
$ rpki-client -vvf rpki-repo.registro.br/repo/GEFaM6Ts27ZAdJfrogPycr4TMGrSX8px4cHd3s6vaJUm/0/323830343a333536633a3a2f33322d3332203d3e20323636323835.roa
File: 323830343a333536633a3a2f33322d3332203d3e20323636323835.roa (raw, json)
Hash identifier: QOy8TTZAZf+2a7D17lhq0HLXE5t3B7z+l7KT3DFDkYY=
Subject key identifier: 10:B2:D3:F6:E0:D2:80:5E:65:EC:CB:A8:38:37:95:F6:E5:44:78:04
Certificate issuer: /CN=4ECB9B0B1B0DFBCA0197481108B068FF845655C6
Certificate serial: 0842A84A3A9892F6A1857F1ACEA0CAB5A1C39BAC
Authority key identifier: 4E:CB:9B:0B:1B:0D:FB:CA:01:97:48:11:08:B0:68:FF:84:56:55:C6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4ECB9B0B1B0DFBCA0197481108B068FF845655C6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GEFaM6Ts27ZAdJfrogPycr4TMGrSX8px4cHd3s6vaJUm/0/323830343a333536633a3a2f33322d3332203d3e20323636323835.roa
Signing time: Wed 05 Nov 2025 12:07:36 +0000
ROA not before: Wed 05 Nov 2025 12:02:36 +0000
ROA not after: Wed 04 Nov 2026 12:07:36 +0000
asID: 266285
IP address blocks: 2804:356c::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GEFaM6Ts27ZAdJfrogPycr4TMGrSX8px4cHd3s6vaJUm/0/4ECB9B0B1B0DFBCA0197481108B068FF845655C6.crl
rsync://rpki-repo.registro.br/repo/GEFaM6Ts27ZAdJfrogPycr4TMGrSX8px4cHd3s6vaJUm/0/4ECB9B0B1B0DFBCA0197481108B068FF845655C6.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4ECB9B0B1B0DFBCA0197481108B068FF845655C6.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 16:04:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:42:a8:4a:3a:98:92:f6:a1:85:7f:1a:ce:a0:ca:b5:a1:c3:9b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ECB9B0B1B0DFBCA0197481108B068FF845655C6
Validity
Not Before: Nov 5 12:02:36 2025 GMT
Not After : Nov 4 12:07:36 2026 GMT
Subject: CN=10B2D3F6E0D2805E65ECCBA8383795F6E5447804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ac:79:05:0c:be:34:60:3d:b8:a1:bd:96:da:
8a:54:d8:fc:ba:01:cf:bf:59:e4:e5:91:22:70:15:
06:1b:ad:d2:6c:fd:9c:6e:f4:f0:1c:f1:a7:56:da:
e0:29:38:e8:5d:e2:ab:59:0d:fd:0d:e3:fa:b9:45:
17:d6:50:6c:db:af:d6:cf:66:34:5b:cb:b8:9c:12:
b8:a6:ec:42:ae:66:fc:fd:68:de:92:cd:c7:d2:7e:
a1:9d:18:0d:ca:59:b1:8f:50:e4:ec:dc:7c:35:cd:
95:38:fd:ef:ce:0b:f6:9d:d5:9f:c6:df:e1:86:dd:
d5:eb:f8:59:c3:10:54:92:24:cf:31:c3:a4:7c:21:
19:43:9a:c2:04:80:43:c1:73:ae:59:f4:16:ae:70:
c1:42:0b:b0:e1:5b:31:db:ac:85:98:92:14:57:39:
9c:12:73:a0:6f:95:f2:2a:45:6b:ef:6b:27:4f:4a:
d2:2c:39:be:37:c4:01:3d:ff:85:58:2a:69:7f:90:
b3:a1:23:a7:41:b6:5f:91:5f:03:c2:c4:5d:c1:17:
21:3e:d1:52:ce:1a:25:87:7e:bf:98:a1:d5:ff:bb:
dd:85:a7:69:93:ee:f2:f4:d0:b7:65:05:a5:f8:d0:
d6:e6:14:b7:a1:7c:b4:01:f2:7d:0e:ee:1f:1a:a4:
c9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B2:D3:F6:E0:D2:80:5E:65:EC:CB:A8:38:37:95:F6:E5:44:78:04
X509v3 Authority Key Identifier:
