
$ rpki-client -vvvf rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/323830343a333933633a383030303a3a2f34302d3430203d3e20323636303230.roa
File: 323830343a333933633a383030303a3a2f34302d3430203d3e20323636303230.roa (raw, json)
Hash identifier: UxnMwCA1g9fJrgtU56wBKOAo2yd1vTxi11UOVp6ztlE=
Subject key identifier: F2:BB:CF:1A:77:C3:30:24:BE:FE:04:D7:74:FE:21:96:65:ED:F7:02
Certificate issuer: /CN=2BB312B3051F7EC4E3021CE21956D0A2A50F76EF
Certificate serial: 4396BB187F48B7D78A8FFF3FD2C0140784900F72
Authority key identifier: 2B:B3:12:B3:05:1F:7E:C4:E3:02:1C:E2:19:56:D0:A2:A5:0F:76:EF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/323830343a333933633a383030303a3a2f34302d3430203d3e20323636303230.roa
Signing time: Sat 03 Oct 2026 17:46:19 +0000
ROA not before: Sat 03 Oct 2026 17:41:19 +0000
ROA not after: Sat 02 Oct 2027 17:46:19 +0000
asID: 266020
IP address blocks: 2804:393c:8000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.crl
rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Oct 2026 20:15:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:96:bb:18:7f:48:b7:d7:8a:8f:ff:3f:d2:c0:14:07:84:90:0f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2BB312B3051F7EC4E3021CE21956D0A2A50F76EF
Validity
Not Before: Oct 3 17:41:19 2026 GMT
Not After : Oct 2 17:46:19 2027 GMT
Subject: CN=F2BBCF1A77C33024BEFE04D774FE219665EDF702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:db:dd:07:0e:91:5d:9d:92:79:19:91:41:52:
8d:12:6f:44:a5:85:9a:71:4c:a7:d3:20:bb:fb:b0:
a3:7a:3f:d5:42:c5:f2:ca:2b:64:aa:85:71:f1:91:
9b:87:b4:75:7b:23:54:11:e8:f9:9f:67:fd:dc:bf:
bc:0e:76:c8:d4:65:81:2b:09:28:0b:fc:c2:32:dd:
2e:f2:a8:59:57:31:ad:59:68:93:0a:75:2c:4a:a5:
0b:a5:d2:41:51:39:dd:54:5d:d5:ff:db:a9:c0:2a:
79:69:6b:e6:d9:6d:b3:87:ce:28:f0:c1:61:4f:48:
3b:7d:71:71:76:01:3c:c2:b1:14:d0:80:03:f3:49:
5e:15:00:67:8d:71:62:26:aa:3d:ea:51:d4:9a:b2:
c4:1d:82:8e:26:9d:d4:26:e1:af:dd:e9:93:80:ff:
de:df:9e:73:2d:81:8d:27:4a:4d:0b:06:81:f4:49:
14:ec:95:d2:ae:0f:4b:11:4c:1b:e3:02:95:b8:f1:
5f:ce:24:f9:a2:bb:f0:92:2a:22:f3:c9:a4:58:6b:
93:ed:bc:34:f0:be:91:54:6d:f9:1e:b6:13:ce:71:
7e:25:69:8f:80:cd:ab:74:e7:a8:af:97:b0:f1:bb:
1f:11:e1:cb:91:68:70:6e:b8:61:1d:0f:3e:83:72:
c7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:BB:CF:1A:77:C3:30:24:BE:FE:04:D7:74:FE:21:96:65:ED:F7:02
X509v3 Authority Key Identifier:
keyid:2B:B3:12:B3:05:1F:7E:C4:E3:02:1C:E2:19:56:D0:A2:A5:0F:76:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/323830343a333933633a383030303a3a2f34302d3430203d3e20323636303230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:393c:8000::/40
Signature Algorithm: sha256WithRSAEncryption
7b:39:2a:b5:ef:02:05:08:33:d2:0b:4f:a4:50:4c:0a:84:60:
a5:91:49:bc:9b:a7:28:7e:a8:c0:af:98:c4:0f:ad:43:88:3d:
98:44:cc:26:95:cf:3f:d6:bf:e5:35:27:8b:74:41:a3:cc:65:
11:a9:df:40:64:05:25:bd:8e:ea:65:b0:54:09:a6:d9:72:8e:
9d:2a:24:24:76:3c:5b:0e:4d:6a:05:ba:00:3c:1e:2b:84:ee:
74:11:73:3a:45:90:a2:e3:ae:be:fc:40:3a:37:b2:a6:24:71:
6b:c3:1d:cf:85:ff:11:4b:5f:d3:96:2c:3a:ab:16:5f:17:8d:
a7:b2:13:c5:a8:66:60:83:14:42:e9:59:89:bf:a5:aa:d4:4d:
49:55:d6:52:90:7d:10:44:91:74:81:f3:ac:eb:27:00:e1:01:
e0:52:4a:59:0f:75:e1:1e:e5:56:d1:6c:ee:9a:be:e1:c0:d4:
bd:52:ed:73:b3:58:c4:25:99:ad:b0:6c:53:fc:e1:06:8b:1e:
72:08:56:62:64:0b:45:39:35:dd:f3:a8:b1:aa:49:bb:4c:a7:
75:2d:4d:bb:4a:7d:b1:22:9d:bf:37:c3:93:a8:d6:51:aa:c1:
44:f3:1f:14:b2:0d:85:08:cc:8f:2d:2c:05:c2:20:ad:08:59:
7f:d5:cd:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:16:07 2026 by rpki-client