
$ rpki-client -vvvf rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/323830343a333831303a3130303a3a2f34302d3430203d3e20323636343533.roa
File: 323830343a333831303a3130303a3a2f34302d3430203d3e20323636343533.roa (raw, json)
Hash identifier: mqGM8BXSGgQK+jcm1d2AUpB5cj+UVDPCIhPLu1Oni2g=
Subject key identifier: 91:43:2E:1D:72:C5:3D:C2:5B:6F:8E:BA:9A:FD:07:1B:F2:F1:60:40
Certificate issuer: /CN=DD86ADCC30F2916A776478CCA8F839939F66C37F
Certificate serial: 3CED242B179C5F7B21813E9474B372F42A8C0C1F
Authority key identifier: DD:86:AD:CC:30:F2:91:6A:77:64:78:CC:A8:F8:39:93:9F:66:C3:7F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD86ADCC30F2916A776478CCA8F839939F66C37F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/323830343a333831303a3130303a3a2f34302d3430203d3e20323636343533.roa
Signing time: Tue 11 Aug 2026 14:50:26 +0000
ROA not before: Tue 11 Aug 2026 14:45:26 +0000
ROA not after: Tue 10 Aug 2027 14:50:26 +0000
asID: 266453
IP address blocks: 2804:3810:100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/DD86ADCC30F2916A776478CCA8F839939F66C37F.crl
rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/DD86ADCC30F2916A776478CCA8F839939F66C37F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD86ADCC30F2916A776478CCA8F839939F66C37F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 23 Aug 2026 22:57:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:ed:24:2b:17:9c:5f:7b:21:81:3e:94:74:b3:72:f4:2a:8c:0c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD86ADCC30F2916A776478CCA8F839939F66C37F
Validity
Not Before: Aug 11 14:45:26 2026 GMT
Not After : Aug 10 14:50:26 2027 GMT
Subject: CN=91432E1D72C53DC25B6F8EBA9AFD071BF2F16040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b0:b4:ce:c5:11:5f:0b:c0:bd:0e:c9:29:de:
df:22:5d:f3:7f:57:a4:e8:22:19:3d:9a:00:75:73:
fa:59:a9:a8:e2:d1:da:ce:9e:d6:46:8e:04:b7:b4:
b0:94:86:b3:2e:79:03:2d:a1:9f:bd:c2:ab:36:8d:
ca:18:ed:8a:55:de:e8:e6:c9:94:5a:3e:82:86:0f:
51:73:4d:52:31:aa:05:29:24:1d:96:04:7e:bc:ee:
d3:72:cb:d4:41:ee:17:31:42:0a:9b:e7:49:d4:7b:
c7:0c:a1:11:90:1b:6b:9c:54:66:37:2e:dc:8e:c0:
95:42:30:3e:7d:c5:9b:df:1b:32:e4:9f:1e:53:30:
f7:6b:e7:27:31:77:82:16:09:ac:30:78:bc:ba:ac:
33:07:25:b6:02:6d:93:5a:71:6b:6e:66:80:5a:43:
cc:3a:2f:95:7d:81:bb:43:a3:26:2c:99:69:97:66:
7e:52:47:d6:69:66:eb:af:4a:d1:95:89:65:01:ec:
93:c7:70:1e:16:5c:19:a2:21:d1:c7:d1:a8:53:10:
90:42:58:66:5a:1f:c4:88:97:4a:80:42:16:62:2f:
2c:a3:34:e7:c7:02:1e:c8:42:74:89:51:f6:c3:1a:
3c:d8:6d:f5:45:a1:ad:04:84:7a:4c:20:82:2d:dc:
10:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:43:2E:1D:72:C5:3D:C2:5B:6F:8E:BA:9A:FD:07:1B:F2:F1:60:40
X509v3 Authority Key Identifier:
keyid:DD:86:AD:CC:30:F2:91:6A:77:64:78:CC:A8:F8:39:93:9F:66:C3:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/DD86ADCC30F2916A776478CCA8F839939F66C37F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD86ADCC30F2916A776478CCA8F839939F66C37F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/323830343a333831303a3130303a3a2f34302d3430203d3e20323636343533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3810:100::/40
Signature Algorithm: sha256WithRSAEncryption
b6:ac:2a:03:af:8b:e6:dd:ff:67:d9:3b:68:6a:0f:b7:59:8b:
be:30:ea:1a:af:ce:8c:61:ff:e0:72:ca:fe:ad:f8:5e:f5:65:
0f:d2:d0:d4:cb:03:b9:49:8d:ec:20:db:d6:c0:72:27:7b:b6:
1b:02:43:e3:76:2b:42:91:70:bc:32:05:ee:a5:80:6e:1f:53:
99:0f:a4:04:d5:fb:4a:de:9a:e7:5f:d4:21:2c:95:69:f6:58:
73:ac:2c:ae:30:e9:cc:a7:a7:93:39:f7:6e:09:70:d1:c7:90:
98:bf:8f:53:33:63:4b:d3:21:c2:db:30:03:ca:28:da:7f:e3:
f9:84:39:14:5f:4b:c6:3a:48:47:87:97:4c:7f:6b:85:2f:73:
f6:c3:62:cb:00:8a:05:ad:81:b7:e3:be:3a:ad:72:04:42:61:
6d:41:8d:43:83:b9:12:bc:c7:af:76:60:2b:f7:00:f4:22:11:
a4:40:60:4d:b1:a5:19:07:40:a4:48:b3:de:04:72:e0:8d:4c:
08:aa:92:af:c9:ed:2f:91:85:68:75:8a:8d:ae:ea:ab:49:d4:
53:ed:45:9e:5d:a5:8f:39:5c:7a:d6:bc:43:53:9d:1c:c7:29:
87:e5:65:77:22:f3:8c:3b:58:2e:c4:31:e3:81:a2:51:c9:a5:
81:6c:70:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 08:26:17 2026 by rpki-client