
$ rpki-client -vvvf rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/323830343a363962303a3a2f33322d3332203d3e20323730323835.roa
File: 323830343a363962303a3a2f33322d3332203d3e20323730323835.roa (raw, json)
Hash identifier: YPX8EDCRLHz3KvpuhDYLEEJP/PjqhQXklGbfRMg/Y7E=
Subject key identifier: DF:11:5D:AA:5B:15:32:95:6A:8D:42:FA:CF:70:50:B4:E4:BC:D5:9B
Certificate issuer: /CN=68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2
Certificate serial: 36D7F7B13A8A05945A42EF2CC414C3284C2F457C
Authority key identifier: 68:CA:3A:36:C8:EB:04:B3:67:B6:33:21:FE:5E:DE:87:F3:C8:D3:C2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/323830343a363962303a3a2f33322d3332203d3e20323730323835.roa
Signing time: Mon 10 Aug 2026 19:08:08 +0000
ROA not before: Mon 10 Aug 2026 19:03:08 +0000
ROA not after: Mon 09 Aug 2027 19:08:08 +0000
asID: 270285
IP address blocks: 2804:69b0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2.crl
rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 23 Aug 2026 17:38:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:d7:f7:b1:3a:8a:05:94:5a:42:ef:2c:c4:14:c3:28:4c:2f:45:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2
Validity
Not Before: Aug 10 19:03:08 2026 GMT
Not After : Aug 9 19:08:08 2027 GMT
Subject: CN=DF115DAA5B1532956A8D42FACF7050B4E4BCD59B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:22:ce:73:5c:7d:6a:50:58:e8:19:89:88:39:
2b:46:a1:8f:6e:61:72:a3:7b:52:e7:68:1a:26:59:
c2:b0:e6:06:d2:65:1b:bb:9d:36:51:cc:ca:3b:9e:
04:75:68:54:31:fe:01:87:88:3e:f8:91:f1:e5:65:
90:c3:14:dd:b3:85:33:eb:14:c9:95:f5:62:2e:64:
98:d6:8f:8b:70:d5:f9:ca:90:43:3c:b2:e2:41:0d:
d4:6f:ab:81:9d:c4:ea:fe:97:69:95:75:d5:bf:e9:
3c:cd:7b:f3:43:3d:da:b6:e9:60:0e:c7:a8:00:cc:
a3:02:4e:01:fb:7e:df:dc:20:3b:24:ca:0e:fa:95:
fb:04:ff:c5:84:39:01:e0:78:80:13:bc:f9:53:8b:
01:45:01:5e:19:b9:59:7e:35:5e:86:da:f6:b1:75:
90:1a:49:45:ce:18:bb:67:70:55:2b:15:bd:b5:1a:
db:a8:94:05:a3:52:1a:a2:b2:8a:6f:a9:cb:b0:e9:
1a:2f:75:3f:0d:f4:58:0a:b1:76:1f:97:f9:8f:08:
87:2f:2d:2d:32:07:4d:ad:66:62:f2:ca:c3:81:c7:
68:b7:76:4c:7f:11:94:58:a7:85:d4:80:a5:d3:01:
de:21:66:4f:a5:5b:6c:f8:57:dd:26:30:8d:50:ee:
e4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:11:5D:AA:5B:15:32:95:6A:8D:42:FA:CF:70:50:B4:E4:BC:D5:9B
X509v3 Authority Key Identifier:
keyid:68:CA:3A:36:C8:EB:04:B3:67:B6:33:21:FE:5E:DE:87:F3:C8:D3:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/323830343a363962303a3a2f33322d3332203d3e20323730323835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:69b0::/32
Signature Algorithm: sha256WithRSAEncryption
88:18:be:a9:b3:ed:a8:23:7b:ee:42:c2:a5:c7:10:dc:fe:44:
32:f6:e0:e6:f4:47:1b:95:7d:d2:cd:90:15:1e:0e:de:ff:b4:
77:f3:5c:ec:d3:08:7b:1f:97:ca:b3:eb:bf:14:ac:89:f9:72:
93:ec:d9:92:55:a0:15:30:76:41:cf:05:10:33:72:5b:89:c3:
8b:92:bc:bc:9f:f9:92:09:07:6b:ad:5a:3b:9d:b6:43:ce:7f:
29:60:57:3a:df:f3:56:6d:76:f5:cf:ca:a0:3b:39:1f:f5:24:
d5:e3:45:5e:4c:13:18:fa:01:0c:26:06:dd:3a:6e:e5:3d:05:
13:2b:a6:8f:45:3a:d5:2c:8b:85:03:b0:48:1f:d7:93:c6:53:
d3:99:01:4d:ed:73:0a:45:d7:b5:f0:87:8d:58:29:6c:aa:5d:
5b:21:b7:45:af:4f:30:4a:e8:50:4f:9d:50:fa:a3:2e:c6:95:
1e:3d:1f:c3:e7:e8:08:93:26:d2:d2:67:c8:7a:02:7d:7a:49:
03:b1:a3:0d:3a:0b:d1:70:d0:14:73:e8:f4:00:67:88:b6:a3:
95:af:a4:22:d4:61:32:20:f3:d5:f6:48:06:df:32:b1:f8:4b:
a5:02:e2:23:8f:af:12:90:b3:55:dc:8a:4f:5a:bb:e9:e0:59:
37:09:05:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 08:46:59 2026 by rpki-client