
$ rpki-client -vvf rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a653030303a3a2f33352d3335203d3e20323637393631.roa
File: 323830343a353564633a653030303a3a2f33352d3335203d3e20323637393631.roa (raw, json)
Hash identifier: 4PMUGADAR8xBiQ07Vg0urOu0wcC9gwsGL2nXdABZPTs=
Subject key identifier: 52:65:73:47:BC:D3:54:A1:B2:1E:BB:CF:E2:70:01:C5:4A:68:36:C2
Certificate issuer: /CN=5D6EE216A61DC7F3FE2995D319908D11F231A74F
Certificate serial: 3B5F47686885FC6E3975DCD4982D12D543309898
Authority key identifier: 5D:6E:E2:16:A6:1D:C7:F3:FE:29:95:D3:19:90:8D:11:F2:31:A7:4F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D6EE216A61DC7F3FE2995D319908D11F231A74F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a653030303a3a2f33352d3335203d3e20323637393631.roa
Signing time: Sat 25 Oct 2025 20:46:32 +0000
ROA not before: Sat 25 Oct 2025 20:41:32 +0000
ROA not after: Sat 24 Oct 2026 20:46:32 +0000
asID: 267961
IP address blocks: 2804:55dc:e000::/35 maxlen: 35
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/5D6EE216A61DC7F3FE2995D319908D11F231A74F.crl
rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/5D6EE216A61DC7F3FE2995D319908D11F231A74F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D6EE216A61DC7F3FE2995D319908D11F231A74F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 06:12:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:5f:47:68:68:85:fc:6e:39:75:dc:d4:98:2d:12:d5:43:30:98:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D6EE216A61DC7F3FE2995D319908D11F231A74F
Validity
Not Before: Oct 25 20:41:32 2025 GMT
Not After : Oct 24 20:46:32 2026 GMT
Subject: CN=52657347BCD354A1B21EBBCFE27001C54A6836C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7f:df:b4:ae:26:c5:7b:66:10:35:dc:31:1e:
74:b1:d1:2b:51:69:68:e5:5d:06:38:08:7e:7c:e0:
88:26:8d:3a:37:2a:14:e4:c5:b7:6b:db:10:fa:2f:
de:c3:2a:1e:c1:3a:36:fe:c1:1f:8c:bd:dd:75:b0:
28:4a:87:bc:b5:b5:36:73:3e:a2:2f:b3:44:3c:f5:
8e:3f:8d:68:4f:76:c0:57:e1:39:dd:a6:0c:51:74:
59:3a:bc:81:31:57:c7:20:f3:96:50:ba:d7:9e:94:
69:b2:23:e4:93:cb:37:43:1d:a8:c7:25:9e:bb:86:
7b:9a:c3:eb:47:90:3d:5a:5b:5e:8a:f6:fe:40:88:
09:79:33:f2:6b:55:62:9a:57:36:80:6f:e2:37:17:
3c:cd:a7:b9:99:45:1f:99:33:d6:c3:b1:84:cc:2e:
94:cb:0b:39:f0:f8:ef:c0:94:5c:77:59:05:4a:18:
e7:0b:68:8c:98:ba:9b:4c:5b:4a:8c:c7:5d:fa:de:
49:08:57:d0:33:75:ae:0f:63:48:08:8a:4b:1c:c2:
09:46:e9:d2:e8:35:28:49:c9:0b:57:0a:d2:88:97:
ff:88:4f:6a:ee:97:de:8b:54:4d:e1:64:3e:ca:c7:
18:3d:c6:ff:31:9e:18:00:b5:17:26:4c:76:d5:a1:
62:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:65:73:47:BC:D3:54:A1:B2:1E:BB:CF:E2:70:01:C5:4A:68:36:C2
X509v3 Authority Key Identifier:
keyid:5D:6E:E2:16:A6:1D:C7:F3:FE:29:95:D3:19:90:8D:11:F2:31:A7:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/5D6EE216A61DC7F3FE2995D319908D11F231A74F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D6EE216A61DC7F3FE2995D319908D11F231A74F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a653030303a3a2f33352d3335203d3e20323637393631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:55dc:e000::/35
Signature Algorithm: sha256WithRSAEncryption
63:fc:0c:e5:9d:54:55:f9:9b:ee:2b:bd:2e:4b:cf:55:38:c0:
e4:66:66:da:5d:6f:0c:cb:6b:7b:e5:48:ad:f5:cc:c5:17:d2:
30:76:cb:20:62:07:e3:5e:6d:c4:0b:f3:aa:72:13:c1:5d:5e:
41:49:76:ea:f7:d5:22:37:7e:94:f5:be:be:24:5b:53:c0:9f:
4d:dc:bd:8b:f2:ea:c8:09:4a:46:c1:24:8a:4d:82:46:9d:77:
30:45:22:06:6e:ef:d2:39:3e:49:01:32:b6:36:85:18:06:77:
5f:a6:2d:b6:0b:0d:27:c6:80:5d:3f:da:56:a6:96:51:5d:f0:
c9:34:1b:fd:78:65:8e:74:3e:05:81:19:fe:80:13:2f:2d:45:
58:99:5c:20:d6:4f:06:6b:11:e1:58:77:cc:3d:8b:dd:93:87:
b3:ae:91:a6:66:4e:d0:fd:86:af:b1:7d:52:2a:a7:35:1a:72:
54:0f:2a:5b:ce:b2:e4:87:f9:7d:a5:cf:cc:8a:22:8d:05:6c:
33:b7:cd:d4:09:12:c6:bd:45:6c:4e:c0:a0:73:b3:97:00:7d:
db:22:c2:44:c1:63:58:99:5f:73:5c:a5:73:d2:df:b8:f0:d1:
21:6b:16:55:05:a5:3a:e6:78:9b:5f:d7:14:78:88:a5:38:55:
e5:7f:40:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:00:44 2025 by rpki-client