
$ rpki-client -vvf rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/323830343a363061633a633030303a3a2f33342d3334203d3e20323639313833.roa
File: 323830343a363061633a633030303a3a2f33342d3334203d3e20323639313833.roa (raw, json)
Hash identifier: QPmeyTPXFHfgC8WYGCo4WpehfX4a9NVMVD2DnwdAjPE=
Subject key identifier: 8F:38:94:34:BC:5B:98:4D:D3:DC:36:1E:0D:9F:BB:63:2E:63:C5:F8
Certificate issuer: /CN=95D5107C3F975DC279B2EE7748B02AB010470E6D
Certificate serial: 3B95065E03D1BFF63D22494D3ADCB9E62268FA57
Authority key identifier: 95:D5:10:7C:3F:97:5D:C2:79:B2:EE:77:48:B0:2A:B0:10:47:0E:6D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95D5107C3F975DC279B2EE7748B02AB010470E6D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/323830343a363061633a633030303a3a2f33342d3334203d3e20323639313833.roa
Signing time: Fri 03 Apr 2026 20:26:01 +0000
ROA not before: Fri 03 Apr 2026 20:21:01 +0000
ROA not after: Fri 02 Apr 2027 20:26:01 +0000
asID: 269183
IP address blocks: 2804:60ac:c000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/95D5107C3F975DC279B2EE7748B02AB010470E6D.crl
rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/95D5107C3F975DC279B2EE7748B02AB010470E6D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95D5107C3F975DC279B2EE7748B02AB010470E6D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 10 Apr 2026 07:14:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:95:06:5e:03:d1:bf:f6:3d:22:49:4d:3a:dc:b9:e6:22:68:fa:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95D5107C3F975DC279B2EE7748B02AB010470E6D
Validity
Not Before: Apr 3 20:21:01 2026 GMT
Not After : Apr 2 20:26:01 2027 GMT
Subject: CN=8F389434BC5B984DD3DC361E0D9FBB632E63C5F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1f:13:a0:03:d5:2e:c0:2b:3e:a8:6a:f8:8d:
c1:9d:1c:3a:65:42:e2:f7:8d:fd:fc:c8:6f:3b:b6:
51:1f:74:51:13:71:17:3b:8b:52:e2:68:37:d7:18:
44:74:73:07:61:67:e6:b8:d8:a4:fd:1f:0f:53:4b:
ce:2c:e5:7c:b9:81:0f:05:ce:57:62:dd:40:60:4c:
b3:5e:a7:66:9a:f0:0f:ae:e4:85:e8:ef:da:5a:6b:
0b:4f:29:3a:ee:68:e1:02:9c:6e:bd:52:5d:5c:65:
90:01:df:42:3d:45:df:cc:19:76:56:29:ba:5b:5f:
69:65:e1:83:cb:22:ab:2d:ac:12:1f:6d:5d:b2:fb:
75:b8:6e:f6:b9:b5:1b:51:13:9d:cb:ee:ec:38:f1:
06:2f:a3:78:7b:4c:4a:2a:28:bc:8f:70:e9:51:8a:
5f:0a:c7:9c:7b:c6:2e:4e:13:10:e5:82:16:60:52:
76:da:6a:63:0e:b5:a2:47:0f:09:f5:13:69:c6:fa:
d3:0a:eb:2c:86:41:a0:be:27:ef:3d:b3:2b:85:fa:
40:0b:bb:0f:4d:a1:20:dc:74:79:e3:d7:57:e0:0d:
5b:8b:63:00:57:d1:aa:b4:10:dc:d4:76:8c:ee:2e:
6b:cf:75:bb:be:ea:20:28:4c:8f:a1:30:89:f3:30:
04:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:38:94:34:BC:5B:98:4D:D3:DC:36:1E:0D:9F:BB:63:2E:63:C5:F8
X509v3 Authority Key Identifier:
keyid:95:D5:10:7C:3F:97:5D:C2:79:B2:EE:77:48:B0:2A:B0:10:47:0E:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/95D5107C3F975DC279B2EE7748B02AB010470E6D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95D5107C3F975DC279B2EE7748B02AB010470E6D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/323830343a363061633a633030303a3a2f33342d3334203d3e20323639313833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:60ac:c000::/34
Signature Algorithm: sha256WithRSAEncryption
7c:cb:a7:2a:b3:18:3f:a0:68:4a:f4:02:57:2b:dc:57:fa:19:
8a:6a:61:5e:12:c9:aa:68:c3:f9:e1:6a:54:e7:df:9d:6a:ee:
c9:de:8e:06:d7:75:f5:e6:01:36:66:5a:bd:5b:8b:6a:d7:c8:
27:07:08:f4:22:49:a6:cb:c7:1a:b9:c9:c9:b7:7d:4c:14:d2:
42:07:32:fc:10:b0:c0:f1:f5:8e:5b:3e:ed:cd:83:11:80:0b:
15:3c:30:9b:90:25:cc:79:9d:4c:05:40:90:2d:42:85:7f:fc:
fb:fc:c6:ce:56:f0:95:86:ad:b4:96:5a:95:65:6f:3f:dc:a8:
95:cf:ea:87:b6:cf:a6:ca:4f:34:fd:87:1a:4c:38:93:ae:6e:
eb:e9:b2:64:23:c8:c1:60:86:9a:f2:6b:44:68:ba:06:55:3d:
8a:e5:03:f7:3a:1a:c1:ea:fd:44:6a:42:a3:4a:0f:17:ee:33:
c0:cd:ad:f3:b2:c8:7d:f7:0f:4f:5b:12:b0:c3:bc:00:6a:84:
39:71:f5:a4:71:f8:1b:8b:17:4a:7c:cd:2e:57:90:22:3b:14:
c1:6e:0a:f9:07:30:cc:a6:0c:5d:b1:71:55:7d:e7:32:fd:8a:
01:41:f2:34:5e:59:1f:89:3a:9a:b8:b3:5c:7d:57:a5:c3:91:
95:72:27:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 16:47:48 2026 by rpki-client