
$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a343830303a3a2f33372d3337203d3e20323632373239.roa
File: 323830343a313664383a343830303a3a2f33372d3337203d3e20323632373239.roa (raw, json)
Hash identifier: DiSnVgdCEiflofz1VkjXuRddq7bUWa6E6iyReETy7yo=
Subject key identifier: 41:86:C7:BD:DB:32:00:29:A0:80:9D:18:D1:43:D5:62:78:F3:90:6C
Certificate issuer: /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial: 411C2F3D6736AC8929D0B8BACA52E34E9DE60DF3
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a343830303a3a2f33372d3337203d3e20323632373239.roa
Signing time: Mon 18 May 2026 15:07:59 +0000
ROA not before: Mon 18 May 2026 15:02:59 +0000
ROA not after: Mon 17 May 2027 15:07:59 +0000
asID: 262729
IP address blocks: 2804:16d8:4800::/37 maxlen: 37
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 25 May 2026 15:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:1c:2f:3d:67:36:ac:89:29:d0:b8:ba:ca:52:e3:4e:9d:e6:0d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Validity
Not Before: May 18 15:02:59 2026 GMT
Not After : May 17 15:07:59 2027 GMT
Subject: CN=4186C7BDDB320029A0809D18D143D56278F3906C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ad:53:11:d7:57:79:fb:ff:dd:8c:96:ba:cf:
27:ec:3b:a3:b7:89:cf:0b:6d:c3:e8:21:8b:61:6b:
c2:b8:60:34:9c:fe:e5:46:9a:24:a8:b9:d2:7a:7d:
ae:75:2b:a3:4d:8a:1e:68:b9:b5:23:c7:e4:3a:c5:
72:e7:d7:92:49:58:1c:f4:eb:73:ee:34:4a:09:53:
3b:cf:90:77:31:91:7c:21:3f:91:87:86:e7:92:2a:
fc:fe:5c:91:6b:f1:b2:f6:c3:e8:e1:93:80:70:0e:
5d:32:83:11:b5:32:ee:5f:dd:b3:fd:56:fc:a6:17:
b9:ce:1f:33:c6:b5:d6:df:8d:b7:a9:93:61:97:68:
23:35:38:af:45:d0:82:92:a5:10:5e:41:5d:b1:37:
df:a1:93:79:9a:92:66:e4:79:71:82:97:e2:5b:9f:
d2:b0:42:20:13:2b:72:a3:cf:cc:01:04:4c:d2:1e:
b4:9d:fe:6a:05:48:a1:4c:98:2a:36:8d:03:c9:7f:
86:65:d6:9e:03:66:82:44:34:d3:ac:77:ee:6f:97:
8e:ac:25:fe:de:cb:6e:c3:97:08:f7:9b:8c:ff:92:
4a:13:72:3c:59:d2:6a:67:2c:2e:73:7f:68:1b:8b:
ab:9b:19:a1:36:8f:75:43:12:98:43:77:d7:4c:20:
9f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:86:C7:BD:DB:32:00:29:A0:80:9D:18:D1:43:D5:62:78:F3:90:6C
X509v3 Authority Key Identifier:
keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a343830303a3a2f33372d3337203d3e20323632373239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:16d8:4800::/37
Signature Algorithm: sha256WithRSAEncryption
6b:8b:fb:31:c6:a8:6a:86:41:8b:fa:07:7b:2c:fb:1a:75:c8:
30:3f:88:3c:27:05:91:4f:84:c6:15:bd:05:ef:75:95:9e:af:
b4:2f:f8:0f:6e:77:a5:71:21:ad:05:d9:8f:56:56:29:85:f5:
