
$ rpki-client -vvf rpki-repo.registro.br/repo/CFUyjxbS6M18sCc3r2SH3D5sBLGXdHHF5tAxCiBGJ55o/0/323830343a323438633a343030303a3a2f33342d3334203d3e20323634323239.roa
File: 323830343a323438633a343030303a3a2f33342d3334203d3e20323634323239.roa (raw, json)
Hash identifier: zocTU1WS+zYLuRNgq+ULsZJsztbaDsW3eRiM04ZB2Ag=
Subject key identifier: E9:10:46:F4:D8:52:09:03:8E:3C:C5:7B:26:D8:79:7E:F7:45:D7:C0
Certificate issuer: /CN=2D48EA070A9BDAE09A850B3A4F0C79719A1F08DB
Certificate serial: 4A435A63727B3188104DF6B13235795DE083BD6A
Authority key identifier: 2D:48:EA:07:0A:9B:DA:E0:9A:85:0B:3A:4F:0C:79:71:9A:1F:08:DB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D48EA070A9BDAE09A850B3A4F0C79719A1F08DB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CFUyjxbS6M18sCc3r2SH3D5sBLGXdHHF5tAxCiBGJ55o/0/323830343a323438633a343030303a3a2f33342d3334203d3e20323634323239.roa
Signing time: Mon 30 Mar 2026 13:33:19 +0000
ROA not before: Mon 30 Mar 2026 13:28:19 +0000
ROA not after: Mon 29 Mar 2027 13:33:19 +0000
asID: 264229
IP address blocks: 2804:248c:4000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CFUyjxbS6M18sCc3r2SH3D5sBLGXdHHF5tAxCiBGJ55o/0/2D48EA070A9BDAE09A850B3A4F0C79719A1F08DB.crl
rsync://rpki-repo.registro.br/repo/CFUyjxbS6M18sCc3r2SH3D5sBLGXdHHF5tAxCiBGJ55o/0/2D48EA070A9BDAE09A850B3A4F0C79719A1F08DB.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D48EA070A9BDAE09A850B3A4F0C79719A1F08DB.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 10 Apr 2026 12:20:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:43:5a:63:72:7b:31:88:10:4d:f6:b1:32:35:79:5d:e0:83:bd:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D48EA070A9BDAE09A850B3A4F0C79719A1F08DB
Validity
Not Before: Mar 30 13:28:19 2026 GMT
Not After : Mar 29 13:33:19 2027 GMT
Subject: CN=E91046F4D85209038E3CC57B26D8797EF745D7C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bd:07:55:e0:48:3c:00:ba:70:27:63:12:ed:
8a:71:2c:67:ec:c4:3d:bd:ec:88:d5:fa:97:f8:cc:
c0:c7:b6:d0:ef:ab:79:ad:a6:70:6b:6c:64:f1:db:
8a:7f:30:b5:79:cb:ae:c7:e8:ef:87:87:0e:1c:44:
9b:f0:e0:d7:a8:2d:90:09:43:67:32:1f:17:62:c6:
b6:6c:e2:bf:7e:0c:a8:44:3f:d7:37:47:e2:ad:39:
51:de:16:14:25:13:6e:1c:b1:89:1d:58:29:7a:bf:
cf:9a:c1:95:dd:6c:57:ef:ec:40:71:7b:cd:ba:ba:
98:0d:11:d1:7f:a8:da:42:48:87:5b:f5:14:11:c3:
0a:37:61:92:4b:fa:a0:ba:ca:37:d5:00:93:ca:4f:
e0:61:87:e8:ee:94:3f:fd:e4:3e:4b:41:58:0b:1d:
e0:bc:3a:2b:b2:d4:c4:32:a0:46:16:f9:e6:37:0f:
cf:c9:49:68:42:8b:14:68:40:e6:92:0f:a8:70:7c:
94:ca:cc:db:4a:f1:ca:c6:6f:02:b5:3b:f2:fe:58:
c9:5d:b9:71:cf:ca:f7:9b:c2:9c:54:1e:20:e6:e8:
28:e5:c9:fb:9e:46:67:40:bc:24:cc:2a:a8:8e:9e:
cc:79:41:b9:f7:c0:26:56:98:e7:70:c0:53:23:df:
a4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:10:46:F4:D8:52:09:03:8E:3C:C5:7B:26:D8:79:7E:F7:45:D7:C0
X509v3 Authority Key Identifier:
keyid:2D:48:EA:07:0A:9B:DA:E0:9A:85:0B:3A:4F:0C:79:71:9A:1F:08:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CFUyjxbS6M18sCc3r2SH3D5sBLGXdHHF5tAxCiBGJ55o/0/2D48EA070A9BDAE09A850B3A4F0C79719A1F08DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D48EA070A9BDAE09A850B3A4F0C79719A1F08DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CFUyjxbS6M18sCc3r2SH3D5sBLGXdHHF5tAxCiBGJ55o/0/323830343a323438633a343030303a3a2f33342d3334203d3e20323634323239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:248c:4000::/34
Signature Algorithm: sha256WithRSAEncryption
c9:a9:b4:af:f5:97:35:25:b6:41:d2:2a:f9:d6:18:90:e5:99:
ea:09:a1:84:34:ee:0b:93:8d:c0:26:72:eb:ef:5e:18:0a:aa:
ff:f2:9d:08:b6:ed:9c:1d:63:92:91:36:77:51:ae:b0:85:a1:
0c:ac:13:58:7e:fd:fc:9c:80:31:b4:9f:b3:c3:22:b2:51:c0:
92:fb:6e:67:f8:f2:4f:8c:22:d0:93:e0:db:c7:83:b3:68:00:
e5:70:05:88:6c:b8:49:87:e8:29:99:b4:08:85:d2:f3:8d:3f:
18:a1:81:12:d1:f0:b1:34:02:23:3c:86:fb:03:ab:ee:80:7f:
43:2d:ad:d8:ab:29:07:f4:27:99:ea:07:3a:62:f3:6b:04:ba:
8a:2b:d2:1b:84:d7:f7:fe:a0:f5:9e:db:2d:90:84:e4:44:e3:
06:ba:47:76:10:75:1c:7e:fa:99:64:1f:6d:99:fb:58:67:fa:
88:a2:e7:f2:86:ea:d3:35:3a:f2:b5:7e:5e:97:53:8c:b3:9e:
89:b3:08:0b:78:29:be:8d:42:1c:06:38:ec:50:f4:17:6b:19:
1a:4d:f9:b5:63:b0:fb:34:05:9d:8a:69:6d:53:ee:c9:17:ee:
32:bc:3e:ec:fe:a8:7a:60:97:db:1c:77:d9:8f:8c:bc:1a:46:
5f:ad:f3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 14:31:25 2026 by rpki-client