
$ rpki-client -vvvf rpki-repo.registro.br/repo/A8oJ3VCrNLmffwdPx52KaBKh6FSLvRkj4mqhHE5seMTf/0/323830343a393839633a3a2f33322d3332203d3e20323735373235.roa
File: 323830343a393839633a3a2f33322d3332203d3e20323735373235.roa (raw, json)
Hash identifier: 2dQkkO5jq9Vo5LBkjS/EHgnTiXbklZYEz3cGdCVu+TQ=
Subject key identifier: 9E:B9:64:64:99:19:78:6D:79:E1:EC:53:61:89:88:78:AF:E7:3D:35
Certificate issuer: /CN=0FF8C98DA778EFF088738110C5FDC4C28EDAD25D
Certificate serial: 46EF0DC0DD6B32F75DF0642F422F89B4B34E1057
Authority key identifier: 0F:F8:C9:8D:A7:78:EF:F0:88:73:81:10:C5:FD:C4:C2:8E:DA:D2:5D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FF8C98DA778EFF088738110C5FDC4C28EDAD25D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A8oJ3VCrNLmffwdPx52KaBKh6FSLvRkj4mqhHE5seMTf/0/323830343a393839633a3a2f33322d3332203d3e20323735373235.roa
Signing time: Wed 02 Sep 2026 18:04:34 +0000
ROA not before: Wed 02 Sep 2026 17:59:34 +0000
ROA not after: Wed 01 Sep 2027 18:04:34 +0000
asID: 275725
IP address blocks: 2804:989c::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/A8oJ3VCrNLmffwdPx52KaBKh6FSLvRkj4mqhHE5seMTf/0/0FF8C98DA778EFF088738110C5FDC4C28EDAD25D.crl
rsync://rpki-repo.registro.br/repo/A8oJ3VCrNLmffwdPx52KaBKh6FSLvRkj4mqhHE5seMTf/0/0FF8C98DA778EFF088738110C5FDC4C28EDAD25D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FF8C98DA778EFF088738110C5FDC4C28EDAD25D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 14 Oct 2026 17:47:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:ef:0d:c0:dd:6b:32:f7:5d:f0:64:2f:42:2f:89:b4:b3:4e:10:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0FF8C98DA778EFF088738110C5FDC4C28EDAD25D
Validity
Not Before: Sep 2 17:59:34 2026 GMT
Not After : Sep 1 18:04:34 2027 GMT
Subject: CN=9EB964649919786D79E1EC5361898878AFE73D35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:23:c5:20:c1:f6:8a:9c:b0:a7:52:ea:c6:fc:
04:f0:ca:e4:0e:c6:07:99:e8:c1:9c:9a:fd:ed:0c:
61:0b:74:06:3d:c1:bd:25:6c:89:9f:67:93:08:f4:
2a:b2:f7:f9:4d:4a:88:99:f9:cf:e0:cd:b7:56:77:
de:a6:1f:83:a0:a3:17:bc:a4:35:48:21:89:5e:b0:
95:6b:38:6a:fb:ec:5b:54:06:89:65:89:f8:d2:f9:
db:12:ac:d9:33:b4:5e:54:7f:9e:35:9a:87:6d:b1:
44:8f:6e:0c:88:9f:f8:ec:2e:3e:10:c6:36:44:f3:
fc:a3:04:1e:c4:75:7b:0a:ac:01:a6:35:14:73:cd:
e5:3e:f0:a1:1a:df:18:c8:ef:e4:7b:f0:b2:4a:58:
bc:d7:da:d5:db:b6:b4:13:5b:10:68:fa:44:13:27:
96:aa:6e:83:bd:73:50:d6:68:28:dd:a4:15:83:e5:
f4:a2:e7:99:2c:f6:09:af:86:21:c0:ce:c0:3f:ec:
3b:d1:d9:b7:a5:9b:78:fb:7b:90:87:55:8e:b5:be:
66:24:fd:26:8d:f7:11:99:77:d1:76:c1:09:91:fb:
bc:18:ed:15:bc:a5:cd:af:4c:a2:d3:fe:d5:fa:77:
05:23:4c:51:07:2a:d4:70:0a:80:5c:06:11:d9:dd:
73:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B9:64:64:99:19:78:6D:79:E1:EC:53:61:89:88:78:AF:E7:3D:35
X509v3 Authority Key Identifier:
keyid:0F:F8:C9:8D:A7:78:EF:F0:88:73:81:10:C5:FD:C4:C2:8E:DA:D2:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A8oJ3VCrNLmffwdPx52KaBKh6FSLvRkj4mqhHE5seMTf/0/0FF8C98DA778EFF088738110C5FDC4C28EDAD25D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FF8C98DA778EFF088738110C5FDC4C28EDAD25D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8oJ3VCrNLmffwdPx52KaBKh6FSLvRkj4mqhHE5seMTf/0/323830343a393839633a3a2f33322d3332203d3e20323735373235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:989c::/32
Signature Algorithm: sha256WithRSAEncryption
7a:be:2e:fb:1b:11:ec:bb:7d:4f:7a:50:b8:61:f4:dc:99:d9:
60:0f:85:b1:56:63:94:6e:68:b4:23:d5:84:9b:db:43:c6:73:
a0:42:72:0d:45:8f:52:c0:d2:bc:ae:d0:1a:50:f4:f7:a0:19:
82:52:6c:27:33:65:0b:49:f2:27:21:5f:a8:be:de:9a:ef:3f:
ce:82:a8:ec:5a:ac:66:cc:1f:f4:c9:f3:63:2b:36:9b:ad:51:
db:38:ef:85:ec:f1:29:75:94:fd:dd:d3:31:e9:46:18:0d:5d:
e1:5e:11:80:b7:13:77:4c:a8:da:b3:83:22:c7:25:bc:ab:8b:
4c:33:3f:16:7b:37:83:21:9c:9b:88:bc:89:ce:a2:bd:00:17:
66:73:68:8e:29:d2:43:78:b8:c5:ce:14:09:d0:5a:d2:29:6f:
16:cc:b3:c8:89:73:02:64:c9:d6:ee:46:79:26:a4:8d:91:57:
2c:67:db:cc:4c:d0:dc:17:d6:71:d7:44:46:0f:54:f7:af:30:
b5:e2:df:bb:21:0b:d6:ca:cc:0b:bd:f6:f1:77:20:66:4b:85:
19:bd:0a:b2:5c:6c:ff:d1:77:fd:f3:d9:94:dd:ec:d9:5b:40:
09:70:28:cd:82:8f:9b:f6:8b:12:e9:50:4f:c7:ca:69:c1:7c:
44:f3:64:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:59:30 2026 by rpki-client