b2:f5:5d:25:3d:fb:d2:2e:6f:58:e4:8b:c4:d0:c3:4c:0e:6e:
33:41:2f:98:83:3a:e6:11:81:f3:e9:a2:f4:3a:4b:33:89:39:
4c:63:6d:0e:d3:4e:25:34:97:0a:8b:20:68:00:cd:4e:1f:1b:
5d:a6:91:71:2a:eb:93:e2:6d:91:45:9a:bb:c9:be:3e:bb:08:
34:0b:e5:d2:9c:55:ef:8c:de:36:d0:1d:07:aa:ff:54:d1:54:
f8:44:31:ee:00:67:8f:72:c2:89:6f:0c:9c:62:9d:b5:3f:e3:
8f:06:23:e0:5f:f6:c7:34:4d:12:63:dc:0e:59:fe:a9:a6:d1:
7e:00:09:d4:21:98:ab:e1:5e:bd:3f:7e:9e:22:95:6e:41:0a:
e1:f2:6b:ac:95:d8:55:b9:5d:de:86:24:90:76:0a:87:62:6a:
7b:95:07:b2:34:bf:11:f9:ad:5c:32:97:66:d5:b4:87:30:c8:
b7:73:86:b1:50:16:89:5f:9a:63:45:c9:ff:ec:55:76:64:b7:
fd:e0:91:e5
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUQRwvPWc2rIkp0Li6ylLjTp3mDfMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjlEQjFCNThEQ0Q0NkMyRTc0NkQ4RERFQUE3RjQ5ODMz
MUREQjAxNzAeFw0yNjA1MTgxNTAyNTlaFw0yNzA1MTcxNTA3NTlaMDMxMTAvBgNV
BAMTKDQxODZDN0JEREIzMjAwMjlBMDgwOUQxOEQxNDNENTYyNzhGMzkwNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3rVMR11d5+//djJa6zyfsO6O3
ic8LbcPoIYtha8K4YDSc/uVGmiSoudJ6fa51K6NNih5oubUjx+Q6xXLn15JJWBz0
63PuNEoJUzvPkHcxkXwhP5GHhueSKvz+XJFr8bL2w+jhk4BwDl0ygxG1Mu5f3bP9
VvymF7nOHzPGtdbfjbepk2GXaCM1OK9F0IKSpRBeQV2xN9+hk3makmbkeXGCl+Jb
n9KwQiATK3Kjz8wBBEzSHrSd/moFSKFMmCo2jQPJf4Zl1p4DZoJENNOsd+5vl46s
Jf7ey27Dlwj3m4z/kkoTcjxZ0mpnLC5zf2gbi6ubGaE2j3VDEphDd9dMIJ8TAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUQYbHvdsyACmggJ0Y0UPVYnjzkGwwHwYDVR0j
BBgwFoAUudsbWNzUbC50bY3eqn9JgzHdsBcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDVmUEVVcmNhM21RVW9hNVVMS3pGNVB6WTdZZExVSkdXbTRiRzF0ZUZn
OWsvMC9COURCMUI1OERDRDQ2QzJFNzQ2RDhEREVBQTdGNDk4MzMxRERCMDE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5REIxQjU4RENENDZDMkU3
NDZEOERERUFBN0Y0OTgzMzFEREIwMTcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q1ZlBFVXJjYTNtUVVvYTVVTEt6RjVQelk3WWRMVUpHV200YkcxdGVGZzlrLzAv
MzIzODMwMzQzYTMxMzY2NDM4M2EzNDM4MzAzMDNhM2EyZjMzMzcyZDMzMzcyMDNk
M2UyMDMyMzYzMjM3MzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAygEFthIMA0GCSqGSIb3DQEBCwUA
A4IBAQBri/sxxqhqhkGL+gd7LPsadcgwP4g8JwWRT4TGFb0F73WVnq+0L/gPbnel
cSGtBdmPVlYphfWy9V0lPfvSLm9Y5IvE0MNMDm4zQS+YgzrmEYHz6aL0OksziTlM
Y20O004lNJcKiyBoAM1OHxtdppFxKuuT4m2RRZq7yb4+uwg0C+XSnFXvjN420B0H
qv9U0VT4RDHuAGePcsKJbwycYp21P+OPBiPgX/bHNE0SY9wOWf6pptF+AAnUIZir
4V69P36eIpVuQQrh8musldhVuV3ehiSQdgqHYmp7lQeyNL8R+a1cMpdm1bSHMMi3
c4axUBaJX5pjRcn/7FV2ZLf94JHl
-----END CERTIFICATE-----
Generated at Sun May 24 16:21:05 2026 by rpki-client