
$ rpki-client -vvvf rpki-repo.registro.br/repo/2jWaLStsnbCpUGuc7YQCE3iQqNjjgcuEE8er7Nx18JpG/0/323830343a376630633a336534303a3a2f34342d3434203d3e20323731363633.roa
File: 323830343a376630633a336534303a3a2f34342d3434203d3e20323731363633.roa (raw, json)
Hash identifier: K1i2ibX4slRmf/d8Hf6Jw0qTHe4HYeR/sU5OzSDpbAA=
Subject key identifier: 5A:80:03:4C:34:39:98:FA:A0:ED:38:3B:20:25:FE:EB:97:9C:B1:0F
Certificate issuer: /CN=C157E5F588C0832A94818A6C0EEC46D363140D95
Certificate serial: 0EF3E173F9C8E948E7A4E5AB7FF1DA0CAA5384FF
Authority key identifier: C1:57:E5:F5:88:C0:83:2A:94:81:8A:6C:0E:EC:46:D3:63:14:0D:95
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C157E5F588C0832A94818A6C0EEC46D363140D95.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2jWaLStsnbCpUGuc7YQCE3iQqNjjgcuEE8er7Nx18JpG/0/323830343a376630633a336534303a3a2f34342d3434203d3e20323731363633.roa
Signing time: Mon 03 Aug 2026 12:46:52 +0000
ROA not before: Mon 03 Aug 2026 12:41:52 +0000
ROA not after: Mon 02 Aug 2027 12:46:52 +0000
asID: 271663
IP address blocks: 2804:7f0c:3e40::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2jWaLStsnbCpUGuc7YQCE3iQqNjjgcuEE8er7Nx18JpG/0/C157E5F588C0832A94818A6C0EEC46D363140D95.crl
rsync://rpki-repo.registro.br/repo/2jWaLStsnbCpUGuc7YQCE3iQqNjjgcuEE8er7Nx18JpG/0/C157E5F588C0832A94818A6C0EEC46D363140D95.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C157E5F588C0832A94818A6C0EEC46D363140D95.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 25 Aug 2026 03:16:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:f3:e1:73:f9:c8:e9:48:e7:a4:e5:ab:7f:f1:da:0c:aa:53:84:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C157E5F588C0832A94818A6C0EEC46D363140D95
Validity
Not Before: Aug 3 12:41:52 2026 GMT
Not After : Aug 2 12:46:52 2027 GMT
Subject: CN=5A80034C343998FAA0ED383B2025FEEB979CB10F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:14:7e:a5:43:b1:df:ce:60:00:77:31:d4:c6:
b0:e6:a2:86:34:d2:60:6c:5e:6a:27:f0:5d:df:cc:
fa:04:75:8e:9a:a3:93:85:9a:35:7f:28:da:54:21:
27:1f:ff:69:38:54:30:e1:32:e1:d2:da:76:ff:f0:
c9:e2:27:48:0a:a3:b3:3b:f6:e4:8a:e3:f2:3f:f3:
bd:c5:ba:17:61:f1:6f:c3:46:29:55:8e:3d:ef:61:
df:71:1e:43:6e:90:9f:6d:91:2b:de:96:df:73:e8:
99:e4:fe:a1:1c:2c:3f:4a:34:dd:50:86:9e:5d:28:
7d:09:ae:9c:cd:2f:33:f5:48:43:fc:e8:91:c6:b0:
18:ee:a5:03:c5:5d:95:13:24:c8:a7:33:48:5f:ed:
e3:8a:c4:b1:fd:87:1d:97:2b:80:9d:48:64:bc:c8:
d7:02:4d:3e:73:91:a3:97:44:6c:64:be:5c:b8:f7:
b9:e4:c9:ce:7b:3d:b9:f7:19:a6:2b:59:93:4f:07:
98:7f:4e:5e:d2:ab:1d:1a:0e:14:a7:ed:c1:9b:cc:
15:19:35:24:0d:b2:2a:f2:b4:63:ef:6f:45:fc:89:
81:ea:42:9d:81:a1:55:b5:01:f3:dd:b1:32:7f:ea:
2b:39:69:01:1a:b4:5b:37:63:d3:c1:fc:0c:f3:40:
0f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:80:03:4C:34:39:98:FA:A0:ED:38:3B:20:25:FE:EB:97:9C:B1:0F
X509v3 Authority Key Identifier:
keyid:C1:57:E5:F5:88:C0:83:2A:94:81:8A:6C:0E:EC:46:D3:63:14:0D:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2jWaLStsnbCpUGuc7YQCE3iQqNjjgcuEE8er7Nx18JpG/0/C157E5F588C0832A94818A6C0EEC46D363140D95.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C157E5F588C0832A94818A6C0EEC46D363140D95.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2jWaLStsnbCpUGuc7YQCE3iQqNjjgcuEE8er7Nx18JpG/0/323830343a376630633a336534303a3a2f34342d3434203d3e20323731363633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7f0c:3e40::/44
Signature Algorithm: sha256WithRSAEncryption
34:d7:07:bd:57:89:fe:07:6e:dc:7a:97:52:d5:91:66:2e:ca:
95:fb:97:20:33:7e:b1:23:03:3a:c8:6a:a2:8e:5f:5b:43:0c:
32:b8:81:5e:df:69:ca:63:14:ff:8a:cb:91:b6:fe:b3:f4:06:
2e:29:78:59:db:0f:ac:a0:d1:4f:ff:a4:30:96:f9:78:7c:58:
a2:46:69:75:e4:7e:59:bf:74:dc:be:d9:29:58:75:96:36:41:
89:8d:a3:9b:ea:9d:43:3d:3a:ee:5d:ac:19:d8:4a:a5:8d:cb:
f6:50:bf:8e:c2:58:a1:cd:41:a9:83:21:73:db:48:55:82:15:
c5:d2:f7:8a:47:7b:01:18:c1:39:0c:e3:a6:19:e0:5d:b6:0e:
2d:2d:25:2a:32:94:29:6e:79:74:5e:c1:f1:b0:84:68:bc:0e:
4c:4d:a2:17:26:67:3a:28:de:f1:25:dc:fc:41:29:e9:ba:9e:
a3:14:07:46:10:c0:61:2b:55:23:d8:13:d2:16:68:44:83:eb:
2b:4d:af:c4:27:55:e0:71:03:ab:91:a0:79:b4:31:2f:76:fb:
f0:c1:73:49:59:b1:5d:31:87:40:49:54:79:7f:1e:c9:63:f1:
24:4a:ef:02:7f:11:e3:3b:a5:0d:ce:21:4c:1e:11:dd:bf:c3:
81:d2:b0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 05:58:59 2026 by rpki-client