
$ rpki-client -vvf rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730613a3a2f34382d3438203d3e203631353733.roa
File: 323830343a323565343a3730613a3a2f34382d3438203d3e203631353733.roa (raw, json)
Hash identifier: 1R17kVlV1VZ+MXt52T50Jb5fiNUu4RWDflQkRP1jSUc=
Subject key identifier: 49:D3:B0:DC:FB:DC:F1:7B:C9:6C:91:C0:02:22:0A:4F:C1:F8:6C:3F
Certificate issuer: /CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
Certificate serial: 73D0183B9DBE306C0EEB3BE1AA905EB04F44919C
Authority key identifier: DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730613a3a2f34382d3438203d3e203631353733.roa
Signing time: Sat 03 May 2025 00:20:55 +0000
ROA not before: Sat 03 May 2025 00:15:55 +0000
ROA not after: Sat 02 May 2026 00:20:55 +0000
asID: 61573
IP address blocks: 2804:25e4:70a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl
rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 09:05:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:d0:18:3b:9d:be:30:6c:0e:eb:3b:e1:aa:90:5e:b0:4f:44:91:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
Validity
Not Before: May 3 00:15:55 2025 GMT
Not After : May 2 00:20:55 2026 GMT
Subject: CN=49D3B0DCFBDCF17BC96C91C002220A4FC1F86C3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f7:73:98:52:97:b5:a7:2c:92:b0:00:16:ac:
c4:0b:68:cb:7e:a0:bf:d7:56:f6:9b:89:ba:b3:20:
e4:16:b0:ab:03:d1:80:a1:76:0d:8e:e8:b1:f9:2e:
47:9e:48:f4:b5:ab:f8:99:a0:2d:23:09:4b:f7:a8:
62:9a:2b:86:b5:61:7e:e4:e4:31:89:a0:78:a3:84:
54:8e:2a:7a:f5:25:f5:01:e4:90:a2:35:e6:3b:af:
9b:df:72:c1:e0:66:b7:2e:b4:fc:ce:36:84:c3:ea:
d3:12:64:df:62:52:b2:77:c3:fe:69:be:65:16:98:
ea:20:8b:21:2f:97:2a:cd:92:e9:66:9b:da:b0:a3:
42:39:17:93:bc:33:9f:37:f0:48:64:25:33:68:36:
7f:5e:2d:e0:f2:94:a2:ec:cb:56:e6:5d:14:33:fe:
02:5c:68:cf:69:c0:30:e4:61:39:1e:d1:54:32:ef:
d6:3d:cd:af:9d:6b:93:8a:1c:69:5c:d7:18:ee:1c:
26:83:a4:2d:04:4f:bb:19:66:ba:6c:d4:4d:b7:5f:
17:ff:b6:37:5e:58:72:5d:cf:ce:87:de:86:b0:f5:
1e:53:30:16:9f:60:75:1e:8a:9d:f2:3b:4f:5f:9f:
de:ed:e2:9d:d3:96:a8:86:bf:53:b3:3d:21:f5:8e:
db:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D3:B0:DC:FB:DC:F1:7B:C9:6C:91:C0:02:22:0A:4F:C1:F8:6C:3F
X509v3 Authority Key Identifier:
keyid:DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730613a3a2f34382d3438203d3e203631353733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:25e4:70a::/48
Signature Algorithm: sha256WithRSAEncryption
2a:d8:75:f5:f6:7d:2b:9b:22:5d:4f:80:af:e8:ae:49:0a:8e:
24:e3:d4:e9:c1:8a:c5:d2:1a:a6:38:6e:48:fb:0c:d7:ce:fc:
