
$ rpki-client -vvf rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/323830343a64383a3a2f33322d3332203d3e203232313238.roa
File: 323830343a64383a3a2f33322d3332203d3e203232313238.roa (raw, json)
Hash identifier: F+q1/mLZAGw70IdETkKbTkI+VzDOSfHZ6YIJZRveaAA=
Subject key identifier: 5F:BA:94:56:E7:2B:BA:9B:DC:F5:3E:61:EC:C3:B4:25:4A:63:CD:1C
Certificate issuer: /CN=14BE2DC7DA29D6A3E51E817626C1D961B3BA6787
Certificate serial: 52C6CF828D73A36B2A66E44A103958ED347B0717
Authority key identifier: 14:BE:2D:C7:DA:29:D6:A3:E5:1E:81:76:26:C1:D9:61:B3:BA:67:87
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14BE2DC7DA29D6A3E51E817626C1D961B3BA6787.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/323830343a64383a3a2f33322d3332203d3e203232313238.roa
Signing time: Tue 07 Apr 2026 17:03:13 +0000
ROA not before: Tue 07 Apr 2026 16:58:13 +0000
ROA not after: Tue 06 Apr 2027 17:03:13 +0000
asID: 22128
IP address blocks: 2804:d8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/14BE2DC7DA29D6A3E51E817626C1D961B3BA6787.crl
rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/14BE2DC7DA29D6A3E51E817626C1D961B3BA6787.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14BE2DC7DA29D6A3E51E817626C1D961B3BA6787.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 09 Apr 2026 15:22:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:c6:cf:82:8d:73:a3:6b:2a:66:e4:4a:10:39:58:ed:34:7b:07:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14BE2DC7DA29D6A3E51E817626C1D961B3BA6787
Validity
Not Before: Apr 7 16:58:13 2026 GMT
Not After : Apr 6 17:03:13 2027 GMT
Subject: CN=5FBA9456E72BBA9BDCF53E61ECC3B4254A63CD1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:57:42:d5:b5:5c:1f:08:c3:7c:53:c0:1c:93:
f8:e0:29:12:e3:99:cd:35:78:88:33:ad:e4:bf:c4:
c3:ee:a0:f3:9d:35:b3:b9:4d:0b:3c:50:94:82:aa:
ff:a6:af:66:f5:3a:8f:6b:43:fc:d3:d2:7e:15:68:
fc:13:3b:d0:76:d9:5e:51:a5:2d:65:7f:50:e4:ce:
64:81:cf:aa:d1:89:0c:a7:37:7f:76:ac:0f:05:88:
18:6f:b6:6b:24:67:2c:87:77:7c:8b:a5:77:7c:07:
fa:02:3d:5a:84:d4:4c:09:d0:89:79:30:5a:2c:57:
53:65:7c:e2:81:dc:08:7c:a7:94:1c:ed:93:46:3f:
99:c9:3a:e9:53:b9:da:e9:9e:44:09:f0:54:e7:67:
77:01:3c:d1:80:c1:62:50:1b:2b:2d:84:35:ae:76:
e5:97:07:b8:c3:c3:a3:fc:e5:12:ea:89:99:98:b2:
5b:48:30:cd:bb:48:7f:1e:74:73:03:d3:c4:cb:67:
30:75:b3:3e:0f:a0:05:3c:a1:79:8f:86:c4:89:aa:
34:91:b4:b1:ab:8f:13:e3:3d:d7:86:51:8e:65:43:
23:97:60:b8:25:fd:ba:72:bd:fe:05:8f:38:29:7d:
97:2e:f4:bb:f5:a8:9c:d7:a1:37:d1:72:94:b1:d1:
a7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:BA:94:56:E7:2B:BA:9B:DC:F5:3E:61:EC:C3:B4:25:4A:63:CD:1C
X509v3 Authority Key Identifier:
keyid:14:BE:2D:C7:DA:29:D6:A3:E5:1E:81:76:26:C1:D9:61:B3:BA:67:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/14BE2DC7DA29D6A3E51E817626C1D961B3BA6787.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14BE2DC7DA29D6A3E51E817626C1D961B3BA6787.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/323830343a64383a3a2f33322d3332203d3e203232313238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:d8::/32
Signature Algorithm: sha256WithRSAEncryption
37:b0:22:43:ee:3e:99:74:da:f5:6e:43:35:e2:72:0a:24:61:
3c:e0:30:4f:75:ea:c1:23:6f:70:a4:82:18:c1:77:c3:d9:93:
5f:01:63:1d:71:bc:37:12:4c:21:8e:66:2f:87:b0:f6:33:65:
c1:35:83:f3:d1:ec:44:fc:eb:ac:e4:4f:5e:ab:f7:9f:6a:2e:
1a:7b:8e:0f:a9:e7:0c:63:65:13:a3:7c:47:22:96:1d:bb:a6:
37:89:ea:1b:02:81:4a:6f:b9:5d:09:c6:c8:9e:2b:bc:df:f3:
79:9e:e4:60:90:99:bc:c3:b2:bc:ac:b0:07:d5:bc:2d:0b:94:
f1:f6:e9:3f:f2:3f:b0:cb:d1:b2:f9:e2:68:63:f5:29:69:1f:
8f:5c:4a:0c:8f:90:10:2a:ad:c7:94:0f:4b:a6:b7:8b:d3:49:
65:39:e6:8b:86:ae:ea:8b:8a:b3:d3:37:37:dc:6c:81:f0:43:
68:ed:59:bf:16:ba:0b:fb:90:43:58:99:48:df:0e:18:79:0c:
1f:0f:09:1f:3a:db:54:4b:b7:ae:61:60:ef:81:55:3c:a0:9d:
86:35:00:f0:c8:4e:70:0c:90:2d:96:51:38:e7:40:d1:e9:06:
77:f6:a5:af:c8:fa:b5:8c:34:19:90:de:55:32:6d:86:71:3c:
b2:92:bd:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 23:05:26 2026 by rpki-client