
$ rpki-client -vvf rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/323830343a343362383a343030303a3a2f33342d3334203d3e20323637353836.roa
File: 323830343a343362383a343030303a3a2f33342d3334203d3e20323637353836.roa (raw, json)
Hash identifier: Ev486WGKwkjsgJ+ZMTJb/1PXq2hIm3mbtSv1IxbN3Zg=
Subject key identifier: 0E:9C:99:B5:61:03:88:D5:7C:34:A5:39:F2:74:01:E6:AC:F4:53:41
Certificate issuer: /CN=1E240D6445B519D0AD6DBAB1529023E200344D71
Certificate serial: 2D9AB87C93F4750C344F5D9C47E10B4A5BA3B10A
Authority key identifier: 1E:24:0D:64:45:B5:19:D0:AD:6D:BA:B1:52:90:23:E2:00:34:4D:71
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E240D6445B519D0AD6DBAB1529023E200344D71.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/323830343a343362383a343030303a3a2f33342d3334203d3e20323637353836.roa
Signing time: Wed 25 Mar 2026 21:25:15 +0000
ROA not before: Wed 25 Mar 2026 21:20:15 +0000
ROA not after: Wed 24 Mar 2027 21:25:15 +0000
asID: 267586
IP address blocks: 2804:43b8:4000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/1E240D6445B519D0AD6DBAB1529023E200344D71.crl
rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/1E240D6445B519D0AD6DBAB1529023E200344D71.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E240D6445B519D0AD6DBAB1529023E200344D71.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 10 Apr 2026 11:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:9a:b8:7c:93:f4:75:0c:34:4f:5d:9c:47:e1:0b:4a:5b:a3:b1:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1E240D6445B519D0AD6DBAB1529023E200344D71
Validity
Not Before: Mar 25 21:20:15 2026 GMT
Not After : Mar 24 21:25:15 2027 GMT
Subject: CN=0E9C99B5610388D57C34A539F27401E6ACF45341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e3:cd:a3:79:d8:03:6d:f7:35:5b:e3:f8:d7:
38:e8:0d:51:a5:e8:0b:ce:24:80:6e:db:ce:97:50:
2a:04:ab:84:ee:df:fe:85:dc:ba:8d:27:44:32:45:
2c:06:cf:ac:92:b9:4e:8a:05:3d:64:c9:c6:c4:c9:
c1:b6:8e:45:f1:f0:04:d2:ee:55:a1:38:1c:a5:13:
d6:c7:df:e3:27:ef:33:dd:03:f2:57:d4:93:8b:52:
f1:5b:37:7f:5f:05:79:07:2b:5c:7c:5d:61:28:59:
a3:ad:d5:21:f6:d7:80:05:b8:9c:6b:56:09:9d:c8:
91:99:71:2d:fc:92:45:96:0e:b8:5c:1a:c7:31:e1:
56:55:e6:a8:1f:3e:f2:a2:4d:e0:43:ef:72:b3:40:
18:10:ab:87:cf:5e:53:3c:37:4f:b1:93:4a:55:36:
72:2e:08:e8:08:0a:da:34:b5:55:87:9d:55:a6:73:
8d:29:aa:7e:d2:0f:1c:ac:af:32:47:20:2a:91:13:
dd:a7:62:43:73:0e:0e:36:bb:17:ed:2a:79:ac:f6:
1d:38:58:9b:97:6b:05:4e:eb:ac:d8:21:6a:29:ae:
90:c1:da:27:7a:14:9c:9c:1b:4f:4e:28:0e:c7:82:
8a:8d:a7:dd:fa:74:23:08:4f:93:5e:c4:61:aa:b9:
40:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:9C:99:B5:61:03:88:D5:7C:34:A5:39:F2:74:01:E6:AC:F4:53:41
X509v3 Authority Key Identifier:
keyid:1E:24:0D:64:45:B5:19:D0:AD:6D:BA:B1:52:90:23:E2:00:34:4D:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/1E240D6445B519D0AD6DBAB1529023E200344D71.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E240D6445B519D0AD6DBAB1529023E200344D71.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/323830343a343362383a343030303a3a2f33342d3334203d3e20323637353836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:43b8:4000::/34
Signature Algorithm: sha256WithRSAEncryption
66:d4:91:e3:81:a0:d4:84:32:a3:d5:c3:8e:3a:87:21:57:74:
a0:9f:bf:e3:71:83:3f:30:64:48:7a:86:01:a2:85:c1:7d:02:
81:d6:aa:28:de:68:6c:a7:e4:bb:b9:da:b6:c6:87:ab:50:98:
44:c9:98:a2:ba:b3:1b:fc:8d:39:84:64:e2:1a:09:0f:63:2e:
69:c7:8e:43:f0:52:1f:27:70:ad:68:6b:50:d7:cd:02:cc:98:
90:47:32:2e:2e:64:64:c3:0a:3f:88:2c:67:f6:17:67:64:88:
a5:7e:03:cc:3a:29:62:07:b0:be:40:7a:d2:c8:49:8f:ed:29:
f7:83:fe:d9:fa:b5:7a:aa:20:5b:2a:91:ad:ff:5c:39:8b:d2:
1e:8c:e0:f4:4e:47:3b:90:ac:04:5c:7a:34:12:a5:5c:62:72:
76:86:4c:b2:41:73:b0:1e:11:04:d1:06:81:91:d1:91:99:54:
ef:cc:09:4d:61:dc:e5:49:18:86:b3:18:39:89:5c:15:d8:d6:
36:f4:2a:2f:87:fb:92:5c:f7:8b:ee:5c:59:fe:71:c9:f7:ff:
34:5f:7f:66:0a:42:d2:39:56:b4:94:4b:43:56:b9:e5:a9:0c:
ba:74:5e:31:b7:b9:3c:04:6a:49:bb:6b:0e:04:ff:49:46:fa:
36:97:17:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 16:47:17 2026 by rpki-client