keyid:4E:CB:9B:0B:1B:0D:FB:CA:01:97:48:11:08:B0:68:FF:84:56:55:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GEFaM6Ts27ZAdJfrogPycr4TMGrSX8px4cHd3s6vaJUm/0/4ECB9B0B1B0DFBCA0197481108B068FF845655C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4ECB9B0B1B0DFBCA0197481108B068FF845655C6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEFaM6Ts27ZAdJfrogPycr4TMGrSX8px4cHd3s6vaJUm/0/323830343a333536633a3a2f33322d3332203d3e20323636323835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:356c::/32
Signature Algorithm: sha256WithRSAEncryption
1c:c4:9b:35:99:d5:fd:63:82:0e:5b:1c:27:67:00:f0:81:81:
2a:77:13:31:92:c0:43:28:e0:31:9b:27:9a:1e:96:c0:d5:98:
f7:14:4e:fe:35:1d:ee:87:9f:c3:1f:19:87:fa:77:ff:96:28:
79:e9:6a:57:12:9a:99:19:8a:6a:c9:79:09:9e:c2:82:b9:c0:
c4:05:ff:ab:31:5e:78:8d:7e:6b:48:cb:55:97:bf:13:60:58:
93:b1:8c:7d:23:f0:20:de:dd:8d:3e:50:26:da:97:a4:b9:cf:
08:a9:48:eb:65:1e:25:00:a5:fc:eb:1f:70:66:b5:97:88:95:
19:13:43:7c:a2:83:b4:89:fb:47:35:d7:48:d0:9b:70:47:5e:
b8:f0:c5:92:0f:31:86:36:4f:b4:8e:95:3e:de:c0:e4:2c:6a:
a7:3c:c8:8d:5a:6c:0e:c2:7c:16:09:09:4a:5b:88:43:44:09:
cb:91:4f:ed:37:11:bc:90:42:92:01:e8:1e:3f:f4:da:27:64:
25:67:ed:75:f9:60:c2:ac:9d:de:f8:f9:bc:2b:4c:92:32:9c:
42:08:85:f9:95:f3:0c:6e:4d:b3:96:07:a7:13:de:c1:4c:95:
d1:71:89:b6:f1:3a:b9:a1:96:b4:56:4c:93:8b:23:7d:c5:a6:
84:90:f1:7e
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUCEKoSjqYkvahhX8azqDKtaHDm6wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEVDQjlCMEIxQjBERkJDQTAxOTc0ODExMDhCMDY4RkY4
NDU2NTVDNjAeFw0yNTExMDUxMjAyMzZaFw0yNjExMDQxMjA3MzZaMDMxMTAvBgNV
BAMTKDEwQjJEM0Y2RTBEMjgwNUU2NUVDQ0JBODM4Mzc5NUY2RTU0NDc4MDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHrHkFDL40YD24ob2W2opU2Py6
Ac+/WeTlkSJwFQYbrdJs/Zxu9PAc8adW2uApOOhd4qtZDf0N4/q5RRfWUGzbr9bP
ZjRby7icErim7EKuZvz9aN6SzcfSfqGdGA3KWbGPUOTs3Hw1zZU4/e/OC/ad1Z/G
3+GG3dXr+FnDEFSSJM8xw6R8IRlDmsIEgEPBc65Z9BaucMFCC7DhWzHbrIWYkhRX
OZwSc6BvlfIqRWvvaydPStIsOb43xAE9/4VYKml/kLOhI6dBtl+RXwPCxF3BFyE+
0VLOGiWHfr+YodX/u92Fp2mT7vL00LdlBaX40NbmFLehfLQB8n0O7h8apMmbAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUELLT9uDSgF5l7MuoODeV9uVEeAQwHwYDVR0j
BBgwFoAUTsubCxsN+8oBl0gRCLBo/4RWVcYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0VGYU02VHMyN1pBZEpmcm9nUHljcjRUTUdyU1g4cHg0Y0hkM3M2dmFK
VW0vMC80RUNCOUIwQjFCMERGQkNBMDE5NzQ4MTEwOEIwNjhGRjg0NTY1NUM2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRFQ0I5QjBCMUIwREZCQ0Ew
MTk3NDgxMTA4QjA2OEZGODQ1NjU1QzYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dFRmFNNlRzMjdaQWRKZnJvZ1B5Y3I0VE1HclNYOHB4NGNIZDNzNnZhSlVtLzAv
MzIzODMwMzQzYTMzMzUzNjYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM2
MzIzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ1bDANBgkqhkiG9w0BAQsFAAOCAQEAHMSbNZnV
/WOCDlscJ2cA8IGBKncTMZLAQyjgMZsnmh6WwNWY9xRO/jUd7oefwx8Zh/p3/5Yo
eelqVxKamRmKasl5CZ7CgrnAxAX/qzFeeI1+a0jLVZe/E2BYk7GMfSPwIN7djT5Q
JtqXpLnPCKlI62UeJQCl/OsfcGa1l4iVGRNDfKKDtIn7RzXXSNCbcEdeuPDFkg8x
hjZPtI6VPt7A5CxqpzzIjVpsDsJ8FgkJSluIQ0QJy5FP7TcRvJBCkgHoHj/02idk
JWftdflgwqyd3vj5vCtMkjKcQgiF+ZXzDG5Ns5YHpxPewUyV0XGJtvE6uaGWtFZM
k4sjfcWmhJDxfg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 15:09:33 2025 by rpki-client