
$ rpki-client -vvf rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/323830343a356466303a383030303a3a2f33342d3334203d3e20323639303032.roa
File: 323830343a356466303a383030303a3a2f33342d3334203d3e20323639303032.roa (raw, json)
Hash identifier: TUfye7NnYXOFW4psfj0Wi5PE7Y/oULa/zvGn2IE5i6Q=
Subject key identifier: 2B:6E:4D:9A:1C:83:35:69:C1:75:C6:A4:DB:F2:C7:64:96:CD:0D:A1
Certificate issuer: /CN=89421C5EE6A6B6E133F5868D831254A94BCD35D7
Certificate serial: 4FEED424D0E3558EE14E77E810015FFC04D1D5A4
Authority key identifier: 89:42:1C:5E:E6:A6:B6:E1:33:F5:86:8D:83:12:54:A9:4B:CD:35:D7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89421C5EE6A6B6E133F5868D831254A94BCD35D7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/323830343a356466303a383030303a3a2f33342d3334203d3e20323639303032.roa
Signing time: Mon 06 Apr 2026 13:38:54 +0000
ROA not before: Mon 06 Apr 2026 13:33:54 +0000
ROA not after: Mon 05 Apr 2027 13:38:54 +0000
asID: 269002
IP address blocks: 2804:5df0:8000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/89421C5EE6A6B6E133F5868D831254A94BCD35D7.crl
rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/89421C5EE6A6B6E133F5868D831254A94BCD35D7.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89421C5EE6A6B6E133F5868D831254A94BCD35D7.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 09 Apr 2026 04:10:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:ee:d4:24:d0:e3:55:8e:e1:4e:77:e8:10:01:5f:fc:04:d1:d5:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89421C5EE6A6B6E133F5868D831254A94BCD35D7
Validity
Not Before: Apr 6 13:33:54 2026 GMT
Not After : Apr 5 13:38:54 2027 GMT
Subject: CN=2B6E4D9A1C833569C175C6A4DBF2C76496CD0DA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a1:0f:45:c9:44:df:a5:e7:ec:d0:cd:09:db:
08:6e:14:a2:b0:be:c4:ee:2c:01:21:15:00:c8:d7:
d1:fe:b4:63:ed:bc:30:f0:e1:fa:64:c1:8f:75:e4:
78:6e:79:d2:86:87:4a:9d:8c:14:f1:36:2b:70:00:
d0:c9:e2:3e:d4:5b:a0:37:cc:c1:72:9a:2b:58:57:
4f:e4:72:9a:9c:be:27:d8:35:c0:8c:2e:d5:0c:21:
ff:b0:65:c2:75:2a:89:0c:86:8d:63:43:79:61:82:
be:a0:c2:b2:62:13:6c:8c:40:53:f0:cb:8e:19:38:
92:86:91:07:e1:b0:57:de:38:be:7d:d7:ef:64:33:
6a:0a:db:61:e7:77:8a:d7:19:4b:7f:41:04:d0:47:
8a:22:cd:5c:e8:6a:21:07:47:ae:8c:27:74:f4:55:
47:4b:ec:1a:0a:c4:cb:b9:46:ba:a8:10:ac:b4:ce:
f7:e7:07:1d:0b:2b:c9:1e:a3:21:e2:c1:9c:5c:97:
ac:e3:80:80:47:6e:6d:bd:ba:ce:ff:83:c8:d9:b2:
1b:c6:34:00:51:29:e6:6d:4d:16:aa:32:03:b3:76:
66:bc:1c:51:98:aa:91:fb:7e:24:a8:ed:4a:36:b6:
f8:fa:1e:4e:be:0e:a2:70:e5:46:e6:0c:18:51:8a:
4a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:6E:4D:9A:1C:83:35:69:C1:75:C6:A4:DB:F2:C7:64:96:CD:0D:A1
X509v3 Authority Key Identifier:
keyid:89:42:1C:5E:E6:A6:B6:E1:33:F5:86:8D:83:12:54:A9:4B:CD:35:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/89421C5EE6A6B6E133F5868D831254A94BCD35D7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89421C5EE6A6B6E133F5868D831254A94BCD35D7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/323830343a356466303a383030303a3a2f33342d3334203d3e20323639303032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5df0:8000::/34
Signature Algorithm: sha256WithRSAEncryption
75:92:1f:49:cd:ea:b3:41:d8:0b:f7:86:1d:81:6d:38:5b:74:
2c:1d:df:e1:98:67:88:83:ff:de:ca:f4:10:9d:ae:e6:26:3b:
3f:8f:3a:77:16:de:fa:a7:02:a9:41:c7:5b:1c:a2:9f:19:62:
d8:1d:12:f9:af:3c:a0:26:9d:2d:0e:2f:e4:0f:c0:6b:fb:3d:
0d:1e:b3:c1:62:29:0a:23:3d:1d:29:80:bf:64:9b:39:20:a8:
87:c2:2e:e6:13:1a:d1:83:c9:e8:17:f1:32:01:32:9e:a8:c9:
b2:b3:96:1b:ec:13:5c:7f:39:64:82:5c:ed:76:89:2e:25:c3:
3a:32:9b:ce:31:8d:98:be:00:b5:4c:ed:33:c2:37:2e:d0:b1:
5e:8c:28:af:47:53:ff:9a:73:e8:61:94:6c:84:bd:3b:3e:d3:
62:bf:01:d8:b4:ea:a9:a8:c1:a7:b8:ed:c4:ee:cb:e0:3f:91:
4d:1c:34:fd:14:05:9a:db:57:87:1a:47:a3:2c:9a:71:ae:11:
1c:52:3f:ec:93:da:ea:b0:e0:0e:a5:db:39:e9:44:60:0a:5e:
df:3b:88:4a:0a:70:20:8a:31:ee:19:56:b1:13:20:f8:df:68:
86:cf:fb:b4:6c:02:f7:d3:b8:dd:1c:c7:af:2b:32:af:c6:f6:
9b:40:69:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 10:59:12 2026 by rpki-client