
$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a383030303a3a2f34302d3430203d3e20323632363837.roa
File: 323830343a333835633a383030303a3a2f34302d3430203d3e20323632363837.roa (raw, json)
Hash identifier: IKdIJiGs5Nu/o1ZI6oZ83MWjfAv3TCfvaA4VVMURpkk=
Subject key identifier: 7E:B7:CE:F0:71:12:4F:5B:A4:D1:6D:69:9A:A6:E0:64:29:CC:C8:74
Certificate issuer: /CN=D1F123F850B68CABD3D5C67D9B2660D78C38455C
Certificate serial: 422F4CF4BB70C8C6F40B4C57BD7A966D62AC8C23
Authority key identifier: D1:F1:23:F8:50:B6:8C:AB:D3:D5:C6:7D:9B:26:60:D7:8C:38:45:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F123F850B68CABD3D5C67D9B2660D78C38455C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a383030303a3a2f34302d3430203d3e20323632363837.roa
Signing time: Fri 30 Jan 2026 14:01:44 +0000
ROA not before: Fri 30 Jan 2026 13:56:44 +0000
ROA not after: Fri 29 Jan 2027 14:01:44 +0000
asID: 262687
IP address blocks: 2804:385c:8000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D1F123F850B68CABD3D5C67D9B2660D78C38455C.crl
rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D1F123F850B68CABD3D5C67D9B2660D78C38455C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F123F850B68CABD3D5C67D9B2660D78C38455C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 20 Feb 2026 01:15:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:2f:4c:f4:bb:70:c8:c6:f4:0b:4c:57:bd:7a:96:6d:62:ac:8c:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1F123F850B68CABD3D5C67D9B2660D78C38455C
Validity
Not Before: Jan 30 13:56:44 2026 GMT
Not After : Jan 29 14:01:44 2027 GMT
Subject: CN=7EB7CEF071124F5BA4D16D699AA6E06429CCC874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:db:aa:73:3e:f9:65:9a:1e:8a:52:4c:cf:eb:
b3:15:51:33:e6:46:1b:a4:e9:bb:d6:01:41:6e:a2:
e3:a7:99:c1:53:23:05:1f:65:69:23:4e:be:75:e6:
20:28:3a:88:bb:74:9b:67:d1:d9:fb:84:d7:72:86:
4c:9e:47:e4:6d:68:ba:a4:49:af:90:0f:9d:27:14:
af:5a:d1:c7:92:28:bb:af:46:2e:d0:81:63:15:f8:
cc:da:9b:63:ad:d4:02:02:5f:72:a6:bb:fa:cf:10:
2b:75:17:7a:8e:56:2f:b4:35:ef:ba:bf:eb:e0:46:
5d:7c:f6:45:25:4f:18:ab:41:7c:ac:c5:2b:17:b2:
b0:ae:92:63:86:5e:bf:50:3b:19:f8:20:e4:72:0e:
3a:c7:e3:f5:e6:16:a2:68:85:3a:25:d6:2c:b7:f7:
cc:0c:57:09:ab:88:80:67:53:3d:bc:8a:2f:77:8b:
d0:37:84:48:16:8e:eb:cd:bf:dc:8d:13:fa:1a:e6:
8a:bb:5f:5a:b9:17:81:f1:76:ad:8d:f5:e5:98:94:
ab:d4:87:62:e7:c9:bf:0a:97:6b:0e:27:ff:46:58:
cd:fc:5d:49:e2:10:78:a6:ff:62:a6:9a:7d:df:27:
77:2b:b6:c4:6a:71:67:87:76:d8:23:ec:5e:64:ae:
df:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B7:CE:F0:71:12:4F:5B:A4:D1:6D:69:9A:A6:E0:64:29:CC:C8:74
X509v3 Authority Key Identifier:
keyid:D1:F1:23:F8:50:B6:8C:AB:D3:D5:C6:7D:9B:26:60:D7:8C:38:45:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D1F123F850B68CABD3D5C67D9B2660D78C38455C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F123F850B68CABD3D5C67D9B2660D78C38455C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a383030303a3a2f34302d3430203d3e20323632363837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:385c:8000::/40
Signature Algorithm: sha256WithRSAEncryption
ac:c8:f6:d1:87:ea:19:b0:c2:ca:30:fc:be:1d:9c:70:cd:42:
30:1f:78:19:1c:8c:f4:57:86:dc:38:a3:27:6c:10:73:1c:7e:
65:2c:5e:22:a6:67:0b:0a:ec:40:3f:da:8d:89:b7:86:62:7d:
2a:3d:dc:ee:bf:08:8b:36:bf:9c:77:14:36:e9:bd:28:5a:f0:
83:16:b0:cc:52:8d:c7:8c:03:54:4f:61:68:bd:8b:dc:18:7f:
4d:ac:88:68:76:11:36:9a:57:40:15:f2:57:d5:11:6e:93:ab:
26:94:c5:85:72:f5:59:fa:dc:81:2e:8a:ab:04:32:8a:91:23:
6a:23:db:0c:2a:af:af:dd:e7:9d:27:68:96:50:e6:7d:60:cc:
9a:42:57:c4:8d:23:28:5b:2d:fd:6e:2b:6b:e2:4a:7f:0b:d1:
2a:e3:35:67:5d:7f:4a:ce:6e:9f:1a:4b:d6:81:b9:71:fb:91:
d5:9f:3a:32:9c:3f:a1:81:75:3b:86:2a:e0:12:6b:f4:7d:b9:
4a:5b:0e:c1:b3:4e:86:d5:da:7e:bf:ee:d3:f8:73:c1:d9:ba:
4f:24:35:a7:bc:95:ff:29:f9:96:a1:4e:76:a9:7d:38:10:64:
c1:e8:b2:37:76:08:57:16:e3:76:4c:47:fb:35:49:91:16:1a:
0e:5f:87:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:38:29 2026 by rpki-client