
$ rpki-client -vvf rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/323830343a393061303a3a2f33332d3333203d3e20323733353634.roa
File: 323830343a393061303a3a2f33332d3333203d3e20323733353634.roa (raw, json)
Hash identifier: XkbBJEX5hmLw2byM6yVVSyqMuMmnhVPG83K7j4iMdKc=
Subject key identifier: 24:E8:74:A2:29:7E:8F:07:9E:67:DF:73:36:D0:AB:9E:49:A2:7D:01
Certificate issuer: /CN=B4E1EA3585A9852E5C12D39221F08AC0DFFC132D
Certificate serial: 120768170EF7A237A1A3D77B755DFE2D8F341EBB
Authority key identifier: B4:E1:EA:35:85:A9:85:2E:5C:12:D3:92:21:F0:8A:C0:DF:FC:13:2D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/323830343a393061303a3a2f33332d3333203d3e20323733353634.roa
Signing time: Wed 29 Oct 2025 22:10:03 +0000
ROA not before: Wed 29 Oct 2025 22:05:03 +0000
ROA not after: Wed 28 Oct 2026 22:10:03 +0000
asID: 273564
IP address blocks: 2804:90a0::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.crl
rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 01:40:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:07:68:17:0e:f7:a2:37:a1:a3:d7:7b:75:5d:fe:2d:8f:34:1e:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4E1EA3585A9852E5C12D39221F08AC0DFFC132D
Validity
Not Before: Oct 29 22:05:03 2025 GMT
Not After : Oct 28 22:10:03 2026 GMT
Subject: CN=24E874A2297E8F079E67DF7336D0AB9E49A27D01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d4:85:ae:d4:82:7d:76:92:e3:9c:44:2f:18:
ea:b1:b2:55:7b:1f:2e:ea:18:86:65:d3:a5:cb:00:
5a:2b:3a:68:ef:fd:d2:bc:8a:a4:96:8a:eb:2c:4b:
c7:82:5a:9b:5a:66:ca:41:4a:0c:62:6b:2b:7f:45:
ff:42:ba:92:34:7d:4d:03:4a:fb:b0:f9:ad:3a:62:
66:dd:5c:34:e5:dc:bd:76:62:68:bf:e6:bd:45:2e:
85:f7:67:45:dc:11:82:8d:ed:45:79:d6:ac:be:5c:
92:ed:c2:3f:0b:6a:8c:61:81:14:1d:45:12:d4:6d:
bd:4e:ab:8b:35:75:84:92:71:13:2c:e3:67:c4:7f:
2d:14:a7:e8:d7:b4:b1:c6:ab:39:a8:f9:fb:22:eb:
45:ef:28:5f:15:63:39:69:a0:8d:87:d7:a8:24:d1:
ef:75:98:6a:5b:bd:9c:dc:6b:a1:8c:6a:4a:39:5b:
b6:e8:c7:78:5c:40:10:2a:79:7c:f1:8b:4c:8a:42:
fb:6a:d2:44:b8:6a:ff:f5:8d:2f:a3:b5:15:19:cf:
0e:b1:ab:4b:fe:13:85:f7:cf:51:fe:d0:8b:64:4e:
ef:a5:a2:b2:1f:9d:d8:e1:9f:b3:3e:b1:92:b8:73:
47:ba:06:e8:44:38:24:ee:b4:2d:51:c6:65:71:38:
39:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E8:74:A2:29:7E:8F:07:9E:67:DF:73:36:D0:AB:9E:49:A2:7D:01
X509v3 Authority Key Identifier:
keyid:B4:E1:EA:35:85:A9:85:2E:5C:12:D3:92:21:F0:8A:C0:DF:FC:13:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/323830343a393061303a3a2f33332d3333203d3e20323733353634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:90a0::/33
Signature Algorithm: sha256WithRSAEncryption
