
$ rpki-client -vvvf rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/323830343a3233633a383030303a3a2f34302d3430203d3e20323632373937.roa
File: 323830343a3233633a383030303a3a2f34302d3430203d3e20323632373937.roa (raw, json)
Hash identifier: t613xBnDNb19VY0QmJ9prsTOctSdAQzmovw1iGlkOOs=
Subject key identifier: 2A:A5:C2:E2:80:21:08:0C:DC:31:21:FF:BC:21:36:0D:B0:49:E8:D7
Certificate issuer: /CN=36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6
Certificate serial: 547DB1BB469CC83B6123507DC53D7BF9676F7D53
Authority key identifier: 36:C9:A9:AD:CE:53:2B:3D:4D:E3:67:78:AC:FD:C3:B3:AF:5F:D0:C6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/323830343a3233633a383030303a3a2f34302d3430203d3e20323632373937.roa
Signing time: Thu 27 Aug 2026 20:19:01 +0000
ROA not before: Thu 27 Aug 2026 20:14:01 +0000
ROA not after: Thu 26 Aug 2027 20:19:01 +0000
asID: 262797
IP address blocks: 2804:23c:8000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.crl
rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 04 Sep 2026 21:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:7d:b1:bb:46:9c:c8:3b:61:23:50:7d:c5:3d:7b:f9:67:6f:7d:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6
Validity
Not Before: Aug 27 20:14:01 2026 GMT
Not After : Aug 26 20:19:01 2027 GMT
Subject: CN=2AA5C2E28021080CDC3121FFBC21360DB049E8D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:14:f6:69:39:90:17:74:e4:36:ae:b5:0f:c5:
ce:12:0e:d9:8c:ef:5c:93:c2:34:29:41:0e:bb:71:
89:31:70:53:30:51:d6:09:0f:de:d1:05:a8:79:3d:
2f:f8:1d:2e:2b:c8:95:48:9d:0b:8d:7d:d0:9b:9e:
16:15:b6:18:78:35:57:ea:9d:f2:73:5e:b8:22:5a:
5a:b2:02:a2:c7:67:2f:ef:fa:f2:31:66:3b:fa:44:
23:39:99:6a:28:1f:91:85:1d:ca:ca:c6:6a:fa:c6:
81:c4:2a:7d:de:21:bd:27:ed:70:c8:43:3b:b9:40:
fc:b2:ed:94:00:0a:05:7c:2b:14:dc:a5:31:9d:90:
6d:23:36:f8:48:f4:03:3a:81:c6:a9:69:57:89:37:
1f:22:45:22:21:1e:ce:74:ca:de:a2:e9:87:2e:82:
79:af:6c:34:d0:f1:85:b7:a9:b7:61:db:aa:4b:ce:
ec:fc:0d:b7:39:35:b4:d0:c6:44:b3:94:23:c2:a8:
ee:7f:e6:52:69:3d:c8:04:d3:c3:59:1d:53:26:bf:
8d:f9:9a:7a:68:b7:6a:7a:69:d6:95:a9:7e:b5:c6:
02:b1:22:97:41:e3:7e:85:45:77:11:db:d1:a0:e8:
81:01:12:de:8f:0f:c0:74:24:58:0a:49:75:69:53:
ce:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A5:C2:E2:80:21:08:0C:DC:31:21:FF:BC:21:36:0D:B0:49:E8:D7
X509v3 Authority Key Identifier:
keyid:36:C9:A9:AD:CE:53:2B:3D:4D:E3:67:78:AC:FD:C3:B3:AF:5F:D0:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/323830343a3233633a383030303a3a2f34302d3430203d3e20323632373937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:23c:8000::/40
Signature Algorithm: sha256WithRSAEncryption
