
$ rpki-client -vvf rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/323030313a313239633a3a2f33322d3438203d3e203232333536.roa
File: 323030313a313239633a3a2f33322d3438203d3e203232333536.roa (raw, json)
Hash identifier: euHAp7+9vRWrpVJOCBtQMlM0mKiy4FhOArKfKYePGc4=
Subject key identifier: 15:10:6C:E5:46:43:C5:24:13:CD:16:4F:AE:68:7F:98:31:36:47:FD
Certificate issuer: /CN=968400C9DFC16D643EF5C94C34F993F17C7568AA
Certificate serial: 4280FECC1A9568805E136B40DC28998B4B4DD9E8
Authority key identifier: 96:84:00:C9:DF:C1:6D:64:3E:F5:C9:4C:34:F9:93:F1:7C:75:68:AA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968400C9DFC16D643EF5C94C34F993F17C7568AA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/323030313a313239633a3a2f33322d3438203d3e203232333536.roa
Signing time: Fri 18 Apr 2025 14:30:50 +0000
ROA not before: Fri 18 Apr 2025 14:25:50 +0000
ROA not after: Fri 17 Apr 2026 14:30:50 +0000
asID: 22356
IP address blocks: 2001:129c::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.crl
rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968400C9DFC16D643EF5C94C34F993F17C7568AA.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 21:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:80:fe:cc:1a:95:68:80:5e:13:6b:40:dc:28:99:8b:4b:4d:d9:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=968400C9DFC16D643EF5C94C34F993F17C7568AA
Validity
Not Before: Apr 18 14:25:50 2025 GMT
Not After : Apr 17 14:30:50 2026 GMT
Subject: CN=15106CE54643C52413CD164FAE687F98313647FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ec:54:3b:fd:b2:79:75:8d:5f:ed:1a:d4:8c:
0e:8e:dd:95:1f:a4:cf:13:e4:05:e3:0f:2e:b6:e2:
bd:1b:28:8d:d6:93:bc:a3:72:c6:fc:4f:db:51:2a:
fb:63:d8:15:99:03:81:0b:a1:94:72:bb:e3:c1:34:
32:67:80:53:1e:3f:cf:f0:ff:22:1f:3c:13:bc:0c:
8f:a1:a6:1a:36:b5:7d:5d:27:a6:be:d4:46:7e:40:
09:c6:e7:3f:3f:8f:83:02:28:4a:ca:9c:e9:be:85:
c6:50:56:fe:cd:8b:dd:a0:b1:17:bb:e1:73:89:a1:
c0:da:67:49:90:b2:8f:41:5d:88:15:94:be:e4:8f:
65:ee:7c:5f:ea:15:98:70:9b:cf:8d:04:ae:60:89:
45:28:06:77:56:a2:1e:b6:9d:a4:72:4f:69:e2:a9:
3e:e9:a7:0b:c6:70:1e:a0:cf:ee:56:78:56:35:b4:
8e:d2:70:b6:1c:4f:52:1b:b7:c3:4d:19:50:c6:36:
6c:99:a9:e8:fa:1d:9f:f1:45:fc:4c:72:c6:1b:aa:
33:f0:8e:f4:8f:68:5c:7e:f3:d7:0c:ba:6e:15:91:
ca:29:ec:27:21:0d:00:3e:f3:46:fe:dd:7c:1e:10:
6c:ca:0b:d7:b4:6f:56:2b:9c:ae:73:b4:f0:67:1a:
82:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:10:6C:E5:46:43:C5:24:13:CD:16:4F:AE:68:7F:98:31:36:47:FD
X509v3 Authority Key Identifier:
keyid:96:84:00:C9:DF:C1:6D:64:3E:F5:C9:4C:34:F9:93:F1:7C:75:68:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968400C9DFC16D643EF5C94C34F993F17C7568AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/323030313a313239633a3a2f33322d3438203d3e203232333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:129c::/32
