
$ rpki-client -vvvf rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/323830343a6461303a3a2f33322d3332203d3e203238353837.roa
File: 323830343a6461303a3a2f33322d3332203d3e203238353837.roa (raw, json)
Hash identifier: jLxITKpC9xOF3FKQklIkF3O1979WAquqySPAU6ZFT48=
Subject key identifier: 20:71:86:49:F7:1E:E9:EF:55:26:20:54:22:4F:91:18:04:8A:EC:C5
Certificate issuer: /CN=8828523C98A91E5AFC895ACCA7B6F26AFF904475
Certificate serial: 24E44B0F465D976E0D3A912C7CA4B3476AD530AC
Authority key identifier: 88:28:52:3C:98:A9:1E:5A:FC:89:5A:CC:A7:B6:F2:6A:FF:90:44:75
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8828523C98A91E5AFC895ACCA7B6F26AFF904475.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/323830343a6461303a3a2f33322d3332203d3e203238353837.roa
Signing time: Sat 01 Aug 2026 13:17:52 +0000
ROA not before: Sat 01 Aug 2026 13:12:52 +0000
ROA not after: Sat 31 Jul 2027 13:17:52 +0000
asID: 28587
IP address blocks: 2804:da0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/8828523C98A91E5AFC895ACCA7B6F26AFF904475.crl
rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/8828523C98A91E5AFC895ACCA7B6F26AFF904475.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8828523C98A91E5AFC895ACCA7B6F26AFF904475.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 26 Aug 2026 01:57:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:e4:4b:0f:46:5d:97:6e:0d:3a:91:2c:7c:a4:b3:47:6a:d5:30:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8828523C98A91E5AFC895ACCA7B6F26AFF904475
Validity
Not Before: Aug 1 13:12:52 2026 GMT
Not After : Jul 31 13:17:52 2027 GMT
Subject: CN=20718649F71EE9EF55262054224F9118048AECC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:46:cb:12:aa:8c:6d:69:82:1c:fa:1c:a3:7a:
86:ff:e0:f0:4f:75:9d:53:2a:9e:fb:00:a7:b5:28:
6d:f4:ae:db:1a:0e:5b:04:da:a0:38:fa:45:cc:80:
00:6f:46:7e:dd:67:7b:54:60:76:eb:43:80:da:85:
ab:8f:2a:bc:9b:40:2b:b6:36:28:6d:66:94:66:24:
04:89:16:4c:d6:bb:ad:e0:ed:73:12:83:c8:c0:d3:
7e:f0:a6:d9:7a:c5:66:db:e7:ea:4e:f7:d8:c7:4b:
9f:53:fb:c2:50:37:a6:1e:ca:85:1d:c0:09:3f:2a:
1e:83:60:e1:62:64:ec:9c:e5:c4:1f:20:9f:b4:8b:
1c:de:1f:c3:53:b3:55:7f:53:d6:38:f1:08:e4:c0:
27:b4:9e:45:35:2d:32:3c:f9:92:a2:91:aa:8a:38:
50:7e:2a:34:73:f4:8e:75:26:46:96:42:2c:78:cc:
91:74:a3:e7:d9:cd:1e:56:91:a3:52:13:0f:87:fe:
e9:a4:f0:b5:33:89:16:ff:a0:23:18:30:cb:49:98:
6d:f2:83:89:3a:49:67:2d:4f:ef:bc:d9:23:83:12:
cd:2c:55:51:08:f1:21:b2:08:5f:4a:af:13:90:44:
40:f4:9d:29:60:3b:8d:bf:3e:63:2e:23:fa:ae:36:
61:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:71:86:49:F7:1E:E9:EF:55:26:20:54:22:4F:91:18:04:8A:EC:C5
X509v3 Authority Key Identifier:
keyid:88:28:52:3C:98:A9:1E:5A:FC:89:5A:CC:A7:B6:F2:6A:FF:90:44:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/8828523C98A91E5AFC895ACCA7B6F26AFF904475.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8828523C98A91E5AFC895ACCA7B6F26AFF904475.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/323830343a6461303a3a2f33322d3332203d3e203238353837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:da0::/32
Signature Algorithm: sha256WithRSAEncryption
17:3e:d1:75:c5:fc:b4:e3:ce:2a:39:9c:41:fb:19:78:44:14:
5a:5c:a3:0e:b8:df:18:ca:a4:57:c0:2c:60:ea:8d:bd:f5:fb:
80:0f:8c:28:e4:3c:9f:ce:81:39:65:34:49:5e:a4:41:95:45:
c8:a8:be:e7:ea:f7:0d:ab:18:b8:0a:12:af:23:d5:e5:12:b1:
1b:8e:47:d6:84:f4:d7:ae:2e:fa:34:72:1e:cc:32:be:07:99:
ca:a5:0d:c7:f5:8d:32:b9:49:f8:c2:53:11:db:92:00:16:ab:
ca:93:c3:df:b2:6e:96:c8:c4:78:f4:a2:e4:31:24:3a:0f:27:
fe:86:f8:57:26:f4:01:5d:a9:7c:1b:a9:04:92:b7:04:6e:9b:
a2:3a:18:92:28:48:89:2a:b3:4f:5f:8e:56:10:39:8d:56:69:
e7:58:a5:71:2a:f9:06:46:1f:4a:e9:ff:27:3c:cb:af:73:63:
be:b9:3f:78:42:f7:34:cd:09:64:59:10:44:18:27:fa:5f:95:
f3:1c:a8:be:d5:92:60:b9:9f:88:8e:5d:11:63:36:18:1f:5b:
fb:0d:93:c9:f8:6c:88:11:e6:f6:6c:50:2d:23:81:2f:e4:9b:
5a:41:fa:5d:32:d7:d8:d1:7d:51:d0:8c:4f:0a:b7:bb:fe:03:
29:56:7a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 05:59:40 2026 by rpki-client