
$ rpki-client -vvf rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/323830343a393061303a363330303a3a2f34302d3430203d3e20323733353634.roa
File: 323830343a393061303a363330303a3a2f34302d3430203d3e20323733353634.roa (raw, json)
Hash identifier: 7jgtfo785KzZM9OtZKD40EpXNOKRnNHhZI240qfEKbI=
Subject key identifier: 0E:31:67:05:49:29:EF:A1:70:BC:9F:CC:99:6C:DB:2F:AF:78:91:B3
Certificate issuer: /CN=B4E1EA3585A9852E5C12D39221F08AC0DFFC132D
Certificate serial: 2344FD5832431FD8DFEE980E74B3C8A073106CD8
Authority key identifier: B4:E1:EA:35:85:A9:85:2E:5C:12:D3:92:21:F0:8A:C0:DF:FC:13:2D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/323830343a393061303a363330303a3a2f34302d3430203d3e20323733353634.roa
Signing time: Wed 29 Oct 2025 22:10:25 +0000
ROA not before: Wed 29 Oct 2025 22:05:25 +0000
ROA not after: Wed 28 Oct 2026 22:10:25 +0000
asID: 273564
IP address blocks: 2804:90a0:6300::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.crl
rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 01:40:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:44:fd:58:32:43:1f:d8:df:ee:98:0e:74:b3:c8:a0:73:10:6c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4E1EA3585A9852E5C12D39221F08AC0DFFC132D
Validity
Not Before: Oct 29 22:05:25 2025 GMT
Not After : Oct 28 22:10:25 2026 GMT
Subject: CN=0E3167054929EFA170BC9FCC996CDB2FAF7891B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ba:02:37:49:32:a7:85:3a:c2:1e:1f:86:9d:
00:51:cb:d0:53:a3:e1:9a:bb:19:ac:7f:df:83:b7:
78:0f:f5:38:ae:22:36:d3:f1:2d:29:52:ec:3b:fb:
b2:b0:7d:d9:d5:14:a6:8a:63:e9:f6:8b:4e:01:e6:
e7:fc:87:15:70:53:e8:52:85:57:93:d7:e2:23:16:
31:98:0c:93:f8:7a:e2:65:43:1d:a3:f8:94:b9:52:
a3:9b:35:19:c9:59:80:19:32:c0:da:87:aa:f5:24:
ed:1a:ee:fb:68:ed:aa:2d:97:a4:81:4c:70:60:b7:
79:68:57:44:1a:7f:10:c8:f6:22:13:31:cc:04:54:
a8:fa:18:6e:2a:91:79:9b:d8:d6:7c:17:42:29:b4:
43:b4:84:3e:c2:94:2e:9e:ac:5e:93:fc:92:a0:f8:
1f:60:3d:c0:16:6e:9d:33:40:7f:f7:a9:c3:cd:19:
f1:24:46:a6:95:87:db:5a:9d:b3:68:27:01:1e:b5:
c1:30:28:b0:fa:bf:b1:18:2d:fc:6e:39:f1:c0:cc:
ff:e1:55:a8:0f:60:e7:18:0e:c8:20:ab:d3:a1:7f:
ea:04:32:09:54:01:22:b8:25:f6:b0:c8:65:8f:5d:
9b:df:9f:2c:2f:3b:de:f0:d6:b0:30:04:48:6a:19:
8b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:31:67:05:49:29:EF:A1:70:BC:9F:CC:99:6C:DB:2F:AF:78:91:B3
X509v3 Authority Key Identifier:
keyid:B4:E1:EA:35:85:A9:85:2E:5C:12:D3:92:21:F0:8A:C0:DF:FC:13:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/323830343a393061303a363330303a3a2f34302d3430203d3e20323733353634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:90a0:6300::/40
Signature Algorithm: sha256WithRSAEncryption
38:ef:69:2e:1e:db:c2:f2:4b:50:f7:cb:37:f3:99:82:f2:3c:
2e:9b:8f:ed:6d:e2:89:d8:2b:fd:14:05:44:3b:29:93:18:3a:
1c:19:9c:ff:2e:50:94:21:64:04:f3:43:41:d9:17:c1:ee:4b:
46:8c:c7:46:fe:13:06:f7:3c:9a:15:ba:9c:1f:a9:48:75:e6:
5e:63:d9:ae:90:6f:87:bd:f7:c6:ad:ea:e1:c4:74:c2:7e:2c:
ae:85:e0:8a:6c:a2:62:7a:0f:35:a3:c8:9f:c1:3b:74:4f:79:
21:b3:0d:aa:91:74:8b:23:a8:35:3a:97:f2:6c:fe:4f:8c:a8:
96:b6:5b:f3:02:19:47:10:c8:e8:5e:42:79:b1:9e:2a:27:d8:
fd:dd:ea:b4:1f:69:a9:d7:f8:3c:97:21:e1:11:7b:43:86:68:
76:9b:7e:14:10:6b:94:ee:08:64:18:02:c9:17:d7:8c:19:2f:
56:9c:bf:f0:ed:47:1a:f1:3f:c7:4f:08:de:5c:2c:99:5d:24:
85:0c:49:7c:7c:ff:f7:de:35:17:f3:ba:32:ae:a4:09:d1:33:
a8:f8:05:64:13:df:07:f0:a6:8f:d4:12:e4:7b:4d:5f:39:df:
d9:7e:39:88:ff:03:c1:16:dc:8e:96:42:86:80:e2:0a:71:ba:
19:74:22:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:26:25 2025 by rpki-client