
$ rpki-client -vvf rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/0/323830313a38303a343030303a3a2f34302d3430203d3e20323733363739.roa
File: 323830313a38303a343030303a3a2f34302d3430203d3e20323733363739.roa (raw, json)
Hash identifier: fjBluYM9WljsAU+4gOXNAkol8YBoAfM3Z2FFfU6IWPY=
Subject key identifier: 9F:BF:0C:DE:FE:76:46:6D:01:14:0A:E5:A2:2D:FA:CC:86:92:ED:8E
Certificate issuer: /CN=AB110249E3260E192D7BB9BC9648FA8A6E99C664
Certificate serial: 3A8B957C0632C2F12392FC4F88177045B0B249DB
Authority key identifier: AB:11:02:49:E3:26:0E:19:2D:7B:B9:BC:96:48:FA:8A:6E:99:C6:64
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB110249E3260E192D7BB9BC9648FA8A6E99C664.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/0/323830313a38303a343030303a3a2f34302d3430203d3e20323733363739.roa
Signing time: Tue 13 Jan 2026 11:17:06 +0000
ROA not before: Tue 13 Jan 2026 11:12:06 +0000
ROA not after: Tue 12 Jan 2027 11:17:06 +0000
asID: 273679
IP address blocks: 2801:80:4000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/0/AB110249E3260E192D7BB9BC9648FA8A6E99C664.crl
rsync://rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/0/AB110249E3260E192D7BB9BC9648FA8A6E99C664.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB110249E3260E192D7BB9BC9648FA8A6E99C664.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 20 Feb 2026 09:52:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:8b:95:7c:06:32:c2:f1:23:92:fc:4f:88:17:70:45:b0:b2:49:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AB110249E3260E192D7BB9BC9648FA8A6E99C664
Validity
Not Before: Jan 13 11:12:06 2026 GMT
Not After : Jan 12 11:17:06 2027 GMT
Subject: CN=9FBF0CDEFE76466D01140AE5A22DFACC8692ED8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:91:5c:32:18:b4:9d:a9:0e:30:dd:13:7e:42:
76:9f:2e:84:42:43:76:a3:b3:31:f3:37:5a:90:bf:
b4:18:7f:91:68:8b:68:f5:04:01:18:da:65:f6:ff:
dc:8a:5f:91:a8:2f:13:60:9f:4f:95:e9:e3:e9:ea:
3d:04:e0:32:e1:37:90:7e:3e:3e:74:f8:09:30:4d:
dc:83:5c:36:60:37:8a:97:fe:0d:53:b7:53:8a:65:
3a:ba:4c:2f:dc:18:28:5c:bd:c4:69:e2:fe:8e:11:
25:45:70:67:fa:17:6a:45:fb:c4:d7:9e:f7:15:cc:
cf:c4:8e:e3:ba:f4:53:c1:20:29:e2:22:98:0d:2b:
94:28:f7:4d:df:c4:57:32:b4:c8:00:ac:4c:62:2e:
57:dd:97:d9:e4:e7:ce:05:27:96:e8:34:26:09:76:
fa:ef:45:ac:99:ab:d9:c3:c8:95:57:df:c0:93:92:
fc:72:61:2c:69:78:59:9c:ab:87:f9:89:e0:6b:a3:
f0:b5:88:6d:84:31:96:af:b5:95:f9:07:e2:58:ba:
8c:98:a5:1f:3b:b1:3b:e9:9a:ce:ad:bc:7c:f9:44:
8b:05:87:5c:0b:9e:ce:2b:68:a3:cd:6a:82:86:ee:
70:77:d1:8d:c6:b5:aa:90:67:17:f1:eb:a1:35:54:
8e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:BF:0C:DE:FE:76:46:6D:01:14:0A:E5:A2:2D:FA:CC:86:92:ED:8E
X509v3 Authority Key Identifier:
keyid:AB:11:02:49:E3:26:0E:19:2D:7B:B9:BC:96:48:FA:8A:6E:99:C6:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/0/AB110249E3260E192D7BB9BC9648FA8A6E99C664.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB110249E3260E192D7BB9BC9648FA8A6E99C664.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/0/323830313a38303a343030303a3a2f34302d3430203d3e20323733363739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:80:4000::/40
Signature Algorithm: sha256WithRSAEncryption
37:96:57:8d:29:19:05:11:98:0f:93:bc:ff:5d:68:c5:cd:af:
22:d3:6e:99:e7:8c:92:dd:f4:a3:27:aa:a1:11:95:e3:14:99:
5e:3b:56:32:64:fb:72:f0:ed:21:9e:2d:0f:79:a0:3f:02:f3:
25:53:40:13:b2:01:3b:ed:81:0a:1b:63:bc:fa:c1:96:99:35:
ff:c6:1f:8a:34:67:58:43:1a:36:8c:e8:7b:b3:9b:71:5a:dd:
c0:8d:7f:70:9f:d5:2c:68:a5:6f:05:e9:61:47:fe:46:b6:03:
e8:0b:1a:06:bc:e8:34:43:9f:c2:4a:4c:e8:20:79:ef:bc:97:
17:d6:c9:b8:ce:60:71:f1:f9:2e:92:a9:e6:f1:e9:65:62:a0:
a6:ad:d5:79:d4:c7:54:4f:a3:b8:3a:01:2a:dd:ef:3c:ad:d2:
da:c6:54:23:f9:54:59:bf:d2:5d:b8:a9:2b:cd:fc:a8:9b:96:
38:41:9b:af:ce:4c:32:01:ea:41:01:53:3d:22:44:a1:a3:11:
0a:cc:4f:2a:76:97:5f:15:e3:a5:12:82:22:5f:e0:23:f6:67:
26:30:e8:ef:27:f7:13:c1:7a:74:4e:7e:73:13:f7:15:d0:a6:
61:b8:65:08:c0:2b:35:68:b0:c1:be:25:3b:ce:c4:9a:12:7a:
db:dd:a8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:39:49 2026 by rpki-client