Signature Algorithm: sha256WithRSAEncryption
71:1b:14:bc:6b:e4:32:cf:f3:ba:b1:9d:0b:0d:e4:ba:e7:6a:
c1:65:60:b8:3b:34:3b:dd:1d:2e:7c:e7:9e:6d:ac:d7:62:19:
66:40:1e:d4:58:63:a8:be:28:fb:a8:0b:12:d8:c0:41:9b:3c:
3d:c9:e7:ca:52:1a:95:a9:09:81:42:9e:21:6a:96:52:2b:da:
e3:26:6d:b0:fd:09:e8:1c:16:a8:bd:01:7a:0c:30:13:72:0e:
64:35:a8:af:e9:97:db:c1:5a:0d:68:4f:1a:46:bb:5d:f7:63:
83:f0:f9:8f:fe:68:18:81:05:5a:1e:62:f8:6f:c2:02:c2:2c:
d8:65:82:12:c2:98:db:34:69:fa:00:b1:fc:1e:47:6b:22:48:
8d:a9:9c:fd:56:b7:ea:a6:78:29:e2:00:7e:54:93:80:42:a3:
f6:cc:69:95:e5:a1:84:a2:b8:37:7a:ac:00:5e:71:80:5a:69:
73:d5:d5:02:20:81:d9:84:c6:8b:6a:92:65:40:c6:ce:d9:86:
79:cd:61:27:a7:d0:e1:57:76:e5:a0:b1:85:d7:16:1f:d3:84:
62:8e:dc:96:cd:c4:6c:c9:73:56:3c:73:7b:21:92:f0:a9:59:
8e:7d:6b:ec:55:33:0d:11:78:eb:5e:be:35:17:5b:d3:cc:e6:
c1:34:b5:7c
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUQoD+zBqVaIBeE2tA3CiZi0tN2egwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTY4NDAwQzlERkMxNkQ2NDNFRjVDOTRDMzRGOTkzRjE3
Qzc1NjhBQTAeFw0yNTA0MTgxNDI1NTBaFw0yNjA0MTcxNDMwNTBaMDMxMTAvBgNV
BAMTKDE1MTA2Q0U1NDY0M0M1MjQxM0NEMTY0RkFFNjg3Rjk4MzEzNjQ3RkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm7FQ7/bJ5dY1f7RrUjA6O3ZUf
pM8T5AXjDy624r0bKI3Wk7yjcsb8T9tRKvtj2BWZA4ELoZRyu+PBNDJngFMeP8/w
/yIfPBO8DI+hpho2tX1dJ6a+1EZ+QAnG5z8/j4MCKErKnOm+hcZQVv7Ni92gsRe7
4XOJocDaZ0mQso9BXYgVlL7kj2XufF/qFZhwm8+NBK5giUUoBndWoh62naRyT2ni
qT7ppwvGcB6gz+5WeFY1tI7ScLYcT1Ibt8NNGVDGNmyZqej6HZ/xRfxMcsYbqjPw
jvSPaFx+89cMum4Vkcop7CchDQA+80b+3XweEGzKC9e0b1YrnK5ztPBnGoK7AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUFRBs5UZDxSQTzRZPrmh/mDE2R/0wHwYDVR0j
BBgwFoAUloQAyd/BbWQ+9clMNPmT8Xx1aKowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2U0NTlKcDlFcW9NcldOTmtWaGdNNzh4MWtENE1LZGpmRHI5MnczdWhR
b3IvMC85Njg0MDBDOURGQzE2RDY0M0VGNUM5NEMzNEY5OTNGMTdDNzU2OEFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk2ODQwMEM5REZDMTZENjQz
RUY1Qzk0QzM0Rjk5M0YxN0M3NTY4QUEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dlNDU5SnA5RXFvTXJXTk5rVmhnTTc4eDFrRDRNS2RqZkRyOTJ3M3VoUW9yLzAv
MzIzMDMwMzEzYTMxMzIzOTYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzMjMz
MzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACABEpwwDQYJKoZIhvcNAQELBQADggEBAHEbFLxr5DLP
87qxnQsN5LrnasFlYLg7NDvdHS58555trNdiGWZAHtRYY6i+KPuoCxLYwEGbPD3J
58pSGpWpCYFCniFqllIr2uMmbbD9CegcFqi9AXoMMBNyDmQ1qK/pl9vBWg1oTxpG
u133Y4Pw+Y/+aBiBBVoeYvhvwgLCLNhlghLCmNs0afoAsfweR2siSI2pnP1Wt+qm
eCniAH5Uk4BCo/bMaZXloYSiuDd6rABecYBaaXPV1QIggdmExotqkmVAxs7ZhnnN
YSen0OFXduWgsYXXFh/ThGKO3JbNxGzJc1Y8c3shkvCpWY59a+xVMw0ReOtevjUX
W9PM5sE0tXw=
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:12:35 2025 by rpki-client