
$ rpki-client -vvvf rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/323830343a376534303a3430303a3a2f34302d3430203d3e20323731363132.roa
File: 323830343a376534303a3430303a3a2f34302d3430203d3e20323731363132.roa (raw, json)
Hash identifier: 2v/fxPeCJGsLVsoA5GibujthW3bLeG2uNFgmrpC/ojM=
Subject key identifier: 4C:28:E3:D7:79:D7:3F:BA:55:38:14:6A:8F:EE:B7:88:0E:3A:08:83
Certificate issuer: /CN=9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569
Certificate serial: 21CF101EA9751C05E1AEFD65098402EA57CA7545
Authority key identifier: 9A:2E:3E:99:D0:BC:E7:93:A2:AC:7A:E6:8A:EB:44:6A:78:F5:B5:69
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/323830343a376534303a3430303a3a2f34302d3430203d3e20323731363132.roa
Signing time: Tue 27 Oct 2026 01:33:40 +0000
ROA not before: Tue 27 Oct 2026 01:28:40 +0000
ROA not after: Tue 26 Oct 2027 01:33:40 +0000
asID: 271612
IP address blocks: 2804:7e40:400::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569.crl
rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Oct 2026 18:45:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:cf:10:1e:a9:75:1c:05:e1:ae:fd:65:09:84:02:ea:57:ca:75:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569
Validity
Not Before: Oct 27 01:28:40 2026 GMT
Not After : Oct 26 01:33:40 2027 GMT
Subject: CN=4C28E3D779D73FBA5538146A8FEEB7880E3A0883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8b:44:0e:e7:39:1a:54:7e:97:08:6f:73:ad:
41:c0:36:64:71:70:c8:2d:6c:ce:5d:b5:7d:6e:dd:
ea:22:f2:6f:c9:a5:e2:94:da:57:05:41:83:d2:62:
45:19:54:bc:63:12:17:2f:8a:3f:2a:7f:30:e9:80:
a4:fc:72:4c:03:0c:60:6b:69:0d:bd:35:82:49:2a:
3a:b8:d7:80:19:5b:63:3c:94:cd:84:1a:23:cd:cc:
09:15:f3:f5:a8:d9:1f:aa:f3:b6:5f:c7:05:a5:cd:
d9:a7:19:9a:c4:cd:06:bf:eb:64:7a:ad:ed:1a:c7:
35:70:08:6e:13:18:bd:61:97:7c:98:12:04:39:7c:
48:0f:eb:f3:cb:14:0d:92:51:44:a6:42:83:a3:18:
ed:4c:8a:1d:be:87:81:7a:08:a3:f2:81:e1:60:09:
67:0a:2c:2e:13:6d:92:74:7a:4d:74:b5:cf:4a:a2:
38:f9:e3:6c:5e:30:05:25:42:9b:e6:de:36:05:b3:
66:bd:5f:86:1e:e9:1f:b2:28:6a:05:94:e2:d8:3f:
96:f6:8b:f8:61:b4:21:81:8a:f1:f1:1f:29:68:49:
e1:cb:85:31:52:61:9b:07:a1:91:f2:63:4d:d1:89:
8c:9b:b6:12:0f:54:f3:19:69:bb:ab:d3:20:ac:bc:
72:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:28:E3:D7:79:D7:3F:BA:55:38:14:6A:8F:EE:B7:88:0E:3A:08:83
X509v3 Authority Key Identifier:
keyid:9A:2E:3E:99:D0:BC:E7:93:A2:AC:7A:E6:8A:EB:44:6A:78:F5:B5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/323830343a376534303a3430303a3a2f34302d3430203d3e20323731363132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7e40:400::/40
Signature Algorithm: sha256WithRSAEncryption
