
$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/323830343a6666633a653330303a3a2f34302d3430203d3e20323633363132.roa
File: 323830343a6666633a653330303a3a2f34302d3430203d3e20323633363132.roa (raw, json)
Hash identifier: Uhw0qk+F+k5ty0CBNftEoMU5Gk4FziYYeOl+HoE+bsI=
Subject key identifier: 21:BB:56:C9:26:8C:F7:D4:64:7F:51:9B:5B:3E:70:17:1C:FE:52:8B
Certificate issuer: /CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
Certificate serial: 699F3CEC3CD2CCD0D9D455FD4E41CAB2D3FC004F
Authority key identifier: E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/323830343a6666633a653330303a3a2f34302d3430203d3e20323633363132.roa
Signing time: Sat 04 Apr 2026 00:30:21 +0000
ROA not before: Sat 04 Apr 2026 00:25:21 +0000
ROA not after: Sat 03 Apr 2027 00:30:21 +0000
asID: 263612
IP address blocks: 2804:ffc:e300::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl
rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 10 Apr 2026 05:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:9f:3c:ec:3c:d2:cc:d0:d9:d4:55:fd:4e:41:ca:b2:d3:fc:00:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
Validity
Not Before: Apr 4 00:25:21 2026 GMT
Not After : Apr 3 00:30:21 2027 GMT
Subject: CN=21BB56C9268CF7D4647F519B5B3E70171CFE528B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5b:99:ac:a3:7b:50:d9:56:70:9c:92:f3:c3:
42:df:35:31:40:bf:5b:16:75:3f:73:b6:81:82:08:
b9:03:70:8d:81:ac:83:85:c5:3d:18:4c:94:ac:b9:
6f:3a:78:9c:18:89:02:64:1d:44:d6:f2:31:1f:b2:
33:8a:90:d9:cb:2f:fc:b2:cb:a0:8e:f3:9f:7b:be:
0f:0f:a8:cc:7a:af:20:a3:60:0d:45:8e:6b:02:2f:
1f:77:3b:b7:4b:0f:43:8f:03:c7:0d:4d:bf:f4:ba:
39:98:f3:f7:1b:48:25:4e:bc:af:c4:29:83:26:29:
f9:3c:5d:45:c6:4b:78:c6:91:d4:e6:c3:c4:c1:24:
8e:54:41:00:06:39:06:66:be:c6:2f:ee:e0:78:77:
99:fc:59:d0:5e:ab:8a:b9:51:46:ea:34:8a:dd:9d:
e5:8e:cb:8d:38:0c:0a:31:5c:93:c0:31:94:ef:c8:
d4:00:72:bd:28:ba:e3:0f:75:21:a5:2c:8b:b1:bc:
a1:77:22:e3:de:d9:a6:49:81:3d:bc:f5:38:7a:c8:
0c:33:8e:a2:3b:c8:1c:31:36:89:7c:68:d7:8a:17:
5f:91:b1:ec:ce:7f:4d:90:49:9e:3b:96:65:e8:78:
fe:41:d5:c0:98:95:b8:b1:4e:f4:ea:d7:58:42:3c:
3d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BB:56:C9:26:8C:F7:D4:64:7F:51:9B:5B:3E:70:17:1C:FE:52:8B
X509v3 Authority Key Identifier:
keyid:E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/323830343a6666633a653330303a3a2f34302d3430203d3e20323633363132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:ffc:e300::/40
Signature Algorithm: sha256WithRSAEncryption
42:5a:47:cb:d8:19:ab:46:ff:2f:c8:b3:eb:51:89:e7:dd:18:
66:33:37:ef:e3:80:1b:d6:42:6e:25:a0:35:37:9c:91:b3:a9:
03:b1:31:bc:b8:66:b6:e9:e6:15:2f:b4:25:d9:db:28:12:7a:
0f:ea:af:2a:3e:65:b3:ca:b4:2b:06:73:31:48:b1:99:f8:4e:
ba:0a:30:ed:37:c0:7b:b3:8e:03:f2:82:a7:91:c2:6e:be:30:
04:7b:7a:e0:d7:de:63:2b:f1:ec:48:a3:70:a9:0f:21:11:79:
05:4d:5e:3d:cb:55:6d:07:5a:43:8b:cf:57:60:21:69:91:a3:
27:79:96:67:be:d5:5e:b9:d1:e0:75:2f:f3:68:9c:84:95:65:
48:34:e2:d6:2a:ab:50:b7:fa:2f:9d:0b:48:90:bd:1f:02:1c:
b8:13:de:19:fb:0c:29:12:a9:65:4a:54:b3:e1:c6:8f:86:0d:
54:2a:76:92:a7:e1:56:df:4a:30:02:ce:c8:9f:b9:3e:85:2c:
f1:20:69:8a:87:88:a9:63:b5:59:4b:2f:cf:84:bf:28:2e:37:
37:58:01:a7:2d:52:f8:c1:97:d1:c1:15:32:d0:60:39:fa:5a:
12:84:b9:5d:54:a7:c0:c7:f9:62:03:1e:54:28:fd:d3:d8:8d:
36:18:28:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 14:40:58 2026 by rpki-client