
$ rpki-client -vvvf rpki-repo.registro.br/repo/HDZjPkin11DrQmSVittpm3tdXvXk7tsVorVeuaVfe9Px/0/323830343a316131343a3a2f33322d3438203d3e203238313533.roa
File: 323830343a316131343a3a2f33322d3438203d3e203238313533.roa (raw, json)
Hash identifier: +MKm7WiL91rxaHHNiCk5bcNfwuAIg/Ppv0/nFvdBOU4=
Subject key identifier: 2C:BE:4B:FB:F0:09:91:E0:46:79:19:43:0F:05:59:AD:D8:3A:25:C1
Certificate issuer: /CN=D4A60DC4129AFB29DBDCF1054A048A4A2A7129A8
Certificate serial: 029A822EEF51F63B991738A897A451F1C3117B5E
Authority key identifier: D4:A6:0D:C4:12:9A:FB:29:DB:DC:F1:05:4A:04:8A:4A:2A:71:29:A8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4A60DC4129AFB29DBDCF1054A048A4A2A7129A8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HDZjPkin11DrQmSVittpm3tdXvXk7tsVorVeuaVfe9Px/0/323830343a316131343a3a2f33322d3438203d3e203238313533.roa
Signing time: Mon 03 Aug 2026 16:38:27 +0000
ROA not before: Mon 03 Aug 2026 16:33:27 +0000
ROA not after: Mon 02 Aug 2027 16:38:27 +0000
asID: 28153
IP address blocks: 2804:1a14::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HDZjPkin11DrQmSVittpm3tdXvXk7tsVorVeuaVfe9Px/0/D4A60DC4129AFB29DBDCF1054A048A4A2A7129A8.crl
rsync://rpki-repo.registro.br/repo/HDZjPkin11DrQmSVittpm3tdXvXk7tsVorVeuaVfe9Px/0/D4A60DC4129AFB29DBDCF1054A048A4A2A7129A8.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4A60DC4129AFB29DBDCF1054A048A4A2A7129A8.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 23 Aug 2026 16:45:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:9a:82:2e:ef:51:f6:3b:99:17:38:a8:97:a4:51:f1:c3:11:7b:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D4A60DC4129AFB29DBDCF1054A048A4A2A7129A8
Validity
Not Before: Aug 3 16:33:27 2026 GMT
Not After : Aug 2 16:38:27 2027 GMT
Subject: CN=2CBE4BFBF00991E0467919430F0559ADD83A25C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:02:f1:dc:6d:44:c5:4f:0a:40:96:85:72:ed:
b6:e9:4c:f7:d2:29:65:f3:c9:f4:96:40:7c:7d:9e:
e8:dd:14:d2:87:8f:d8:9a:e3:29:df:8b:79:8c:62:
7d:3a:95:50:3c:ab:0b:e9:f3:f4:87:27:eb:5b:5a:
9d:07:3e:ab:66:48:8c:fb:f4:e3:dc:4c:f2:bd:ed:
61:7a:42:40:36:5a:7b:07:67:5a:74:69:25:0c:66:
54:43:2e:00:cc:5e:fb:6c:f7:3a:31:cd:02:19:e2:
84:76:05:37:eb:4d:9c:ed:06:8d:a0:d5:b3:20:cd:
08:45:de:7c:71:54:e8:4a:54:93:e5:31:40:80:35:
d0:4d:42:5a:e6:83:52:c3:0e:78:f3:c5:e5:10:89:
d8:e1:24:e8:d7:c5:7d:1f:9e:f0:d5:0b:c3:44:d2:
ee:63:3a:70:5c:5d:81:57:fd:ad:78:24:f2:d4:c4:
e8:be:68:70:b3:52:ec:3a:5a:10:bc:28:fa:04:e0:
73:55:8f:ac:6f:c0:69:cc:4c:0c:3f:42:e9:b1:e9:
9e:43:b8:32:8c:fd:90:91:b8:5f:f5:ee:9b:f6:9f:
73:d6:9f:ee:dd:2e:70:f8:8a:b4:54:a8:80:02:7f:
79:8f:63:08:ef:5d:ec:56:a8:f9:f3:08:43:9d:83:
2f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:BE:4B:FB:F0:09:91:E0:46:79:19:43:0F:05:59:AD:D8:3A:25:C1
X509v3 Authority Key Identifier:
keyid:D4:A6:0D:C4:12:9A:FB:29:DB:DC:F1:05:4A:04:8A:4A:2A:71:29:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HDZjPkin11DrQmSVittpm3tdXvXk7tsVorVeuaVfe9Px/0/D4A60DC4129AFB29DBDCF1054A048A4A2A7129A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4A60DC4129AFB29DBDCF1054A048A4A2A7129A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDZjPkin11DrQmSVittpm3tdXvXk7tsVorVeuaVfe9Px/0/323830343a316131343a3a2f33322d3438203d3e203238313533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1a14::/32
Signature Algorithm: sha256WithRSAEncryption
0d:8f:9a:55:6a:fc:f2:e9:c2:4b:83:48:e6:ee:c3:db:ff:44:
12:5b:29:3c:fb:a4:4f:20:4f:89:ba:d6:69:e8:da:29:97:13:
06:a5:d0:94:28:15:e8:a2:ec:3e:92:fc:ae:12:2e:37:3c:8f:
ce:ce:dc:91:26:b9:72:61:b3:3e:5e:89:f6:94:e4:d7:88:34:
d4:17:0d:8d:a1:5a:c7:ad:2e:aa:6e:23:36:03:22:96:70:9c:
56:db:21:ea:3d:3b:68:a8:3c:69:22:ca:7f:00:3e:2c:05:52:
92:4e:36:0d:84:4c:8d:f3:fa:88:55:c6:36:1a:9c:c8:81:41:
99:48:7e:58:a5:12:48:98:e0:0b:70:f0:d7:2d:ea:65:bf:23:
0a:b2:42:35:ac:d9:f3:c4:c9:86:d3:e6:bb:b1:ee:28:97:7e:
b6:68:80:96:31:02:d3:ec:62:73:3f:0b:ed:53:1a:9c:44:8a:
81:5f:ff:05:45:50:5c:e9:64:db:8a:c3:d0:c6:47:bb:b6:d3:
1b:8c:ac:34:65:29:b8:01:36:53:19:da:ed:fb:dd:3b:3e:11:
9f:88:e6:96:64:2f:1c:c7:93:0f:01:75:3e:59:af:2a:b7:da:
59:f1:5b:7d:bd:de:85:75:9a:18:13:94:39:d5:1b:42:d9:c2:
79:76:6c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:15:41 2026 by rpki-client