
$ rpki-client -vvvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/323830343a323636343a383030303a3a2f33342d3334203d3e203532373231.roa
File: 323830343a323636343a383030303a3a2f33342d3334203d3e203532373231.roa (raw, json)
Hash identifier: 7t8ZrS73HZsEAwbycH5Cxm6VZVc5nPwJrHzQerajzgs=
Subject key identifier: 8E:00:8F:F3:16:B3:89:53:E8:EA:F1:5C:A3:3F:66:6A:CF:7A:B5:3B
Certificate issuer: /CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998
Certificate serial: 5604580C6AF082C135463AD44F2DDEA267AC5D67
Authority key identifier: CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/323830343a323636343a383030303a3a2f33342d3334203d3e203532373231.roa
Signing time: Tue 22 Sep 2026 17:12:04 +0000
ROA not before: Tue 22 Sep 2026 17:07:04 +0000
ROA not after: Tue 21 Sep 2027 17:12:04 +0000
asID: 52721
IP address blocks: 2804:2664:8000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.crl
rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Oct 2026 18:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:04:58:0c:6a:f0:82:c1:35:46:3a:d4:4f:2d:de:a2:67:ac:5d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998
Validity
Not Before: Sep 22 17:07:04 2026 GMT
Not After : Sep 21 17:12:04 2027 GMT
Subject: CN=8E008FF316B38953E8EAF15CA33F666ACF7AB53B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4e:c1:b3:14:b1:03:63:80:dd:dd:f8:81:bf:
70:b3:b3:12:06:75:62:34:f6:b1:b7:46:69:66:93:
d8:02:66:92:10:28:11:2d:14:dc:5d:d9:08:e0:39:
57:dc:d8:c2:09:3f:0c:02:b7:5b:14:65:e5:fe:bb:
3c:7e:7e:6c:71:97:05:f3:92:a6:2e:da:96:4a:81:
ce:b1:a6:45:de:e8:43:06:d9:5e:44:09:15:d7:d1:
d3:a4:b0:53:59:6d:d3:b5:d4:5f:9f:ff:de:fb:6f:
89:f0:87:ca:95:c5:14:bd:c5:d8:af:5b:7b:6b:cb:
67:65:8d:aa:d4:ca:77:e0:0d:98:ed:2a:0f:eb:67:
69:fe:5f:4e:8f:84:9f:50:d3:57:01:5d:03:3d:ac:
ee:51:e6:0c:29:5e:5a:b5:c4:47:61:ac:a0:b1:eb:
86:40:23:d3:45:6f:19:30:55:8d:d7:17:b8:ea:1a:
aa:f7:7d:13:cb:6a:c1:1c:b8:06:39:10:60:44:f1:
75:48:96:6b:53:e7:26:ab:b3:bf:54:bb:e3:3c:68:
91:af:c0:61:1b:80:e5:b8:2e:4a:03:87:f6:d6:08:
50:03:9a:0e:92:57:61:eb:53:8e:a1:07:d0:2d:71:
3a:0e:bb:8e:fe:f7:02:a3:45:5d:90:73:a0:96:84:
90:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:00:8F:F3:16:B3:89:53:E8:EA:F1:5C:A3:3F:66:6A:CF:7A:B5:3B
X509v3 Authority Key Identifier:
keyid:CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/323830343a323636343a383030303a3a2f33342d3334203d3e203532373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2664:8000::/34
Signature Algorithm: sha256WithRSAEncryption
1f:fc:8c:ea:12:1c:20:cd:6e:a7:5b:99:fb:14:89:81:2a:ec:
6d:1e:6a:fc:7c:32:95:a6:8d:86:f5:8a:76:01:20:c9:db:07:
ea:d1:a9:54:0b:10:58:33:0e:f3:9b:05:b3:21:be:7d:2c:61:
5b:b7:92:48:ac:4e:fe:37:aa:cc:47:11:76:d4:ac:cd:af:72:
87:a8:7d:76:6a:72:ad:0c:24:54:b2:ad:47:03:5c:f4:ee:14:
32:30:f2:af:2a:0c:04:ad:37:6f:7a:0c:33:e8:60:cb:f8:4f:
ed:92:bb:1a:d1:66:15:44:3b:9f:a3:37:00:07:92:3f:c5:7d:
16:da:23:62:2a:89:bb:39:c2:fc:be:34:3a:82:81:8f:b8:ed:
aa:10:cc:46:ed:0d:53:67:c6:ca:c8:b9:c3:30:2a:50:1a:32:
48:0f:27:fe:65:f9:be:b9:cc:e0:f7:9f:67:b4:d3:af:ea:d4:
78:43:09:bd:d1:7b:6a:84:96:15:d4:16:99:bd:86:5a:b3:31:
2a:dc:84:c3:45:20:47:52:81:6f:8a:80:ec:e9:e3:22:38:59:
9d:a3:f0:d8:83:d1:86:81:17:f6:5f:94:00:a3:cb:c1:b6:b6:
51:6d:b8:1b:60:b3:f9:01:41:8e:49:23:ce:e9:b6:d5:46:d0:
27:09:21:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 09:17:50 2026 by rpki-client