
$ rpki-client -vvf rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/323830343a383638343a3a2f33322d313238203d3e20323732363439.roa
File: 323830343a383638343a3a2f33322d313238203d3e20323732363439.roa (raw, json)
Hash identifier: kRoJ3oERBW+BLPAE60d9U/Ne7fvM0oXoUeLouOtIrao=
Subject key identifier: 21:C2:A3:49:6B:E0:2F:73:80:0B:56:49:9F:7F:8C:4B:28:CF:0C:2E
Certificate issuer: /CN=F014953495F46F0A94B3D2DBE6F0CB8C349E598E
Certificate serial: 07D66D8189D601A93B5052C73AF8C8CED40EB891
Authority key identifier: F0:14:95:34:95:F4:6F:0A:94:B3:D2:DB:E6:F0:CB:8C:34:9E:59:8E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F014953495F46F0A94B3D2DBE6F0CB8C349E598E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/323830343a383638343a3a2f33322d313238203d3e20323732363439.roa
Signing time: Wed 29 Oct 2025 02:06:10 +0000
ROA not before: Wed 29 Oct 2025 02:01:10 +0000
ROA not after: Wed 28 Oct 2026 02:06:10 +0000
asID: 272649
IP address blocks: 2804:8684::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/F014953495F46F0A94B3D2DBE6F0CB8C349E598E.crl
rsync://rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/F014953495F46F0A94B3D2DBE6F0CB8C349E598E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F014953495F46F0A94B3D2DBE6F0CB8C349E598E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 20:30:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:d6:6d:81:89:d6:01:a9:3b:50:52:c7:3a:f8:c8:ce:d4:0e:b8:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F014953495F46F0A94B3D2DBE6F0CB8C349E598E
Validity
Not Before: Oct 29 02:01:10 2025 GMT
Not After : Oct 28 02:06:10 2026 GMT
Subject: CN=21C2A3496BE02F73800B56499F7F8C4B28CF0C2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:44:9b:d7:d5:eb:4d:02:ae:f9:82:38:1a:58:
46:a5:6a:a0:41:66:0d:3a:41:9c:eb:ea:96:19:7c:
c4:76:39:a6:82:b1:f0:fc:ed:0e:17:03:f9:c7:4f:
b0:1b:77:d7:fe:fd:4e:45:3e:04:ed:77:19:0b:78:
c1:95:f3:25:a0:d6:62:ae:96:12:84:b2:e0:12:29:
2e:ad:e3:2f:39:9d:0e:86:6e:e2:50:04:7b:8b:f9:
69:30:8b:64:3d:bd:a0:64:49:2a:ef:a6:af:55:90:
02:e5:08:27:ef:0f:0d:2c:43:03:b1:ee:72:a3:03:
89:71:55:c6:90:39:73:d4:b8:3b:6f:81:df:c4:eb:
48:12:39:6f:cf:12:e4:3b:67:b3:1e:09:0b:a3:27:
e3:d3:1c:c9:37:62:f5:87:58:e9:5c:29:f6:78:76:
13:5c:69:3c:f0:36:ea:b9:56:c4:0d:58:67:5d:e8:
5e:7b:28:96:55:f3:66:ef:c0:c3:6e:4f:63:0b:3b:
df:37:ad:06:1b:8d:23:54:79:d3:2b:db:13:6e:6d:
0e:df:73:68:a5:02:4a:5a:18:91:1f:77:d3:c8:96:
fa:cb:a4:f3:68:8f:80:2c:67:fc:28:bc:2a:e6:de:
1c:67:e2:55:44:9f:7f:de:fb:48:00:c6:1e:92:cc:
24:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C2:A3:49:6B:E0:2F:73:80:0B:56:49:9F:7F:8C:4B:28:CF:0C:2E
X509v3 Authority Key Identifier:
keyid:F0:14:95:34:95:F4:6F:0A:94:B3:D2:DB:E6:F0:CB:8C:34:9E:59:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/F014953495F46F0A94B3D2DBE6F0CB8C349E598E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F014953495F46F0A94B3D2DBE6F0CB8C349E598E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/323830343a383638343a3a2f33322d313238203d3e20323732363439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8684::/32
Signature Algorithm: sha256WithRSAEncryption
a2:f1:56:a0:fc:26:38:71:57:a1:28:f4:e9:8e:79:0f:bd:eb:
4a:f7:6a:7d:75:ae:94:6d:01:c0:20:cf:4f:88:65:d6:58:57:
d9:94:ce:ac:bf:1b:e6:76:90:d7:cc:72:11:0e:ac:06:ad:14:
b7:2a:7e:d9:a0:26:f9:ee:f2:f0:86:93:14:01:f9:1a:6b:1a:
b9:de:65:48:6d:e6:9d:da:c2:d4:d3:d4:0f:00:f4:e2:81:10:
3c:1e:2b:d9:a8:a2:f3:f8:b6:e3:86:f8:40:55:47:c2:48:26:
f0:d6:6b:ea:b5:20:c2:72:8c:73:6f:47:fc:e2:a4:41:e9:63:
b6:9e:6d:64:cb:ca:12:ba:11:88:b1:6d:b4:49:b5:47:be:08:
24:4a:97:27:22:a4:b0:ed:4a:b8:99:1c:32:77:6f:11:58:4d:
90:7d:31:9d:87:05:11:d8:50:ad:37:71:2a:05:d4:b6:69:11:
07:57:c6:2b:88:83:49:46:65:bc:4d:12:3b:d2:ca:fb:01:31:
f0:15:b5:95:c0:27:ca:3a:1e:1e:c0:bb:c9:f7:f4:3f:7c:ce:
cb:a7:f1:d3:91:ac:0d:7c:69:aa:e3:25:7b:a6:71:dd:06:83:
6d:56:0a:d0:ba:d2:6b:8f:60:89:aa:75:fc:be:05:27:36:2b:
82:62:d2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:10:31 2025 by rpki-client