
$ rpki-client -vvvf rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/323830343a353730633a313030303a3a2f33362d3336203d3e20323638303430.roa
File: 323830343a353730633a313030303a3a2f33362d3336203d3e20323638303430.roa (raw, json)
Hash identifier: MR7e3n/qOgnaibNxsTC4IvtWeOiEL3vDfVySmXV2450=
Subject key identifier: CD:F9:8B:B3:15:D0:3A:7D:39:21:48:55:6E:F0:51:CC:8E:42:1E:E6
Certificate issuer: /CN=CEA74FF3945E7508599D54A721E47B3BA75706E3
Certificate serial: 3AE7C6038CFA08111C5CDE9AC615585AC4D3B71D
Authority key identifier: CE:A7:4F:F3:94:5E:75:08:59:9D:54:A7:21:E4:7B:3B:A7:57:06:E3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/323830343a353730633a313030303a3a2f33362d3336203d3e20323638303430.roa
Signing time: Mon 10 Aug 2026 22:23:46 +0000
ROA not before: Mon 10 Aug 2026 22:18:46 +0000
ROA not after: Mon 09 Aug 2027 22:23:46 +0000
asID: 268040
IP address blocks: 2804:570c:1000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.crl
rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 25 Aug 2026 11:10:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:e7:c6:03:8c:fa:08:11:1c:5c:de:9a:c6:15:58:5a:c4:d3:b7:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CEA74FF3945E7508599D54A721E47B3BA75706E3
Validity
Not Before: Aug 10 22:18:46 2026 GMT
Not After : Aug 9 22:23:46 2027 GMT
Subject: CN=CDF98BB315D03A7D392148556EF051CC8E421EE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0e:f5:46:a2:51:08:91:32:20:16:d3:71:1b:
92:6d:56:ac:e4:c3:14:9b:ed:a9:87:69:41:5e:08:
ca:cb:4b:4e:92:fa:bf:42:7c:44:3d:20:79:7c:10:
53:1b:96:65:7f:a7:f1:7b:68:f0:1f:ce:09:28:a4:
db:5a:84:00:19:13:0d:ea:a8:a5:93:1a:ce:a5:a2:
42:f3:b2:54:3c:aa:75:71:39:a6:35:69:fe:be:87:
d2:9d:29:b8:68:ad:57:40:91:8b:d9:86:dc:90:43:
18:4d:5c:6f:ee:69:51:4b:ba:9a:be:90:7c:01:a8:
79:38:18:f0:33:26:ce:da:96:4b:58:1f:42:b7:5b:
7e:42:b3:5b:1e:c1:bd:51:b7:dc:1d:50:4c:0c:d0:
13:7d:4f:8f:23:2a:80:f5:d2:4e:4c:99:77:d2:11:
e4:53:83:57:3e:f3:58:94:db:0c:d3:e7:9d:9e:ad:
f9:2e:53:78:f0:6d:08:3d:29:ec:0f:42:9a:d2:78:
4a:9b:54:a4:a9:49:62:2b:bd:0d:e0:41:1b:07:89:
27:9d:1e:92:cd:67:a6:32:0c:63:52:2c:ee:05:ea:
1e:1e:21:b0:24:39:28:40:24:b2:a2:4a:be:dd:12:
fb:38:93:c4:e9:25:8c:28:81:29:f3:e0:b8:e8:98:
a8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F9:8B:B3:15:D0:3A:7D:39:21:48:55:6E:F0:51:CC:8E:42:1E:E6
X509v3 Authority Key Identifier:
keyid:CE:A7:4F:F3:94:5E:75:08:59:9D:54:A7:21:E4:7B:3B:A7:57:06:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/323830343a353730633a313030303a3a2f33362d3336203d3e20323638303430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:570c:1000::/36
Signature Algorithm: sha256WithRSAEncryption
32:dc:5f:dd:08:2b:39:ec:a6:5f:4d:f6:8a:5d:5b:3c:a1:93:
91:2c:cd:12:13:c4:14:93:ef:ea:8a:19:39:f3:fc:7a:5a:80:
f8:11:c5:58:35:fc:b9:64:c9:36:ef:b2:e2:ca:2a:40:c1:89:
f0:3e:cf:0e:99:3c:6f:75:23:4b:40:88:d4:c0:74:35:0f:5f:
f1:c2:08:1a:6e:64:b0:9d:8a:33:2a:2a:72:b3:77:d3:8d:ae:
68:f7:30:30:47:f3:91:d1:93:70:2c:8a:6a:0a:24:10:f7:51:
b5:ae:fb:80:20:78:3a:02:ee:38:4a:55:e0:b7:80:69:be:37:
b5:dc:7b:00:06:aa:30:36:d4:bb:e3:59:24:2b:61:71:50:f8:
07:e4:88:79:de:54:2b:42:d2:02:81:37:f8:27:6c:00:5f:02:
e4:f1:51:0e:71:8c:3b:2a:9f:4f:26:55:15:20:de:fd:2d:db:
e3:63:92:46:4b:56:49:94:a9:96:ff:17:10:de:8d:04:44:dc:
44:ba:58:59:fe:70:9d:cf:18:11:ab:44:e9:6f:2f:f7:cb:0c:
c6:f7:32:39:0f:40:23:d1:97:aa:cf:e5:1a:87:66:d8:11:6d:
08:8a:27:cf:a4:ad:0f:32:fc:d5:7d:cd:45:b2:f6:1e:fe:90:
82:ec:86:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 21:52:20 2026 by rpki-client