
$ rpki-client -vvf rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/323830343a313034343a383030303a3a2f33332d3333203d3e20323633363237.roa
File: 323830343a313034343a383030303a3a2f33332d3333203d3e20323633363237.roa (raw, json)
Hash identifier: CsBH1e7SB1knlGRtZtsxaWrNZhZOlUA2khqZDI0V/LE=
Subject key identifier: 9D:0C:C7:51:7D:5D:6F:03:32:49:2B:B7:75:2F:92:61:34:1F:A8:AA
Certificate issuer: /CN=11A01506231611C87461442475B1401AD5DE38D2
Certificate serial: 42FA17786F45110A0ADF2D1FFA0C53DBE67D1490
Authority key identifier: 11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/323830343a313034343a383030303a3a2f33332d3333203d3e20323633363237.roa
Signing time: Tue 25 Mar 2025 20:13:31 +0000
ROA not before: Tue 25 Mar 2025 20:08:31 +0000
ROA not after: Tue 24 Mar 2026 20:13:31 +0000
asID: 263627
IP address blocks: 2804:1044:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl
rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 21 Oct 2025 07:48:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:fa:17:78:6f:45:11:0a:0a:df:2d:1f:fa:0c:53:db:e6:7d:14:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11A01506231611C87461442475B1401AD5DE38D2
Validity
Not Before: Mar 25 20:08:31 2025 GMT
Not After : Mar 24 20:13:31 2026 GMT
Subject: CN=9D0CC7517D5D6F0332492BB7752F9261341FA8AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c2:71:58:f5:14:05:a4:ed:44:a8:5c:65:cc:
95:16:67:43:46:72:e9:ce:82:d5:2b:68:f4:87:07:
57:69:51:eb:f8:9c:f8:84:ec:dd:6c:ab:86:59:8c:
89:05:2d:ab:b7:2b:da:69:1b:a0:46:89:a3:a8:7e:
b7:5d:eb:1c:44:44:df:38:6c:f6:2d:18:a5:4a:41:
54:30:31:b3:96:d7:c8:23:2f:2d:1e:17:12:6d:2a:
25:10:7c:9e:63:a0:77:77:7d:11:1d:35:eb:98:62:
8b:d0:dd:5e:48:e8:37:d4:8b:ae:41:8a:c4:21:a3:
58:f8:e5:a7:41:d7:59:be:d1:e3:03:95:d5:ef:01:
a1:65:7c:0a:33:31:0f:89:e1:51:1a:74:92:d7:19:
92:74:c9:ab:12:ae:4d:dd:ab:fe:11:1b:8e:45:4f:
81:f9:c1:31:ea:91:3f:28:ad:53:af:a8:72:b0:d7:
df:58:6c:eb:b0:b9:73:48:ed:f9:58:33:54:b3:1a:
cd:68:71:7e:12:93:30:ca:dc:c5:cc:8c:f8:fd:27:
7f:54:16:d1:5e:70:aa:3b:cb:0f:4d:99:6a:fa:70:
24:73:02:35:4c:09:50:63:ad:3a:34:ab:d3:c4:31:
7e:39:5b:bc:e7:8d:fe:08:9e:95:a1:2a:87:0b:14:
49:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:0C:C7:51:7D:5D:6F:03:32:49:2B:B7:75:2F:92:61:34:1F:A8:AA
X509v3 Authority Key Identifier:
keyid:11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/323830343a313034343a383030303a3a2f33332d3333203d3e20323633363237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1044:8000::/33
Signature Algorithm: sha256WithRSAEncryption
31:1e:31:d8:1f:e0:5f:c8:1d:fe:53:8b:fe:40:ee:03:96:be:
cf:73:fe:02:87:5b:64:ed:db:df:41:6b:2e:11:56:6f:01:f9:
ac:dd:a4:d7:6f:c1:df:91:16:fc:78:ae:5a:54:b1:f8:06:24:
90:70:13:7c:b3:24:08:64:8b:a8:82:9c:ba:83:bc:11:af:bf:
75:c8:f6:10:dd:bb:c7:39:d3:b1:2c:50:ef:1a:a1:0f:d7:44:
04:6e:78:6c:47:66:03:5b:4d:3c:07:49:05:80:d1:b0:db:0a:
89:d2:50:5f:5a:c3:1f:0f:da:f3:91:36:be:7b:19:92:61:47:
18:fe:95:63:06:91:e4:3a:a7:44:37:82:cd:3e:f7:51:fa:14:
90:b3:09:d0:60:53:85:d0:7a:71:63:3e:4c:a8:c6:b0:84:19:
73:a4:a5:1a:09:f2:a5:7b:75:8d:2c:d4:e0:f8:6a:20:bf:15:
be:58:29:06:0d:9c:a7:14:71:74:7b:cd:39:3f:2d:9b:f0:4a:
fa:64:78:fb:15:fd:5b:33:0b:16:f9:e3:cf:a1:9d:e4:7b:ee:
5f:a0:63:8e:31:24:d8:6b:cd:09:62:ac:47:df:4d:c1:50:b7:
b8:7d:d2:d4:97:65:92:b1:c9:f4:60:cb:29:60:af:11:18:96:
1a:7e:da:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:44:49 2025 by rpki-client