
$ rpki-client -vvf rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/323830343a376365303a3a2f33322d3333203d3e20323731353234.roa
File: 323830343a376365303a3a2f33322d3333203d3e20323731353234.roa (raw, json)
Hash identifier: +J4rEB3Rt4T2Ln721WDo+oumy/LO2ZS0AjqCXsjrWc4=
Subject key identifier: 0B:F6:42:2A:D3:FA:BE:5E:AE:9E:95:D5:92:DC:4A:5D:74:B3:01:42
Certificate issuer: /CN=2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647
Certificate serial: 1DACA78221B6AABF5DB2268043C8497BD6E5FFB1
Authority key identifier: 2D:D9:7F:5E:85:D5:A9:57:8E:78:94:0C:FD:5B:AE:DF:B8:2E:06:47
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/323830343a376365303a3a2f33322d3333203d3e20323731353234.roa
Signing time: Tue 07 Apr 2026 20:52:43 +0000
ROA not before: Tue 07 Apr 2026 20:47:43 +0000
ROA not after: Tue 06 Apr 2027 20:52:43 +0000
asID: 271524
IP address blocks: 2804:7ce0::/32 maxlen: 33
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.crl
rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 09 Apr 2026 23:37:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:ac:a7:82:21:b6:aa:bf:5d:b2:26:80:43:c8:49:7b:d6:e5:ff:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647
Validity
Not Before: Apr 7 20:47:43 2026 GMT
Not After : Apr 6 20:52:43 2027 GMT
Subject: CN=0BF6422AD3FABE5EAE9E95D592DC4A5D74B30142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ae:cc:96:c4:41:bc:51:2d:82:e6:da:a5:2b:
65:f9:f4:09:c2:cd:61:6d:01:43:08:f5:ac:b8:51:
6f:e1:ff:58:f2:dc:46:bc:a4:92:ec:1e:93:56:b6:
a2:12:45:b1:a2:06:e4:b2:50:94:f1:9a:47:5b:ac:
5e:20:1c:2a:b8:4f:9a:b7:1c:14:10:a2:5c:f1:20:
7c:ef:08:55:1b:76:e3:d6:ed:4c:b6:e7:58:8a:b3:
37:d6:27:37:b2:54:a3:3a:0b:93:72:e4:e5:9c:26:
0b:3a:6c:b9:66:b8:9d:79:e3:98:59:2f:63:d3:e3:
c3:bf:4e:b6:f0:66:30:90:69:47:86:85:26:67:99:
64:f9:7b:61:ca:27:a3:bc:03:c4:a2:79:10:ae:83:
50:90:47:64:2a:37:02:23:24:ab:0d:2c:29:e4:5e:
64:60:3f:e2:fd:86:fc:5b:d9:fa:6e:90:a3:68:b4:
7e:05:c6:5e:8e:cb:a4:e0:78:df:7d:5d:c5:d7:23:
42:ff:3a:6d:d1:80:40:ff:a5:a4:ab:d4:39:5e:bf:
0b:a9:d4:c7:07:3d:56:36:6a:91:7e:3b:28:5c:e2:
bd:71:48:d6:f2:f8:cf:0a:7a:d2:74:9b:18:50:f5:
e2:40:5f:02:bb:34:2a:2e:9e:be:35:da:06:79:5f:
38:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F6:42:2A:D3:FA:BE:5E:AE:9E:95:D5:92:DC:4A:5D:74:B3:01:42
X509v3 Authority Key Identifier:
keyid:2D:D9:7F:5E:85:D5:A9:57:8E:78:94:0C:FD:5B:AE:DF:B8:2E:06:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/323830343a376365303a3a2f33322d3333203d3e20323731353234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7ce0::/32
Signature Algorithm: sha256WithRSAEncryption
