
$ rpki-client -vvvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/323830343a323636343a3a2f33322d3332203d3e203532373231.roa
File: 323830343a323636343a3a2f33322d3332203d3e203532373231.roa (raw, json)
Hash identifier: 3rRNA02IVlSgCpJmLMk8sE2oOm6Wf/xSTwuYOZnNYbk=
Subject key identifier: A9:A9:DF:F8:6F:08:9D:84:0B:1F:77:7F:05:66:79:7C:82:83:7C:90
Certificate issuer: /CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998
Certificate serial: 3B95806CD1A43779869E586B0AB006D7E5C6C1AF
Authority key identifier: CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/323830343a323636343a3a2f33322d3332203d3e203532373231.roa
Signing time: Tue 22 Sep 2026 17:11:58 +0000
ROA not before: Tue 22 Sep 2026 17:06:58 +0000
ROA not after: Tue 21 Sep 2027 17:11:58 +0000
asID: 52721
IP address blocks: 2804:2664::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.crl
rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Oct 2026 10:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:95:80:6c:d1:a4:37:79:86:9e:58:6b:0a:b0:06:d7:e5:c6:c1:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998
Validity
Not Before: Sep 22 17:06:58 2026 GMT
Not After : Sep 21 17:11:58 2027 GMT
Subject: CN=A9A9DFF86F089D840B1F777F0566797C82837C90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c4:94:f0:6c:87:a4:1a:02:e5:58:7b:12:09:
c4:ee:47:16:24:12:ec:39:52:fb:0d:af:02:56:4a:
61:66:83:83:72:b2:99:33:dc:0b:ce:80:f4:33:b9:
28:98:58:c1:d3:f1:b8:98:6f:52:d4:44:b3:78:55:
1a:67:c1:fc:ef:93:72:5d:98:67:f5:ba:d2:b6:39:
95:4b:61:c0:fb:25:01:bd:4a:c2:40:9f:5c:1e:d2:
c1:e3:6e:f9:e5:1b:55:38:31:16:21:83:3a:ad:1e:
25:0f:57:6f:00:e8:48:a3:fe:f1:71:2b:9e:00:f9:
66:88:08:40:33:0a:d2:3d:e2:f0:29:00:45:33:27:
d6:7f:33:61:22:ad:91:10:ca:c7:87:24:7e:cc:ec:
ea:95:67:b5:8c:2c:91:5b:a4:a5:06:61:87:ba:ce:
e9:79:d0:80:35:ed:60:7c:5c:c9:40:0c:a5:61:25:
47:4c:dc:5a:50:79:7b:b4:e2:89:34:09:ee:5c:bb:
c2:fa:0a:83:16:15:66:9f:d2:36:11:fc:b5:6b:00:
a0:b0:29:7d:70:e1:f5:fa:0f:ad:82:f6:01:3e:22:
6a:11:ce:94:d0:95:7e:00:f9:a3:77:c2:5e:11:85:
7a:2e:57:6f:06:7e:eb:29:01:3b:a0:ae:6d:ca:9d:
8e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A9:DF:F8:6F:08:9D:84:0B:1F:77:7F:05:66:79:7C:82:83:7C:90
X509v3 Authority Key Identifier:
keyid:CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/323830343a323636343a3a2f33322d3332203d3e203532373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2664::/32
Signature Algorithm: sha256WithRSAEncryption
3b:3f:88:ac:40:87:f3:6e:6f:b0:fd:c5:fb:5b:2c:ff:fc:76:
e2:82:b9:da:1c:c0:07:e7:02:8d:09:ca:8b:28:a4:5b:74:da:
b6:0f:b6:80:1b:7f:b5:5d:22:b4:d5:1c:74:83:97:b2:9f:ad:
7b:8d:ef:f5:cb:ac:b4:be:3b:17:99:bb:2a:52:d4:42:9f:86:
c6:e6:b2:eb:d8:fc:da:21:31:da:67:90:23:94:1f:73:b6:23:
cc:c4:a4:2f:84:d5:ff:a5:d8:8f:fc:c2:01:db:9e:99:da:6c:
5f:c6:4c:1d:59:e0:60:ed:e2:6b:b4:22:98:8a:0b:eb:21:93:
98:6b:c4:04:f2:46:7e:25:b4:3c:88:43:89:36:41:74:33:77:
65:cc:29:18:9a:8d:8f:93:12:4b:24:97:a1:b0:d4:42:5d:6e:
7f:18:b0:54:bb:6e:ed:d3:39:4c:ff:ca:7e:98:c6:b8:a1:da:
d2:44:48:e1:26:66:09:d9:45:ba:5a:b2:e6:e6:64:ee:be:0a:
42:49:76:4c:e1:fa:46:8a:f9:2a:e8:d9:9b:82:b0:ee:64:26:
f6:c8:3a:77:49:8e:96:4b:7b:7e:90:bc:95:72:cb:93:a6:0b:
16:fc:3c:7f:a1:35:6c:5b:1c:b2:9f:7a:b6:dd:28:56:80:85:
34:0d:aa:05
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUO5WAbNGkN3mGnlhrCrAG1+XGwa8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Q2Rjk5Rjk2ODI3MDZDODBEODU5Q0I3RkUxRTQwQjA3
RUJCMDk5ODAeFw0yNjA5MjIxNzA2NThaFw0yNzA5MjExNzExNThaMDMxMTAvBgNV
BAMTKEE5QTlERkY4NkYwODlEODQwQjFGNzc3RjA1NjY3OTdDODI4MzdDOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnxJTwbIekGgLlWHsSCcTuRxYk
Euw5UvsNrwJWSmFmg4Nyspkz3AvOgPQzuSiYWMHT8biYb1LURLN4VRpnwfzvk3Jd
mGf1utK2OZVLYcD7JQG9SsJAn1we0sHjbvnlG1U4MRYhgzqtHiUPV28A6Eij/vFx
K54A+WaICEAzCtI94vApAEUzJ9Z/M2EirZEQyseHJH7M7OqVZ7WMLJFbpKUGYYe6
zul50IA17WB8XMlADKVhJUdM3FpQeXu04ok0Ce5cu8L6CoMWFWaf0jYR/LVrAKCw
KX1w4fX6D62C9gE+ImoRzpTQlX4A+aN3wl4RhXouV28GfuspATugrm3KnY4dAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUqanf+G8InYQLH3d/BWZ5fIKDfJAwHwYDVR0j
BBgwFoAUzW+Z+WgnBsgNhZy3/h5AsH67CZgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlJSelB1MjNaM2FkSkM5ZHF2ZVdLc2pSaHVyVnpXem1iNEphQm9BQlhZ
cWUvMC9DRDZGOTlGOTY4MjcwNkM4MEQ4NTlDQjdGRTFFNDBCMDdFQkIwOTk4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NENkY5OUY5NjgyNzA2Qzgw
RDg1OUNCN0ZFMUU0MEIwN0VCQjA5OTguY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJSUnpQdTIzWjNhZEpDOWRxdmVXS3NqUmh1clZ6V3ptYjRKYUJvQUJYWXFlLzAv
MzIzODMwMzQzYTMyMzYzNjM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzUzMjM3
MzIzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEJmQwDQYJKoZIhvcNAQELBQADggEBADs/iKxAh/Nu
b7D9xftbLP/8duKCudocwAfnAo0JyosopFt02rYPtoAbf7VdIrTVHHSDl7KfrXuN
7/XLrLS+OxeZuypS1EKfhsbmsuvY/NohMdpnkCOUH3O2I8zEpC+E1f+l2I/8wgHb
npnabF/GTB1Z4GDt4mu0IpiKC+shk5hrxATyRn4ltDyIQ4k2QXQzd2XMKRiajY+T
Ekskl6Gw1EJdbn8YsFS7bu3TOUz/yn6Yxrih2tJESOEmZgnZRbpasubmZO6+CkJJ
dkzh+kaK+Sro2ZuCsO5kJvbIOndJjpZLe36QvJVyy5OmCxb8PH+hNWxbHLKferbd
KFaAhTQNqgU=
-----END CERTIFICATE-----
Generated at Fri Oct 16 13:31:05 2026 by rpki-client