU9UUU0H0cj9oK8=
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:57:54 2025 by rpki-client