
$ rpki-client -vvf rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/323830343a333237383a3a2f34382d3438203d3e20323635303830.roa
File: 323830343a333237383a3a2f34382d3438203d3e20323635303830.roa (raw, json)
Hash identifier: 3c35Sa1vs4KaYssZIcwRB2/bFofdsYxoZj9drQm8oag=
Subject key identifier: 92:37:AD:A0:0A:7F:70:C1:EC:73:85:5A:27:D9:DD:37:EF:76:8E:E5
Certificate issuer: /CN=BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E
Certificate serial: 301EB9F3F209148D901FEAB3619CB8F443C47107
Authority key identifier: BD:3A:86:10:EB:89:85:A3:AA:9F:38:7E:DE:09:73:0A:AE:F0:6F:4E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/323830343a333237383a3a2f34382d3438203d3e20323635303830.roa
Signing time: Tue 04 Nov 2025 12:21:21 +0000
ROA not before: Tue 04 Nov 2025 12:16:21 +0000
ROA not after: Tue 03 Nov 2026 12:21:21 +0000
asID: 265080
IP address blocks: 2804:3278::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.crl
rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 13:15:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:1e:b9:f3:f2:09:14:8d:90:1f:ea:b3:61:9c:b8:f4:43:c4:71:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E
Validity
Not Before: Nov 4 12:16:21 2025 GMT
Not After : Nov 3 12:21:21 2026 GMT
Subject: CN=9237ADA00A7F70C1EC73855A27D9DD37EF768EE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f6:8c:6e:d8:70:e5:29:57:13:3c:23:b1:1d:
b3:55:14:09:e6:1d:e5:4e:cc:18:6f:9f:99:b7:70:
98:e2:88:43:63:18:9e:fb:72:b9:fd:bd:86:c5:f4:
a8:96:e3:33:9f:2d:dc:8c:4f:3f:79:43:5d:e5:59:
b0:d6:11:89:72:5c:72:16:7a:c1:d6:92:0b:5a:0f:
25:42:1e:96:a5:6e:87:98:2f:4f:65:c8:ea:23:f1:
70:76:4c:77:50:a6:fd:24:1f:90:a6:ca:ef:a8:7f:
66:de:ca:e3:cd:7c:88:2a:15:7a:5d:3e:28:9a:2c:
1e:bd:43:d1:cb:a5:11:c7:6a:2b:25:c1:25:f4:41:
1a:2f:42:52:6b:33:57:0a:85:42:75:81:62:f7:2c:
ab:35:79:6e:ce:ee:2c:08:bf:fc:7e:9e:43:35:af:
d0:ac:a0:eb:33:e8:ba:dd:5c:70:ec:8f:30:fe:07:
27:4f:c0:e0:46:c5:8c:96:01:aa:35:17:33:ee:68:
e8:c2:0a:0b:dd:0a:9d:77:fb:de:de:f2:42:4c:da:
2d:f6:ca:fe:be:f0:22:de:dc:00:05:7b:a2:05:15:
a7:ce:50:14:bf:d3:9c:46:93:05:f3:e6:09:20:df:
fc:eb:22:74:e8:b9:85:5e:d7:a9:18:c0:c7:d5:fe:
a6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:37:AD:A0:0A:7F:70:C1:EC:73:85:5A:27:D9:DD:37:EF:76:8E:E5
X509v3 Authority Key Identifier:
keyid:BD:3A:86:10:EB:89:85:A3:AA:9F:38:7E:DE:09:73:0A:AE:F0:6F:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/323830343a333237383a3a2f34382d3438203d3e20323635303830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3278::/48
Signature Algorithm: sha256WithRSAEncryption
86:85:9a:04:0a:d3:81:46:78:12:1a:57:c0:e2:e3:a1:d2:9c:
d6:d0:41:51:c9:5d:99:10:39:37:f8:74:f6:a7:14:0e:e0:13:
fb:bb:22:22:50:35:a0:61:31:42:a8:52:cd:23:66:b7:64:b3:
55:15:a9:9d:98:2a:de:9e:32:a6:80:1b:90:7f:f9:67:c1:b0:
0e:cd:69:51:45:a8:9f:52:4c:61:80:49:1b:58:c8:2e:aa:ce:
0a:70:45:bf:30:ba:a9:53:8b:96:4d:b7:cb:8e:30:f9:b3:90:
6e:64:3a:9f:fe:0d:dc:08:d5:5d:33:f2:bc:b3:d9:dc:51:ed:
b9:ff:8e:33:5b:b7:42:ee:7e:8a:22:74:63:93:e8:cc:9c:ef:
84:bb:40:68:d4:6e:36:e4:85:28:9c:4e:f8:0d:b5:54:89:e6:
b8:75:e5:a1:3b:95:22:89:e5:98:a5:11:22:ec:98:e8:c6:5b:
ba:c3:a7:43:f9:78:36:90:1a:48:52:67:60:b5:8a:4b:4c:03:
49:65:ab:83:1c:7c:c1:fb:05:8f:51:6a:1d:b6:3c:28:bd:e9:
55:7b:b0:52:ea:bf:ae:b2:70:74:0f:4e:4a:73:39:1e:36:1b:
12:c3:84:74:38:41:01:b8:96:d6:09:53:90:b0:6d:75:fe:2e:
46:e8:6e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:48:47 2025 by rpki-client