
$ rpki-client -vvf rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a3330303a3a2f34332d3433203d3e203631383838.roa
File: 323830343a6536303a3330303a3a2f34332d3433203d3e203631383838.roa (raw, json)
Hash identifier: Dg6QgxjLlU/z9V++ZNu5x+kx/dkHCPlSeP4IrvAXZEM=
Subject key identifier: 89:7E:FF:68:74:E6:0C:86:4E:28:AA:3F:81:3E:4C:8A:16:1F:4F:2A
Certificate issuer: /CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
Certificate serial: 4180F30DB3D437FCC1C33503E27FECD4FE133735
Authority key identifier: 96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
Subject info access: rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a3330303a3a2f34332d3433203d3e203631383838.roa
Signing time: Wed 05 Mar 2025 19:00:00 +0000
ROA not before: Wed 05 Mar 2025 18:55:00 +0000
ROA not after: Wed 04 Mar 2026 19:00:00 +0000
asID: 61888
IP address blocks: 2804:e60:300::/43 maxlen: 43
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl
rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 21 Oct 2025 16:27:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:80:f3:0d:b3:d4:37:fc:c1:c3:35:03:e2:7f:ec:d4:fe:13:37:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
Validity
Not Before: Mar 5 18:55:00 2025 GMT
Not After : Mar 4 19:00:00 2026 GMT
Subject: CN=897EFF6874E60C864E28AA3F813E4C8A161F4F2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:86:3d:d6:d9:db:65:a9:96:90:48:70:e5:39:
34:f9:bc:9e:cb:61:fc:12:45:e8:19:9b:e4:a2:00:
4a:d0:f7:e4:6f:cc:35:69:58:ab:ee:04:13:43:8c:
bc:47:83:7d:0d:3a:5e:f8:28:f2:05:18:ec:b8:9c:
f6:27:e8:1a:50:b4:66:7c:3b:ba:e4:9e:37:4e:33:
c6:be:e1:91:f1:b9:a8:5b:4f:23:f8:b4:01:25:74:
a1:17:c6:c9:93:37:90:cb:fe:0e:28:41:bc:70:45:
9e:5f:b9:28:11:9e:27:ca:15:2c:10:86:85:53:76:
48:da:b2:89:3a:01:30:bb:c1:52:0b:9f:45:b6:06:
28:e0:fb:b2:f1:13:c6:f9:ec:85:27:e6:25:e5:f5:
6e:9f:62:50:ca:cb:31:a1:df:05:46:41:c3:66:48:
81:27:09:58:d2:07:b1:f3:22:8b:0d:b2:35:b9:89:
7d:49:b6:95:58:fe:a0:e8:c1:3d:b9:7b:15:21:32:
98:88:22:23:73:d3:cd:c0:6e:01:47:f9:0e:3d:b6:
d7:4d:8d:2d:03:c1:cc:70:7a:73:ca:f0:03:1d:fc:
d7:ca:bc:1c:a5:1b:24:f0:b2:db:93:31:85:64:50:
1e:28:aa:8a:99:9f:54:41:b9:1e:8f:61:83:5b:5d:
a5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:7E:FF:68:74:E6:0C:86:4E:28:AA:3F:81:3E:4C:8A:16:1F:4F:2A
X509v3 Authority Key Identifier:
keyid:96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a3330303a3a2f34332d3433203d3e203631383838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:e60:300::/43
Signature Algorithm: sha256WithRSAEncryption
20:08:c7:f5:75:3b:4b:2a:2c:ef:d9:2e:c8:c9:5d:63:bb:87:
09:33:3b:b1:d5:69:64:cd:59:a1:26:18:f4:53:24:a6:d6:37:
11:92:10:81:98:48:cf:bc:ac:1c:52:bd:14:0b:c2:8c:9e:ea:
46:2f:69:24:94:00:8c:ef:a5:db:44:01:f7:c0:87:1d:93:20:
ad:b0:d9:f2:26:33:4a:83:54:47:ed:d8:f8:6c:76:49:0e:bc:
c5:f6:81:95:ba:47:2d:de:f1:22:82:34:63:e2:fc:9c:15:7c:
71:e7:70:71:3f:c3:d2:81:c9:be:6d:1e:d0:5b:02:7b:6c:1a:
a2:93:67:76:74:a7:0b:27:de:8a:d2:48:a8:54:31:b4:9e:a6:
55:b2:f7:53:b7:e6:3f:5f:62:3e:4a:cb:e6:60:e2:0a:0e:bf:
1e:0a:3c:9f:f7:27:65:1b:75:3c:53:5f:38:b7:24:70:54:18:
14:09:01:dd:4c:4a:a0:80:49:25:d4:94:1e:23:cc:ad:a5:11:
85:c8:70:3c:a3:1e:89:37:f7:88:d9:93:1d:be:f3:13:84:bb:
25:28:06:5c:6f:7b:3c:9c:58:d9:c9:b5:78:a8:d2:ac:93:8d:
89:e3:c6:8e:89:8a:af:3e:09:6f:5d:83:b2:07:68:40:7f:89:
4b:47:82:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:24:18 2025 by rpki-client