
$ rpki-client -vvvf rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/323830343a373039633a3a2f33322d3438203d3e20323730373337.roa
File: 323830343a373039633a3a2f33322d3438203d3e20323730373337.roa (raw, json)
Hash identifier: fb1Gaw4ZL9FuE+63nkJkH2u4KMqmW2DIrgu6bSCzMH8=
Subject key identifier: EE:01:D8:05:04:5D:45:39:75:B0:63:6B:D6:EC:E6:76:19:F6:2D:69
Certificate issuer: /CN=AF709D487025EB90C014C7186CC0AEA341A27C3B
Certificate serial: 5AC625F611E7757540165C8D936D07665D11DE3E
Authority key identifier: AF:70:9D:48:70:25:EB:90:C0:14:C7:18:6C:C0:AE:A3:41:A2:7C:3B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF709D487025EB90C014C7186CC0AEA341A27C3B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/323830343a373039633a3a2f33322d3438203d3e20323730373337.roa
Signing time: Mon 24 Aug 2026 18:27:58 +0000
ROA not before: Mon 24 Aug 2026 18:22:58 +0000
ROA not after: Mon 23 Aug 2027 18:27:58 +0000
asID: 270737
IP address blocks: 2804:709c::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.crl
rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF709D487025EB90C014C7186CC0AEA341A27C3B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 25 Aug 2026 19:19:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:c6:25:f6:11:e7:75:75:40:16:5c:8d:93:6d:07:66:5d:11:de:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF709D487025EB90C014C7186CC0AEA341A27C3B
Validity
Not Before: Aug 24 18:22:58 2026 GMT
Not After : Aug 23 18:27:58 2027 GMT
Subject: CN=EE01D805045D453975B0636BD6ECE67619F62D69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ee:c4:d0:10:09:ba:23:b5:9c:94:97:c2:27:
f4:33:f1:15:21:d7:41:8c:3b:8b:f6:6b:34:0e:5b:
02:dd:41:7c:f2:05:fc:d2:c7:59:ec:2a:0d:a3:f9:
97:6b:b4:ac:a8:ca:cf:ba:a4:5a:1f:b4:09:b0:07:
a2:75:59:61:42:81:2e:f7:62:f3:d5:52:87:35:76:
80:09:c8:aa:35:a1:7e:91:2f:af:86:5c:61:a4:3f:
b3:1d:42:29:df:64:67:f7:82:89:70:54:cd:82:0a:
53:d7:19:c0:68:96:d4:57:c4:83:49:c1:53:76:9e:
73:bd:3d:f0:24:4e:74:60:b5:a7:4f:af:f0:8d:db:
3f:82:f3:c6:2f:ba:5b:bc:79:47:af:35:cd:66:e3:
3c:8d:26:13:c1:46:c2:1d:9c:57:46:a6:98:10:d6:
83:82:d7:4c:a5:be:af:ae:89:18:e7:d8:8c:e6:a9:
72:86:cc:b4:79:8e:b2:17:2b:e8:69:8d:d8:69:45:
e7:ca:23:60:05:7a:29:99:97:82:40:e8:ae:58:6a:
81:03:8d:31:52:f9:b7:75:4f:0a:ab:6e:86:6b:37:
1c:27:43:3f:23:0a:44:a9:bb:19:cc:4e:48:0b:1d:
45:50:f4:24:5a:b5:d9:67:2a:a2:f4:7b:98:8f:e2:
8d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:01:D8:05:04:5D:45:39:75:B0:63:6B:D6:EC:E6:76:19:F6:2D:69
X509v3 Authority Key Identifier:
keyid:AF:70:9D:48:70:25:EB:90:C0:14:C7:18:6C:C0:AE:A3:41:A2:7C:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF709D487025EB90C014C7186CC0AEA341A27C3B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/323830343a373039633a3a2f33322d3438203d3e20323730373337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:709c::/32
Signature Algorithm: sha256WithRSAEncryption
87:b2:31:0c:0e:5a:09:fc:7a:7d:aa:88:e6:90:02:be:13:bd:
48:9e:03:75:ed:14:78:f7:2e:4d:bb:96:bd:eb:46:4e:8a:6f:
86:cd:26:33:df:18:70:72:20:f5:0a:7d:8e:3c:36:7f:54:8f:
31:1a:e2:68:39:f5:d2:c5:2d:20:43:26:25:46:78:2a:1d:4e:
50:12:52:9d:e2:94:7d:61:75:7a:19:b0:8a:15:47:46:29:bf:
d9:b9:fa:ef:71:80:62:d4:ca:09:57:86:9f:3c:cd:6a:23:4d:
f6:ae:ec:54:8c:c8:b5:a2:db:e4:49:7d:a7:63:df:0c:87:52:
28:a7:5d:5c:ce:ec:b5:40:75:c8:d6:49:d1:3d:80:d1:37:2d:
8b:84:e2:52:26:0b:bc:98:27:ba:80:ca:28:c5:54:ee:ba:f1:
b7:d5:c6:1a:f5:3d:f7:2c:eb:b9:bb:a3:bc:a3:ab:2c:ed:fa:
df:52:da:6c:6b:37:00:3b:a4:de:2f:b8:68:37:7e:92:44:3c:
fd:e0:0c:40:79:16:3a:19:bf:34:1b:b4:f1:7e:82:03:bd:9e:
2c:db:6b:74:4f:9d:79:9e:41:cf:4f:b7:95:f0:82:8f:19:e0:
19:f5:26:08:6b:2d:e3:fa:99:07:57:8a:3b:0d:0a:61:e9:f6:
14:98:ef:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 02:03:11 2026 by rpki-client