
$ rpki-client -vvf rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/323830343a353130343a333930303a3a2f34302d3430203d3e20323638343235.roa
File: 323830343a353130343a333930303a3a2f34302d3430203d3e20323638343235.roa (raw, json)
Hash identifier: ILCS9QriC1wWRY9QZf7IbnoYIPdRI67SuOvm89NaBJQ=
Subject key identifier: 78:F4:AF:B3:70:3B:A8:E1:4E:F4:D4:6D:8A:FF:2D:99:CA:3A:42:18
Certificate issuer: /CN=E968F08C3BD0A821112BDBD86914ED5964A1FF29
Certificate serial: 2C518CF2A2718EE38D566B684E5076972136A375
Authority key identifier: E9:68:F0:8C:3B:D0:A8:21:11:2B:DB:D8:69:14:ED:59:64:A1:FF:29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E968F08C3BD0A821112BDBD86914ED5964A1FF29.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/323830343a353130343a333930303a3a2f34302d3430203d3e20323638343235.roa
Signing time: Tue 07 Apr 2026 20:12:18 +0000
ROA not before: Tue 07 Apr 2026 20:07:18 +0000
ROA not after: Tue 06 Apr 2027 20:12:18 +0000
asID: 268425
IP address blocks: 2804:5104:3900::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/E968F08C3BD0A821112BDBD86914ED5964A1FF29.crl
rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/E968F08C3BD0A821112BDBD86914ED5964A1FF29.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E968F08C3BD0A821112BDBD86914ED5964A1FF29.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 10 Apr 2026 13:29:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:51:8c:f2:a2:71:8e:e3:8d:56:6b:68:4e:50:76:97:21:36:a3:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E968F08C3BD0A821112BDBD86914ED5964A1FF29
Validity
Not Before: Apr 7 20:07:18 2026 GMT
Not After : Apr 6 20:12:18 2027 GMT
Subject: CN=78F4AFB3703BA8E14EF4D46D8AFF2D99CA3A4218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0a:1b:0f:bb:01:56:a6:71:2d:a6:c7:f8:08:
25:f5:77:0c:dc:14:5b:9f:be:08:32:d6:70:4d:85:
0c:c3:76:ff:ef:5a:03:ee:bc:9e:58:c9:4f:9c:90:
4a:cf:54:9f:c0:a8:91:86:72:e1:51:0f:1a:bd:0d:
6c:a1:3b:a0:0c:c9:71:2f:f1:de:8f:f6:a3:7f:81:
bc:9a:a1:7c:8a:68:d1:c8:69:14:51:01:dc:46:5f:
0a:9e:77:b3:9d:0b:f2:1f:44:2f:72:26:84:3d:78:
c1:2c:36:dd:16:ec:e0:74:33:cb:c6:9b:cc:77:fa:
7f:2f:2a:1d:2e:3e:14:53:a8:f4:ca:97:49:d5:cf:
bc:d0:53:18:af:27:c5:d3:69:11:d5:06:bc:73:7e:
f1:b7:61:78:d4:28:d7:a8:c7:36:43:c2:14:28:c6:
97:3f:34:86:f6:b9:c5:9a:d3:90:10:9a:09:9a:53:
8f:ad:a3:26:e5:ca:60:db:44:39:78:14:dd:e2:50:
61:f1:4a:01:98:2e:b5:bc:aa:f2:67:aa:7c:c5:64:
36:7f:26:eb:dc:24:a6:11:c7:b7:7d:a8:30:b7:bb:
9f:15:26:78:58:6b:5c:9c:89:94:f6:f4:e1:fe:b0:
6f:ce:90:cb:5a:8b:4e:9a:20:1d:47:7b:9a:e6:91:
b6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F4:AF:B3:70:3B:A8:E1:4E:F4:D4:6D:8A:FF:2D:99:CA:3A:42:18
X509v3 Authority Key Identifier:
keyid:E9:68:F0:8C:3B:D0:A8:21:11:2B:DB:D8:69:14:ED:59:64:A1:FF:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/E968F08C3BD0A821112BDBD86914ED5964A1FF29.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E968F08C3BD0A821112BDBD86914ED5964A1FF29.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/323830343a353130343a333930303a3a2f34302d3430203d3e20323638343235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5104:3900::/40
Signature Algorithm: sha256WithRSAEncryption
c6:84:a8:3f:f8:a6:73:f7:7e:d4:cd:b0:33:ea:b4:1e:e6:90:
79:bc:90:48:75:46:75:cb:c4:78:d1:1b:95:32:8a:8e:a7:26:
78:08:b7:f7:9c:dd:a6:10:9a:25:ed:87:7a:79:72:28:91:de:
f7:6b:d3:f3:34:94:16:29:cf:91:9e:ed:5f:f6:2e:7d:83:2e:
26:b6:48:db:01:97:43:e8:28:45:5e:d3:3f:6a:15:eb:25:5e:
c6:56:c7:a0:f5:a6:82:1f:20:89:96:f4:94:ef:4f:59:60:ca:
e2:04:0d:80:e6:49:06:56:52:ab:73:a3:b8:da:ca:4f:ab:da:
a6:87:79:f1:79:a8:e5:8c:0a:3a:1e:48:95:9a:c5:40:1a:73:
8e:6b:45:0a:d0:7e:58:0d:ab:1a:24:ba:cf:ec:0e:67:e4:55:
55:ac:92:af:ed:9f:4c:d9:41:38:ae:df:80:4c:26:c5:70:4f:
c3:38:bf:91:2f:b9:5a:50:d2:af:14:fc:62:16:94:52:01:b4:
6e:22:55:59:c5:e0:cb:49:aa:0f:0c:26:1d:38:b3:8d:0d:73:
9c:a5:8f:79:ed:22:44:01:0b:d9:ff:44:f2:59:bf:c8:81:46:
81:18:8e:de:77:0d:0b:75:18:cd:9d:58:b6:21:93:1c:b8:b4:
45:0e:18:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 14:29:54 2026 by rpki-client