
$ rpki-client -vvf rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/323830343a353130343a3a2f33332d3333203d3e20323638343235.roa
File: 323830343a353130343a3a2f33332d3333203d3e20323638343235.roa (raw, json)
Hash identifier: rIovXqs/T7fPf7iSewqQExUyNvHaGDozDh7XSjXqrSw=
Subject key identifier: 3B:59:9D:3F:43:20:BE:D5:2C:A9:FA:62:54:38:6C:6F:D8:3A:E2:35
Certificate issuer: /CN=E968F08C3BD0A821112BDBD86914ED5964A1FF29
Certificate serial: 42E1DE5BCDFA2A03D51DF474C4D7C01F90752AA1
Authority key identifier: E9:68:F0:8C:3B:D0:A8:21:11:2B:DB:D8:69:14:ED:59:64:A1:FF:29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E968F08C3BD0A821112BDBD86914ED5964A1FF29.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/323830343a353130343a3a2f33332d3333203d3e20323638343235.roa
Signing time: Tue 07 Apr 2026 19:12:16 +0000
ROA not before: Tue 07 Apr 2026 19:07:16 +0000
ROA not after: Tue 06 Apr 2027 19:12:16 +0000
asID: 268425
IP address blocks: 2804:5104::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/E968F08C3BD0A821112BDBD86914ED5964A1FF29.crl
rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/E968F08C3BD0A821112BDBD86914ED5964A1FF29.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E968F08C3BD0A821112BDBD86914ED5964A1FF29.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 10 Apr 2026 13:29:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:e1:de:5b:cd:fa:2a:03:d5:1d:f4:74:c4:d7:c0:1f:90:75:2a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E968F08C3BD0A821112BDBD86914ED5964A1FF29
Validity
Not Before: Apr 7 19:07:16 2026 GMT
Not After : Apr 6 19:12:16 2027 GMT
Subject: CN=3B599D3F4320BED52CA9FA6254386C6FD83AE235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:77:93:91:65:80:99:0f:fb:bd:c8:e3:39:5c:
19:dd:d4:3e:a2:d8:87:0d:71:89:37:2a:8d:a3:58:
5d:a2:57:63:c3:da:82:c2:e9:a9:3d:93:b1:31:31:
5c:9f:1c:07:24:25:d9:88:9a:bf:68:b3:81:15:bc:
c6:f9:be:3e:e7:b6:d5:f2:53:45:b2:af:99:ee:f2:
39:d3:d7:6e:7f:09:c8:c5:e3:f6:7b:9e:64:24:70:
8a:21:28:1d:34:53:9d:2c:4f:09:9e:fb:7a:c0:32:
19:88:5f:d5:b0:81:63:c8:10:15:0b:5d:d7:c1:e2:
2e:cd:4d:a3:c5:21:e8:f6:75:e0:db:78:be:65:b7:
10:5a:b6:22:5a:b8:1e:da:6e:1a:1c:c7:82:c6:5f:
67:65:22:3a:e9:62:eb:59:7a:f6:38:dd:5c:9f:12:
de:cb:02:b6:c5:33:7a:92:c4:0e:56:84:d7:44:89:
83:86:5d:20:51:63:38:cb:76:1a:1e:e9:c9:8e:67:
84:72:47:4c:97:93:de:3e:dd:0a:c7:f7:e9:cb:96:
ed:a4:e1:09:f2:a6:a5:60:97:a3:d4:89:f2:b2:f9:
bd:94:74:02:e6:ba:f1:c6:53:54:75:37:2d:59:11:
36:04:60:66:4c:f7:0c:05:6e:20:c3:b2:e2:cc:38:
79:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:59:9D:3F:43:20:BE:D5:2C:A9:FA:62:54:38:6C:6F:D8:3A:E2:35
X509v3 Authority Key Identifier:
keyid:E9:68:F0:8C:3B:D0:A8:21:11:2B:DB:D8:69:14:ED:59:64:A1:FF:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/E968F08C3BD0A821112BDBD86914ED5964A1FF29.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E968F08C3BD0A821112BDBD86914ED5964A1FF29.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/323830343a353130343a3a2f33332d3333203d3e20323638343235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5104::/33
Signature Algorithm: sha256WithRSAEncryption
ba:1c:46:57:f3:91:62:25:bc:6c:51:b0:c0:b3:53:d3:1d:ef:
65:37:4c:2b:5c:10:f2:33:d3:9b:79:d6:e6:9c:3e:23:3a:2f:
0e:85:7b:a7:f2:a4:2d:ae:47:cc:2e:48:9d:a7:c2:d4:1e:7e:
59:9a:a4:e3:0a:b5:ce:82:5c:87:74:28:09:64:dc:43:4d:e0:
77:c3:27:66:58:5c:c9:8d:25:ca:1e:ba:60:0a:fb:c5:c1:40:
a8:b8:60:0e:55:63:eb:56:79:ea:e8:06:72:bf:75:66:b6:77:
03:1b:8a:0c:56:45:bb:82:10:e3:f0:9e:5b:73:12:04:26:0a:
0b:7a:50:4a:8f:17:1e:66:f8:74:65:be:00:08:58:9b:1f:74:
04:35:dd:7b:85:8d:7e:65:ba:d1:b6:91:94:33:65:a3:b2:79:
30:b2:12:66:87:82:14:1f:65:d8:28:8f:34:a8:f6:30:a7:63:
71:66:a8:2e:9b:48:75:78:c1:4f:42:24:80:68:43:a0:9b:d2:
06:18:2f:16:db:b2:62:00:57:02:a2:bd:cf:92:38:05:83:07:
a1:0f:94:b8:a5:22:b2:2a:bb:88:5a:a2:96:02:28:01:18:8b:
a0:ae:ae:8b:72:37:4c:23:e2:8d:19:6a:4e:49:27:63:61:30:
5a:1c:da:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 20:29:23 2026 by rpki-client