
$ rpki-client -vvvf rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/323830343a3961383a3a2f33342d3336203d3e20323632393739.roa
File: 323830343a3961383a3a2f33342d3336203d3e20323632393739.roa (raw, json)
Hash identifier: 79xC/IFWeFiAwuIQHszrEqlTzjBHtbQwZ2ZZQx1u1aI=
Subject key identifier: 8B:1A:1E:7F:78:7E:D7:16:E6:45:EC:E8:5E:89:B9:54:71:9E:1D:C8
Certificate issuer: /CN=C9F90589AA12EE331EB84B23D50CFC9EF4F033D7
Certificate serial: 439FF74A4E4C2D6B3A7278D7AD17AA2BE1F8C0A3
Authority key identifier: C9:F9:05:89:AA:12:EE:33:1E:B8:4B:23:D5:0C:FC:9E:F4:F0:33:D7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/323830343a3961383a3a2f33342d3336203d3e20323632393739.roa
Signing time: Wed 29 Jul 2026 17:05:21 +0000
ROA not before: Wed 29 Jul 2026 17:00:21 +0000
ROA not after: Wed 28 Jul 2027 17:05:21 +0000
asID: 262979
IP address blocks: 2804:9a8::/34 maxlen: 36
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.crl
rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 23 Aug 2026 19:43:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:9f:f7:4a:4e:4c:2d:6b:3a:72:78:d7:ad:17:aa:2b:e1:f8:c0:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C9F90589AA12EE331EB84B23D50CFC9EF4F033D7
Validity
Not Before: Jul 29 17:00:21 2026 GMT
Not After : Jul 28 17:05:21 2027 GMT
Subject: CN=8B1A1E7F787ED716E645ECE85E89B954719E1DC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d7:30:fd:2d:b5:ad:f1:19:04:7a:59:c2:c6:
18:72:24:46:a5:48:8a:51:be:8f:09:14:81:b5:e3:
3f:73:a4:55:03:64:e9:1f:a5:a7:9d:4f:f7:ba:9a:
1c:45:ec:67:ce:f6:16:bc:8b:78:68:a4:d9:fe:91:
70:3a:52:8b:2d:83:12:6d:bd:55:9a:e8:c9:6a:06:
21:c3:cc:70:5b:7c:a1:86:f9:19:e0:cb:bd:c1:65:
d1:48:06:37:ee:cf:f4:6b:3a:4c:67:0a:43:d2:ac:
a7:04:1f:fb:e5:fb:d2:79:80:32:82:90:f1:43:65:
87:dd:c0:02:ff:1d:86:ad:0b:1c:41:21:8e:06:d4:
d6:38:45:61:70:47:da:44:dc:91:9e:0b:38:9c:f5:
26:00:e3:46:50:80:b7:dc:69:85:2d:e7:c2:28:76:
7b:2b:ee:f4:bb:f6:8e:59:0f:0f:b5:6e:51:11:70:
39:11:42:01:bc:f9:8f:8f:96:4a:d2:c7:5d:03:2c:
76:7b:77:ff:3b:68:97:c4:66:db:85:f8:bc:f2:d1:
72:f1:6e:41:54:ad:11:eb:4c:d4:75:06:50:75:51:
d9:b9:56:2f:3b:5f:34:3d:83:6a:04:b2:ff:21:64:
56:fb:4a:4f:d2:80:40:02:73:aa:53:2b:1d:04:78:
e4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:1A:1E:7F:78:7E:D7:16:E6:45:EC:E8:5E:89:B9:54:71:9E:1D:C8
X509v3 Authority Key Identifier:
keyid:C9:F9:05:89:AA:12:EE:33:1E:B8:4B:23:D5:0C:FC:9E:F4:F0:33:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/323830343a3961383a3a2f33342d3336203d3e20323632393739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:9a8::/34
Signature Algorithm: sha256WithRSAEncryption
a4:b1:1c:08:43:cd:8f:d3:1e:d6:e4:62:9d:87:28:36:36:eb:
dc:99:26:e7:95:ee:ff:2c:d5:14:17:82:c8:06:c8:61:a1:d3:
7c:fd:e9:aa:64:72:e4:9c:04:a1:bf:4d:dd:c9:9d:f5:66:b9:
84:04:be:b6:80:74:8e:17:7d:39:c1:f4:37:4c:5b:12:01:29:
68:3f:2b:f7:a6:5c:a8:74:2d:89:33:cb:7d:23:e0:66:e9:2c:
34:b6:03:03:62:27:8f:e0:8d:66:42:0e:e6:e8:ca:a2:7b:4b:
38:01:cc:4a:15:c8:3f:47:f7:a6:21:0e:be:e3:66:76:61:94:
69:78:64:b8:3c:fb:c0:a4:31:9c:38:32:0f:c2:1c:55:ac:26:
4a:ec:be:89:04:01:05:cf:2c:79:5d:ae:3a:3d:59:9f:09:10:
f9:94:19:c5:1e:bb:4f:95:67:2c:d7:96:03:d2:b1:c5:eb:7d:
8f:be:d4:31:89:97:16:c4:c6:8a:41:fe:44:9d:c0:c2:68:61:
40:20:46:d0:b7:0e:4a:77:98:58:50:3f:db:26:95:29:b5:98:
4e:77:38:92:4f:5e:c6:bb:36:c9:76:c0:b3:1e:65:5c:06:9b:
ab:57:ae:44:ad:2d:e6:45:a5:e7:55:da:f2:5a:b2:0a:0a:47:
a9:53:aa:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:13:44 2026 by rpki-client