
$ rpki-client -vvf rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/323830343a333562633a3a2f33322d313238203d3e20323636333033.roa
File: 323830343a333562633a3a2f33322d313238203d3e20323636333033.roa (raw, json)
Hash identifier: 95H0+MJ3bRg/tMB7uggONWwtz7iHZ69hxReH2hDfwGI=
Subject key identifier: 71:FE:5F:4A:63:6D:42:B8:17:FA:5F:38:CC:51:87:5D:DE:81:27:8F
Certificate issuer: /CN=21CEE9B4AE716671BEBD32603DC5A61BCAD35898
Certificate serial: 498D741BB5EC02A20650E2D38E047C6FD6264C22
Authority key identifier: 21:CE:E9:B4:AE:71:66:71:BE:BD:32:60:3D:C5:A6:1B:CA:D3:58:98
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/323830343a333562633a3a2f33322d313238203d3e20323636333033.roa
Signing time: Sat 31 Jan 2026 21:10:53 +0000
ROA not before: Sat 31 Jan 2026 21:05:53 +0000
ROA not after: Sat 30 Jan 2027 21:10:53 +0000
asID: 266303
IP address blocks: 2804:35bc::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.crl
rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 19 Feb 2026 14:17:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:8d:74:1b:b5:ec:02:a2:06:50:e2:d3:8e:04:7c:6f:d6:26:4c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21CEE9B4AE716671BEBD32603DC5A61BCAD35898
Validity
Not Before: Jan 31 21:05:53 2026 GMT
Not After : Jan 30 21:10:53 2027 GMT
Subject: CN=71FE5F4A636D42B817FA5F38CC51875DDE81278F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:78:b5:19:a0:b9:6e:92:f0:71:ac:c3:9b:16:
bb:7f:29:9f:98:4e:5b:4b:16:ac:41:55:5a:81:49:
9d:50:49:4d:7d:f8:15:ff:d6:88:59:b2:bd:1c:0a:
aa:5d:b5:3a:34:61:7f:07:c5:07:99:5d:e8:61:cf:
9c:50:3a:21:74:2f:74:44:84:a7:ba:60:c6:a5:38:
3e:9d:b0:24:ea:d8:2d:30:38:5a:5f:63:fd:a5:83:
2a:c8:c5:1c:39:42:df:81:d7:68:52:b3:74:bd:95:
78:10:65:27:88:3d:75:34:c9:ea:41:0d:79:1c:4a:
85:1f:12:13:4d:45:e2:71:d4:0f:1d:ec:16:18:fe:
d9:c8:45:dc:ac:23:45:0b:52:94:ec:85:b5:de:c2:
e8:06:68:c0:23:2e:96:b9:c7:99:e2:85:3b:d1:1a:
fd:44:41:49:e6:e0:8e:c0:85:5b:4c:b6:de:20:76:
5b:d5:25:4b:c8:62:fc:08:db:71:92:8f:9c:ca:ee:
89:e7:8b:3e:b4:17:57:33:e8:59:50:7f:d1:0e:4b:
f6:85:cc:1e:94:ca:6d:71:68:37:fb:b3:36:a2:cb:
83:b2:8b:f3:15:ae:bb:b1:42:99:26:22:bd:76:e8:
05:2b:f9:2e:14:8e:03:62:e8:aa:d0:49:1b:7b:02:
76:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FE:5F:4A:63:6D:42:B8:17:FA:5F:38:CC:51:87:5D:DE:81:27:8F
X509v3 Authority Key Identifier:
keyid:21:CE:E9:B4:AE:71:66:71:BE:BD:32:60:3D:C5:A6:1B:CA:D3:58:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/323830343a333562633a3a2f33322d313238203d3e20323636333033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:35bc::/32
Signature Algorithm: sha256WithRSAEncryption
be:f7:73:e1:58:4e:81:2a:ea:d0:42:2f:0f:c8:73:d6:c0:98:
6d:74:2a:84:e3:d3:e9:64:20:fc:bd:27:eb:39:3d:b3:e6:57:
7d:d5:31:e5:8c:40:71:b2:77:10:23:33:f4:e7:9c:42:cd:43:
2a:1f:9a:b5:c2:fe:13:22:32:34:e0:e5:a0:15:4f:03:dd:cc:
8b:50:37:ec:39:44:b7:08:cd:76:a3:3c:a0:69:89:1e:eb:82:
97:40:7d:e4:b9:45:b9:3c:b8:8d:17:99:d2:6b:83:a4:a7:fc:
f2:bb:d1:f9:56:95:a7:c4:f1:f7:73:e0:5a:ef:c0:23:95:e7:
91:6c:93:1e:2c:1a:5f:99:27:6f:1c:d1:ab:8d:0e:e6:a4:4d:
e4:33:42:a4:39:aa:e3:75:35:b0:de:04:ea:e6:16:8f:b8:55:
7a:e1:2b:c8:a3:05:42:8f:71:22:f0:14:10:ff:fa:b2:03:f1:
e6:5d:76:d6:ec:47:08:a2:62:57:79:09:a7:92:c5:a3:52:eb:
11:84:97:8e:db:6c:88:e1:b8:46:72:3e:0b:83:8c:b9:7c:2c:
47:11:1e:3d:6f:5a:cd:fe:e7:33:b1:e0:d9:61:92:d8:cf:3e:
c8:68:fd:cf:96:2e:38:c0:48:f5:c8:1b:39:d0:da:53:01:ce:
f6:fc:7a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 05:50:22 2026 by rpki-client