
$ rpki-client -vvf rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/3230302e33392e3134362e302f32342d3234203d3e20323730373538.roa
File: 3230302e33392e3134362e302f32342d3234203d3e20323730373538.roa (raw, json)
Hash identifier: JX7Pdu25r7dXEE2keGtmwFR/OPLJBJ7iFLNr57lypDg=
Subject key identifier: 77:B3:7F:84:1C:24:86:95:F4:E5:09:D8:77:F1:8F:F0:6E:FC:C5:3B
Certificate issuer: /CN=687A6048EF56F775209873731BED7BB7E087AB69
Certificate serial: 1D36541C211396DDDD487B6C708533F65EBE678B
Authority key identifier: 68:7A:60:48:EF:56:F7:75:20:98:73:73:1B:ED:7B:B7:E0:87:AB:69
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687A6048EF56F775209873731BED7BB7E087AB69.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/3230302e33392e3134362e302f32342d3234203d3e20323730373538.roa
Signing time: Wed 15 Oct 2025 15:48:15 +0000
ROA not before: Wed 15 Oct 2025 15:43:15 +0000
ROA not after: Wed 14 Oct 2026 15:48:15 +0000
asID: 270758
IP address blocks: 200.39.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/687A6048EF56F775209873731BED7BB7E087AB69.crl
rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/687A6048EF56F775209873731BED7BB7E087AB69.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687A6048EF56F775209873731BED7BB7E087AB69.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 09:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:36:54:1c:21:13:96:dd:dd:48:7b:6c:70:85:33:f6:5e:be:67:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687A6048EF56F775209873731BED7BB7E087AB69
Validity
Not Before: Oct 15 15:43:15 2025 GMT
Not After : Oct 14 15:48:15 2026 GMT
Subject: CN=77B37F841C248695F4E509D877F18FF06EFCC53B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:13:fa:76:ca:6b:45:4e:a1:79:e0:bf:39:d4:
5d:0b:25:ec:62:b8:f9:b7:11:fa:6d:28:db:54:d9:
38:80:1c:6e:86:ad:43:39:0e:a2:62:ed:93:48:7c:
6f:af:48:15:02:18:79:78:ed:7a:d0:d8:9a:95:37:
16:b5:79:53:53:33:08:c8:bc:bc:b4:e7:e0:fe:2c:
81:7e:37:dd:12:21:d8:9f:ec:9b:d7:27:f3:c4:ea:
f6:c5:64:05:e6:b1:14:d8:4e:27:25:1f:97:18:1b:
9f:56:b6:d4:31:59:f0:75:ee:29:1f:99:1e:c0:84:
31:16:5c:29:bc:30:af:2f:e2:80:c4:ed:81:5f:a8:
0c:39:30:e9:a3:a1:95:7f:40:88:b3:1e:ca:44:39:
8b:35:44:7d:2d:0e:ac:fd:3b:95:9c:80:32:5f:b4:
fb:19:30:53:e9:0b:0b:a5:24:2c:58:e0:1f:f1:99:
7a:3a:9e:cf:a3:01:a5:28:f4:41:38:3c:b9:7e:24:
97:06:00:ab:7a:6f:ef:e4:9f:25:7c:26:d5:64:16:
68:33:b0:10:2f:59:4c:0d:b8:df:4c:56:2c:0b:87:
1c:ad:8e:c6:2d:13:03:62:d6:9f:1e:09:ba:fc:7d:
b1:b7:b5:5e:ec:30:5b:e8:75:8b:ca:91:ee:58:e2:
1a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B3:7F:84:1C:24:86:95:F4:E5:09:D8:77:F1:8F:F0:6E:FC:C5:3B
X509v3 Authority Key Identifier:
keyid:68:7A:60:48:EF:56:F7:75:20:98:73:73:1B:ED:7B:B7:E0:87:AB:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/687A6048EF56F775209873731BED7BB7E087AB69.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687A6048EF56F775209873731BED7BB7E087AB69.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/3230302e33392e3134362e302f32342d3234203d3e20323730373538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.39.146.0/24
Signature Algorithm: sha256WithRSAEncryption
95:04:48:79:9f:2e:25:ae:9a:97:93:5c:b6:a3:06:2b:37:39:
36:9f:7f:ae:ff:72:da:f7:23:27:4f:7d:11:09:03:85:aa:7d:
ad:be:94:31:cc:a3:14:7c:17:c8:52:49:33:27:d6:bc:e6:e5:
e7:6b:51:c8:7b:9b:f0:de:bd:22:9d:b5:a3:a1:96:c0:ad:73:
66:c2:7f:5b:af:b7:81:a6:98:59:49:45:08:16:c9:32:07:ab:
68:6b:d4:c9:79:70:ab:28:85:45:11:3b:1b:a5:34:16:9e:39:
92:17:b3:24:84:eb:1f:dc:38:c7:aa:73:6a:75:dc:62:3e:20:
c9:c7:74:54:f2:8c:e0:68:21:ec:78:32:0f:83:19:e8:78:73:
cd:0d:35:14:c7:10:f1:99:b1:ee:09:9c:89:58:76:12:a7:6a:
4c:c4:26:46:8e:0f:4e:f4:0d:08:0e:1f:45:76:03:1b:3e:f3:
af:5f:4d:d9:0d:6c:77:e6:92:0f:05:30:a5:31:2c:78:42:51:
c3:1c:82:c0:00:23:71:d2:5c:d7:ad:b8:24:0e:2f:ee:9b:ff:
30:20:58:46:d5:b7:75:d5:02:f9:9d:f8:45:39:cb:08:3d:86:
7e:fe:07:90:ff:94:93:a2:c6:0d:65:ed:24:5f:f7:b0:de:5e:
ec:c0:ca:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:34:37 2025 by rpki-client