
$ rpki-client -vvvf rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/323830343a353730633a393030303a3a2f33362d3336203d3e20323638303430.roa
File: 323830343a353730633a393030303a3a2f33362d3336203d3e20323638303430.roa (raw, json)
Hash identifier: TypOm9UrdU574z0wjxRCQkETf/SMKGJDX/1yDM6x8qc=
Subject key identifier: CD:B2:DB:3F:74:7E:49:9E:5B:5F:6E:6F:56:08:E5:B5:6C:96:C5:89
Certificate issuer: /CN=CEA74FF3945E7508599D54A721E47B3BA75706E3
Certificate serial: 2643271C3D861C31237FF0C6AEAA658E25B7A841
Authority key identifier: CE:A7:4F:F3:94:5E:75:08:59:9D:54:A7:21:E4:7B:3B:A7:57:06:E3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/323830343a353730633a393030303a3a2f33362d3336203d3e20323638303430.roa
Signing time: Mon 10 Aug 2026 22:23:45 +0000
ROA not before: Mon 10 Aug 2026 22:18:45 +0000
ROA not after: Mon 09 Aug 2027 22:23:45 +0000
asID: 268040
IP address blocks: 2804:570c:9000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.crl
rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 25 Aug 2026 11:10:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:43:27:1c:3d:86:1c:31:23:7f:f0:c6:ae:aa:65:8e:25:b7:a8:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CEA74FF3945E7508599D54A721E47B3BA75706E3
Validity
Not Before: Aug 10 22:18:45 2026 GMT
Not After : Aug 9 22:23:45 2027 GMT
Subject: CN=CDB2DB3F747E499E5B5F6E6F5608E5B56C96C589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:45:e2:ac:c1:31:99:2d:f0:53:d6:48:49:27:
04:76:12:e4:2d:1d:6f:c1:e5:e5:cd:22:1d:ae:18:
a5:dc:ce:ee:ae:1b:77:e4:e8:7c:2e:9c:3d:0b:9c:
9b:c7:31:6d:a5:d7:1f:21:80:a3:83:35:f1:51:fc:
40:76:f4:12:5c:2a:16:c1:65:64:96:28:64:52:ee:
b5:79:19:51:91:ac:2d:55:e4:06:79:65:28:23:75:
3f:93:4e:da:1d:30:fd:9e:60:ad:f5:27:c3:e4:30:
31:9a:8f:6c:8e:70:33:60:1e:e4:16:0c:d5:ed:fd:
0a:c9:3e:cc:cf:3a:42:35:af:77:b7:49:ab:a8:0c:
0b:c5:17:26:08:5a:75:ae:c3:17:39:5c:d5:26:0d:
f8:d8:72:e3:e0:8f:02:24:27:1b:89:2c:a8:2b:c7:
13:9f:67:8a:8d:70:c0:05:f9:76:d4:20:90:14:dd:
d4:0a:04:f6:44:8c:5e:cb:22:f5:1b:60:e7:54:15:
51:64:64:0d:86:31:36:28:c7:df:a7:6f:ee:54:7c:
45:6d:1e:77:a4:e3:b1:cf:26:ef:ae:6d:96:b6:b8:
84:9e:50:60:e2:d2:37:c3:5c:88:5c:ed:7b:5d:e6:
35:28:96:31:cb:0a:50:24:4f:f0:3f:d4:bc:17:ef:
81:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B2:DB:3F:74:7E:49:9E:5B:5F:6E:6F:56:08:E5:B5:6C:96:C5:89
X509v3 Authority Key Identifier:
keyid:CE:A7:4F:F3:94:5E:75:08:59:9D:54:A7:21:E4:7B:3B:A7:57:06:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/323830343a353730633a393030303a3a2f33362d3336203d3e20323638303430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:570c:9000::/36
Signature Algorithm: sha256WithRSAEncryption
c4:a5:85:57:de:05:03:f4:ec:2d:86:38:f6:fd:af:b5:d5:4c:
91:57:af:af:34:8b:c8:63:c0:10:2e:63:3e:ab:da:0e:f0:56:
b4:b4:27:f0:37:01:a3:5b:79:db:9a:d3:6f:ce:c7:e7:d9:d9:
8b:ab:de:10:ea:f4:24:94:84:64:36:c6:7d:d0:f3:da:e0:d2:
77:4f:36:c9:56:04:5f:a5:46:e4:cb:93:9e:bb:69:1b:18:bf:
25:42:d6:4b:ee:ac:94:99:be:19:7e:57:e6:c2:28:7f:84:3f:
72:30:df:5f:74:e3:35:4e:e9:71:15:6d:22:b7:7f:ec:4e:27:
86:d1:de:17:75:62:60:f8:8b:78:dc:f6:21:8c:51:80:30:29:
29:6f:49:1a:96:a2:94:e2:72:d9:8a:e7:75:f8:ca:58:68:d5:
8a:e7:48:39:f6:19:12:fa:2f:eb:4e:03:de:3f:01:62:5b:18:
28:5f:bb:88:41:d5:98:cc:19:04:44:d5:d8:0e:36:c0:ae:f0:
03:bf:be:bd:f4:c7:78:a7:1d:e3:2d:6b:74:f6:ee:80:69:50:
5e:4e:65:62:29:7e:c0:7c:82:c9:a6:54:49:df:27:b0:c6:9f:
5e:d7:c5:d2:e0:d4:fe:22:dd:9c:11:41:b5:fa:7e:7d:e5:8f:
be:2d:58:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 21:04:50 2026 by rpki-client