
$ rpki-client -vvf rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/323830343a383466383a313030303a3a2f34302d3430203d3e20323732353439.roa
File: 323830343a383466383a313030303a3a2f34302d3430203d3e20323732353439.roa (raw, json)
Hash identifier: 9VzaQ7vDmNrMa4deko9XK8+Pr/jUWjlpX8PpBjNLnak=
Subject key identifier: 2E:8F:A2:4D:77:87:53:7E:16:22:0D:63:F2:E2:CC:2D:7B:9A:9F:7F
Certificate issuer: /CN=2C425257AE7B63529EB88108AC7DEA60648B43E5
Certificate serial: BC1235F18716DD09A269184870EFA77AE175DB
Authority key identifier: 2C:42:52:57:AE:7B:63:52:9E:B8:81:08:AC:7D:EA:60:64:8B:43:E5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/323830343a383466383a313030303a3a2f34302d3430203d3e20323732353439.roa
Signing time: Fri 09 Jan 2026 15:47:35 +0000
ROA not before: Fri 09 Jan 2026 15:42:35 +0000
ROA not after: Fri 08 Jan 2027 15:47:35 +0000
asID: 272549
IP address blocks: 2804:84f8:1000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.crl
rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 19 Feb 2026 15:44:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
bc:12:35:f1:87:16:dd:09:a2:69:18:48:70:ef:a7:7a:e1:75:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C425257AE7B63529EB88108AC7DEA60648B43E5
Validity
Not Before: Jan 9 15:42:35 2026 GMT
Not After : Jan 8 15:47:35 2027 GMT
Subject: CN=2E8FA24D7787537E16220D63F2E2CC2D7B9A9F7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:75:92:38:a6:98:ad:e1:45:1d:42:16:ca:ba:
bd:85:e1:50:56:2d:6b:6c:a6:fa:c3:b6:41:aa:47:
cf:53:97:20:c9:0b:2d:86:8a:b2:ff:e4:a3:0c:67:
04:a4:f3:56:8e:b6:04:5b:c7:5b:b7:16:ce:5f:30:
a6:dc:33:ac:fd:88:bc:0b:a5:4a:fb:c4:cf:4f:1c:
ca:ea:a3:ad:f3:98:24:10:c6:89:ee:a5:3e:de:f5:
b7:7f:24:e6:5a:a8:49:69:ac:b2:c8:60:a9:da:e6:
30:63:6d:7c:77:dc:8e:3c:27:33:ad:2c:c7:b8:47:
c2:bb:0f:4d:b1:65:b2:6b:75:01:b1:b1:37:cb:66:
47:3f:82:bd:f2:3e:72:a5:8e:6b:00:b0:cf:0a:2a:
da:d0:cc:b4:b6:eb:d5:b5:68:b1:9c:a4:7f:25:6b:
73:8e:dd:05:af:0c:44:35:f2:71:aa:c2:2f:d7:5c:
f3:11:7a:f3:0e:8e:4d:87:70:f4:01:40:f2:18:c2:
15:82:7a:78:93:cb:2a:d5:69:26:96:ba:83:85:b1:
29:0a:b8:8b:41:1c:35:b7:84:28:0b:e8:f9:f1:22:
b2:59:1c:a7:88:7a:a3:ad:c6:46:cb:15:a0:69:34:
25:c4:a4:22:af:b5:c3:c7:18:37:38:36:fe:48:2f:
27:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:8F:A2:4D:77:87:53:7E:16:22:0D:63:F2:E2:CC:2D:7B:9A:9F:7F
X509v3 Authority Key Identifier:
keyid:2C:42:52:57:AE:7B:63:52:9E:B8:81:08:AC:7D:EA:60:64:8B:43:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/323830343a383466383a313030303a3a2f34302d3430203d3e20323732353439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:84f8:1000::/40
Signature Algorithm: sha256WithRSAEncryption
bc:9c:78:f4:f0:a0:97:aa:2e:be:00:59:41:40:66:ff:e9:bb:
ba:09:b3:23:30:24:f0:54:e9:ce:30:1c:ac:67:8b:f6:43:0a:
f8:e0:32:ba:d0:69:37:2b:ef:36:42:84:51:94:d8:60:da:08:
c7:ad:0f:1f:b4:f4:b9:7a:0c:af:74:64:44:2a:7d:95:1c:9e:
b5:63:2f:17:93:7a:dc:85:30:70:3a:59:f0:92:9a:d5:f9:d7:
e9:f0:0f:32:44:ce:f3:3d:ae:37:49:1b:aa:0b:35:14:a3:c9:
14:d4:93:a0:78:b5:21:6c:00:cf:fd:88:e7:c8:3a:e4:0e:b0:
93:2e:61:1e:18:04:76:12:fa:af:3f:fa:6b:69:f5:f0:9c:bd:
be:26:45:30:6b:69:c8:09:c3:a4:05:78:56:30:14:de:1d:2c:
db:95:10:12:72:72:02:f1:e1:be:98:42:2c:b6:34:35:78:4f:
e8:d1:a7:1b:91:3c:47:22:ef:af:9a:3e:b5:f8:31:74:c7:8c:
55:ac:66:73:39:22:0e:2d:5a:d3:d8:c8:9d:98:99:a9:7c:a3:
f0:77:a2:88:9b:be:08:51:e2:86:0a:1d:f3:80:7e:54:70:a5:
50:c2:4b:5c:03:fd:90:4b:4b:b0:71:f8:b2:f8:9c:05:5f:53:
f5:21:67:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 01:45:38 2026 by rpki-client