
$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3134332e3230382e3139322e302f32322d3232203d3e20323632373239.roa
File: 3134332e3230382e3139322e302f32322d3232203d3e20323632373239.roa (raw, json)
Hash identifier: Qlj8UKH/h2/0c7K+tv+akm1E65FaOZLYN64n3Mn7ink=
Subject key identifier: B0:DB:30:80:68:12:D5:71:E7:86:21:D5:CB:B9:75:A9:E8:BA:86:3F
Certificate issuer: /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial: 3D66FB865BD14632EAAF255455F9060C9BB9722F
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3134332e3230382e3139322e302f32322d3232203d3e20323632373239.roa
Signing time: Mon 16 Jun 2025 14:10:45 +0000
ROA not before: Mon 16 Jun 2025 14:05:45 +0000
ROA not after: Mon 15 Jun 2026 14:10:45 +0000
asID: 262729
IP address blocks: 143.208.192.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 21 Oct 2025 16:07:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:66:fb:86:5b:d1:46:32:ea:af:25:54:55:f9:06:0c:9b:b9:72:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Validity
Not Before: Jun 16 14:05:45 2025 GMT
Not After : Jun 15 14:10:45 2026 GMT
Subject: CN=B0DB30806812D571E78621D5CBB975A9E8BA863F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:32:78:60:9e:7b:92:b7:f5:63:4b:0f:14:07:
94:57:a4:da:d4:f4:ff:fb:cc:a4:29:eb:81:9e:c1:
20:e1:06:bb:47:18:63:ba:92:2f:76:9b:43:35:ba:
c3:10:bb:54:46:43:4d:83:31:92:43:1c:e1:f3:73:
a0:13:2f:91:47:23:23:4d:1f:f7:39:2a:f0:3f:26:
24:a3:11:1d:48:e6:cb:e7:7b:56:e0:66:ce:85:7d:
35:b5:d8:30:15:e3:5a:e5:2c:45:d5:0c:43:f4:f4:
77:a5:70:31:02:30:ba:1f:86:4f:23:91:74:60:13:
e0:07:70:95:3f:8a:d9:b7:06:4c:37:35:1f:11:35:
95:dd:bc:eb:22:ae:99:93:80:03:5b:e1:3f:5b:e1:
0b:6b:7f:b0:bb:41:8a:b0:1b:71:14:fc:35:d1:b6:
a4:4b:fb:93:bf:7c:a2:44:b3:c7:6c:67:68:f5:8f:
12:8f:d2:4a:66:2f:74:87:10:87:31:fa:1a:16:f2:
5b:2c:d2:3d:dd:0c:84:27:aa:04:d4:d2:4a:b4:ba:
5f:00:da:ff:39:b1:3a:31:a3:ad:c0:1d:d4:10:d4:
c6:54:68:58:83:83:b1:d3:b8:bd:d6:dd:d9:6d:9e:
e5:bf:59:c6:d2:4e:b5:2d:75:f0:dc:d0:ba:d0:cf:
d0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:DB:30:80:68:12:D5:71:E7:86:21:D5:CB:B9:75:A9:E8:BA:86:3F
X509v3 Authority Key Identifier:
keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3134332e3230382e3139322e302f32322d3232203d3e20323632373239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.208.192.0/22
Signature Algorithm: sha256WithRSAEncryption
69:83:85:f0:b3:da:b8:ad:3b:a7:e9:e8:c8:a1:ef:e2:c3:dd:
eb:6d:39:cf:cf:c8:c7:c2:d0:8a:97:74:0e:6e:d0:c1:88:1e:
45:2b:9d:6e:b1:3e:6b:1b:a4:d4:0e:ea:c2:df:80:72:de:5a:
b4:14:a2:a8:2e:0c:65:e5:e3:cf:5e:48:11:bd:8d:22:33:ca:
5e:d6:42:9d:12:dc:db:41:82:77:c3:0c:b3:98:b9:b1:1f:fd:
87:7c:ae:31:a8:bb:d6:0b:38:7b:35:ca:52:d1:ae:0f:97:ea:
74:01:4f:38:cf:cd:c6:c7:bd:74:2a:3b:16:f2:e3:d9:a4:7f:
c8:6d:3c:af:e3:a7:cd:88:a2:ee:52:e2:0b:c3:26:6a:9a:db:
35:1d:b5:0a:0e:8d:7e:71:e4:73:97:27:65:49:30:90:52:75:
53:bd:8e:53:97:56:71:0b:31:f2:09:7b:9b:41:7f:bc:8c:ce:
d8:df:e3:6f:0e:94:41:f7:65:cb:64:e9:c8:ef:b1:f4:6b:50:
bb:5b:9d:40:73:05:dc:c4:cf:f0:ec:84:3a:d0:ec:d0:9c:86:
cb:10:fe:ad:84:15:78:74:73:10:98:c6:85:2e:45:7e:68:f2:
90:9a:00:69:1f:d6:c9:a2:a6:a4:f9:14:55:74:3d:87:11:5e:
81:dc:a2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:12:10 2025 by rpki-client