
$ rpki-client -vvvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/323830343a323636343a343030303a3a2f33342d3334203d3e203532373231.roa
File: 323830343a323636343a343030303a3a2f33342d3334203d3e203532373231.roa (raw, json)
Hash identifier: Vm89iSe9hU6miINV7rW+GwcrxgbRXFg6q6/yPWbe/fU=
Subject key identifier: 47:98:71:FD:6C:CD:C2:D7:7A:03:E9:A3:3B:11:4F:BB:EF:40:76:E4
Certificate issuer: /CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998
Certificate serial: 28590C9336E19431AC4FA7600772540056AAF3FB
Authority key identifier: CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/323830343a323636343a343030303a3a2f33342d3334203d3e203532373231.roa
Signing time: Tue 22 Sep 2026 17:11:58 +0000
ROA not before: Tue 22 Sep 2026 17:06:58 +0000
ROA not after: Tue 21 Sep 2027 17:11:58 +0000
asID: 52721
IP address blocks: 2804:2664:4000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.crl
rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Oct 2026 18:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:59:0c:93:36:e1:94:31:ac:4f:a7:60:07:72:54:00:56:aa:f3:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998
Validity
Not Before: Sep 22 17:06:58 2026 GMT
Not After : Sep 21 17:11:58 2027 GMT
Subject: CN=479871FD6CCDC2D77A03E9A33B114FBBEF4076E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1a:8c:03:12:d4:36:92:31:54:34:06:1e:66:
8a:59:cc:0b:06:4d:e4:92:09:5a:aa:4c:e1:a9:cb:
b0:31:89:9b:07:1a:a5:1c:6e:64:30:05:d7:94:eb:
19:7d:c5:2f:c7:e9:fd:da:50:5b:86:d8:e5:3a:04:
97:6d:5c:d9:f5:65:de:00:79:88:aa:a9:8c:d8:ae:
06:95:e7:e0:7c:9a:b0:f2:ab:c3:e2:34:00:47:55:
1f:7c:7b:6c:6c:07:05:a9:cd:89:33:6b:8f:1b:27:
8d:09:1d:25:59:2a:45:4e:90:40:39:9d:50:ac:bc:
35:ec:75:bf:58:e8:f1:55:d4:93:1b:eb:9f:6e:48:
d3:1c:9d:fa:bf:a3:b2:c8:8a:0b:84:49:8f:39:6e:
f3:a8:17:e6:1d:82:aa:b6:af:9b:b7:43:47:eb:13:
d4:34:5f:db:92:5f:aa:21:b0:95:53:2e:11:4e:4e:
a7:fd:cf:fd:3a:4e:38:9a:5c:06:74:05:67:a3:74:
77:f9:1d:79:1d:8f:b3:b8:ea:51:76:12:53:62:09:
c1:5d:4d:8d:c9:8b:49:26:eb:ff:c2:24:b8:de:2a:
1b:ab:b1:90:b2:cd:ad:9f:6b:b7:dd:3d:b5:63:4b:
5f:46:4a:11:4c:30:61:64:e2:3f:41:91:c5:eb:d4:
15:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:98:71:FD:6C:CD:C2:D7:7A:03:E9:A3:3B:11:4F:BB:EF:40:76:E4
X509v3 Authority Key Identifier:
keyid:CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/323830343a323636343a343030303a3a2f33342d3334203d3e203532373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2664:4000::/34
Signature Algorithm: sha256WithRSAEncryption
45:02:35:52:d4:5d:12:36:27:7c:b1:94:7a:b3:1c:23:c2:03:
c8:34:3e:67:4f:06:c3:ef:db:c3:14:a9:d4:cd:3c:07:6a:e0:
d6:55:d8:eb:fe:aa:47:b7:7b:da:1e:28:b6:4c:d0:44:e7:73:
75:17:32:5f:c1:32:d1:52:af:d9:1d:08:96:c1:96:0e:15:43:
9b:03:6a:5b:85:22:5a:30:97:c5:dd:a6:65:a8:55:37:11:e7:
95:69:a8:ee:01:b5:b4:90:d2:e5:86:91:d9:df:20:26:ec:5b:
e8:c8:de:c3:7a:c8:50:80:73:e9:00:bc:25:1d:3b:cb:e8:1d:
10:27:34:37:91:49:4f:80:d8:89:cf:5a:74:57:9a:d0:56:50:
cb:f6:8b:6a:af:1b:ad:d6:93:b0:91:6d:5a:af:8b:76:e4:c7:
65:4d:26:93:e1:c3:91:57:0d:37:29:56:51:aa:2f:c7:c6:cb:
12:26:71:34:3e:94:e6:4f:99:62:68:3c:07:7a:b8:d2:b2:05:
24:1c:db:7e:10:b6:3e:df:01:dc:94:87:23:1e:26:b3:15:d6:
b4:21:6f:64:68:31:88:2f:f1:d2:3f:75:52:01:68:8a:2a:5a:
92:3d:8e:c9:fe:06:91:b8:8a:a3:9f:61:37:5e:a7:b1:57:c9:
1d:d7:c9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 09:15:23 2026 by rpki-client