
$ rpki-client -vvvf rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/323830343a6438343a3a2f33322d3332203d3e203238313731.roa
File: 323830343a6438343a3a2f33322d3332203d3e203238313731.roa (raw, json)
Hash identifier: op01nOiZx3KMs5PGnqLhfTmcIhGyEVH8jjQXmql73fc=
Subject key identifier: 56:4A:1B:C8:37:36:0A:7B:F4:52:A3:73:36:36:0F:2A:27:E6:36:47
Certificate issuer: /CN=F61AA6D04968E2222C81499C46D03813F1070400
Certificate serial: 0A2C358E8E6A80727BD70A19B4964C2645DA145C
Authority key identifier: F6:1A:A6:D0:49:68:E2:22:2C:81:49:9C:46:D0:38:13:F1:07:04:00
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/323830343a6438343a3a2f33322d3332203d3e203238313731.roa
Signing time: Mon 10 Aug 2026 17:40:19 +0000
ROA not before: Mon 10 Aug 2026 17:35:19 +0000
ROA not after: Mon 09 Aug 2027 17:40:19 +0000
asID: 28171
IP address blocks: 2804:d84::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.crl
rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 26 Aug 2026 04:24:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:2c:35:8e:8e:6a:80:72:7b:d7:0a:19:b4:96:4c:26:45:da:14:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F61AA6D04968E2222C81499C46D03813F1070400
Validity
Not Before: Aug 10 17:35:19 2026 GMT
Not After : Aug 9 17:40:19 2027 GMT
Subject: CN=564A1BC837360A7BF452A37336360F2A27E63647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:51:2d:06:b8:e2:03:33:e0:e0:f9:27:73:42:
80:49:82:05:23:1b:eb:7c:0e:5a:54:c5:2c:2a:9d:
5a:2e:f0:18:e4:3a:df:b5:ee:ad:8a:2c:be:ee:1a:
a9:0f:1d:20:85:32:f8:c9:18:99:05:dd:d1:0e:91:
08:2c:86:23:e3:7f:a0:23:df:eb:a4:aa:96:59:31:
17:1a:14:b3:7a:ef:5d:ba:ff:30:a8:4d:1c:2b:5a:
03:4d:b7:2a:40:ea:ca:87:ed:78:5b:34:34:fb:90:
91:52:86:ac:41:c6:d4:d1:f8:15:80:7f:fb:a2:77:
6b:66:98:94:bb:12:cc:94:ea:29:7f:11:b5:c5:b7:
57:bc:e1:25:9f:ec:99:13:7c:36:9d:32:36:22:68:
c5:e6:1e:d5:a8:e9:ce:d2:12:eb:2d:da:bd:df:9a:
05:96:a6:b7:f2:d9:21:95:f2:47:12:6c:7e:90:67:
2d:40:07:ba:a8:5d:66:99:ad:82:4a:8e:73:76:f7:
fd:5c:a8:c4:e3:4b:5a:a3:ac:8b:a1:b1:2c:f8:6d:
de:42:ff:d3:7b:40:6a:53:bf:cd:c1:9f:57:82:1d:
de:9f:30:1a:c8:04:da:59:ad:20:4a:b6:c3:5f:bb:
f5:4d:76:67:93:20:50:52:d1:6a:83:db:0b:e5:36:
28:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:4A:1B:C8:37:36:0A:7B:F4:52:A3:73:36:36:0F:2A:27:E6:36:47
X509v3 Authority Key Identifier:
keyid:F6:1A:A6:D0:49:68:E2:22:2C:81:49:9C:46:D0:38:13:F1:07:04:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/323830343a6438343a3a2f33322d3332203d3e203238313731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:d84::/32
Signature Algorithm: sha256WithRSAEncryption
2b:43:0e:ba:eb:3e:d2:58:cf:2b:b2:b7:54:1c:88:38:79:a4:
d3:d5:ad:ef:22:ff:43:7f:8d:39:7d:70:9b:58:5f:ab:44:71:
1c:be:a2:46:71:4e:ce:ab:8e:84:3b:ba:3c:56:7d:72:9b:59:
a1:47:bc:97:12:42:09:c9:39:5d:26:53:d8:fa:96:a5:1d:78:
18:fc:7a:19:4a:d8:97:00:74:bd:87:51:ae:eb:b0:91:83:50:
0f:b1:8e:0c:a2:58:2d:83:d8:77:45:41:90:ed:eb:35:30:65:
da:74:bf:ce:94:71:38:c6:7b:84:73:56:f8:9a:4e:7a:7f:13:
2f:ee:4e:fa:94:34:11:4f:ce:93:60:55:7d:bd:15:21:38:35:
10:e4:24:f7:88:90:75:89:d6:2a:7c:dc:1d:c8:08:02:46:21:
b7:9e:d9:a4:8c:63:5b:b3:ff:17:4e:52:55:d8:20:bf:ed:4a:
2a:cd:e9:3f:aa:69:e2:96:7c:60:60:03:46:1c:16:93:5c:97:
d0:a4:e7:72:35:03:25:73:a2:3d:fd:f9:af:8c:11:e3:ff:5c:
3f:34:26:1c:06:3e:26:06:4c:a6:b4:35:15:d0:4f:3a:d9:e2:
2e:17:47:85:bf:e7:0e:17:29:95:82:72:73:1d:eb:fb:f8:27:
fa:ab:9b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 07:59:30 2026 by rpki-client