90:ab:9a:40:f0:fa:f0:20:5b:c0:c0:33:27:ea:45:21:c5:4b:
ab:9c:1f:e7:0e:93:c5:35:d7:ef:50:ee:34:cb:79:40:52:83:
02:d1:e1:bc:0e:0c:67:6d:a3:00:dc:26:0c:f4:dc:3b:c5:c7:
4e:08:e5:16:1e:be:46:17:c3:70:8b:b3:0e:1d:52:79:b0:3f:
7b:4d:c8:b2:68:2e:59:38:a0:a6:46:9b:62:b1:49:e0:65:40:
d8:73:ac:df:39:2d:a4:6e:ff:1e:8a:3c:7d:ac:dc:24:f3:6e:
8e:83:cd:a9:9f:76:1f:7e:31:af:f3:4a:ca:37:2c:1a:02:9a:
f1:2e:74:ea:7c:10:6b:6b:f0:36:56:a9:70:bc:6b:35:a0:31:
10:2f:30:6f:fc:e5:d1:b2:4c:dd:05:46:22:fc:09:19:1c:0f:
9a:c5:16:36:31:67:d1:d9:ae:b0:47:26:15:90:3a:58:47:6b:
ee:de:74:fa:f6:a2:44:ec:d8:21:e8:d8:85:88:ef:68:77:b6:
e5:80:cf:24:5b:67:c1:43:78:42:17:62:b2:83:5a:ab:f0:f2:
dd:d1:66:0b:24:bf:10:8e:96:1f:db:e6:4a:88:51:fc:6a:47:
68:7f:a0:72:01:e7:91:3c:c1:22:88:d8:79:58:56:4c:ca:d8:
94:8a:a4:ee
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUEgdoFw73ojeho9d7dV3+LY80HrswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjRFMUVBMzU4NUE5ODUyRTVDMTJEMzkyMjFGMDhBQzBE
RkZDMTMyRDAeFw0yNTEwMjkyMjA1MDNaFw0yNjEwMjgyMjEwMDNaMDMxMTAvBgNV
BAMTKDI0RTg3NEEyMjk3RThGMDc5RTY3REY3MzM2RDBBQjlFNDlBMjdEMDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw1IWu1IJ9dpLjnEQvGOqxslV7
Hy7qGIZl06XLAForOmjv/dK8iqSWiussS8eCWptaZspBSgxiayt/Rf9CupI0fU0D
Svuw+a06YmbdXDTl3L12Ymi/5r1FLoX3Z0XcEYKN7UV51qy+XJLtwj8LaoxhgRQd
RRLUbb1Oq4s1dYSScRMs42fEfy0Up+jXtLHGqzmo+fsi60XvKF8VYzlpoI2H16gk
0e91mGpbvZzca6GMako5W7box3hcQBAqeXzxi0yKQvtq0kS4av/1jS+jtRUZzw6x
q0v+E4X3z1H+0ItkTu+lorIfndjhn7M+sZK4c0e6BuhEOCTutC1RxmVxODm7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUJOh0oil+jweeZ99zNtCrnkmifQEwHwYDVR0j
BBgwFoAUtOHqNYWphS5cEtOSIfCKwN/8Ey0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFJCVUI0NXIzQnZOY0RBQ0JTYlBhVlk1M2VQOEpGMzc5NXcxWXAzam4x
cGcvMC9CNEUxRUEzNTg1QTk4NTJFNUMxMkQzOTIyMUYwOEFDMERGRkMxMzJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I0RTFFQTM1ODVBOTg1MkU1
QzEyRDM5MjIxRjA4QUMwREZGQzEzMkQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hSQlVCNDVyM0J2TmNEQUNCU2JQYVZZNTNlUDhKRjM3OTV3MVlwM2puMXBnLzAv
MzIzODMwMzQzYTM5MzA2MTMwM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNzMz
MzUzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKASQoAAwDQYJKoZIhvcNAQELBQADggEBAJCrmkDw
+vAgW8DAMyfqRSHFS6ucH+cOk8U11+9Q7jTLeUBSgwLR4bwODGdtowDcJgz03DvF
x04I5RYevkYXw3CLsw4dUnmwP3tNyLJoLlk4oKZGm2KxSeBlQNhzrN85LaRu/x6K
PH2s3CTzbo6Dzamfdh9+Ma/zSso3LBoCmvEudOp8EGtr8DZWqXC8azWgMRAvMG/8
5dGyTN0FRiL8CRkcD5rFFjYxZ9HZrrBHJhWQOlhHa+7edPr2okTs2CHo2IWI72h3
tuWAzyRbZ8FDeEIXYrKDWqvw8t3RZgskvxCOlh/b5kqIUfxqR2h/oHIB55E8wSKI
2HlYVkzK2JSKpO4=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:11:31 2025 by rpki-client