
$ rpki-client -vvf rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/3230302e3136302e33322e302f32302d3234203d3e203232313333.roa
File: 3230302e3136302e33322e302f32302d3234203d3e203232313333.roa (raw, json)
Hash identifier: ePRPqLdmr119D6e9US4AGeHsziHti7XrOw2kC8hx0d0=
Subject key identifier: 61:0C:0D:5A:8F:50:9C:A6:39:20:AB:14:FF:DA:A8:43:D6:18:A0:C0
Certificate issuer: /CN=33B6EA309A04207739CA6004EC33B135FCE12550
Certificate serial: 3D8871C628CB4FAA52C89ECFEC91C414C128C198
Authority key identifier: 33:B6:EA:30:9A:04:20:77:39:CA:60:04:EC:33:B1:35:FC:E1:25:50
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33B6EA309A04207739CA6004EC33B135FCE12550.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/3230302e3136302e33322e302f32302d3234203d3e203232313333.roa
Signing time: Tue 01 Jul 2025 18:38:46 +0000
ROA not before: Tue 01 Jul 2025 18:33:46 +0000
ROA not after: Tue 30 Jun 2026 18:38:46 +0000
asID: 22133
IP address blocks: 200.160.32.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.crl
rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33B6EA309A04207739CA6004EC33B135FCE12550.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 21 Oct 2025 10:13:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:88:71:c6:28:cb:4f:aa:52:c8:9e:cf:ec:91:c4:14:c1:28:c1:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33B6EA309A04207739CA6004EC33B135FCE12550
Validity
Not Before: Jul 1 18:33:46 2025 GMT
Not After : Jun 30 18:38:46 2026 GMT
Subject: CN=610C0D5A8F509CA63920AB14FFDAA843D618A0C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:00:5e:c1:55:83:bd:69:c4:97:24:ee:76:ec:
1c:07:95:c5:05:7f:ce:a4:f5:8c:5d:6f:5d:18:1b:
a3:c4:af:28:9f:a9:76:00:55:f4:b5:7f:1c:14:31:
80:ce:c8:ac:56:21:f1:7b:23:68:05:a0:85:6d:5b:
32:a2:f0:0f:17:d7:ec:b3:cf:98:35:ac:32:d4:0f:
cd:fb:d8:b8:a2:a2:e0:62:99:a1:d0:d7:d7:c8:ea:
c8:9f:c7:41:f9:4a:38:7f:08:53:5a:60:31:ef:49:
94:1e:70:8e:6e:78:59:89:92:1a:df:5d:9d:79:ad:
90:a7:05:e5:fc:14:35:b4:d0:65:ed:38:4a:2b:8c:
63:bb:0f:a9:e9:2c:cb:33:08:fc:8f:50:c9:ff:77:
ef:a4:13:3a:3e:a1:fb:9b:9e:2d:69:48:4f:64:66:
85:81:58:62:8f:d2:3f:fa:2e:40:07:dd:d1:b0:25:
c8:aa:a2:63:0f:be:fb:86:5c:f8:8f:73:36:12:50:
61:03:f8:38:63:62:46:fc:4e:40:98:6e:be:97:19:
74:44:85:0d:84:46:51:14:e7:3c:0f:38:8c:e1:33:
c7:33:38:df:90:07:c4:2c:e5:66:18:8d:e3:56:2c:
e8:0f:f9:36:69:eb:b5:09:71:be:12:ae:f4:6b:e1:
1f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:0C:0D:5A:8F:50:9C:A6:39:20:AB:14:FF:DA:A8:43:D6:18:A0:C0
X509v3 Authority Key Identifier:
keyid:33:B6:EA:30:9A:04:20:77:39:CA:60:04:EC:33:B1:35:FC:E1:25:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33B6EA309A04207739CA6004EC33B135FCE12550.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/3230302e3136302e33322e302f32302d3234203d3e203232313333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.160.32.0/20
Signature Algorithm: sha256WithRSAEncryption
94:eb:91:a3:67:96:a0:f9:cb:b2:c7:d9:cf:be:d3:dd:ca:8d:
0d:f6:5a:2f:53:fd:1f:4a:7b:2d:78:19:67:4a:18:01:fe:63:
06:48:59:ad:47:6d:67:cf:c4:63:3c:d2:f1:ee:d2:66:1b:fd:
92:82:49:ab:3f:e0:92:8c:ee:2b:d2:2f:ee:9d:e5:87:14:3b:
de:e4:ed:be:9b:0f:d6:87:e1:f8:79:53:89:66:d4:49:94:ce:
57:9b:ac:0e:c7:09:ff:44:b6:63:49:29:00:e1:b7:09:54:94:
06:6d:ec:1c:47:a0:ef:54:ae:2a:7e:a9:7e:6f:1e:f7:a9:71:
41:26:96:cd:36:61:98:ea:e4:d2:0f:7d:79:b0:27:bf:f5:4e:
6a:f5:15:9e:cc:26:98:97:6a:bf:76:04:c1:0f:3e:6c:06:d5:
d6:d2:6c:4b:0b:4d:72:7a:33:15:06:d9:8c:fc:4b:2b:39:1c:
98:11:38:b6:1b:6e:32:4e:62:bd:5e:a9:90:30:c7:ee:85:e4:
1d:12:18:a3:c1:4a:c3:da:df:7b:d8:ab:29:e9:7b:18:7b:ce:
fb:11:9b:b7:23:9c:f0:73:21:7a:f4:1b:b7:b3:33:c8:29:c0:
02:44:67:e5:8a:aa:18:ce:d3:8c:c9:b7:b7:9d:b5:05:12:5b:
fd:1d:13:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:02:00 2025 by rpki-client