
$ rpki-client -vvvf rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/323830343a3961383a613030303a3a2f33362d3336203d3e20323632393739.roa
File: 323830343a3961383a613030303a3a2f33362d3336203d3e20323632393739.roa (raw, json)
Hash identifier: i9AXU7689jTtnI1h/YZCQ6CEud+xDpLZ5oAS4NevWIc=
Subject key identifier: 41:5D:9F:0C:FA:45:C6:EA:FF:52:B1:A0:FE:FB:E2:CD:5E:6F:05:F8
Certificate issuer: /CN=C9F90589AA12EE331EB84B23D50CFC9EF4F033D7
Certificate serial: 406D398AC603A3A0D46D81F549733076DCAB0936
Authority key identifier: C9:F9:05:89:AA:12:EE:33:1E:B8:4B:23:D5:0C:FC:9E:F4:F0:33:D7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/323830343a3961383a613030303a3a2f33362d3336203d3e20323632393739.roa
Signing time: Wed 29 Jul 2026 17:35:40 +0000
ROA not before: Wed 29 Jul 2026 17:30:40 +0000
ROA not after: Wed 28 Jul 2027 17:35:40 +0000
asID: 262979
IP address blocks: 2804:9a8:a000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.crl
rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 23 Aug 2026 19:43:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:6d:39:8a:c6:03:a3:a0:d4:6d:81:f5:49:73:30:76:dc:ab:09:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C9F90589AA12EE331EB84B23D50CFC9EF4F033D7
Validity
Not Before: Jul 29 17:30:40 2026 GMT
Not After : Jul 28 17:35:40 2027 GMT
Subject: CN=415D9F0CFA45C6EAFF52B1A0FEFBE2CD5E6F05F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9f:32:01:41:b7:ed:c9:2a:b8:f3:45:7b:cc:
80:50:42:5e:68:14:3f:1c:6e:13:8f:6c:d5:32:aa:
e4:6d:6e:25:a5:13:80:ff:51:76:d8:b1:a5:5a:16:
73:66:35:d6:3b:3e:99:72:0c:b3:29:5a:a1:77:91:
99:b3:a5:9e:b5:a5:b5:61:31:1a:e2:17:f3:b5:4d:
e5:da:d3:10:a9:ad:17:d2:98:67:e1:38:f1:f7:8e:
17:23:fe:7e:91:d3:e3:7a:0a:8f:68:57:c6:09:68:
9b:8b:27:5d:98:c6:21:95:f1:87:f5:80:9d:0e:50:
fd:17:12:2a:e5:e2:f6:b7:22:e2:8d:3f:4e:9d:3d:
61:0a:d9:f3:8f:9a:8b:39:d1:b6:5c:9e:8f:68:b8:
41:eb:d2:02:b7:15:5c:5e:b1:8a:cb:35:c4:6d:12:
f3:6f:70:39:a7:c2:99:6c:fe:3d:2a:ea:52:a2:98:
f4:df:2a:f5:fc:1d:86:6b:f6:91:8c:14:c7:ec:da:
d8:25:37:e3:2e:10:bf:0d:69:89:4e:39:4c:29:ba:
88:4b:2e:d8:2c:15:8c:97:01:d9:1e:95:5e:40:5a:
98:b8:51:66:d8:ee:7a:82:41:a5:a7:e7:4f:db:53:
a0:30:80:cb:ad:f0:5b:fc:47:83:06:a2:45:bd:24:
d1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:5D:9F:0C:FA:45:C6:EA:FF:52:B1:A0:FE:FB:E2:CD:5E:6F:05:F8
X509v3 Authority Key Identifier:
keyid:C9:F9:05:89:AA:12:EE:33:1E:B8:4B:23:D5:0C:FC:9E:F4:F0:33:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/323830343a3961383a613030303a3a2f33362d3336203d3e20323632393739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:9a8:a000::/36
Signature Algorithm: sha256WithRSAEncryption
01:90:b5:ed:8c:98:79:d3:8b:02:43:97:d7:9a:67:5a:7d:48:
1f:6a:99:7f:88:be:ec:11:32:63:68:06:9c:37:4b:16:a8:fc:
c2:cf:8b:57:d7:ec:2d:37:23:94:7c:90:dd:7c:fc:98:7b:ce:
1d:d6:61:a0:54:e2:0d:09:a8:01:c6:2b:5b:80:8d:a1:fb:18:
9e:dd:78:86:9f:fd:6f:17:f9:8b:be:a3:80:67:23:15:32:34:
7a:ae:ab:80:d3:67:3a:df:91:25:4e:8a:66:3c:19:16:43:30:
06:1e:84:0a:98:49:9b:44:72:57:ad:ff:19:49:1e:a4:cd:b7:
19:1c:69:02:e9:ff:34:95:28:d8:03:e9:67:cf:78:ec:d2:6f:
f9:42:32:6d:de:9d:a6:b0:a9:c9:80:18:48:33:c5:a1:6c:01:
31:38:b0:e4:c5:83:d4:72:18:a9:1a:17:5c:dd:a6:e6:70:ff:
e3:05:d0:b2:d1:e6:a8:f9:e7:31:52:dd:c6:79:02:39:82:a3:
e9:e1:1f:3b:27:97:b3:79:ac:fd:4d:a1:0c:db:58:c9:dd:dc:
aa:31:f1:19:bf:84:59:2d:43:24:b9:e5:02:83:ce:a4:51:fa:
38:7a:0d:92:d4:54:d2:96:cf:f4:a2:9f:9e:06:f8:8f:99:ac:
bf:c1:38:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 08:36:25 2026 by rpki-client