
$ rpki-client -vvf rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/323830343a353737633a313130303a3a2f34302d3430203d3e20323638303638.roa
File: 323830343a353737633a313130303a3a2f34302d3430203d3e20323638303638.roa (raw, json)
Hash identifier: gmmg4vI97dIIn8mul3ZwY6gXtKDdFo8qrmePxEHf8m4=
Subject key identifier: BF:9E:09:24:28:F6:9B:D5:8F:D0:78:F4:F4:84:06:ED:21:A5:F9:C2
Certificate issuer: /CN=2109BE321BAA489853B95DD9EB2882D4F824F0F2
Certificate serial: 1D07AB21818F089BE6B6D3BF6D32D283D26435F1
Authority key identifier: 21:09:BE:32:1B:AA:48:98:53:B9:5D:D9:EB:28:82:D4:F8:24:F0:F2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/323830343a353737633a313130303a3a2f34302d3430203d3e20323638303638.roa
Signing time: Thu 05 Feb 2026 06:29:21 +0000
ROA not before: Thu 05 Feb 2026 06:24:21 +0000
ROA not after: Thu 04 Feb 2027 06:29:21 +0000
asID: 268068
IP address blocks: 2804:577c:1100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.crl
rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 20 Feb 2026 13:39:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:07:ab:21:81:8f:08:9b:e6:b6:d3:bf:6d:32:d2:83:d2:64:35:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2109BE321BAA489853B95DD9EB2882D4F824F0F2
Validity
Not Before: Feb 5 06:24:21 2026 GMT
Not After : Feb 4 06:29:21 2027 GMT
Subject: CN=BF9E092428F69BD58FD078F4F48406ED21A5F9C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d7:29:b2:60:eb:38:d8:f6:61:0f:aa:d3:65:
4b:ff:c0:5f:e1:a7:9f:ff:d8:53:5d:60:e1:3e:6b:
c1:34:32:23:23:3c:85:35:77:14:5c:7e:06:c8:3b:
1f:0b:76:11:a9:47:dd:48:f4:a7:58:82:5c:68:7c:
f8:77:5f:9a:c7:4c:f2:45:4d:4c:68:81:12:9f:a5:
ca:e5:42:1c:fb:aa:9f:58:1c:8d:05:30:b2:b3:3f:
a4:3a:0d:b2:c3:5b:e6:91:6f:fc:71:c7:19:35:21:
4d:aa:91:fe:6b:78:04:d0:c2:22:4b:f6:5b:dc:5f:
d0:75:01:23:13:c9:b3:a9:b3:20:7b:46:a4:98:ab:
a3:42:5d:fb:df:0b:f6:7c:b8:57:1d:79:5e:5c:4d:
67:cf:8b:db:d7:e0:aa:a1:4e:c6:39:80:fc:1b:e9:
af:7c:9d:7d:49:c3:81:98:f2:88:fa:d4:d2:cc:56:
39:3f:f4:c9:12:a7:be:c7:44:2a:2c:cd:0f:25:d4:
4e:4c:b3:d8:56:f4:7c:03:ff:20:85:c3:a1:a8:5f:
9f:cb:34:5c:fc:6a:73:20:6b:a1:7e:a3:e1:cf:b0:
07:6b:65:ff:3a:fd:2d:ae:94:d3:03:51:e8:8d:d0:
35:63:75:3a:c4:0c:27:4b:8d:47:76:3c:7c:05:bb:
0a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:9E:09:24:28:F6:9B:D5:8F:D0:78:F4:F4:84:06:ED:21:A5:F9:C2
X509v3 Authority Key Identifier:
keyid:21:09:BE:32:1B:AA:48:98:53:B9:5D:D9:EB:28:82:D4:F8:24:F0:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/323830343a353737633a313130303a3a2f34302d3430203d3e20323638303638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:577c:1100::/40
Signature Algorithm: sha256WithRSAEncryption
07:12:f8:a4:2d:60:fc:87:56:44:95:92:98:77:ce:ba:c4:5f:
ba:96:54:92:bf:5d:6b:19:0a:60:ad:82:24:ea:d3:e9:48:8b:
51:75:d9:2b:eb:44:02:64:09:3e:e8:16:93:0d:96:aa:cc:28:
c6:f1:28:d4:c5:1e:b3:24:52:ad:73:54:cf:bd:1a:93:38:3f:
2b:25:bc:69:48:81:51:fe:a8:91:2d:c1:d5:93:2f:bc:a9:7b:
8f:4f:48:63:7d:25:36:f7:33:88:28:ea:fa:02:d3:b0:09:97:
61:98:f5:c1:59:a8:29:d6:ef:81:ff:4c:3e:1c:cb:56:9f:d3:
a9:81:74:df:a7:37:09:b7:c3:39:ef:16:ec:5a:8f:23:bd:5c:
59:c5:de:7f:76:b1:95:82:46:17:10:b1:87:13:9a:23:51:00:
11:ce:2e:a7:da:97:6a:c2:a6:94:72:3f:9f:ba:d2:ee:4a:20:
b6:67:16:91:7c:72:d1:dd:4b:45:a5:b9:a3:01:9b:1a:35:bf:
06:f8:5d:e5:bc:d2:03:60:bb:c2:d7:a7:e8:81:e6:21:df:e6:
0d:0c:32:64:8b:94:f1:e8:ce:ef:05:f1:57:52:0d:20:a1:68:
2c:f5:90:2b:5c:14:0a:b7:ce:e0:86:de:00:ad:1e:ec:14:33:
df:f3:ab:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:57:26 2026 by rpki-client