
$ rpki-client -vvf rpki-repo.registro.br/repo/AZ2CJc4GcT7Qkbb7XAuXmDKWjwmmFdwq2PMoWxfGsTfR/0/323830343a343161633a3a2f33322d3333203d3e20323637343439.roa
File: 323830343a343161633a3a2f33322d3333203d3e20323637343439.roa (raw, json)
Hash identifier: Z+BtMOArVAgCR3u7q5qZ+7pen/2UppCvHrSjy4N/MyQ=
Subject key identifier: D6:B0:BE:1D:2F:D3:AA:8F:30:C4:62:AA:2A:FA:02:5D:4A:DE:7B:38
Certificate issuer: /CN=057D7B5FB654BC1AD7214C8002C40727B9F7F992
Certificate serial: 0DDD66D33A06665A32DBABB93C0D470EF45EE997
Authority key identifier: 05:7D:7B:5F:B6:54:BC:1A:D7:21:4C:80:02:C4:07:27:B9:F7:F9:92
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/057D7B5FB654BC1AD7214C8002C40727B9F7F992.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AZ2CJc4GcT7Qkbb7XAuXmDKWjwmmFdwq2PMoWxfGsTfR/0/323830343a343161633a3a2f33322d3333203d3e20323637343439.roa
Signing time: Wed 07 Jan 2026 14:31:54 +0000
ROA not before: Wed 07 Jan 2026 14:26:54 +0000
ROA not after: Wed 06 Jan 2027 14:31:54 +0000
asID: 267449
IP address blocks: 2804:41ac::/32 maxlen: 33
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AZ2CJc4GcT7Qkbb7XAuXmDKWjwmmFdwq2PMoWxfGsTfR/0/057D7B5FB654BC1AD7214C8002C40727B9F7F992.crl
rsync://rpki-repo.registro.br/repo/AZ2CJc4GcT7Qkbb7XAuXmDKWjwmmFdwq2PMoWxfGsTfR/0/057D7B5FB654BC1AD7214C8002C40727B9F7F992.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/057D7B5FB654BC1AD7214C8002C40727B9F7F992.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 23 Feb 2026 18:32:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:dd:66:d3:3a:06:66:5a:32:db:ab:b9:3c:0d:47:0e:f4:5e:e9:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=057D7B5FB654BC1AD7214C8002C40727B9F7F992
Validity
Not Before: Jan 7 14:26:54 2026 GMT
Not After : Jan 6 14:31:54 2027 GMT
Subject: CN=D6B0BE1D2FD3AA8F30C462AA2AFA025D4ADE7B38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:52:f6:ea:81:42:bc:49:ef:36:59:8d:84:21:
12:d5:d0:f3:7b:b9:1b:5b:ba:0f:31:f4:07:b3:60:
95:17:63:a5:a5:e5:b0:d0:4c:ba:02:2f:a0:b2:b9:
f3:1d:42:e6:93:67:01:c6:13:48:2d:2b:71:fe:d4:
19:e8:aa:5c:b0:de:2b:72:00:7d:43:00:87:c6:3b:
33:75:a7:bc:4e:71:47:fb:00:71:cb:d0:95:0c:79:
e6:4f:c1:74:d0:2d:b9:78:8e:db:84:16:d5:d8:45:
bf:ad:d3:2f:a2:57:6f:b6:e4:a1:bc:4b:d4:92:33:
0f:44:3e:ad:be:cb:da:77:cf:20:95:1f:3f:c3:1f:
11:37:d2:66:15:61:fb:86:64:62:ce:fb:63:ba:a5:
62:8a:cc:2d:e6:c5:8b:2a:f3:f3:17:4e:0c:82:95:
3d:f0:cc:8d:16:e5:4e:bc:28:d7:e8:43:d8:7c:60:
81:d6:e1:a7:d5:d2:e6:01:64:4b:c8:32:6c:6a:5e:
75:de:dd:bc:c0:40:fe:a3:8e:6f:34:0b:cd:ca:63:
89:bc:d3:ce:2f:ca:46:bc:71:80:98:25:0b:c0:23:
5b:a7:da:d9:60:75:7f:a7:f4:30:37:0a:b3:28:08:
d3:b1:56:80:64:66:88:94:8f:16:0d:38:2e:78:94:
f1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B0:BE:1D:2F:D3:AA:8F:30:C4:62:AA:2A:FA:02:5D:4A:DE:7B:38
X509v3 Authority Key Identifier:
keyid:05:7D:7B:5F:B6:54:BC:1A:D7:21:4C:80:02:C4:07:27:B9:F7:F9:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AZ2CJc4GcT7Qkbb7XAuXmDKWjwmmFdwq2PMoWxfGsTfR/0/057D7B5FB654BC1AD7214C8002C40727B9F7F992.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/057D7B5FB654BC1AD7214C8002C40727B9F7F992.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AZ2CJc4GcT7Qkbb7XAuXmDKWjwmmFdwq2PMoWxfGsTfR/0/323830343a343161633a3a2f33322d3333203d3e20323637343439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:41ac::/32
Signature Algorithm: sha256WithRSAEncryption
20:c4:d5:d5:2b:63:ce:39:8b:ef:da:c7:98:07:65:ca:81:91:
ff:89:5c:5c:2f:f3:e4:37:ba:93:3f:12:4a:5c:a8:73:eb:5d:
cd:a6:26:8c:95:a7:54:af:b7:74:ad:e4:fc:93:1e:d1:3e:19:
bd:60:5e:1e:de:0e:41:05:3c:92:0d:4e:aa:1e:21:24:51:73:
20:29:0f:21:5e:39:58:ef:1d:c9:24:cc:4b:7e:0c:e3:32:5d:
a3:17:b5:f6:3d:7a:5e:98:2a:5f:85:8f:f9:ec:92:65:65:6f:
92:9b:99:be:5d:9d:76:73:d0:e3:f8:da:93:d4:30:c0:f0:2e:
bf:08:4d:c6:2d:45:12:b9:99:19:bf:bf:8d:ff:79:cd:45:f7:
43:ba:7f:96:4e:c5:58:7c:02:d7:65:b6:e1:58:33:10:ca:a6:
6f:1f:5e:4d:a8:f1:15:43:52:0c:56:d7:4b:f0:58:87:25:52:
7d:05:f2:c4:4e:18:f3:4d:6d:7e:f5:3d:5a:4d:25:2e:d5:21:
11:bb:03:90:28:f1:16:59:be:95:1e:ec:6d:74:86:d4:9d:68:
bf:7e:8c:79:52:d5:77:05:3b:83:c5:84:ec:17:61:97:79:4b:
5c:83:bd:96:4a:9d:87:4f:db:d4:44:0d:21:60:01:4a:e7:da:
3c:3e:08:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 04:24:18 2026 by rpki-client