
$ rpki-client -vvf rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/323830343a3936343a3a2f33322d3634203d3e20323633303830.roa
File: 323830343a3936343a3a2f33322d3634203d3e20323633303830.roa (raw, json)
Hash identifier: j17zA/l1GvK1Q3E15s6PasYvpmfe/Inr17EsuPQatng=
Subject key identifier: 21:D0:9F:8A:1C:51:67:EA:80:8F:D1:7C:74:D3:48:FB:2E:1D:3C:E0
Certificate issuer: /CN=883F9EED8D520E746FE5A46BDE2594C335F2E812
Certificate serial: 655AADBCB68AFFEBBAFD63E0A19CBE994F849B2F
Authority key identifier: 88:3F:9E:ED:8D:52:0E:74:6F:E5:A4:6B:DE:25:94:C3:35:F2:E8:12
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/883F9EED8D520E746FE5A46BDE2594C335F2E812.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/323830343a3936343a3a2f33322d3634203d3e20323633303830.roa
Signing time: Fri 26 Jun 2026 13:09:19 +0000
ROA not before: Fri 26 Jun 2026 13:04:19 +0000
ROA not after: Fri 25 Jun 2027 13:09:19 +0000
asID: 263080
IP address blocks: 2804:964::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/883F9EED8D520E746FE5A46BDE2594C335F2E812.crl
rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/883F9EED8D520E746FE5A46BDE2594C335F2E812.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/883F9EED8D520E746FE5A46BDE2594C335F2E812.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 09 Jul 2026 15:46:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:5a:ad:bc:b6:8a:ff:eb:ba:fd:63:e0:a1:9c:be:99:4f:84:9b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=883F9EED8D520E746FE5A46BDE2594C335F2E812
Validity
Not Before: Jun 26 13:04:19 2026 GMT
Not After : Jun 25 13:09:19 2027 GMT
Subject: CN=21D09F8A1C5167EA808FD17C74D348FB2E1D3CE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:11:f5:52:87:28:17:6a:b5:30:5b:d3:93:17:
23:1a:5a:ba:7a:a3:86:c6:ad:a4:56:02:e3:e3:99:
fa:59:20:01:2c:1e:c9:73:ae:87:8e:5c:6b:c8:4d:
e7:ba:8b:60:e1:15:fc:37:17:ea:0a:2e:af:33:47:
ee:f5:35:4c:7a:41:a7:f9:02:2b:bd:5c:0e:90:ba:
72:3a:62:7f:38:b9:34:36:ad:7c:d7:fc:d3:18:95:
52:2a:04:9f:ee:d7:72:1e:46:a3:55:a8:51:ba:17:
00:eb:52:d0:7d:50:55:f9:f7:64:4f:51:34:17:67:
d0:23:9e:22:87:99:22:b8:8b:5b:0c:eb:43:2c:3a:
10:38:53:6f:d2:0a:3b:2a:95:d5:8f:28:64:50:63:
42:a7:da:38:61:7d:cb:5e:86:24:e5:77:4e:1f:0a:
fa:9c:ea:ca:cc:c1:1b:23:d1:a6:c2:eb:69:8b:f5:
21:9a:32:0c:5d:99:c6:4f:5a:ea:cb:ec:61:9f:b1:
b4:1d:b8:7d:4c:49:4f:70:5b:e4:9b:42:b8:a3:76:
f2:7f:04:ba:07:e4:7c:6d:c0:bc:d3:6f:5a:86:c7:
0a:1d:4c:90:63:58:47:c2:19:05:c7:bf:fc:2c:ec:
e4:fc:50:2b:9b:21:dc:9b:24:8a:99:9c:03:c9:03:
ea:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D0:9F:8A:1C:51:67:EA:80:8F:D1:7C:74:D3:48:FB:2E:1D:3C:E0
X509v3 Authority Key Identifier:
keyid:88:3F:9E:ED:8D:52:0E:74:6F:E5:A4:6B:DE:25:94:C3:35:F2:E8:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/883F9EED8D520E746FE5A46BDE2594C335F2E812.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/883F9EED8D520E746FE5A46BDE2594C335F2E812.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/323830343a3936343a3a2f33322d3634203d3e20323633303830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:964::/32
