
$ rpki-client -vvf rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a3a2f33322d3333203d3e203631383838.roa
File: 323830343a6536303a3a2f33322d3333203d3e203631383838.roa (raw, json)
Hash identifier: KrjQcukvjlJJOW0lFp0dgvPZ2CZpP7wMgw3Pvl1eV/g=
Subject key identifier: 43:3F:3A:49:ED:FE:FF:60:32:6D:EF:A9:39:66:29:3A:89:71:60:49
Certificate issuer: /CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
Certificate serial: 2976A2C6C4430D0DECD7A520469D85B18E5FE327
Authority key identifier: 96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
Subject info access: rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a3a2f33322d3333203d3e203631383838.roa
Signing time: Wed 04 Feb 2026 20:00:03 +0000
ROA not before: Wed 04 Feb 2026 19:55:03 +0000
ROA not after: Wed 03 Feb 2027 20:00:03 +0000
asID: 61888
IP address blocks: 2804:e60::/32 maxlen: 33
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl
rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 20 Feb 2026 09:54:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:76:a2:c6:c4:43:0d:0d:ec:d7:a5:20:46:9d:85:b1:8e:5f:e3:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
Validity
Not Before: Feb 4 19:55:03 2026 GMT
Not After : Feb 3 20:00:03 2027 GMT
Subject: CN=433F3A49EDFEFF60326DEFA93966293A89716049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:98:dc:f5:bd:b0:ab:c7:fa:87:1c:26:03:cf:
c4:25:7b:40:5f:0f:da:24:50:f1:ab:cd:06:9f:9d:
d3:b0:7a:f1:aa:39:e2:f6:30:f9:a9:cd:e0:f7:5e:
26:c8:6d:55:4d:74:cb:4f:f5:ab:8a:85:fb:af:02:
15:c2:d9:3c:65:c3:a6:ca:5c:c9:21:0d:d9:dc:47:
37:35:a9:b5:be:42:35:a3:41:ff:83:28:25:5f:2e:
db:5c:92:4a:42:7b:fa:dd:4a:43:56:cb:76:5f:06:
4a:89:ee:72:af:65:2d:4f:12:c5:10:c1:56:69:ba:
dc:39:41:d5:00:92:b8:65:92:83:32:34:a6:3e:4c:
b2:0f:5c:8a:4e:8d:1a:e1:4c:85:02:b7:ec:11:93:
df:23:d7:88:c9:67:2b:1b:13:82:8d:e3:f2:91:7a:
ad:77:b2:24:d2:47:5c:c9:39:99:25:57:2d:67:8e:
a5:82:17:a8:0b:08:0a:d5:e9:55:e2:93:af:9e:89:
eb:02:71:3b:45:cc:b6:0f:7a:0f:5a:ad:66:15:3c:
11:2c:d7:da:6c:c6:7c:0b:08:e8:17:2e:0e:3e:73:
ed:a4:0e:e2:0e:78:17:44:a2:dc:92:44:bd:7a:26:
6e:36:c8:2b:6b:f1:14:3b:b8:b9:6d:f5:71:71:0c:
62:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:3F:3A:49:ED:FE:FF:60:32:6D:EF:A9:39:66:29:3A:89:71:60:49
X509v3 Authority Key Identifier:
keyid:96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a3a2f33322d3333203d3e203631383838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:e60::/32
Signature Algorithm: sha256WithRSAEncryption
83:66:11:65:02:94:50:c3:76:c4:a9:83:89:f5:43:6a:55:55:
4d:33:8c:67:72:95:3e:c4:38:73:c2:19:1d:00:e2:57:f2:bd:
16:39:7d:0d:9f:34:55:f7:3d:6e:2b:4f:83:c1:5f:3c:e7:8f:
4b:81:36:2c:53:5c:c9:cd:98:55:01:95:ad:ab:16:32:5f:a7:
05:ec:8d:4a:ec:27:15:ba:71:7a:b1:50:8c:99:b1:ac:72:27:
b9:8e:bc:0a:a7:87:87:cf:cb:e2:0c:70:7f:ca:1c:65:08:f9:
7a:52:af:be:cd:ec:b8:46:89:57:aa:9e:0c:69:ff:3d:51:63:
ab:9a:c0:c8:ca:57:9b:37:9d:53:3b:df:31:38:10:37:71:4e:
5b:5b:7b:ec:85:10:50:42:72:31:f1:ac:a2:3e:75:e7:dc:d7:
96:1f:72:39:e5:15:7d:89:c7:a8:5a:21:39:d5:0b:f4:ef:1b:
58:7e:86:40:2a:5f:38:cf:16:0e:1f:44:cf:ba:dc:99:80:74:
51:d4:dd:0b:06:78:33:48:f7:e6:d6:03:0a:8a:40:65:53:f2:
1e:7e:f8:90:37:5e:00:b2:d5:9d:5e:4b:f7:94:f9:c9:77:b9:
91:95:3e:01:42:c3:83:5d:df:a2:c6:5a:33:58:dd:da:7f:5e:
04:a7:ea:a5
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUKXaixsRDDQ3s16UgRp2FsY5f4ycwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTYxQUU1RDQ3OUIyNTM0MDIyNjgyQjY0RDdGMEVGRTZB
QTExRjc5MTAeFw0yNjAyMDQxOTU1MDNaFw0yNzAyMDMyMDAwMDNaMDMxMTAvBgNV
BAMTKDQzM0YzQTQ5RURGRUZGNjAzMjZERUZBOTM5NjYyOTNBODk3MTYwNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChmNz1vbCrx/qHHCYDz8Qle0Bf
D9okUPGrzQafndOwevGqOeL2MPmpzeD3XibIbVVNdMtP9auKhfuvAhXC2Txlw6bK
XMkhDdncRzc1qbW+QjWjQf+DKCVfLttckkpCe/rdSkNWy3ZfBkqJ7nKvZS1PEsUQ
wVZputw5QdUAkrhlkoMyNKY+TLIPXIpOjRrhTIUCt+wRk98j14jJZysbE4KN4/KR
eq13siTSR1zJOZklVy1njqWCF6gLCArV6VXik6+eiesCcTtFzLYPeg9arWYVPBEs
19psxnwLCOgXLg4+c+2kDuIOeBdEotySRL16Jm42yCtr8RQ7uLlt9XFxDGJ/AgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUQz86Se3+/2Aybe+pOWYpOolxYEkwHwYDVR0j
BBgwFoAUlhrl1HmyU0AiaCtk1/Dv5qoR95EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzRoUzdCOHVHWXNEVk42eVVvVDVMckVpNWVFaTFuVFh6SDNLNW1RS1JC
QmUvMS85NjFBRTVENDc5QjI1MzQwMjI2ODJCNjREN0YwRUZFNkFBMTFGNzkxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk2MUFFNUQ0NzlCMjUzNDAy
MjY4MkI2NEQ3RjBFRkU2QUExMUY3OTEuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzM0aFM3Qjh1R1lzRFZONnlVb1Q1THJFaTVlRWkxblRYekgzSzVtUUtSQkJlLzEv
MzIzODMwMzQzYTY1MzYzMDNhM2EyZjMzMzIyZDMzMzMyMDNkM2UyMDM2MzEzODM4
Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBA5gMA0GCSqGSIb3DQEBCwUAA4IBAQCDZhFlApRQw3bE
qYOJ9UNqVVVNM4xncpU+xDhzwhkdAOJX8r0WOX0NnzRV9z1uK0+DwV88549LgTYs
U1zJzZhVAZWtqxYyX6cF7I1K7CcVunF6sVCMmbGscie5jrwKp4eHz8viDHB/yhxl
CPl6Uq++zey4RolXqp4Maf89UWOrmsDIylebN51TO98xOBA3cU5bW3vshRBQQnIx
8ayiPnXn3NeWH3I55RV9iceoWiE51Qv07xtYfoZAKl84zxYOH0TPutyZgHRR1N0L
BngzSPfm1gMKikBlU/IefviQN14AstWdXkv3lPnJd7mRlT4BQsODXd+ixlozWN3a
f14Ep+ql
-----END CERTIFICATE-----
Generated at Thu Feb 19 19:02:27 2026 by rpki-client