
$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a343866303a373030303a3a2f34302d3430203d3e203631353839.roa
File: 323830343a343866303a373030303a3a2f34302d3430203d3e203631353839.roa (raw, json)
Hash identifier: 2W1BIXua7W8P8lI8loTFF9g4WplMLtO8hrSdA2V1h4U=
Subject key identifier: 3E:B7:F4:07:5A:77:6F:D1:AF:94:0F:D0:D5:8C:08:F0:97:FF:D6:65
Certificate issuer: /CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
Certificate serial: 35C57626552148FB6C8A08641EC23AAC251508A5
Authority key identifier: 1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a343866303a373030303a3a2f34302d3430203d3e203631353839.roa
Signing time: Fri 30 Jan 2026 12:50:39 +0000
ROA not before: Fri 30 Jan 2026 12:45:39 +0000
ROA not after: Fri 29 Jan 2027 12:50:39 +0000
asID: 61589
IP address blocks: 2804:48f0:7000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl
rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 23 Feb 2026 17:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:c5:76:26:55:21:48:fb:6c:8a:08:64:1e:c2:3a:ac:25:15:08:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
Validity
Not Before: Jan 30 12:45:39 2026 GMT
Not After : Jan 29 12:50:39 2027 GMT
Subject: CN=3EB7F4075A776FD1AF940FD0D58C08F097FFD665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:49:9c:d7:88:ab:29:d3:a5:1e:62:ae:a0:92:
e4:a7:2c:17:b5:c4:95:00:7d:c2:02:7b:70:a8:96:
ad:4e:d4:bf:8f:85:2c:f2:3d:89:57:aa:27:09:c3:
d5:41:fc:c4:25:10:33:08:c9:58:81:a1:9f:10:13:
45:ca:42:97:39:ba:c2:6a:6f:cc:99:52:f1:b5:fd:
bd:1e:91:89:ea:7a:86:e3:cd:6a:f1:61:f1:d6:7b:
a6:1b:c2:b1:be:34:c0:dc:bf:6e:d9:6d:f7:ff:ad:
f0:11:57:ae:c4:5a:9e:9b:98:32:6c:44:a1:e7:52:
2c:6d:f6:d3:20:e2:f6:52:9b:07:47:9d:05:37:5f:
98:16:80:97:d1:92:01:85:00:1b:d3:98:51:fa:98:
33:9f:70:1e:95:3b:a6:d9:ac:be:79:7c:82:15:68:
26:be:41:cd:4f:d2:8f:40:7f:54:e5:fe:78:db:e3:
04:c5:d2:2d:dd:e2:75:41:18:49:46:ce:b9:61:09:
93:66:5b:b8:9c:42:b7:a7:3e:77:0b:28:5a:1e:a0:
97:cb:32:fb:51:ec:7d:1e:b9:5b:b7:9b:b4:09:8c:
88:95:47:ea:a9:2e:ad:fa:3b:5c:25:ce:9a:0d:68:
79:b2:45:21:7a:33:5f:5a:de:c6:22:ad:4d:1e:38:
f9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B7:F4:07:5A:77:6F:D1:AF:94:0F:D0:D5:8C:08:F0:97:FF:D6:65
X509v3 Authority Key Identifier:
keyid:1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a343866303a373030303a3a2f34302d3430203d3e203631353839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:48f0:7000::/40
Signature Algorithm: sha256WithRSAEncryption
44:95:c3:75:8b:68:0d:cc:05:f5:1c:b6:06:83:ae:e3:9e:9d:
af:9d:c0:e9:33:53:5b:10:21:83:ac:37:0d:2b:a1:c1:3a:1a:
1e:e3:c2:28:c1:f0:62:b6:39:bb:50:36:93:36:52:1b:30:eb:
77:a7:d9:7f:70:bb:52:bd:e5:15:56:19:0d:a2:1b:d0:5b:d8:
37:86:df:79:0b:c5:25:93:0d:d4:63:21:13:34:7f:9d:4a:ae:
22:c0:f5:c8:b7:d5:64:93:a5:ef:07:f8:52:39:4e:6f:0b:80:
69:4b:f1:a0:4c:96:19:6e:0c:ba:85:4e:4b:fa:95:fb:b4:d5:
1c:9a:7b:74:55:cc:c9:15:da:19:e3:7a:2f:af:ea:ab:39:18:
e0:b4:84:51:e5:e7:40:e7:56:90:72:2a:1c:3a:75:51:b3:6e:
22:ca:35:8e:fb:fc:a1:72:b7:0f:e1:9a:85:b6:d3:b3:a2:7c:
b0:2a:27:03:68:59:e0:20:95:96:78:e3:19:e9:2f:b5:0d:a1:
d9:a1:3f:a9:c2:e5:0f:d6:c1:3a:07:90:6e:dc:7a:e2:a4:5b:
68:90:b5:18:1a:d8:2c:27:94:65:80:68:4c:52:01:de:13:12:
a1:b4:10:70:c8:81:3e:c8:d8:94:0e:0b:ed:53:32:e9:f5:9b:
d6:1d:73:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 04:25:11 2026 by rpki-client