
$ rpki-client -vvvf rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/323830343a363962303a31303a3a2f34342d3434203d3e20323730323835.roa
File: 323830343a363962303a31303a3a2f34342d3434203d3e20323730323835.roa (raw, json)
Hash identifier: AxRKtnBhEIlT1Rf0a6Pk4leVWq7zZw6Fiv0BUBrHHCU=
Subject key identifier: 34:B5:59:68:46:AB:91:48:54:2D:80:28:E3:65:58:09:26:AA:99:27
Certificate issuer: /CN=68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2
Certificate serial: 584D3FC37149F4AD45FD4ECE031E0B473672B911
Authority key identifier: 68:CA:3A:36:C8:EB:04:B3:67:B6:33:21:FE:5E:DE:87:F3:C8:D3:C2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/323830343a363962303a31303a3a2f34342d3434203d3e20323730323835.roa
Signing time: Mon 10 Aug 2026 19:08:08 +0000
ROA not before: Mon 10 Aug 2026 19:03:08 +0000
ROA not after: Mon 09 Aug 2027 19:08:08 +0000
asID: 270285
IP address blocks: 2804:69b0:10::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2.crl
rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 23 Aug 2026 17:38:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:4d:3f:c3:71:49:f4:ad:45:fd:4e:ce:03:1e:0b:47:36:72:b9:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2
Validity
Not Before: Aug 10 19:03:08 2026 GMT
Not After : Aug 9 19:08:08 2027 GMT
Subject: CN=34B5596846AB9148542D8028E365580926AA9927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5b:dd:0c:1c:5f:55:0e:7c:06:3b:04:08:00:
9c:8d:00:13:c4:42:fc:68:f2:ec:5e:a9:43:ba:c8:
b2:d9:44:a1:62:5c:99:eb:ed:e5:f2:ec:af:a6:5f:
01:10:9f:64:d6:aa:79:96:a9:95:f4:95:ba:47:3f:
22:65:74:47:06:8f:1a:31:98:d8:ed:9d:b1:af:cf:
90:fd:77:34:a0:62:94:7a:79:33:21:90:bc:14:1e:
1c:8f:c2:72:9e:0d:51:1c:6e:da:4c:96:a4:33:ff:
84:d6:a4:9c:10:98:fe:be:8f:10:ac:76:c2:61:f0:
c5:9a:a1:10:13:9e:e6:67:55:7d:19:51:6d:4c:8c:
32:27:2a:b0:62:d5:8f:c2:59:a9:37:e6:f0:7a:9a:
4c:b3:a6:22:b0:5b:71:cb:6c:44:69:4e:bd:63:b9:
da:e5:dc:d1:39:13:25:d8:8e:0d:99:2b:19:58:72:
6b:67:1a:67:a8:f2:69:a8:c7:f9:f5:12:01:85:e3:
9e:b0:08:59:a2:e2:e8:d9:b5:ff:c5:1a:16:e3:69:
11:28:4b:c5:ab:c6:45:13:7f:4f:c5:46:3e:99:5d:
06:8e:d7:83:9e:02:94:70:ac:44:2f:81:d9:68:a3:
88:04:31:ee:5c:5b:a2:eb:20:03:4c:40:14:4e:6a:
c7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B5:59:68:46:AB:91:48:54:2D:80:28:E3:65:58:09:26:AA:99:27
X509v3 Authority Key Identifier:
keyid:68:CA:3A:36:C8:EB:04:B3:67:B6:33:21:FE:5E:DE:87:F3:C8:D3:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/323830343a363962303a31303a3a2f34342d3434203d3e20323730323835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:69b0:10::/44
Signature Algorithm: sha256WithRSAEncryption
2e:e9:fe:15:12:99:3d:71:d1:fd:0b:6f:22:6c:ff:7b:10:bd:
34:ac:7e:91:c8:3a:78:83:60:24:b1:cc:ca:f5:66:00:27:37:
d7:a3:da:2a:6c:61:ef:f0:5e:d5:e0:d2:22:ee:55:74:ff:23:
92:b8:ed:af:6c:17:c5:e8:35:fa:9b:df:c2:d7:71:37:17:d8:
d9:9e:5c:12:23:46:c8:bc:2a:b0:1a:27:e1:2d:fe:4b:40:e5:
cc:da:8e:8d:b5:d6:76:8b:86:72:dc:ec:ae:73:d7:15:4c:92:
23:01:96:0a:e8:cf:8c:fc:87:05:11:1c:b7:41:76:3f:0a:97:
67:cd:85:ed:3a:1b:e6:ab:60:9c:ec:7b:b9:7e:7d:df:35:4d:
b0:8a:cd:e6:94:fe:68:1e:50:db:cf:61:26:17:6b:99:dd:d8:
cf:51:e5:94:3b:9c:0e:3f:a7:fd:37:89:17:cc:fe:d7:f4:bf:
2b:5d:65:56:a0:77:a0:0b:3e:a8:58:fe:d5:8d:98:b1:a2:af:
2a:38:d7:fa:78:5b:c4:7d:94:33:fa:12:6d:79:25:ac:22:ab:
f9:29:49:72:82:59:63:46:d2:80:b0:75:47:24:78:71:8c:72:
47:4f:72:88:1f:af:7c:99:71:d3:37:b9:91:0f:f8:19:b3:1c:
18:8f:43:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 08:47:27 2026 by rpki-client