
$ rpki-client -vvvf rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/323830343a6438343a633030303a3a2f33362d3336203d3e203238313731.roa
File: 323830343a6438343a633030303a3a2f33362d3336203d3e203238313731.roa (raw, json)
Hash identifier: V5lzUrj1caWtDTtSuq5fG2MDlbBbQiSHPkxijl87afY=
Subject key identifier: D3:C2:68:BB:E1:74:9B:7B:BA:96:FA:03:01:FA:40:54:6E:C3:CB:B6
Certificate issuer: /CN=F61AA6D04968E2222C81499C46D03813F1070400
Certificate serial: 2721FDB5AD142CA263CFD9DE9C913CE2514FDFFA
Authority key identifier: F6:1A:A6:D0:49:68:E2:22:2C:81:49:9C:46:D0:38:13:F1:07:04:00
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/323830343a6438343a633030303a3a2f33362d3336203d3e203238313731.roa
Signing time: Mon 10 Aug 2026 17:40:25 +0000
ROA not before: Mon 10 Aug 2026 17:35:25 +0000
ROA not after: Mon 09 Aug 2027 17:40:25 +0000
asID: 28171
IP address blocks: 2804:d84:c000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.crl
rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 25 Aug 2026 10:53:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:21:fd:b5:ad:14:2c:a2:63:cf:d9:de:9c:91:3c:e2:51:4f:df:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F61AA6D04968E2222C81499C46D03813F1070400
Validity
Not Before: Aug 10 17:35:25 2026 GMT
Not After : Aug 9 17:40:25 2027 GMT
Subject: CN=D3C268BBE1749B7BBA96FA0301FA40546EC3CBB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c5:78:44:b7:57:a6:f9:c7:92:61:e4:e8:49:
ba:23:2b:c1:d3:e2:a4:88:12:33:2a:80:ae:37:87:
55:7b:8e:12:30:67:a9:4c:70:31:ba:d7:45:c8:9d:
ab:b0:5d:af:fe:84:8c:06:a7:98:d1:9e:03:c0:0c:
f7:0c:da:3a:9c:3b:fb:ed:6b:32:7a:5a:dd:c1:b8:
c4:e7:ed:f8:2e:39:1c:22:eb:1d:c2:46:60:43:99:
a4:16:bd:d6:32:f0:8f:b0:58:24:25:c7:eb:ac:23:
ab:44:b5:a2:d6:a6:05:97:d5:a1:af:66:8f:ac:5b:
eb:cf:25:17:a4:8b:1c:a5:aa:d7:3d:30:a7:1b:10:
e4:6e:b7:bf:98:23:58:d3:ff:a6:96:3a:ec:35:9d:
1d:b4:e0:fd:c0:70:4a:cb:40:14:19:2b:84:5a:27:
77:ce:af:a3:80:c3:82:aa:de:89:0c:f4:d3:37:77:
ac:9e:8a:19:17:40:49:79:b7:5f:63:ba:db:25:39:
8a:0d:7b:fc:d5:7c:30:7a:67:ff:0c:97:fb:5d:e5:
7c:8f:8e:ab:62:b8:45:dd:3a:e7:b7:37:db:64:19:
51:5a:42:1a:a5:b0:1c:6b:22:86:67:03:cd:ee:aa:
b8:7c:1e:98:3b:b9:9c:19:3c:db:d9:db:40:0a:cc:
6e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C2:68:BB:E1:74:9B:7B:BA:96:FA:03:01:FA:40:54:6E:C3:CB:B6
X509v3 Authority Key Identifier:
keyid:F6:1A:A6:D0:49:68:E2:22:2C:81:49:9C:46:D0:38:13:F1:07:04:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/323830343a6438343a633030303a3a2f33362d3336203d3e203238313731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:d84:c000::/36
Signature Algorithm: sha256WithRSAEncryption
59:13:17:85:22:83:81:ca:0a:dd:00:3f:52:e8:cb:45:5a:14:
e7:c4:b0:a2:fe:f1:a3:f6:9a:39:be:5c:8d:cb:7d:bb:49:18:
82:b9:18:53:32:57:d5:c3:96:bb:d1:10:2b:ca:4f:fa:e9:54:
b6:33:f1:5e:99:eb:94:93:b0:ef:f1:50:8e:92:30:15:1d:ed:
6a:b6:2d:da:fc:c2:f2:3d:47:c7:d5:f6:7d:c2:c7:b7:6b:40:
38:bf:cd:11:c1:37:53:4c:0d:86:f1:4c:b8:59:b0:9d:6f:61:
48:54:77:f2:bc:32:a5:68:b7:0e:5f:ea:ed:fc:ad:35:ed:f3:
8e:8c:53:76:90:9d:e3:da:d1:bf:09:61:eb:f8:a0:5d:47:42:
9d:46:5a:ed:d2:1f:d6:58:08:4e:41:0d:12:97:26:43:4f:98:
c0:fb:91:1f:fe:f6:2a:bc:9f:dc:ca:88:0b:79:8c:71:7b:76:
90:42:b8:47:61:63:9c:83:d4:c2:c0:f6:d6:05:95:11:a1:ae:
c8:56:1e:d0:b6:8b:75:90:5b:a5:54:c2:4e:e8:56:bb:da:db:
47:6b:27:55:30:57:b9:12:1f:a0:5e:88:9b:32:82:57:53:bd:
93:43:27:e0:73:3c:5a:0d:dc:56:25:e5:7a:fe:4e:c1:2b:9d:
57:19:f1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 01:21:21 2026 by rpki-client