
$ rpki-client -vvvf rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/323830343a323939633a313430303a3a2f34302d3430203d3e20323634303235.roa
File: 323830343a323939633a313430303a3a2f34302d3430203d3e20323634303235.roa (raw, json)
Hash identifier: V2f6Cgcmp2APqGFEmua8JMRKvXdb35NXHNadhy5IqhY=
Subject key identifier: DB:6F:8F:56:D5:C1:C9:FE:74:C8:ED:01:86:E0:76:92:03:B3:E9:C2
Certificate issuer: /CN=64EF4A884AB9E40ED6A09AE1C3F47D7C91930572
Certificate serial: 3AA2CE182ECD5F8BC20AAC8CFB53F359538D469B
Authority key identifier: 64:EF:4A:88:4A:B9:E4:0E:D6:A0:9A:E1:C3:F4:7D:7C:91:93:05:72
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/323830343a323939633a313430303a3a2f34302d3430203d3e20323634303235.roa
Signing time: Thu 30 Jul 2026 17:59:25 +0000
ROA not before: Thu 30 Jul 2026 17:54:25 +0000
ROA not after: Thu 29 Jul 2027 17:59:25 +0000
asID: 264025
IP address blocks: 2804:299c:1400::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.crl
rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 23 Aug 2026 22:11:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:a2:ce:18:2e:cd:5f:8b:c2:0a:ac:8c:fb:53:f3:59:53:8d:46:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64EF4A884AB9E40ED6A09AE1C3F47D7C91930572
Validity
Not Before: Jul 30 17:54:25 2026 GMT
Not After : Jul 29 17:59:25 2027 GMT
Subject: CN=DB6F8F56D5C1C9FE74C8ED0186E0769203B3E9C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:32:a7:35:5d:c0:0c:21:2d:d4:59:1f:aa:e6:
ec:1c:fb:04:97:cb:45:be:b4:80:fa:bb:a8:22:d7:
f0:69:31:b2:11:3c:e9:89:92:d2:a3:fc:ea:54:f4:
10:fd:eb:4f:d1:78:70:c7:56:8c:c6:a4:30:f6:df:
47:d4:8d:4e:71:fe:1f:5f:1d:52:99:b5:2b:9d:94:
51:64:70:13:3d:77:03:86:a3:7f:b6:91:1a:9a:4f:
04:a3:f6:18:d9:fa:11:ac:1d:23:50:ed:73:81:48:
f4:0f:e1:c7:60:36:a9:a4:d3:68:86:69:d7:6c:5f:
6c:6e:76:2f:16:c4:1a:80:d2:56:6e:15:04:21:fa:
d2:aa:3d:d7:da:74:fc:aa:37:15:10:ac:ab:c0:4e:
0c:8f:10:97:32:ed:17:ae:b0:d7:70:86:ec:d7:16:
f4:b5:60:56:94:98:1c:dd:f6:c0:70:89:ee:dd:c9:
9d:c8:6d:0f:3e:65:d9:76:64:c9:c9:f4:66:dc:16:
6e:c3:09:b2:f3:f7:7d:b7:39:f5:94:f9:8d:b5:cf:
c3:35:63:14:b3:63:5f:d9:30:c8:3a:45:d4:5e:bf:
5c:76:08:24:9b:aa:a2:7b:dc:4f:7a:cf:98:db:f7:
d9:f3:8e:75:7f:ac:56:fb:99:51:5b:b0:cf:2d:9c:
21:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:6F:8F:56:D5:C1:C9:FE:74:C8:ED:01:86:E0:76:92:03:B3:E9:C2
X509v3 Authority Key Identifier:
keyid:64:EF:4A:88:4A:B9:E4:0E:D6:A0:9A:E1:C3:F4:7D:7C:91:93:05:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/323830343a323939633a313430303a3a2f34302d3430203d3e20323634303235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:299c:1400::/40
Signature Algorithm: sha256WithRSAEncryption
