
$ rpki-client -vvf rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/323830343a353039383a3a2f33322d313238203d3e20323638333938.roa
File: 323830343a353039383a3a2f33322d313238203d3e20323638333938.roa (raw, json)
Hash identifier: glO24QzrfFsd9W0mZAi8AtSz+CFwQ+UbFrh7YDsSlgY=
Subject key identifier: F5:1A:72:34:95:7E:9A:E4:5C:64:AC:C2:AD:8B:51:77:CA:97:39:0E
Certificate issuer: /CN=974F38241AAFF944C01FEE406EFE8F5DDBDFF2B6
Certificate serial: 48C8ACCEDFEE2ACC609028DF4C3AF5E8AB5840C7
Authority key identifier: 97:4F:38:24:1A:AF:F9:44:C0:1F:EE:40:6E:FE:8F:5D:DB:DF:F2:B6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/974F38241AAFF944C01FEE406EFE8F5DDBDFF2B6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/323830343a353039383a3a2f33322d313238203d3e20323638333938.roa
Signing time: Wed 01 Apr 2026 22:24:50 +0000
ROA not before: Wed 01 Apr 2026 22:19:50 +0000
ROA not after: Wed 31 Mar 2027 22:24:50 +0000
asID: 268398
IP address blocks: 2804:5098::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/974F38241AAFF944C01FEE406EFE8F5DDBDFF2B6.crl
rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/974F38241AAFF944C01FEE406EFE8F5DDBDFF2B6.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/974F38241AAFF944C01FEE406EFE8F5DDBDFF2B6.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 09 Apr 2026 15:55:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:c8:ac:ce:df:ee:2a:cc:60:90:28:df:4c:3a:f5:e8:ab:58:40:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=974F38241AAFF944C01FEE406EFE8F5DDBDFF2B6
Validity
Not Before: Apr 1 22:19:50 2026 GMT
Not After : Mar 31 22:24:50 2027 GMT
Subject: CN=F51A7234957E9AE45C64ACC2AD8B5177CA97390E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b5:3f:e8:d8:be:9a:80:dc:5f:8d:cd:ff:17:
35:e8:27:a9:87:50:fa:d7:fc:43:15:76:c5:3e:3c:
ef:84:bc:82:05:87:7c:e2:a5:2f:1d:b8:2d:28:1b:
d8:5e:6c:b6:c6:a9:65:da:1a:1d:b2:f6:1a:e5:e9:
c8:2b:60:39:fa:ef:98:ea:26:95:db:27:57:2f:dd:
ca:15:1e:fd:c6:d7:64:04:a9:92:e3:68:db:8a:e1:
79:9f:54:bd:b0:2c:ee:1a:35:90:64:49:d1:b2:a5:
33:39:b6:17:34:44:15:89:71:46:28:5d:4a:13:e6:
b0:48:66:62:02:3d:0d:23:47:ab:21:5c:7c:75:11:
8c:b3:1e:b1:89:01:c0:5a:48:15:74:7e:9b:84:7a:
76:0f:ce:14:45:b7:ec:c6:c8:1b:78:e6:50:fb:19:
9e:87:1a:04:42:c3:45:93:f8:00:3e:11:d8:dd:2c:
a4:40:ea:36:5e:a9:11:d8:62:70:a8:1c:26:06:c0:
05:7c:02:9e:34:7a:f5:49:c6:5a:e0:52:da:ef:c4:
9b:9a:34:29:a6:ad:e4:58:2d:3c:0e:45:28:e6:36:
97:92:b7:8b:07:44:9e:b4:c1:35:b7:27:a4:e6:09:
49:7e:dc:4b:a7:4f:22:3a:af:e3:9d:75:ec:cf:08:
10:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:1A:72:34:95:7E:9A:E4:5C:64:AC:C2:AD:8B:51:77:CA:97:39:0E
X509v3 Authority Key Identifier:
keyid:97:4F:38:24:1A:AF:F9:44:C0:1F:EE:40:6E:FE:8F:5D:DB:DF:F2:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/974F38241AAFF944C01FEE406EFE8F5DDBDFF2B6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/974F38241AAFF944C01FEE406EFE8F5DDBDFF2B6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/323830343a353039383a3a2f33322d313238203d3e20323638333938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5098::/32
Signature Algorithm: sha256WithRSAEncryption
a6:81:50:bd:af:78:f8:52:9b:17:00:35:bc:f8:81:68:9e:fc:
df:be:0f:be:d8:01:cc:37:77:03:fe:8f:df:53:0c:7f:f7:f2:
48:be:d3:38:bd:31:c4:89:9a:89:b2:10:55:1c:9c:73:00:ee:
bb:1d:5e:15:a3:49:53:7c:09:3f:3a:a8:3c:7c:91:ed:eb:99:
a8:88:d1:67:d2:de:ae:44:48:11:25:7b:30:85:b1:c4:92:03:
70:7a:67:8e:2e:07:dd:fe:38:41:68:e2:19:d6:56:04:0e:da:
25:dc:34:ef:1d:ce:0c:11:00:c0:07:8e:44:46:17:69:a2:b2:
82:ce:d2:a0:2f:ed:3c:42:f8:4a:9f:39:97:22:8c:16:72:71:
ae:cc:9a:09:5b:b4:6c:de:fa:49:e0:ed:e6:5b:a3:dc:38:b2:
4e:df:49:1d:79:9c:fe:65:30:51:cf:05:3a:29:8c:8f:a1:8b:
48:49:cc:73:84:7c:aa:5f:1a:a1:7d:93:9b:13:c8:26:c5:07:
aa:ca:01:e7:1b:1c:58:4f:26:cb:32:49:2a:3b:ea:eb:a3:b2:
0c:70:3f:13:e9:85:92:84:e7:31:d8:fb:19:f1:08:2f:0e:dd:
1a:52:d7:93:f7:74:57:d4:6d:15:7c:bb:e6:f1:5e:2d:ff:be:
70:30:7d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 17:07:40 2026 by rpki-client