
$ rpki-client -vvvf rpki-repo.registro.br/repo/ChZdbTbeLU8PeZKpDDR62v4Yb94GujD9JZKnxBySazjd/0/323830343a356563633a343030303a3a2f33342d3334203d3e20323639303537.roa
File: 323830343a356563633a343030303a3a2f33342d3334203d3e20323639303537.roa (raw, json)
Hash identifier: 2JE2ryGbdj+KXAyBcD2j0XYQ4ZjPTn4w1hhWtQVvOtA=
Subject key identifier: 78:9F:D4:64:EC:FC:05:92:3D:34:39:8C:D5:DC:97:2B:5A:CF:C5:58
Certificate issuer: /CN=2394302CD5C8ECF673B6BC6DB508B14EFB67DD82
Certificate serial: 32721384F0D15124740EB9C321008C8F854F9417
Authority key identifier: 23:94:30:2C:D5:C8:EC:F6:73:B6:BC:6D:B5:08:B1:4E:FB:67:DD:82
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2394302CD5C8ECF673B6BC6DB508B14EFB67DD82.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ChZdbTbeLU8PeZKpDDR62v4Yb94GujD9JZKnxBySazjd/0/323830343a356563633a343030303a3a2f33342d3334203d3e20323639303537.roa
Signing time: Mon 28 Sep 2026 14:47:16 +0000
ROA not before: Mon 28 Sep 2026 14:42:16 +0000
ROA not after: Mon 27 Sep 2027 14:47:16 +0000
asID: 269057
IP address blocks: 2804:5ecc:4000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/ChZdbTbeLU8PeZKpDDR62v4Yb94GujD9JZKnxBySazjd/0/2394302CD5C8ECF673B6BC6DB508B14EFB67DD82.crl
rsync://rpki-repo.registro.br/repo/ChZdbTbeLU8PeZKpDDR62v4Yb94GujD9JZKnxBySazjd/0/2394302CD5C8ECF673B6BC6DB508B14EFB67DD82.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2394302CD5C8ECF673B6BC6DB508B14EFB67DD82.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 11 Oct 2026 11:47:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:72:13:84:f0:d1:51:24:74:0e:b9:c3:21:00:8c:8f:85:4f:94:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2394302CD5C8ECF673B6BC6DB508B14EFB67DD82
Validity
Not Before: Sep 28 14:42:16 2026 GMT
Not After : Sep 27 14:47:16 2027 GMT
Subject: CN=789FD464ECFC05923D34398CD5DC972B5ACFC558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:32:22:ff:1e:7e:1c:fd:27:7a:2a:41:91:ea:
fb:26:2e:41:44:a1:08:97:92:05:ad:6d:92:0c:6d:
f3:83:9a:8c:76:45:f6:bd:02:df:7d:cf:2c:a3:01:
9a:c5:93:1c:f6:e2:47:c7:6d:42:dc:0b:09:7f:a9:
c9:01:3b:56:76:64:16:a4:a4:79:e9:1c:31:b8:56:
5d:6c:88:a2:3a:cf:11:59:22:cd:a1:c2:1f:27:c3:
c1:15:be:52:69:70:0b:13:c9:df:89:3d:77:fc:01:
13:ce:d2:6d:ea:22:69:a9:ed:0d:5a:43:bf:bc:11:
33:3e:eb:a9:9b:e4:e6:0d:0a:e1:ae:65:f5:6c:9c:
31:e2:ff:9f:d3:8a:a3:9d:ff:8b:2a:72:61:82:e2:
5f:c5:77:74:c6:3c:1d:bf:5b:99:ea:4e:2b:f5:f3:
cf:5b:f4:6c:37:3e:98:26:dc:0a:18:01:9a:37:8b:
69:f0:ad:86:5c:64:e5:e5:99:08:48:90:97:71:35:
0b:e0:61:cc:aa:ae:7e:ba:37:84:11:e9:d8:ee:a6:
00:13:c1:85:15:12:95:da:cc:45:e6:06:36:bf:81:
86:2c:4c:40:f6:f6:42:f9:64:13:e1:bd:4f:17:38:
2d:e2:38:29:cb:b6:4b:45:b1:e9:85:36:01:54:d1:
b0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:9F:D4:64:EC:FC:05:92:3D:34:39:8C:D5:DC:97:2B:5A:CF:C5:58
X509v3 Authority Key Identifier:
keyid:23:94:30:2C:D5:C8:EC:F6:73:B6:BC:6D:B5:08:B1:4E:FB:67:DD:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ChZdbTbeLU8PeZKpDDR62v4Yb94GujD9JZKnxBySazjd/0/2394302CD5C8ECF673B6BC6DB508B14EFB67DD82.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2394302CD5C8ECF673B6BC6DB508B14EFB67DD82.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ChZdbTbeLU8PeZKpDDR62v4Yb94GujD9JZKnxBySazjd/0/323830343a356563633a343030303a3a2f33342d3334203d3e20323639303537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5ecc:4000::/34
Signature Algorithm: sha256WithRSAEncryption
05:af:19:a6:66:fd:91:ab:a3:2d:8f:2d:30:9b:e6:b4:bb:d3:
57:41:ab:69:0f:33:8e:83:c6:8b:c4:e1:09:af:2f:03:b1:d6:
42:70:c9:2d:d0:70:64:66:af:24:59:4a:c1:36:9f:ab:fe:aa:
96:84:85:ef:34:aa:0b:bd:31:2f:09:9e:f8:6c:03:bc:df:26:
e8:4f:fd:3e:0b:96:4b:b9:46:f4:20:9f:0b:5b:10:b7:45:4e:
c6:bc:b6:14:79:07:07:62:83:7b:a6:21:93:ff:2c:f4:ed:dc:
bf:fd:e3:82:ce:f1:cd:55:fa:e6:57:4e:bd:2d:83:3f:ab:3b:
b2:9d:47:30:bb:38:a0:b3:9e:5d:aa:19:0c:41:9d:10:77:34:
fb:76:f1:67:a1:bb:6a:a9:52:be:c3:c6:e3:9e:06:24:fa:f3:
f0:08:8e:a6:8c:f0:bb:eb:83:f5:75:bb:56:69:ea:39:f3:d3:
2f:66:c9:96:d1:2c:04:c9:e9:c0:79:99:5a:dc:c3:f8:ad:0d:
bd:a0:20:38:5c:9b:8d:c5:8a:54:ce:bf:50:16:1c:15:5c:89:
61:11:c1:c6:91:f9:69:04:7d:ab:2a:37:7f:a2:8a:69:cd:0d:
29:3b:dc:5f:a6:f5:6b:d3:5e:1d:62:d1:37:27:3d:30:84:8f:
1c:95:32:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:41:47 2026 by rpki-client