
$ rpki-client -vvf rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/323830343a313131633a3a2f33322d313238203d3e203532383138.roa
File: 323830343a313131633a3a2f33322d313238203d3e203532383138.roa (raw, json)
Hash identifier: nL61kmKIt9PdkOrZ3FtsNlPzBXFWEqzyJIqRB8ZmA70=
Subject key identifier: C5:7A:48:0F:3F:71:B0:4D:2C:00:CD:F3:90:D6:5C:3B:87:DE:56:30
Certificate issuer: /CN=5AF73D5CBD5ECD54E5B4947430DAF355DBA5C431
Certificate serial: 08B45E9C1BD3B10F526011D01F28A5EB5CA71AAE
Authority key identifier: 5A:F7:3D:5C:BD:5E:CD:54:E5:B4:94:74:30:DA:F3:55:DB:A5:C4:31
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF73D5CBD5ECD54E5B4947430DAF355DBA5C431.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/323830343a313131633a3a2f33322d313238203d3e203532383138.roa
Signing time: Mon 30 Mar 2026 15:01:59 +0000
ROA not before: Mon 30 Mar 2026 14:56:59 +0000
ROA not after: Mon 29 Mar 2027 15:01:59 +0000
asID: 52818
IP address blocks: 2804:111c::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/5AF73D5CBD5ECD54E5B4947430DAF355DBA5C431.crl
rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/5AF73D5CBD5ECD54E5B4947430DAF355DBA5C431.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF73D5CBD5ECD54E5B4947430DAF355DBA5C431.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 10 Apr 2026 09:15:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:b4:5e:9c:1b:d3:b1:0f:52:60:11:d0:1f:28:a5:eb:5c:a7:1a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5AF73D5CBD5ECD54E5B4947430DAF355DBA5C431
Validity
Not Before: Mar 30 14:56:59 2026 GMT
Not After : Mar 29 15:01:59 2027 GMT
Subject: CN=C57A480F3F71B04D2C00CDF390D65C3B87DE5630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:23:0f:d4:fe:02:d5:8a:e5:76:6a:d9:ea:d7:
25:62:40:a7:ca:9d:cf:c5:be:a4:0e:80:5f:43:ba:
1b:39:48:7f:7a:1a:9e:05:5c:6c:91:80:d9:79:ee:
65:84:f3:6f:38:53:c0:d8:d3:d5:83:b6:21:e7:5e:
cb:f9:e0:17:a4:7f:08:8d:14:b9:b9:fd:ab:d8:a0:
28:34:80:f0:9f:71:8c:39:ed:d7:8b:56:28:d8:d7:
47:1c:23:92:61:f2:df:be:dd:22:15:51:7e:ef:82:
ee:33:63:da:8d:e9:b9:9a:53:b7:e9:9e:13:75:94:
79:4d:04:a6:5f:87:ae:23:a0:e7:65:b5:18:ca:92:
82:cd:b2:19:fd:53:bd:01:d2:29:d6:9f:4a:5f:aa:
50:ad:f5:bc:18:fc:f7:04:b8:7d:e7:c2:9b:a4:5d:
5a:16:f2:92:38:83:6e:31:fc:ca:7a:6d:ca:3a:b2:
92:67:0e:e0:d3:10:4d:20:39:a8:de:98:08:2b:6d:
c1:2f:c0:15:2b:6f:03:0f:d7:3e:53:d2:f9:90:fb:
31:c8:48:52:b6:a1:23:a6:81:71:13:1b:c7:2a:bf:
93:a2:14:59:80:e8:1d:33:55:31:6d:d2:40:7b:42:
47:78:46:b3:6c:4f:42:ab:1d:6a:8f:70:3f:33:1d:
e5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:7A:48:0F:3F:71:B0:4D:2C:00:CD:F3:90:D6:5C:3B:87:DE:56:30
X509v3 Authority Key Identifier:
keyid:5A:F7:3D:5C:BD:5E:CD:54:E5:B4:94:74:30:DA:F3:55:DB:A5:C4:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/5AF73D5CBD5ECD54E5B4947430DAF355DBA5C431.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF73D5CBD5ECD54E5B4947430DAF355DBA5C431.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/323830343a313131633a3a2f33322d313238203d3e203532383138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:111c::/32
Signature Algorithm: sha256WithRSAEncryption
05:d1:43:5c:19:75:90:dc:bb:91:44:a2:7f:3e:50:93:94:0e:
34:b9:29:2b:9f:c5:b9:fa:24:c2:c3:1c:fb:d2:d9:40:27:27:
c9:d7:26:2a:10:bc:48:f8:dd:73:a8:86:ed:bb:2a:fb:15:5d:
51:13:1f:f6:e3:b5:f6:1e:68:a8:33:8b:24:75:b3:e8:c0:63:
70:0a:76:a1:e6:4b:eb:6f:c4:63:b4:7c:d4:a2:d4:1e:10:fc:
d4:0a:b2:8e:f8:54:29:17:0a:ca:0a:10:d3:34:51:f8:91:61:
44:60:54:94:3f:d1:7c:23:43:04:d1:61:80:b8:1d:45:7f:fd:
43:31:2f:31:8e:aa:40:03:12:d7:27:83:fb:cc:2c:2e:93:20:
c4:cd:0b:df:8b:36:3a:67:c5:eb:6d:ca:51:7a:21:f2:ae:4f:
c6:ff:e9:93:26:07:dd:a1:2a:9e:7b:3e:f3:85:ee:04:8e:11:
03:14:af:be:8d:5c:33:05:02:08:02:53:36:dc:88:3c:a1:60:
8a:9f:29:a7:7b:64:ce:b4:43:66:56:8a:c3:97:ed:38:cd:e5:
f0:f7:73:ee:90:c6:1b:a3:de:a5:ca:af:20:de:1c:9a:1d:fd:
3b:64:df:04:6b:45:bd:2c:e1:2c:54:d5:ea:dd:1c:ed:d2:57:
2a:26:0f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 18:00:09 2026 by rpki-client