
$ rpki-client -vvvf rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/323830343a393537633a343030303a3a2f33342d3334203d3e20323734353138.roa
File: 323830343a393537633a343030303a3a2f33342d3334203d3e20323734353138.roa (raw, json)
Hash identifier: fY7ccb4cCtsw5Gk7z2fZJjoHa2DSv6RKSyzL2Tmgmpo=
Subject key identifier: 43:F4:E5:FC:B6:C7:4B:1E:21:EC:12:81:BD:2B:D9:A5:CB:C3:07:94
Certificate issuer: /CN=CDD7619BD4F71987C247C8670D9064F291B3E36F
Certificate serial: 7029D7C802266EBB947D338DDD5A7F7C026E08EC
Authority key identifier: CD:D7:61:9B:D4:F7:19:87:C2:47:C8:67:0D:90:64:F2:91:B3:E3:6F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDD7619BD4F71987C247C8670D9064F291B3E36F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/323830343a393537633a343030303a3a2f33342d3334203d3e20323734353138.roa
Signing time: Fri 07 Aug 2026 19:58:28 +0000
ROA not before: Fri 07 Aug 2026 19:53:28 +0000
ROA not after: Fri 06 Aug 2027 19:58:28 +0000
asID: 274518
IP address blocks: 2804:957c:4000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/CDD7619BD4F71987C247C8670D9064F291B3E36F.crl
rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/CDD7619BD4F71987C247C8670D9064F291B3E36F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDD7619BD4F71987C247C8670D9064F291B3E36F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 25 Aug 2026 10:19:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:29:d7:c8:02:26:6e:bb:94:7d:33:8d:dd:5a:7f:7c:02:6e:08:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDD7619BD4F71987C247C8670D9064F291B3E36F
Validity
Not Before: Aug 7 19:53:28 2026 GMT
Not After : Aug 6 19:58:28 2027 GMT
Subject: CN=43F4E5FCB6C74B1E21EC1281BD2BD9A5CBC30794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:70:fb:fe:30:6a:f5:bd:a6:fe:22:82:47:bd:
82:29:e0:6c:71:c1:f7:88:a3:5d:eb:49:2e:36:7c:
60:cc:ac:e6:de:01:7c:61:5e:10:c0:65:02:08:43:
7b:38:59:71:37:66:c7:10:73:e0:9c:be:64:56:0f:
53:aa:8c:59:48:3a:da:19:6f:a5:a0:b9:b6:53:a5:
7a:a9:c7:65:11:a8:f0:76:23:cb:78:c1:3e:d9:70:
fb:d0:1a:f1:9c:b3:a2:fc:58:74:82:49:8e:18:d4:
0e:b4:87:4a:70:e3:dc:34:e2:0c:3c:0f:22:ae:6e:
64:96:d7:50:26:94:19:03:7d:5a:65:7c:f6:53:c3:
ee:00:0f:a0:80:02:9b:6d:23:b6:94:9e:5f:cc:ab:
46:8b:f0:fb:3d:7a:6a:27:07:b3:34:cf:8f:f1:99:
48:25:40:15:1f:5a:df:ee:23:79:ff:4e:6d:46:5c:
de:be:86:4f:cb:23:d2:6e:e0:6a:0d:d7:6b:52:ec:
16:c6:47:97:aa:10:2c:32:8b:e4:77:45:9a:79:8e:
84:1b:ca:bf:68:eb:79:36:4e:a5:db:0f:e3:1f:1a:
02:f7:f3:73:8a:31:3e:25:7e:18:f2:19:48:67:5e:
3e:e3:80:06:8c:61:f4:1a:89:ca:bf:7e:2e:91:e6:
fe:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F4:E5:FC:B6:C7:4B:1E:21:EC:12:81:BD:2B:D9:A5:CB:C3:07:94
X509v3 Authority Key Identifier:
keyid:CD:D7:61:9B:D4:F7:19:87:C2:47:C8:67:0D:90:64:F2:91:B3:E3:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/CDD7619BD4F71987C247C8670D9064F291B3E36F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDD7619BD4F71987C247C8670D9064F291B3E36F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/323830343a393537633a343030303a3a2f33342d3334203d3e20323734353138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:957c:4000::/34
Signature Algorithm: sha256WithRSAEncryption
6e:5d:99:84:ba:ca:10:4b:33:1c:c0:00:e4:48:ea:eb:e9:6d:
a9:59:8b:04:75:93:d2:6d:16:e9:fd:45:c0:ef:1c:f8:c6:17:
45:a0:62:ea:52:30:4b:dd:f7:cf:19:0d:3f:0d:e2:e9:32:ec:
f0:0b:4f:49:d3:b2:97:c5:91:47:6b:fe:74:74:a2:e0:e3:b6:
37:94:80:e4:1b:c5:40:30:03:d7:9d:de:76:10:f9:4c:fd:68:
70:fa:11:79:73:e5:41:31:79:2a:5e:dc:c6:dc:36:57:38:5d:
44:0a:52:51:07:e4:bf:38:39:e9:8e:db:23:96:72:88:79:a5:
4e:60:7d:03:80:33:ec:cc:6b:71:02:b7:46:57:e9:68:e1:60:
02:ed:80:e1:8e:f1:e9:2f:d6:36:6d:6d:02:44:a3:96:59:c9:
68:ee:2b:b6:7e:6c:dc:74:13:42:b8:b4:75:51:18:13:70:38:
fc:ae:df:6e:95:46:b3:d6:39:76:28:9d:aa:5b:7c:19:dc:2c:
b5:d3:6c:1f:f8:f2:12:8f:96:8f:4d:73:09:1c:6b:68:3d:52:
28:7a:9d:43:04:24:a1:1f:85:44:18:17:d8:40:64:2e:77:81:
96:39:a9:35:ae:e8:11:0a:6a:49:fd:52:94:d8:01:b8:51:47:
2c:7b:fb:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 11:15:57 2026 by rpki-client