
$ rpki-client -vvf rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/323830343a3163633a3a2f33322d3438203d3e203238313330.roa
File: 323830343a3163633a3a2f33322d3438203d3e203238313330.roa (raw, json)
Hash identifier: a9RI90c0MpGfozFMB91778PgiVXQnMTgsTIxPsg8Z60=
Subject key identifier: 65:2B:F6:C0:D2:E1:26:13:DD:B1:AF:BA:29:62:7B:EF:67:33:06:1E
Certificate issuer: /CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
Certificate serial: 24E889A5D2C8D42B21598256EF1A7E6463F2CA65
Authority key identifier: 4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/323830343a3163633a3a2f33322d3438203d3e203238313330.roa
Signing time: Thu 06 Mar 2025 07:53:57 +0000
ROA not before: Thu 06 Mar 2025 07:48:57 +0000
ROA not after: Thu 05 Mar 2026 07:53:57 +0000
asID: 28130
IP address blocks: 2804:1cc::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl
rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 20:12:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:e8:89:a5:d2:c8:d4:2b:21:59:82:56:ef:1a:7e:64:63:f2:ca:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
Validity
Not Before: Mar 6 07:48:57 2025 GMT
Not After : Mar 5 07:53:57 2026 GMT
Subject: CN=652BF6C0D2E12613DDB1AFBA29627BEF6733061E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:46:21:76:76:55:66:a8:be:ee:19:3f:da:ba:
6c:dd:b4:92:b8:ad:9c:86:49:07:53:4a:01:cf:49:
51:7e:d9:cd:14:d5:ba:c1:66:2d:11:40:7c:c9:28:
c7:a4:9d:b4:f4:6b:6c:24:c2:9f:a5:14:24:61:a5:
9f:c1:c2:2a:c7:b5:66:c0:ee:52:f0:c4:a9:ac:58:
79:7a:3c:a3:9d:45:a8:b9:17:c0:ff:e5:dc:2a:1d:
81:f9:4a:9c:e9:f8:96:47:e3:fc:6c:89:43:a4:50:
6a:6f:2e:3c:0e:a1:e5:be:6a:88:99:4d:9f:60:0b:
e9:e8:c9:ea:12:09:75:db:87:bb:c2:9c:cb:c5:6d:
f3:7b:5b:b0:5f:4e:e1:89:57:46:d1:0f:e0:f9:f9:
0d:ab:11:3c:22:18:20:2f:ee:a2:1b:d1:a8:e7:cd:
6a:4b:48:b1:70:32:8c:ce:56:83:a2:69:be:a6:8f:
1a:6d:3d:90:7c:bd:8b:8e:a6:0d:c9:91:7e:44:02:
e6:f0:fb:7d:be:ce:83:95:f0:64:fe:ed:e8:58:61:
4c:15:31:bc:49:f0:0e:08:74:0d:c1:4a:8a:a6:70:
6d:9c:28:b6:8a:ae:9c:de:01:7e:35:b7:f4:f1:8c:
0a:50:71:87:24:6e:88:2f:91:c4:35:fb:e7:52:9b:
de:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:2B:F6:C0:D2:E1:26:13:DD:B1:AF:BA:29:62:7B:EF:67:33:06:1E
X509v3 Authority Key Identifier:
keyid:4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/323830343a3163633a3a2f33322d3438203d3e203238313330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1cc::/32
Signature Algorithm: sha256WithRSAEncryption
2d:ec:7b:9d:ce:1b:12:32:3b:4b:25:f0:65:a4:a5:e2:32:0e:
42:0b:da:fc:79:b5:74:be:b5:c7:14:3d:6b:87:bf:95:ec:8f:
1b:01:aa:79:57:0f:a6:3b:79:0e:7f:0c:51:5a:58:d1:b4:69:
4b:9c:0b:49:3c:18:47:11:e9:2e:20:e7:b7:9a:00:da:9c:9c:
bb:c3:93:51:99:59:92:e8:ed:18:c6:ff:7c:b7:1b:13:2b:9a:
58:d3:2c:f5:4f:3e:aa:ae:6e:28:05:47:0c:d6:af:0c:90:b5:
30:1c:a1:ab:06:b3:09:50:6c:92:bb:ce:81:09:5c:e7:5e:7d:
06:62:8d:14:1c:42:5b:3c:1a:3d:b2:1e:10:17:5c:ee:05:e0:
04:62:4e:b5:6a:d4:70:64:0a:9a:19:d5:5a:0c:be:56:1d:82:
36:22:a9:07:b9:a4:26:6d:37:5d:79:e0:4c:cd:c0:e9:16:c9:
6d:94:10:d6:47:ea:33:df:a0:bc:7f:23:c6:a7:44:34:f6:42:
ec:c8:05:0b:35:5f:7e:8e:06:4b:2e:59:97:8a:5c:a1:a4:a2:
7e:4b:64:49:a6:5f:c4:0b:da:0f:67:b2:0b:a7:f4:7b:ff:9e:
dc:0b:b5:e1:f2:a7:41:89:29:c7:68:80:6d:14:e1:39:45:a4:
4a:22:5e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:35:59 2025 by rpki-client