
$ rpki-client -vvvf rpki-repo.registro.br/repo/2tciCTnqTq3bsatDB2UXRKVEQksyLKZEaZ8kQsQsjM6B/0/323830343a356336383a3a2f33322d313238203d3e20323638393037.roa
File: 323830343a356336383a3a2f33322d313238203d3e20323638393037.roa (raw, json)
Hash identifier: O9N0DlqOVBIk9Z/afrDOKsrn88qRywBiZWSqCzi/5cE=
Subject key identifier: F0:87:2F:5D:63:9C:73:B7:5B:B8:AC:26:C4:AD:06:3C:27:E2:26:9E
Certificate issuer: /CN=3C8F07685F793211CE3D58E8AE40E3335D01AC65
Certificate serial: 45C50777951D7B45CDADCB8ABEEC04C3553140EC
Authority key identifier: 3C:8F:07:68:5F:79:32:11:CE:3D:58:E8:AE:40:E3:33:5D:01:AC:65
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8F07685F793211CE3D58E8AE40E3335D01AC65.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2tciCTnqTq3bsatDB2UXRKVEQksyLKZEaZ8kQsQsjM6B/0/323830343a356336383a3a2f33322d313238203d3e20323638393037.roa
Signing time: Thu 06 Aug 2026 14:45:49 +0000
ROA not before: Thu 06 Aug 2026 14:40:49 +0000
ROA not after: Thu 05 Aug 2027 14:45:49 +0000
asID: 268907
IP address blocks: 2804:5c68::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2tciCTnqTq3bsatDB2UXRKVEQksyLKZEaZ8kQsQsjM6B/0/3C8F07685F793211CE3D58E8AE40E3335D01AC65.crl
rsync://rpki-repo.registro.br/repo/2tciCTnqTq3bsatDB2UXRKVEQksyLKZEaZ8kQsQsjM6B/0/3C8F07685F793211CE3D58E8AE40E3335D01AC65.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8F07685F793211CE3D58E8AE40E3335D01AC65.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 26 Aug 2026 15:09:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:c5:07:77:95:1d:7b:45:cd:ad:cb:8a:be:ec:04:c3:55:31:40:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C8F07685F793211CE3D58E8AE40E3335D01AC65
Validity
Not Before: Aug 6 14:40:49 2026 GMT
Not After : Aug 5 14:45:49 2027 GMT
Subject: CN=F0872F5D639C73B75BB8AC26C4AD063C27E2269E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d6:72:45:7e:d1:96:23:c8:0a:d8:36:f6:01:
44:29:49:03:d4:2a:78:d9:a3:05:da:57:c9:50:a7:
38:4d:61:1f:92:13:57:17:f8:45:2a:7b:5d:97:00:
e8:13:a1:13:93:3a:38:79:c5:ab:e4:c9:6e:41:03:
5e:33:64:c9:00:69:21:58:71:07:98:33:07:a4:1d:
83:1f:70:98:1f:45:e0:74:d0:a1:6a:10:23:c6:46:
2b:d4:25:c7:ad:99:13:93:b2:35:c2:93:61:72:e8:
67:61:ca:ee:c8:ba:18:9e:c1:b2:c4:ca:ef:84:79:
48:ee:d2:73:17:0c:cb:fc:d7:9a:3d:86:f9:53:30:
c7:69:d1:b3:eb:ab:53:04:77:b8:0f:b3:d6:2a:24:
3f:c3:5c:e3:4e:6e:92:5b:2f:d0:89:70:61:d8:72:
28:25:85:18:4d:7e:87:37:5b:20:32:db:64:98:b3:
e1:b6:d6:2b:a1:35:c7:7b:8a:1d:95:89:c9:d4:bc:
84:50:44:4c:41:21:a6:9d:a0:03:3b:46:74:34:b0:
69:60:ec:7b:4c:10:c3:8e:96:03:19:c5:7d:22:b0:
51:47:b5:83:0b:2e:ad:58:2b:a5:09:5f:b1:0a:90:
88:10:22:b7:88:60:0c:db:cd:5d:a2:79:26:8f:54:
8e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:87:2F:5D:63:9C:73:B7:5B:B8:AC:26:C4:AD:06:3C:27:E2:26:9E
X509v3 Authority Key Identifier:
keyid:3C:8F:07:68:5F:79:32:11:CE:3D:58:E8:AE:40:E3:33:5D:01:AC:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2tciCTnqTq3bsatDB2UXRKVEQksyLKZEaZ8kQsQsjM6B/0/3C8F07685F793211CE3D58E8AE40E3335D01AC65.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8F07685F793211CE3D58E8AE40E3335D01AC65.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tciCTnqTq3bsatDB2UXRKVEQksyLKZEaZ8kQsQsjM6B/0/323830343a356336383a3a2f33322d313238203d3e20323638393037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5c68::/32
Signature Algorithm: sha256WithRSAEncryption
3b:4e:75:73:9c:4b:ca:fc:1e:b0:4d:e8:49:f4:1c:3d:25:33:
71:aa:52:7d:dd:72:b6:26:48:c8:69:38:f2:bb:c9:cb:40:74:
97:81:dd:fb:0d:06:8e:b9:00:b5:d6:fe:a8:96:92:7c:6d:84:
9d:60:a9:da:83:f0:4c:9a:37:2d:b6:7b:c9:4f:74:3f:ee:4b:
e1:20:ac:2f:c5:7d:6a:e1:59:f2:38:38:41:d3:83:33:3b:98:
d5:c4:ed:74:32:2a:88:81:b2:90:4b:da:96:9c:03:9d:b6:e5:
7a:e4:19:9f:98:4f:48:9e:89:6f:50:b7:2c:e8:55:f3:ab:b7:
0a:e6:4d:3c:4b:8e:a9:03:95:58:8f:af:94:da:bd:54:96:a5:
14:bb:0b:e6:74:8d:c9:83:3e:9a:ad:12:7c:59:73:a7:ca:15:
06:8e:4a:da:12:37:ac:cb:a5:2a:46:6d:3b:41:0f:55:ef:e0:
55:de:07:ea:95:d0:c1:e1:d8:eb:59:0d:af:cc:d1:48:3c:4f:
ce:22:d7:62:fe:08:eb:48:00:e0:e3:bf:23:9d:d2:64:9a:4e:
45:ca:70:a8:01:6f:ee:a4:92:d9:6f:1f:69:37:e3:25:6e:17:
24:c7:b6:8a:8c:36:33:77:8a:1d:35:b3:e8:a1:ed:3a:41:38:
ac:76:0b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 06:06:47 2026 by rpki-client