
$ rpki-client -vvf rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a666163653a3a2f34382d3438203d3e203631383838.roa
File: 323830343a6536303a666163653a3a2f34382d3438203d3e203631383838.roa (raw, json)
Hash identifier: WY5nF08qUjm5JHBVzyl42O8yDd1O6CGGpdTHkgh+V/M=
Subject key identifier: CD:1D:65:6E:1B:F8:FE:4C:68:3A:01:87:69:C4:AE:20:C5:CA:B6:4B
Certificate issuer: /CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
Certificate serial: 68BBEE863F21E455BED20B718A9B1465B648F462
Authority key identifier: 96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
Subject info access: rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a666163653a3a2f34382d3438203d3e203631383838.roa
Signing time: Wed 04 Feb 2026 20:00:01 +0000
ROA not before: Wed 04 Feb 2026 19:55:01 +0000
ROA not after: Wed 03 Feb 2027 20:00:01 +0000
asID: 61888
IP address blocks: 2804:e60:face::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl
rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 20 Feb 2026 09:54:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:bb:ee:86:3f:21:e4:55:be:d2:0b:71:8a:9b:14:65:b6:48:f4:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
Validity
Not Before: Feb 4 19:55:01 2026 GMT
Not After : Feb 3 20:00:01 2027 GMT
Subject: CN=CD1D656E1BF8FE4C683A018769C4AE20C5CAB64B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9c:25:9e:4c:64:2e:29:d0:cb:f6:39:06:3e:
fe:7c:b7:19:a1:bb:43:c2:9b:da:11:f2:91:8f:d7:
9d:25:04:b4:74:6a:00:d2:42:26:98:df:0b:86:7a:
6a:b0:b3:76:e2:66:88:32:27:12:26:38:8a:a1:6d:
77:8b:67:42:83:8d:ac:55:f9:c8:96:86:08:3f:13:
0c:a8:7c:52:f0:4f:76:f3:c5:30:85:a2:61:82:ca:
7e:1e:08:a8:1b:c4:4e:42:19:f9:15:f6:26:22:af:
22:58:59:35:39:14:c2:b1:dc:77:67:88:58:49:cc:
1c:fd:62:57:d1:b7:78:5f:87:da:9b:e0:1c:0e:ab:
06:d5:6f:fa:50:38:f4:62:2b:ea:95:e3:34:08:18:
61:41:17:af:d6:7d:4e:4f:00:39:cb:e5:7d:1f:19:
b5:51:0c:f3:1e:89:fc:85:63:62:2e:d2:22:5e:ab:
ba:bd:ff:53:fc:84:44:cf:74:20:57:f7:46:cf:2d:
a3:f5:ef:9f:47:a3:94:28:da:46:69:81:cc:48:f5:
55:a6:71:93:76:9a:8b:c9:46:cf:92:9f:d4:a5:ae:
7d:74:b5:4b:b6:de:f9:12:63:86:0a:dc:a7:20:80:
ad:a2:46:6e:a9:bd:4c:06:06:d2:7e:00:59:e8:5a:
99:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:1D:65:6E:1B:F8:FE:4C:68:3A:01:87:69:C4:AE:20:C5:CA:B6:4B
X509v3 Authority Key Identifier:
keyid:96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a666163653a3a2f34382d3438203d3e203631383838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:e60:face::/48
Signature Algorithm: sha256WithRSAEncryption
97:fe:c1:ef:93:6a:4a:99:ca:e1:62:a8:8a:f3:47:7a:db:cf:
34:9b:02:8d:f2:41:59:f8:5f:13:b7:ef:42:06:86:b4:66:93:
5e:0a:57:4a:ad:ee:cc:68:26:48:ae:05:62:30:2d:a6:a6:c6:
5c:0c:5e:2c:96:50:ee:1f:66:9e:48:b5:a2:50:bc:4a:cf:0c:
dd:ab:35:e1:cf:62:a8:f9:6a:b3:28:35:0c:43:dd:05:74:1c:
3c:a5:9e:4b:f3:e8:e5:bb:a0:ab:3c:62:45:d2:13:42:4a:0b:
7e:57:11:10:06:21:47:ce:a4:77:a1:93:3a:4f:4a:56:8d:09:
9a:d5:30:a5:c6:47:38:a7:f5:67:00:da:f6:76:4c:52:89:fe:
ad:95:89:ee:b6:fe:71:fb:31:54:37:d5:1a:21:62:09:1f:7c:
fc:d8:d0:8d:af:d7:f2:69:63:ce:be:ba:7a:02:85:dd:8c:0c:
96:f2:b9:df:a0:27:36:af:2e:75:3a:d1:9a:bf:a1:73:8f:a5:
5b:c9:24:a8:3d:12:45:0a:74:65:d4:26:a2:9b:44:45:6e:f1:
46:3a:a6:72:75:ef:e3:f1:25:72:0a:7e:ae:54:42:37:2d:83:
58:cd:14:33:11:9a:2f:dd:ad:cb:81:b5:3b:c7:c9:fb:3f:dd:
2c:42:82:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:02:26 2026 by rpki-client