48:0c:4c:09:08:bd:a5:86:0d:28:0e:98:6e:23:2a:a1:27:d9:
73:b8:04:98:ef:5d:d6:2a:47:60:4c:0a:2b:a1:d9:5e:bc:ae:
0e:e3:3b:2a:e1:c9:4c:47:c2:1e:ab:e5:3b:da:3d:44:a4:12:
85:48:74:91:61:40:b4:98:09:93:33:49:32:04:3b:60:d7:37:
4e:74:66:87:de:58:86:84:80:93:5d:e6:c4:92:90:9d:ad:50:
97:94:85:8f:e7:1a:7d:be:0d:bd:97:64:7e:9d:6c:72:62:38:
99:b7:d1:80:60:08:62:50:93:45:2a:7c:b2:97:a4:ec:cd:34:
0d:48:f3:8a:0c:12:be:6f:21:80:76:b9:8e:54:d4:23:d0:bb:
2e:58:6c:88:4c:96:44:f0:dd:31:2f:6e:43:8b:fa:d9:3e:09:
15:65:f6:39:09:8c:0a:6d:69:18:50:5e:79:cf:d0:5c:f6:13:
14:f3:85:f6:cd:c2:c0:83:48:85:31:8a:f9:7d:74:ce:57:f9:
31:9f:5f:cd:b1:68:f5:97:ad:cd:aa:ae:85:84:85:cf:ee:a4:
bb:01:9c:97:60:9b:ae:48:e6:22:da:15:66:c0:c6:21:c1:29:
fc:21:98:a5:ad:9c:43:35:8a:4a:8d:e7:bd:d7:a7:b5:d1:1f:
4f:a9:48:6b
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUHayngiG2qr9dsiaAQ8hJe9bl/7EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkREOTdGNUU4NUQ1QTk1NzhFNzg5NDBDRkQ1QkFFREZC
ODJFMDY0NzAeFw0yNjA0MDcyMDQ3NDNaFw0yNzA0MDYyMDUyNDNaMDMxMTAvBgNV
BAMTKDBCRjY0MjJBRDNGQUJFNUVBRTlFOTVENTkyREM0QTVENzRCMzAxNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1rsyWxEG8US2C5tqlK2X59AnC
zWFtAUMI9ay4UW/h/1jy3Ea8pJLsHpNWtqISRbGiBuSyUJTxmkdbrF4gHCq4T5q3
HBQQolzxIHzvCFUbduPW7Uy251iKszfWJzeyVKM6C5Ny5OWcJgs6bLlmuJ1545hZ
L2PT48O/TrbwZjCQaUeGhSZnmWT5e2HKJ6O8A8SieRCug1CQR2QqNwIjJKsNLCnk
XmRgP+L9hvxb2fpukKNotH4Fxl6Oy6TgeN99XcXXI0L/Om3RgED/paSr1Dlevwup
1McHPVY2apF+Oyhc4r1xSNby+M8KetJ0mxhQ9eJAXwK7NCounr412gZ5XziFAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUC/ZCKtP6vl6unpXVktxKXXSzAUIwHwYDVR0j
BBgwFoAULdl/XoXVqVeOeJQM/Vuu37guBkcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2ZVVEdxUTI0YmNMcUNjQjkyOE15ZldBYkNrZFVreVV0WFB5RFhlQW0x
b0IvMC8yREQ5N0Y1RTg1RDVBOTU3OEU3ODk0MENGRDVCQUVERkI4MkUwNjQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJERDk3RjVFODVENUE5NTc4
RTc4OTQwQ0ZENUJBRURGQjgyRTA2NDcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NmVVRHcVEyNGJjTHFDY0I5MjhNeWZXQWJDa2RVa3lVdFhQeURYZUFtMW9CLzAv
MzIzODMwMzQzYTM3NjM2NTMwM2EzYTJmMzMzMjJkMzMzMzIwM2QzZTIwMzIzNzMx
MzUzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR84DANBgkqhkiG9w0BAQsFAAOCAQEASAxMCQi9
pYYNKA6YbiMqoSfZc7gEmO9d1ipHYEwKK6HZXryuDuM7KuHJTEfCHqvlO9o9RKQS
hUh0kWFAtJgJkzNJMgQ7YNc3TnRmh95YhoSAk13mxJKQna1Ql5SFj+cafb4NvZdk
fp1scmI4mbfRgGAIYlCTRSp8spek7M00DUjzigwSvm8hgHa5jlTUI9C7LlhsiEyW
RPDdMS9uQ4v62T4JFWX2OQmMCm1pGFBeec/QXPYTFPOF9s3CwINIhTGK+X10zlf5
MZ9fzbFo9ZetzaquhYSFz+6kuwGcl2CbrkjmItoVZsDGIcEp/CGYpa2cQzWKSo3n
vdentdEfT6lIaw==
-----END CERTIFICATE-----
Generated at Thu Apr 9 15:56:27 2026 by rpki-client