
$ rpki-client -vvvf rpki-repo.registro.br/repo/BNvSGtSFBc8uk8Dm4jGmv4zY15KPNXSftho2LTWvgFxb/0/323830343a346232383a343030303a3a2f33342d3334203d3e20323637323837.roa
File: 323830343a346232383a343030303a3a2f33342d3334203d3e20323637323837.roa (raw, json)
Hash identifier: IvH4QPA4MkXkJcdYR6QKgtBCnsCapc1+ZXaWdT/iQrs=
Subject key identifier: D1:82:33:B2:5E:BB:57:42:35:F2:17:96:51:C6:F2:65:8E:B3:80:1B
Certificate issuer: /CN=DBD355C3E9E24555E021DD4C30EC084F5C57EC32
Certificate serial: 2CC9436E1792A4BFCFBCA75FD80FEC5B7C2C59AB
Authority key identifier: DB:D3:55:C3:E9:E2:45:55:E0:21:DD:4C:30:EC:08:4F:5C:57:EC:32
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBD355C3E9E24555E021DD4C30EC084F5C57EC32.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BNvSGtSFBc8uk8Dm4jGmv4zY15KPNXSftho2LTWvgFxb/0/323830343a346232383a343030303a3a2f33342d3334203d3e20323637323837.roa
Signing time: Tue 08 Sep 2026 21:46:23 +0000
ROA not before: Tue 08 Sep 2026 21:41:23 +0000
ROA not after: Tue 07 Sep 2027 21:46:23 +0000
asID: 267287
IP address blocks: 2804:4b28:4000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BNvSGtSFBc8uk8Dm4jGmv4zY15KPNXSftho2LTWvgFxb/0/DBD355C3E9E24555E021DD4C30EC084F5C57EC32.crl
rsync://rpki-repo.registro.br/repo/BNvSGtSFBc8uk8Dm4jGmv4zY15KPNXSftho2LTWvgFxb/0/DBD355C3E9E24555E021DD4C30EC084F5C57EC32.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBD355C3E9E24555E021DD4C30EC084F5C57EC32.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Oct 2026 20:39:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:c9:43:6e:17:92:a4:bf:cf:bc:a7:5f:d8:0f:ec:5b:7c:2c:59:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBD355C3E9E24555E021DD4C30EC084F5C57EC32
Validity
Not Before: Sep 8 21:41:23 2026 GMT
Not After : Sep 7 21:46:23 2027 GMT
Subject: CN=D18233B25EBB574235F2179651C6F2658EB3801B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5f:13:ae:52:e7:73:65:64:f9:70:97:99:c1:
5e:c5:ce:f9:8d:45:83:74:e7:db:11:d2:fe:43:a3:
41:32:77:53:5e:6b:90:08:38:4f:89:cc:4f:cd:7b:
3e:99:e7:2d:05:97:d0:69:83:e9:d9:79:74:ec:4b:
f0:c2:22:b3:1f:e2:6f:01:ba:5f:01:9a:c1:fa:6e:
bd:2f:3f:71:09:4d:5c:4b:29:38:14:ac:1d:ec:99:
6f:52:e0:3c:62:af:6e:b3:0d:82:d8:62:2c:c7:17:
92:5c:5d:eb:93:07:2f:0e:e0:b9:87:57:ef:58:41:
7c:72:c9:9b:08:4c:bd:b7:81:d0:bc:c8:74:a1:5c:
37:98:70:62:12:34:df:b1:eb:5b:1d:c1:d8:1e:8f:
df:96:eb:04:92:0b:f6:79:f4:e6:f5:cd:d7:8f:20:
a8:6b:b3:a6:f0:86:3d:f0:3d:4d:39:7d:be:7f:b8:
e6:d3:39:33:74:84:8a:60:86:b3:36:e4:93:1e:e1:
1a:e3:a6:9b:c2:1a:2b:a5:2b:49:aa:27:4c:61:c4:
18:90:ba:33:03:97:e3:17:68:db:6d:54:2c:46:95:
4c:04:67:24:dd:b7:3c:58:b1:06:c6:b4:bb:6e:b4:
8b:82:65:4a:f8:50:4a:1a:8b:d8:d5:f2:d7:82:a2:
12:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:82:33:B2:5E:BB:57:42:35:F2:17:96:51:C6:F2:65:8E:B3:80:1B
X509v3 Authority Key Identifier:
keyid:DB:D3:55:C3:E9:E2:45:55:E0:21:DD:4C:30:EC:08:4F:5C:57:EC:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BNvSGtSFBc8uk8Dm4jGmv4zY15KPNXSftho2LTWvgFxb/0/DBD355C3E9E24555E021DD4C30EC084F5C57EC32.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBD355C3E9E24555E021DD4C30EC084F5C57EC32.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BNvSGtSFBc8uk8Dm4jGmv4zY15KPNXSftho2LTWvgFxb/0/323830343a346232383a343030303a3a2f33342d3334203d3e20323637323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4b28:4000::/34
Signature Algorithm: sha256WithRSAEncryption
5a:3e:bc:5e:19:2e:a4:2c:44:5d:fb:51:f6:c4:5c:79:c6:63:
ea:10:4e:62:e2:ba:cf:4b:16:26:1a:3a:05:8d:c9:5e:21:31:
83:04:80:f8:79:ab:dd:25:56:e5:b6:7d:48:c7:45:2d:e6:aa:
24:bd:23:6a:f1:dc:67:13:2d:70:af:3b:db:45:4a:c6:32:4f:
08:0f:a6:ab:35:b5:52:dc:88:5b:58:18:8a:54:20:43:af:15:
3a:06:1c:59:de:5b:73:05:e6:0e:af:98:f7:ba:3c:34:fb:70:
8a:71:16:4b:ea:d8:6b:7c:e2:c1:2f:85:84:34:b1:9c:a6:50:
81:5a:ad:ee:2d:a8:85:43:5a:1a:e2:3b:d4:f4:41:b5:7d:89:
54:0e:4c:d3:43:e6:03:33:dc:e6:4d:e7:65:fb:84:67:e5:97:
f0:34:e6:af:ba:0c:f2:0e:bf:cc:1f:ed:74:3b:0f:87:f1:3d:
b0:f9:fe:0b:d3:ff:74:17:36:55:86:38:04:c7:a7:ca:5e:89:
cb:e2:46:be:d1:06:d6:77:da:6d:57:d4:f3:9e:0a:6f:67:43:
0c:50:af:d3:2e:3c:ab:74:6f:d9:e5:73:8a:6c:c0:70:24:1b:
80:7a:64:7d:70:9d:39:e4:53:f9:bb:3b:95:e3:d6:f2:72:9f:
a0:c0:41:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:46:06 2026 by rpki-client