
$ rpki-client -vvvf rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/323830343a333831303a3330303a3a2f34302d3430203d3e20323636343533.roa
File: 323830343a333831303a3330303a3a2f34302d3430203d3e20323636343533.roa (raw, json)
Hash identifier: 2q/wBL637+O8ZW7YThIJSfRVWXgxHVIunp/yDND064A=
Subject key identifier: 9B:3D:60:6C:3F:16:90:02:AC:20:2A:67:8C:B4:3C:C2:1A:94:5F:15
Certificate issuer: /CN=DD86ADCC30F2916A776478CCA8F839939F66C37F
Certificate serial: 2F11D51F896A0B4073CA59734150C52DF3C35A27
Authority key identifier: DD:86:AD:CC:30:F2:91:6A:77:64:78:CC:A8:F8:39:93:9F:66:C3:7F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD86ADCC30F2916A776478CCA8F839939F66C37F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/323830343a333831303a3330303a3a2f34302d3430203d3e20323636343533.roa
Signing time: Tue 11 Aug 2026 14:50:49 +0000
ROA not before: Tue 11 Aug 2026 14:45:49 +0000
ROA not after: Tue 10 Aug 2027 14:50:49 +0000
asID: 266453
IP address blocks: 2804:3810:300::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/DD86ADCC30F2916A776478CCA8F839939F66C37F.crl
rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/DD86ADCC30F2916A776478CCA8F839939F66C37F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD86ADCC30F2916A776478CCA8F839939F66C37F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 16:39:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:11:d5:1f:89:6a:0b:40:73:ca:59:73:41:50:c5:2d:f3:c3:5a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD86ADCC30F2916A776478CCA8F839939F66C37F
Validity
Not Before: Aug 11 14:45:49 2026 GMT
Not After : Aug 10 14:50:49 2027 GMT
Subject: CN=9B3D606C3F169002AC202A678CB43CC21A945F15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6a:28:19:f8:57:46:c8:00:dc:58:b1:5e:07:
bd:65:96:22:c6:2e:e0:e6:2d:a6:8c:f3:79:cf:3c:
ce:32:42:1e:bb:d8:24:dc:f3:19:ca:a0:e7:e9:55:
15:11:fa:63:d2:ef:11:6a:c6:c0:15:1f:56:dd:e7:
c2:4d:7f:0f:5f:d2:c5:41:b8:0c:ff:b8:7d:cc:f4:
20:9b:f6:d5:5b:06:cb:c8:78:bf:57:b7:f5:42:10:
ac:bb:34:a7:54:02:79:2f:ad:4e:c7:77:e6:4f:0b:
2b:62:48:eb:d7:c6:26:fb:f4:74:42:5a:7b:0b:8e:
d5:dd:79:49:24:f2:08:f6:b1:60:a9:9b:bd:90:88:
b0:f8:d8:c3:29:11:64:5f:64:0a:86:ac:45:b4:11:
6a:4f:02:fe:48:ab:77:31:cb:12:55:db:97:f7:48:
42:8b:2e:ce:36:e6:ab:cc:06:35:16:b8:9c:f1:d7:
7d:d4:5a:2e:3f:bb:8e:7e:41:55:d2:6c:82:25:0e:
eb:c2:7a:4f:2a:db:50:49:88:b5:b7:a5:f9:84:b8:
c5:d3:72:5e:61:ee:51:1f:e8:8b:d9:4c:c3:0d:39:
34:ff:ab:9d:05:9b:88:e2:d4:ab:8e:c7:59:a8:83:
3d:27:da:7b:8d:f5:99:d6:22:78:f2:34:ab:65:6c:
70:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:3D:60:6C:3F:16:90:02:AC:20:2A:67:8C:B4:3C:C2:1A:94:5F:15
X509v3 Authority Key Identifier:
keyid:DD:86:AD:CC:30:F2:91:6A:77:64:78:CC:A8:F8:39:93:9F:66:C3:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/DD86ADCC30F2916A776478CCA8F839939F66C37F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD86ADCC30F2916A776478CCA8F839939F66C37F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/323830343a333831303a3330303a3a2f34302d3430203d3e20323636343533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3810:300::/40
Signature Algorithm: sha256WithRSAEncryption
74:87:eb:a3:f4:4d:68:d9:57:a3:fc:80:1f:bb:d0:69:c8:99:
98:5a:71:a4:ee:96:e2:f7:68:6d:28:c3:fb:fd:5c:d0:c7:70:
c8:a7:13:ec:b6:08:2c:1b:f7:cc:c3:1d:fe:b2:ff:51:37:2c:
2c:40:35:ad:10:74:c5:26:c4:2c:cd:30:4e:17:67:5f:b9:7e:
1e:75:26:97:13:bc:02:ea:6d:e0:24:a8:1c:74:37:c7:1c:8b:
14:27:18:8a:0f:f8:8b:05:ce:e6:c2:bc:63:78:60:ac:cc:a0:
4b:42:ee:59:52:cd:14:54:b2:95:cc:33:dc:f1:77:84:76:c2:
bc:65:26:c5:f6:cf:90:cc:e3:90:b3:41:52:76:e6:bb:7d:22:
ef:b0:b5:04:c8:a3:8f:f3:78:93:3e:e3:79:ec:18:50:72:ba:
8f:80:45:49:fe:a8:15:3a:76:9b:f8:81:9b:3b:78:e0:b6:15:
b6:62:1a:a8:8d:16:c9:ae:f9:5a:d8:c9:02:60:47:2c:ac:cc:
b3:7a:1d:d3:6d:93:db:a9:a5:ab:b5:4c:ec:a8:cf:eb:dc:b1:
1d:87:4f:91:53:c6:26:78:e1:d0:1b:a0:c4:9c:90:b3:3c:19:
25:44:35:3b:c9:be:93:fc:76:47:3f:c3:c3:0e:61:00:7c:45:
69:99:ab:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 18:13:24 2026 by rpki-client