
$ rpki-client -vvvf rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/323830343a386562343a383538303a3a2f34312d3431203d3e20323733343433.roa
File: 323830343a386562343a383538303a3a2f34312d3431203d3e20323733343433.roa (raw, json)
Hash identifier: 4V4cN8xSSSQSxEscpDgJPW1jZZWC2/hW5iahd6Uez3g=
Subject key identifier: 42:AB:8A:7F:27:1A:6A:7A:26:2A:51:C7:BD:51:40:9E:65:96:3C:7D
Certificate issuer: /CN=601AB4C2CB27698A7EF0684324D416B8646A9B75
Certificate serial: 1AC10176D6E14E3EFFF8ADDEE601036848FF0B2F
Authority key identifier: 60:1A:B4:C2:CB:27:69:8A:7E:F0:68:43:24:D4:16:B8:64:6A:9B:75
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/323830343a386562343a383538303a3a2f34312d3431203d3e20323733343433.roa
Signing time: Sat 19 Sep 2026 03:37:04 +0000
ROA not before: Sat 19 Sep 2026 03:32:04 +0000
ROA not after: Sat 18 Sep 2027 03:37:04 +0000
asID: 273443
IP address blocks: 2804:8eb4:8580::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.crl
rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Oct 2026 02:03:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:c1:01:76:d6:e1:4e:3e:ff:f8:ad:de:e6:01:03:68:48:ff:0b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601AB4C2CB27698A7EF0684324D416B8646A9B75
Validity
Not Before: Sep 19 03:32:04 2026 GMT
Not After : Sep 18 03:37:04 2027 GMT
Subject: CN=42AB8A7F271A6A7A262A51C7BD51409E65963C7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:05:13:7f:16:19:03:bf:19:bd:66:6b:74:b2:
03:d3:71:3a:77:62:d4:d0:a9:1c:2a:a3:85:37:ca:
48:10:40:7e:ad:b5:f6:04:b7:50:61:64:dd:76:a2:
ce:2b:fb:3a:0e:84:2a:5e:bc:ff:2e:6e:5d:37:eb:
44:f3:de:cb:43:f5:6c:a1:45:81:05:c8:d1:bb:93:
c2:7c:2d:be:c5:bf:0b:6c:5a:9c:56:a4:00:36:a5:
b3:89:42:78:47:5f:62:bc:54:d5:d2:34:9f:a2:78:
fe:e0:ce:a8:c6:2f:14:65:6c:4c:a3:0b:d7:d1:e8:
72:59:54:d0:79:b3:a5:39:a2:54:63:ed:4e:1a:d2:
82:b8:54:f9:10:c2:e1:02:7f:02:ac:50:d4:be:83:
f2:81:66:92:1a:11:b7:80:2d:9a:4f:50:4b:5b:80:
47:c3:77:d2:11:77:36:96:32:16:3b:21:a6:d4:39:
27:d2:64:02:45:44:a7:e4:aa:06:f1:ea:d2:75:53:
82:15:87:36:43:14:9f:1c:6c:d6:90:67:22:45:4d:
15:46:f1:17:cc:3a:9b:26:05:e5:46:eb:75:ec:de:
86:f5:9b:74:42:ca:18:0a:7d:7f:65:34:2b:99:96:
b5:d4:97:1c:6a:c6:d3:33:75:36:8b:fe:86:9d:0f:
db:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:AB:8A:7F:27:1A:6A:7A:26:2A:51:C7:BD:51:40:9E:65:96:3C:7D
X509v3 Authority Key Identifier:
keyid:60:1A:B4:C2:CB:27:69:8A:7E:F0:68:43:24:D4:16:B8:64:6A:9B:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/323830343a386562343a383538303a3a2f34312d3431203d3e20323733343433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8eb4:8580::/41
Signature Algorithm: sha256WithRSAEncryption
84:48:73:b1:df:5a:2e:9a:41:94:90:df:34:dd:1e:e3:fb:a5:
2e:2d:4c:95:d0:46:06:94:2d:a1:6b:1c:16:d3:96:fe:17:08:
30:a5:36:9a:5d:81:51:e7:67:d5:d1:98:81:24:45:a5:9e:b1:
79:27:7d:91:ad:15:dd:73:49:7f:a0:94:0d:fd:40:d3:c5:ce:
64:e6:73:b4:da:94:07:53:0e:da:56:04:af:6f:c8:12:74:dc:
a3:62:d3:c7:9a:b8:51:73:84:4f:23:51:4e:be:f6:6e:35:fb:
51:08:74:8d:e1:4f:81:40:50:0f:6e:de:68:95:41:6a:e8:47:
7b:7b:bf:dd:cb:07:68:5d:fd:03:c8:2c:1d:8f:9f:7f:78:af:
a4:b6:ce:0c:2e:fd:1b:dd:8f:c0:ae:6f:5b:cc:03:30:48:e4:
c8:85:46:b9:db:f5:67:5d:15:62:cf:92:ca:e1:a4:e4:8f:98:
77:84:61:bb:b4:b6:7e:74:f5:f8:71:de:a7:d7:b6:b9:f0:80:
bf:fc:b7:b7:9d:ac:a8:4e:d7:0b:03:aa:c7:36:5b:4e:f1:e5:
69:e5:3f:fa:b2:9e:58:7f:97:93:c9:69:f4:7a:2a:1e:a7:bf:
78:f5:fe:fa:fd:5f:3a:3d:c3:b5:5f:6c:c8:34:8d:b5:cf:09:
02:d4:a0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:51:30 2026 by rpki-client