Signature Algorithm: sha256WithRSAEncryption
85:32:cc:bb:91:e2:5d:08:7c:b2:8a:83:46:1a:28:c3:94:51:
36:3d:63:3c:b2:9a:3d:dd:f4:3b:16:e2:23:5d:a4:a7:22:fb:
32:75:8b:ee:59:c6:97:c3:9d:47:31:bd:b9:b9:1d:d2:4b:5e:
50:85:e2:75:3d:3f:a3:08:0a:76:1c:88:88:6f:d0:b0:f9:91:
ba:3f:ab:cb:83:78:98:7e:f8:ea:df:8e:b9:11:1f:1b:0b:84:
ed:13:be:c0:a9:ac:bb:ec:fe:cd:94:96:1e:9a:32:a6:86:88:
3c:a0:c6:13:ca:c5:07:19:31:7b:53:49:92:6a:98:d9:bd:39:
da:2c:53:93:f9:4f:08:43:6c:d7:e2:e2:62:45:de:48:74:98:
c6:15:da:cb:b3:b7:42:6a:5a:dc:c8:42:a0:3c:02:87:5b:e8:
bd:1a:74:bb:a4:0c:dd:ad:aa:85:f0:2b:7c:26:f0:ab:d5:b9:
a8:12:89:a7:26:c1:30:88:e4:fa:e1:94:d1:ba:3c:db:32:f6:
43:48:6c:80:aa:df:4c:ce:e9:61:7b:0d:3a:77:17:e8:cd:dd:
ca:7d:3e:f2:f4:78:90:c2:67:09:29:20:c2:19:59:c9:fe:83:
6c:6e:d1:ae:98:e8:7a:61:e5:9a:f1:69:62:84:38:a7:02:d6:
74:27:a9:53
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUZVqtvLaK/+u6/WPgoZy+mU+Emy8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODgzRjlFRUQ4RDUyMEU3NDZGRTVBNDZCREUyNTk0QzMz
NUYyRTgxMjAeFw0yNjA2MjYxMzA0MTlaFw0yNzA2MjUxMzA5MTlaMDMxMTAvBgNV
BAMTKDIxRDA5RjhBMUM1MTY3RUE4MDhGRDE3Qzc0RDM0OEZCMkUxRDNDRTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWEfVShygXarUwW9OTFyMaWrp6
o4bGraRWAuPjmfpZIAEsHslzroeOXGvITee6i2DhFfw3F+oKLq8zR+71NUx6Qaf5
Aiu9XA6QunI6Yn84uTQ2rXzX/NMYlVIqBJ/u13IeRqNVqFG6FwDrUtB9UFX592RP
UTQXZ9AjniKHmSK4i1sM60MsOhA4U2/SCjsqldWPKGRQY0Kn2jhhfctehiTld04f
Cvqc6srMwRsj0abC62mL9SGaMgxdmcZPWurL7GGfsbQduH1MSU9wW+SbQrijdvJ/
BLoH5HxtwLzTb1qGxwodTJBjWEfCGQXHv/ws7OT8UCubIdybJIqZnAPJA+rjAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUIdCfihxRZ+qAj9F8dNNI+y4dPOAwHwYDVR0j
BBgwFoAUiD+e7Y1SDnRv5aRr3iWUwzXy6BIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkFCN1kzVGdTQk5EMVlmTUdDSmFMbUc1UmR3NnV6RWh3bW9Ca05LdnJR
VFIvMC84ODNGOUVFRDhENTIwRTc0NkZFNUE0NkJERTI1OTRDMzM1RjJFODEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg4M0Y5RUVEOEQ1MjBFNzQ2
RkU1QTQ2QkRFMjU5NEMzMzVGMkU4MTIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJBQjdZM1RnU0JORDFZZk1HQ0phTG1HNVJkdzZ1ekVod21vQmtOS3ZyUVRSLzAv
MzIzODMwMzQzYTM5MzYzNDNhM2EyZjMzMzIyZDM2MzQyMDNkM2UyMDMyMzYzMzMw
MzgzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgECWQwDQYJKoZIhvcNAQELBQADggEBAIUyzLuR4l0I
fLKKg0YaKMOUUTY9Yzyymj3d9DsW4iNdpKci+zJ1i+5ZxpfDnUcxvbm5HdJLXlCF
4nU9P6MICnYciIhv0LD5kbo/q8uDeJh++OrfjrkRHxsLhO0TvsCprLvs/s2Ulh6a
MqaGiDygxhPKxQcZMXtTSZJqmNm9OdosU5P5TwhDbNfi4mJF3kh0mMYV2suzt0Jq
WtzIQqA8Aodb6L0adLukDN2tqoXwK3wm8KvVuagSiacmwTCI5PrhlNG6PNsy9kNI
bICq30zO6WF7DTp3F+jN3cp9PvL0eJDCZwkpIMIZWcn+g2xu0a6Y6Hph5ZrxaWKE
OKcC1nQnqVM=
-----END CERTIFICATE-----
Generated at Wed Jul 8 18:06:18 2026 by rpki-client