4b:5f:52:69:48:c9:f8:46:bc:87:4a:fa:4e:50:c4:f3:7c:4b:
da:59:46:75:eb:4d:84:69:25:ed:de:5f:f9:06:3b:43:5f:d4:
c2:dc:de:bc:d7:35:f9:6c:cb:73:94:9d:e5:97:74:63:86:24:
d0:f9:99:fe:b7:a9:25:8d:7c:c8:f1:11:09:25:4e:fe:31:ea:
92:70:4b:ac:70:c7:0c:87:7c:54:76:04:a9:17:3c:be:f5:bb:
25:61:4d:23:10:39:e5:c4:d8:ad:f2:61:49:17:84:fa:ea:51:
9d:68:d0:c4:56:2a:4d:07:cf:53:48:65:2c:43:b4:b9:42:28:
0b:82:eb:20:84:4f:4b:13:b8:57:46:e5:45:f7:48:d7:fd:78:
32:97:c1:c0:4f:1d:1e:f8:48:f7:22:db:56:55:2e:81:e8:06:
98:da:59:b3:67:f7:16:3e:3d:9a:58:c1:86:6d:3a:65:17:fd:
f5:06:66:e9:ca:89:28:4a:67:60:0d:07:3f:08:6d:8e:96:48:
4b:01:39:35:39:38:9a:e4:b4:d0:11:a2:68:75:e7:0e:7a:5b:
f3:69:50:21:92:fa:17:51:02:19:9a:3e:c1:7b:e3:35:b6:e6:
15:88:1a:2d:8c:55:16:be:0b:22:19:20:db:55:63:6f:a1:05:
12:05:2f:e3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUVH2xu0acyDthI1B9xT17+WdvfVMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzZDOUE5QURDRTUzMkIzRDRERTM2Nzc4QUNGREMzQjNB
RjVGRDBDNjAeFw0yNjA4MjcyMDE0MDFaFw0yNzA4MjYyMDE5MDFaMDMxMTAvBgNV
BAMTKDJBQTVDMkUyODAyMTA4MENEQzMxMjFGRkJDMjEzNjBEQjA0OUU4RDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyFPZpOZAXdOQ2rrUPxc4SDtmM
71yTwjQpQQ67cYkxcFMwUdYJD97RBah5PS/4HS4ryJVInQuNfdCbnhYVthh4NVfq
nfJzXrgiWlqyAqLHZy/v+vIxZjv6RCM5mWooH5GFHcrKxmr6xoHEKn3eIb0n7XDI
Qzu5QPyy7ZQACgV8KxTcpTGdkG0jNvhI9AM6gcapaVeJNx8iRSIhHs50yt6i6Ycu
gnmvbDTQ8YW3qbdh26pLzuz8Dbc5NbTQxkSzlCPCqO5/5lJpPcgE08NZHVMmv435
mnpot2p6adaVqX61xgKxIpdB436FRXcR29Gg6IEBEt6PD8B0JFgKSXVpU84DAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUKqXC4oAhCAzcMSH/vCE2DbBJ6NcwHwYDVR0j
BBgwFoAUNsmprc5TKz1N42d4rP3Ds69f0MYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1lwUHNCdEV0YTlKTDhTMlNnb1Ruejl2Mnk0QzU2Rkg4OWJXZ1ZCRlRO
UFMvMC8zNkM5QTlBRENFNTMyQjNENERFMzY3NzhBQ0ZEQzNCM0FGNUZEMEM2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM2QzlBOUFEQ0U1MzJCM0Q0
REUzNjc3OEFDRkRDM0IzQUY1RkQwQzYuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NZcFBzQnRFdGE5Skw4UzJTZ29Ubno5djJ5NEM1NkZIODliV2dWQkZUTlBTLzAv
MzIzODMwMzQzYTMyMzM2MzNhMzgzMDMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl
MjAzMjM2MzIzNzM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBAI8gDANBgkqhkiG9w0BAQsFAAOC
AQEAS19SaUjJ+Ea8h0r6TlDE83xL2llGdetNhGkl7d5f+QY7Q1/UwtzevNc1+WzL
c5Sd5Zd0Y4Yk0PmZ/repJY18yPERCSVO/jHqknBLrHDHDId8VHYEqRc8vvW7JWFN
IxA55cTYrfJhSReE+upRnWjQxFYqTQfPU0hlLEO0uUIoC4LrIIRPSxO4V0blRfdI
1/14MpfBwE8dHvhI9yLbVlUugegGmNpZs2f3Fj49mljBhm06ZRf99QZm6cqJKEpn
YA0HPwhtjpZISwE5NTk4muS00BGiaHXnDnpb82lQIZL6F1ECGZo+wXvjNbbmFYga
LYxVFr4LIhkg21Vjb6EFEgUv4w==
-----END CERTIFICATE-----
Generated at Fri Sep 4 10:45:20 2026 by rpki-client