
$ rpki-client -vvvf rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a623030313a3a2f34382d3438203d3e20323638373037.roa
File: 323830343a353938343a623030313a3a2f34382d3438203d3e20323638373037.roa (raw, json)
Hash identifier: 47OnG5+TGoj/h0gVs1Rm5fgTXewIwnyN9M8z5l+Ht/4=
Subject key identifier: 3A:3D:F2:52:7C:BE:76:79:58:6E:DB:59:33:D6:A4:ED:2E:CC:F2:E8
Certificate issuer: /CN=C35549FD881F7AAE59D817159EC9B19049B93616
Certificate serial: 489CC3ED60632B3061EEA47598E0CAC1B7B8FD12
Authority key identifier: C3:55:49:FD:88:1F:7A:AE:59:D8:17:15:9E:C9:B1:90:49:B9:36:16
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C35549FD881F7AAE59D817159EC9B19049B93616.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a623030313a3a2f34382d3438203d3e20323638373037.roa
Signing time: Sun 06 Sep 2026 22:46:00 +0000
ROA not before: Sun 06 Sep 2026 22:41:00 +0000
ROA not after: Sun 05 Sep 2027 22:46:00 +0000
asID: 268707
IP address blocks: 2804:5984:b001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/C35549FD881F7AAE59D817159EC9B19049B93616.crl
rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/C35549FD881F7AAE59D817159EC9B19049B93616.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C35549FD881F7AAE59D817159EC9B19049B93616.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 11 Sep 2026 20:10:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:9c:c3:ed:60:63:2b:30:61:ee:a4:75:98:e0:ca:c1:b7:b8:fd:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C35549FD881F7AAE59D817159EC9B19049B93616
Validity
Not Before: Sep 6 22:41:00 2026 GMT
Not After : Sep 5 22:46:00 2027 GMT
Subject: CN=3A3DF2527CBE7679586EDB5933D6A4ED2ECCF2E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ef:30:58:ee:4e:69:56:0b:2f:e6:2f:c9:fd:
16:a3:af:2a:e8:0c:ad:1a:d2:23:c2:87:5a:ce:e6:
b6:57:91:16:67:d1:91:a7:73:86:41:fe:b4:64:c3:
1f:62:2a:2a:f8:0f:9c:d9:ce:d0:f8:5f:16:54:df:
07:3f:1e:de:04:b2:32:17:82:a1:ed:23:b7:1a:48:
59:72:58:47:74:79:ae:94:0d:fb:ad:72:62:5b:3b:
a5:f0:7d:d2:6b:8f:87:81:e8:03:2f:a8:38:28:82:
1a:6d:a6:81:40:e1:b1:e9:23:5a:c6:da:c5:64:a0:
57:a1:08:06:fe:3b:22:6b:3a:c7:3a:f5:e9:10:a2:
9b:b5:87:6b:12:d9:f6:12:f1:3d:6b:ed:de:3e:5f:
25:ea:f1:e8:4c:e3:bb:0f:5e:08:b4:cd:ca:f5:a3:
8d:57:cb:b5:27:1e:e1:f4:75:f5:47:98:69:78:e4:
f6:a5:dc:ff:aa:36:37:60:2d:58:79:5b:81:8d:25:
5a:1f:51:8c:6a:41:3b:45:51:36:38:40:6e:25:15:
ff:f4:10:90:02:ad:7a:69:04:22:f5:7c:1d:0b:8c:
6a:77:c9:8a:88:69:78:c5:6a:01:f8:c4:99:c0:7f:
96:e1:c0:1b:d6:e1:84:8b:72:be:b9:d4:bd:ab:5f:
bb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:3D:F2:52:7C:BE:76:79:58:6E:DB:59:33:D6:A4:ED:2E:CC:F2:E8
X509v3 Authority Key Identifier:
keyid:C3:55:49:FD:88:1F:7A:AE:59:D8:17:15:9E:C9:B1:90:49:B9:36:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/C35549FD881F7AAE59D817159EC9B19049B93616.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C35549FD881F7AAE59D817159EC9B19049B93616.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a623030313a3a2f34382d3438203d3e20323638373037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5984:b001::/48
Signature Algorithm: sha256WithRSAEncryption
8e:c8:1b:8a:88:af:6f:74:f4:58:58:9c:de:c2:d0:b8:12:5b:
c3:5b:16:2e:e9:a3:a0:61:db:47:4e:c8:a0:28:6b:1b:5f:7f:
b9:ea:d6:1f:b5:b0:66:2a:b4:e3:61:d3:f7:ee:8c:0f:c6:21:
64:2a:e6:0f:c2:dc:85:c8:2c:6b:21:9a:f0:a7:f1:b1:32:b6:
a6:34:2a:64:cb:c4:b7:7f:d7:0f:9e:16:04:dd:7b:37:89:ec:
1c:35:19:a0:62:7c:d5:a8:69:75:ae:08:5b:2e:99:28:c9:2e:
b4:3e:7e:96:b0:3c:3d:65:b4:24:7a:f5:85:82:4c:68:06:c4:
08:a4:2d:72:cd:9f:e3:8b:14:5c:1a:5b:74:5a:d6:a7:9c:1f:
35:6b:fc:9d:4b:42:65:c8:37:bc:eb:b4:9a:5a:b2:ad:c2:48:
95:34:97:60:8a:78:32:76:b4:00:6d:aa:0a:9d:88:cd:52:51:
48:3a:15:45:cf:fe:45:27:23:5c:37:44:99:0c:5a:a7:cd:be:
f9:ab:51:3f:2b:a3:24:54:6e:05:3a:8e:28:ef:90:30:9a:e2:
6f:cc:c3:58:20:5d:b2:3f:df:53:69:4d:68:99:c7:c4:30:01:
ac:60:2f:b2:45:9f:06:29:3f:92:da:c7:b7:a8:0a:94:0d:a9:
ae:54:13:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:24:56 2026 by rpki-client