83:9f:0c:1b:4c:5c:a8:ce:6f:0e:7e:e0:d4:77:b5:a3:41:c6:
21:d0:8e:92:77:1d:91:ef:4d:20:0f:88:b3:3e:09:57:ff:ee:
ee:d5:40:47:34:35:a6:3c:b0:77:7f:31:c9:64:12:cc:55:66:
a2:c8:ed:65:f4:78:58:1d:ff:92:07:4d:5a:2f:79:c7:49:22:
b5:a6:69:d0:09:42:e5:c9:dd:d3:d0:29:fb:af:9f:05:8a:19:
ba:87:1c:46:0d:07:dd:2c:c1:ae:67:1b:ee:c6:97:6d:52:91:
62:55:3c:c5:3d:78:8f:f4:f4:e0:bb:0c:1f:87:3e:b5:fd:2c:
a3:61:b4:03:39:5a:0a:f7:32:ca:c5:a8:d7:c6:5e:d1:f4:1a:
28:00:14:fa:b1:07:77:34:58:e2:13:36:74:00:12:6a:59:45:
29:03:6f:1d:38:a8:b4:53:f1:d4:2a:02:54:84:c1:cd:85:c9:
55:d1:48:ab:e1:ac:21:4c:e1:35:d1:56:bf:36:c4:f5:de:f8:
8b:f6:e2:67:7a:49:8d:2c:36:72:d6:e9:51:b3:a6:34:be:00:
cd:77:14:a1:4c:97:18:23:32:23:2e:25:92:4a:f9:7f:ed:36:
b6:f4:35:9e:ec:c8:cc:f6:a4:0a:91:b0:9e:23:2e:09:bc:c9:
e1:ec:25:85
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUOqLOGC7NX4vCCqyM+1PzWVONRpswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjRFRjRBODg0QUI5RTQwRUQ2QTA5QUUxQzNGNDdEN0M5
MTkzMDU3MjAeFw0yNjA3MzAxNzU0MjVaFw0yNzA3MjkxNzU5MjVaMDMxMTAvBgNV
BAMTKERCNkY4RjU2RDVDMUM5RkU3NEM4RUQwMTg2RTA3NjkyMDNCM0U5QzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Mqc1XcAMIS3UWR+q5uwc+wSX
y0W+tID6u6gi1/BpMbIRPOmJktKj/OpU9BD960/ReHDHVozGpDD230fUjU5x/h9f
HVKZtSudlFFkcBM9dwOGo3+2kRqaTwSj9hjZ+hGsHSNQ7XOBSPQP4cdgNqmk02iG
addsX2xudi8WxBqA0lZuFQQh+tKqPdfadPyqNxUQrKvATgyPEJcy7ReusNdwhuzX
FvS1YFaUmBzd9sBwie7dyZ3IbQ8+Zdl2ZMnJ9GbcFm7DCbLz9323OfWU+Y21z8M1
YxSzY1/ZMMg6RdRev1x2CCSbqqJ73E96z5jb99nzjnV/rFb7mVFbsM8tnCHpAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU22+PVtXByf50yO0BhuB2kgOz6cIwHwYDVR0j
BBgwFoAUZO9KiEq55A7WoJrhw/R9fJGTBXIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGtLbXBMcjFkWUIyZGFnNTR4a1VNcjNueHZDZ3pSNVJETkNDVWp3QVdW
b3gvMC82NEVGNEE4ODRBQjlFNDBFRDZBMDlBRTFDM0Y0N0Q3QzkxOTMwNTcyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY0RUY0QTg4NEFCOUU0MEVE
NkEwOUFFMUMzRjQ3RDdDOTE5MzA1NzIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhrS21wTHIxZFlCMmRhZzU0eGtVTXIzbnh2Q2d6UjVSRE5DQ1Vqd0FXVm94LzAv
MzIzODMwMzQzYTMyMzkzOTYzM2EzMTM0MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzNDMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEKZwUMA0GCSqGSIb3DQEBCwUA
A4IBAQCDnwwbTFyozm8OfuDUd7WjQcYh0I6Sdx2R700gD4izPglX/+7u1UBHNDWm
PLB3fzHJZBLMVWaiyO1l9HhYHf+SB01aL3nHSSK1pmnQCULlyd3T0Cn7r58Fihm6
hxxGDQfdLMGuZxvuxpdtUpFiVTzFPXiP9PTguwwfhz61/SyjYbQDOVoK9zLKxajX
xl7R9BooABT6sQd3NFjiEzZ0ABJqWUUpA28dOKi0U/HUKgJUhMHNhclV0Uir4awh
TOE10Va/NsT13viL9uJnekmNLDZy1ulRs6Y0vgDNdxShTJcYIzIjLiWSSvl/7Ta2
9DWe7MjM9qQKkbCeIy4JvMnh7CWF
-----END CERTIFICATE-----
Generated at Sun Aug 23 12:55:42 2026 by rpki-client