13:1c:7e:4b:10:72:c8:a4:b8:80:5e:7a:77:33:3a:df:c2:c9:
15:41:65:0a:44:31:ba:8f:df:da:bf:e1:ee:ad:28:71:02:be:
8a:bb:fd:d6:b4:8c:39:8b:9c:6d:4c:d5:98:96:aa:eb:c3:e7:
a1:a0:69:3d:81:9b:55:38:73:d5:9f:19:ee:5b:b8:2f:d8:b7:
80:54:df:c2:2e:cb:15:46:fe:cd:ca:56:43:ef:29:a1:75:60:
a4:d2:af:91:4e:48:24:80:cd:64:19:a6:c1:2e:73:da:e7:aa:
c5:2c:78:55:f1:1f:cf:42:d3:33:66:39:75:bc:a9:83:48:78:
2a:18:04:3e:a5:b7:6f:17:b7:a5:c2:d0:ff:20:d1:c4:0b:eb:
f7:f1:b1:2e:f1:58:f0:dc:73:d0:2c:f7:09:f1:54:96:92:b3:
73:ae:10:13:c9:52:22:7d:c0:13:31:90:a8:39:96:45:5f:ff:
81:f0:13:af:37:1a:56:6c:2a:6f:d2:67:d9:fe:b6:18:d9:d8:
15:57:d6:95:77:9d:f9:4e:ee:cc:28:fb:60:34:da:3b:d4:90:
10:d9:fc:91:ec:ce:02:ab:4a:d4:de:83:2b:f1:6b:40:97:4a:
97:f4:ae:b1:0a:c8:40:ea:d9:eb:b5:b0:0a:ad:31:62:b5:b7:
1c:87:e8:e8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUIc8QHql1HAXhrv1lCYQC6lfKdUUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUEyRTNFOTlEMEJDRTc5M0EyQUM3QUU2OEFFQjQ0NkE3
OEY1QjU2OTAeFw0yNjEwMjcwMTI4NDBaFw0yNzEwMjYwMTMzNDBaMDMxMTAvBgNV
BAMTKDRDMjhFM0Q3NzlENzNGQkE1NTM4MTQ2QThGRUVCNzg4MEUzQTA4ODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1i0QO5zkaVH6XCG9zrUHANmRx
cMgtbM5dtX1u3eoi8m/JpeKU2lcFQYPSYkUZVLxjEhcvij8qfzDpgKT8ckwDDGBr
aQ29NYJJKjq414AZW2M8lM2EGiPNzAkV8/Wo2R+q87ZfxwWlzdmnGZrEzQa/62R6
re0axzVwCG4TGL1hl3yYEgQ5fEgP6/PLFA2SUUSmQoOjGO1Mih2+h4F6CKPygeFg
CWcKLC4TbZJ0ek10tc9Kojj542xeMAUlQpvm3jYFs2a9X4Ye6R+yKGoFlOLYP5b2
i/hhtCGBivHxHyloSeHLhTFSYZsHoZHyY03RiYybthIPVPMZabur0yCsvHI1AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUTCjj13nXP7pVOBRqj+63iA46CIMwHwYDVR0j
BBgwFoAUmi4+mdC855OirHrmiutEanj1tWkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMno1OEZldVpiOVV0R3dTNVJaQnBiY1BoMm9hcE14ZW5UVmRiTGNoOUxM
bjUvMC85QTJFM0U5OUQwQkNFNzkzQTJBQzdBRTY4QUVCNDQ2QTc4RjVCNTY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlBMkUzRTk5RDBCQ0U3OTNB
MkFDN0FFNjhBRUI0NDZBNzhGNUI1NjkuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ6NThGZXVaYjlVdEd3UzVSWkJwYmNQaDJvYXBNeGVuVFZkYkxjaDlMTG41LzAv
MzIzODMwMzQzYTM3NjUzNDMwM2EzNDMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl
MjAzMjM3MzEzNjMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBH5ABDANBgkqhkiG9w0BAQsFAAOC
AQEAExx+SxByyKS4gF56dzM638LJFUFlCkQxuo/f2r/h7q0ocQK+irv91rSMOYuc
bUzVmJaq68PnoaBpPYGbVThz1Z8Z7lu4L9i3gFTfwi7LFUb+zcpWQ+8poXVgpNKv
kU5IJIDNZBmmwS5z2ueqxSx4VfEfz0LTM2Y5dbypg0h4KhgEPqW3bxe3pcLQ/yDR
xAvr9/GxLvFY8Nxz0Cz3CfFUlpKzc64QE8lSIn3AEzGQqDmWRV//gfATrzcaVmwq
b9Jn2f62GNnYFVfWlXed+U7uzCj7YDTaO9SQENn8kezOAqtK1N6DK/FrQJdKl/Su
sQrIQOrZ67WwCq0xYrW3HIfo6A==
-----END CERTIFICATE-----
Generated at Wed Oct 28 21:35:05 2026 by rpki-client