
$ rpki-client -vvf rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/323830343a356466303a633030303a3a2f33342d3334203d3e20323639303032.roa
File: 323830343a356466303a633030303a3a2f33342d3334203d3e20323639303032.roa (raw, json)
Hash identifier: RX4TevmQ/7mdDL+8Dkjxl++hZNY4kGYNYwQx4sEbclQ=
Subject key identifier: 09:98:DE:2B:F2:57:69:4E:AC:41:36:D0:C1:4D:72:A2:B9:3B:A6:F1
Certificate issuer: /CN=89421C5EE6A6B6E133F5868D831254A94BCD35D7
Certificate serial: 48C0BC23125F205FEC15DC8CF055EB1E7F07F098
Authority key identifier: 89:42:1C:5E:E6:A6:B6:E1:33:F5:86:8D:83:12:54:A9:4B:CD:35:D7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89421C5EE6A6B6E133F5868D831254A94BCD35D7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/323830343a356466303a633030303a3a2f33342d3334203d3e20323639303032.roa
Signing time: Mon 06 Apr 2026 13:38:54 +0000
ROA not before: Mon 06 Apr 2026 13:33:54 +0000
ROA not after: Mon 05 Apr 2027 13:38:54 +0000
asID: 269002
IP address blocks: 2804:5df0:c000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/89421C5EE6A6B6E133F5868D831254A94BCD35D7.crl
rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/89421C5EE6A6B6E133F5868D831254A94BCD35D7.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89421C5EE6A6B6E133F5868D831254A94BCD35D7.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 09 Apr 2026 04:10:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:c0:bc:23:12:5f:20:5f:ec:15:dc:8c:f0:55:eb:1e:7f:07:f0:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89421C5EE6A6B6E133F5868D831254A94BCD35D7
Validity
Not Before: Apr 6 13:33:54 2026 GMT
Not After : Apr 5 13:38:54 2027 GMT
Subject: CN=0998DE2BF257694EAC4136D0C14D72A2B93BA6F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:47:1e:06:ff:a8:b8:38:d8:f3:33:b0:94:a7:
28:4a:cd:c2:a7:91:29:79:cd:d5:51:ec:af:64:b1:
ed:4b:12:1c:78:d2:5e:06:df:1d:ab:d0:0f:0a:88:
2a:b9:33:5a:3e:a5:6d:99:54:0b:c5:1c:6a:77:ac:
20:93:3f:cf:b5:8d:32:d6:bd:3a:3f:61:7e:5e:62:
09:36:65:93:9a:23:78:9a:31:d0:95:79:ec:46:32:
fc:16:85:c7:10:10:20:0a:5f:15:7e:91:4a:5f:c2:
a2:97:81:b3:0b:c2:6d:ce:14:94:9c:1c:1d:72:5c:
f7:26:49:ab:f3:16:71:3a:45:39:d6:18:0b:81:f1:
0c:1a:46:0c:25:6c:5f:37:b1:63:ba:b8:ed:b6:bf:
54:21:ff:a0:92:ba:87:64:5e:c3:b0:5b:1e:16:b9:
bc:55:fb:05:f7:02:db:15:95:1d:d2:c8:e4:69:fe:
93:0b:5a:e3:66:19:42:8d:b0:79:93:c9:55:a1:4b:
54:8f:31:9d:05:b2:c3:23:46:0f:14:91:36:e7:d3:
39:b1:99:83:90:a5:04:af:f4:9d:95:43:5f:40:73:
70:43:84:03:36:40:d7:1b:d7:97:79:52:ae:7f:70:
a5:d2:4b:ee:33:f2:b1:5e:47:42:a4:c6:c1:04:f5:
ec:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:98:DE:2B:F2:57:69:4E:AC:41:36:D0:C1:4D:72:A2:B9:3B:A6:F1
X509v3 Authority Key Identifier:
keyid:89:42:1C:5E:E6:A6:B6:E1:33:F5:86:8D:83:12:54:A9:4B:CD:35:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/89421C5EE6A6B6E133F5868D831254A94BCD35D7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89421C5EE6A6B6E133F5868D831254A94BCD35D7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/323830343a356466303a633030303a3a2f33342d3334203d3e20323639303032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5df0:c000::/34
Signature Algorithm: sha256WithRSAEncryption
42:65:e6:b9:36:74:5b:ca:b7:d7:f0:cc:66:7b:62:12:a3:e2:
e8:59:11:e6:04:0b:d5:ee:c2:c5:3d:db:79:e0:ed:3a:02:e9:
8b:88:3a:5c:7e:61:3d:be:2d:4c:d1:cd:36:28:4a:a7:db:da:
f0:b1:71:0f:61:38:c8:8d:7b:e0:c4:91:14:3a:02:f4:f9:48:
ad:ce:1b:6b:ee:88:cd:db:44:a4:57:46:0a:ad:c6:12:72:e6:
6c:83:b3:b3:27:7d:92:9e:a9:f1:70:27:04:dc:de:4f:8f:9c:
4b:d2:26:7d:5f:54:92:55:fd:60:e8:cc:22:04:16:ff:58:1f:
aa:97:dc:7e:3a:63:52:42:c8:e4:17:6c:ca:8f:3a:a8:97:bd:
00:5f:fb:97:be:4d:58:8e:1e:05:5b:9e:0d:fa:0f:56:15:a8:
ce:7e:bb:3f:8a:6e:26:5f:dc:11:22:77:6a:f2:bd:27:ef:bc:
66:4d:89:2a:56:69:c1:b3:f7:b3:60:bd:3c:a5:ce:db:5c:8f:
18:00:11:d9:af:3d:b1:9f:65:7b:bd:5d:da:93:56:58:3f:70:
95:8a:85:99:92:e6:0b:60:ea:f8:56:e4:4f:57:1d:bf:a9:7c:
9f:e6:8a:8a:3b:e9:93:a0:d9:a2:0f:1f:e5:29:bd:14:c0:2a:
94:cf:44:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 10:59:13 2026 by rpki-client