76:1e:a1:0f:fe:12:24:da:c5:2a:3a:4e:ce:4e:e2:eb:df:70:
87:b8:29:ee:fe:10:29:71:69:77:c5:a8:2b:a7:7f:4a:1b:a9:
89:48:22:34:9f:eb:ff:d3:a3:95:fc:d1:e9:2d:6a:b3:54:37:
c5:ea:2e:07:46:81:20:80:92:37:40:7c:a2:fc:c1:b5:2e:94:
32:36:d0:46:00:f0:be:a0:c5:5e:a7:15:d2:9b:b2:c3:5b:19:
b1:71:7a:2a:2e:48:25:5c:69:b6:b1:cc:38:41:fd:f6:25:74:
1c:71:df:c5:75:70:31:7d:6a:c6:f4:47:eb:b1:14:2a:94:c0:
77:83:38:97:e9:eb:db:ed:28:02:8d:ff:30:bf:87:21:b7:23:
bd:17:34:28:bf:01:43:7b:a8:08:d2:ac:16:73:01:ff:d3:3f:
7c:c8:c8:34:4e:e2:9d:35:bf:b3:f5:c2:77:a9:87:1c:42:3b:
0d:d1:d5:3b:7f:7a:61:b8:53:24:33:a2:5e:2f:1c:17:65:e7:
07:a8:7b:89:69:45:e1:c1:a5:fe:68:46:94:0c:d2:0b:e9:13:
98:17:4b:54
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUc9AYO52+MGwO6zvhqpBesE9EkZwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREUxOEU0RjFCMTlFOUNCNDJCRTU0NjgzMTI3NjQ1MTlF
QUE4NjZCRDAeFw0yNTA1MDMwMDE1NTVaFw0yNjA1MDIwMDIwNTVaMDMxMTAvBgNV
BAMTKDQ5RDNCMERDRkJEQ0YxN0JDOTZDOTFDMDAyMjIwQTRGQzFGODZDM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC193OYUpe1pyySsAAWrMQLaMt+
oL/XVvabibqzIOQWsKsD0YChdg2O6LH5LkeeSPS1q/iZoC0jCUv3qGKaK4a1YX7k
5DGJoHijhFSOKnr1JfUB5JCiNeY7r5vfcsHgZrcutPzONoTD6tMSZN9iUrJ3w/5p
vmUWmOogiyEvlyrNkulmm9qwo0I5F5O8M5838EhkJTNoNn9eLeDylKLsy1bmXRQz
/gJcaM9pwDDkYTke0VQy79Y9za+da5OKHGlc1xjuHCaDpC0ET7sZZrps1E23Xxf/
tjdeWHJdz86H3oaw9R5TMBafYHUeip3yO09fn97t4p3TlqiGv1OzPSH1jtu3AgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUSdOw3Pvc8XvJbJHAAiIKT8H4bD8wHwYDVR0j
BBgwFoAU3hjk8bGenLQr5UaDEnZFGeqoZr0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHdFS3Z0REo2U0Jrdm5WcUdKaVZqaTV1UDQ2UkxYVG5oRnNqeDhCczdl
UnQvMC9ERTE4RTRGMUIxOUU5Q0I0MkJFNTQ2ODMxMjc2NDUxOUVBQTg2NkJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFMThFNEYxQjE5RTlDQjQy
QkU1NDY4MzEyNzY0NTE5RUFBODY2QkQuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h3RUt2dERKNlNCa3ZuVnFHSmlWamk1dVA0NlJMWFRuaEZzang4QnM3ZVJ0LzAv
MzIzODMwMzQzYTMyMzU2NTM0M2EzNzMwNjEzYTNhMmYzNDM4MmQzNDM4MjAzZDNl
MjAzNjMxMzUzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAQl5AcKMA0GCSqGSIb3DQEBCwUAA4IB
AQAq2HX19n0rmyJdT4Cv6K5JCo4k49TpwYrF0hqmOG5I+wzXzvx2HqEP/hIk2sUq
Ok7OTuLr33CHuCnu/hApcWl3xagrp39KG6mJSCI0n+v/06OV/NHpLWqzVDfF6i4H
RoEggJI3QHyi/MG1LpQyNtBGAPC+oMVepxXSm7LDWxmxcXoqLkglXGm2scw4Qf32
JXQccd/FdXAxfWrG9EfrsRQqlMB3gziX6evb7SgCjf8wv4chtyO9FzQovwFDe6gI
0qwWcwH/0z98yMg0TuKdNb+z9cJ3qYccQjsN0dU7f3phuFMkM6JeLxwXZecHqHuJ
aUXhwaX+aEaUDNIL6ROYF0tU
-----END CERTIFICATE-----
Generated at Wed Nov 5 21:41:34 2025 by rpki-client