
$ rpki-client -vvvf rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/323830343a363962303a34303a3a2f34342d3434203d3e20323730323835.roa
File: 323830343a363962303a34303a3a2f34342d3434203d3e20323730323835.roa (raw, json)
Hash identifier: MBWKKeD6R2TOShqPSkGi8HDzBfdrZHGCKXvTtLqNAPs=
Subject key identifier: 87:98:AF:56:86:6F:56:16:44:4E:3E:85:56:13:27:77:B0:78:11:68
Certificate issuer: /CN=68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2
Certificate serial: 10385AEBF77583303782A8E12C7BD516E9F6BD63
Authority key identifier: 68:CA:3A:36:C8:EB:04:B3:67:B6:33:21:FE:5E:DE:87:F3:C8:D3:C2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/323830343a363962303a34303a3a2f34342d3434203d3e20323730323835.roa
Signing time: Mon 10 Aug 2026 19:08:11 +0000
ROA not before: Mon 10 Aug 2026 19:03:11 +0000
ROA not after: Mon 09 Aug 2027 19:08:11 +0000
asID: 270285
IP address blocks: 2804:69b0:40::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2.crl
rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 23 Aug 2026 17:38:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:38:5a:eb:f7:75:83:30:37:82:a8:e1:2c:7b:d5:16:e9:f6:bd:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2
Validity
Not Before: Aug 10 19:03:11 2026 GMT
Not After : Aug 9 19:08:11 2027 GMT
Subject: CN=8798AF56866F5616444E3E8556132777B0781168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:b6:86:29:2f:99:63:0f:a7:b0:98:12:d4:53:
a8:f6:f1:ec:a5:ac:ea:79:8b:d3:44:94:ac:28:0f:
27:07:46:f8:f2:08:7d:80:c6:eb:16:ae:b3:d9:73:
ca:d9:11:9a:12:6b:49:84:d7:f3:f2:56:d2:14:68:
63:52:2f:65:a2:44:a0:88:b0:42:54:70:b3:7f:35:
e1:c5:b7:20:c0:b7:f5:c8:27:df:fb:58:a5:15:c2:
79:52:fd:52:2a:fd:4c:cc:c2:82:67:41:cb:27:fc:
4f:e2:14:29:79:42:f6:fe:95:f5:bf:c7:d8:a6:7b:
96:d6:c5:b1:9f:8c:02:5f:9f:2e:b0:52:19:9d:54:
ba:fb:c6:99:59:ed:b7:02:91:c7:cb:47:5d:b3:33:
f5:ad:f8:a0:1c:22:e5:cc:37:bd:14:df:29:51:d1:
e9:10:1f:23:07:89:97:4d:ce:61:ce:2e:5c:79:62:
03:bb:8a:e1:9b:62:f9:11:90:61:10:cc:cf:6d:15:
72:70:eb:54:bc:1d:a4:66:d8:76:ae:58:01:9a:5b:
6b:5a:d1:06:76:92:24:b9:96:aa:58:c3:48:7e:1a:
19:8b:6e:72:80:36:d3:7c:4b:d4:46:96:6d:0d:f0:
4b:8b:8d:96:23:7b:c7:35:2a:82:71:0f:58:4a:d7:
91:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:98:AF:56:86:6F:56:16:44:4E:3E:85:56:13:27:77:B0:78:11:68
X509v3 Authority Key Identifier:
keyid:68:CA:3A:36:C8:EB:04:B3:67:B6:33:21:FE:5E:DE:87:F3:C8:D3:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/323830343a363962303a34303a3a2f34342d3434203d3e20323730323835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:69b0:40::/44
Signature Algorithm: sha256WithRSAEncryption
1f:86:c2:37:8b:45:32:14:b1:69:93:1f:39:ed:7a:d6:79:34:
58:18:9e:7a:83:f3:58:e3:78:73:4b:7c:5b:60:c1:47:47:91:
76:0e:2b:c1:0a:96:04:d5:7f:77:e6:ed:f1:bf:3a:ee:c0:99:
4e:ec:1b:4a:4a:e1:09:a7:0e:c8:1c:38:51:6d:74:25:19:27:
a6:57:c5:9f:53:11:24:77:29:d9:20:d9:68:13:8e:cc:84:42:
23:77:b4:9d:ea:17:a4:c8:2e:a8:08:d4:40:43:b6:22:4d:2a:
57:95:c5:bd:1b:95:11:2c:cf:92:b3:3b:44:dc:17:50:dc:94:
1c:9e:e7:0b:13:83:fb:d2:4c:a5:b0:86:6b:b6:9a:19:49:99:
86:c8:6a:b0:41:d1:ea:45:11:59:8d:29:36:b8:14:6d:cd:e2:
58:9b:9e:85:89:c6:b0:79:d6:16:9f:f6:56:97:6f:78:53:5c:
e8:47:63:d3:5a:de:e2:7e:89:25:9c:b9:26:2a:02:03:6a:a5:
86:75:91:f8:9a:50:e4:da:4b:13:05:96:14:9e:f8:ad:1f:8e:
8b:b9:1f:d4:01:7d:27:d8:c9:77:e9:35:54:eb:9e:f5:5a:00:
06:bf:c2:63:74:66:cc:4f:20:48:74:8e:62:e0:71:df:12:59:
29:1f:85:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 08:47:20 2026 by rpki-client