
$ rpki-client -vvf rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3830303a3a2f34302d3430203d3e203631353733.roa
File: 323830343a323565343a3830303a3a2f34302d3430203d3e203631353733.roa (raw, json)
Hash identifier: eTCIdzgc+YpgtJc00EHoy8XGJnYOFRzITwve1TErlVQ=
Subject key identifier: 93:88:4A:AF:B2:75:63:1E:C5:CE:FB:71:ED:C2:7C:E9:58:24:DA:CE
Certificate issuer: /CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
Certificate serial: 640321BF334BCE1CC5CBF8D5E793A7ED4015CDBA
Authority key identifier: DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3830303a3a2f34302d3430203d3e203631353733.roa
Signing time: Sat 04 Apr 2026 00:30:37 +0000
ROA not before: Sat 04 Apr 2026 00:25:37 +0000
ROA not after: Sat 03 Apr 2027 00:30:37 +0000
asID: 61573
IP address blocks: 2804:25e4:800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl
rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 10 Apr 2026 10:58:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:03:21:bf:33:4b:ce:1c:c5:cb:f8:d5:e7:93:a7:ed:40:15:cd:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
Validity
Not Before: Apr 4 00:25:37 2026 GMT
Not After : Apr 3 00:30:37 2027 GMT
Subject: CN=93884AAFB275631EC5CEFB71EDC27CE95824DACE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:af:58:f1:91:b5:42:2b:2d:a8:03:15:1b:23:
30:cd:b3:a2:6a:e7:be:51:28:18:f5:76:49:3b:cf:
ea:e8:52:fc:17:9b:cd:71:db:9a:12:9f:ca:70:74:
15:4a:ec:64:01:3e:11:3c:6f:1d:ab:8f:02:52:aa:
b7:80:3b:31:f5:a2:e3:b2:b8:de:a0:8f:6f:87:88:
c4:0c:73:e0:19:18:99:a4:7d:eb:93:c7:37:3a:54:
01:c5:f1:d7:d9:cf:4b:5f:01:62:f7:7a:45:9d:82:
18:16:f2:9b:ba:c6:89:86:80:6e:87:01:3a:09:18:
49:80:dd:ea:65:39:0b:27:ac:18:9f:4b:b5:fe:b7:
21:77:a6:8f:66:53:d1:22:fd:9c:1e:97:cf:b5:47:
23:8c:ab:b0:08:d8:d4:27:48:70:38:7a:9d:d4:35:
19:1a:b3:cb:c5:70:c7:bf:8c:02:a9:1b:19:1f:bf:
3c:70:11:bb:57:81:38:dd:e7:6d:0b:32:13:62:70:
13:44:f4:68:6e:16:a1:87:7a:d8:03:30:e2:4a:93:
19:d3:9e:32:1f:ae:c0:c4:74:ed:e8:44:06:47:d4:
85:d7:2d:03:b0:49:0e:35:28:d2:56:b7:42:e9:f1:
d7:0a:9e:69:30:54:84:27:3f:94:ae:22:e2:dc:66:
b2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:88:4A:AF:B2:75:63:1E:C5:CE:FB:71:ED:C2:7C:E9:58:24:DA:CE
X509v3 Authority Key Identifier:
keyid:DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3830303a3a2f34302d3430203d3e203631353733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:25e4:800::/40
Signature Algorithm: sha256WithRSAEncryption
88:12:a1:db:ac:01:b0:ec:cf:82:5f:99:54:58:12:a9:80:19:
a2:2b:47:2c:dc:44:63:3f:fe:40:e8:b0:45:4e:de:53:16:27:
84:4e:ed:62:f7:92:12:d6:15:47:df:54:68:0a:a7:18:39:33:
db:05:a4:ce:43:7e:1f:54:a7:ff:04:79:3b:5b:94:32:3a:07:
50:a9:7d:48:22:21:98:0f:67:d7:51:4e:3d:11:dd:52:de:30:
26:92:2a:ec:37:d5:52:32:89:96:a0:07:8b:4c:51:0e:bd:b2:
a0:3e:44:7b:6c:73:19:9d:fa:eb:13:3c:8f:d9:82:b5:ad:5c:
53:30:dd:2f:0e:81:6e:ef:ec:95:77:ee:43:83:f9:c2:f3:43:
a0:db:a1:f1:1e:11:77:69:38:18:85:ae:7a:60:dd:36:3b:31:
9b:ae:98:5d:b7:b9:ea:20:c5:e1:d0:e4:93:a2:b2:7c:39:8c:
c1:48:d1:95:97:dd:3e:b3:ca:cd:2e:ba:5a:b3:78:de:5f:d6:
7d:29:86:0c:86:e2:36:7b:18:e5:19:bf:cb:0f:5a:75:ee:9b:
49:e8:60:20:39:bf:10:bb:4b:f9:6e:ca:d1:2d:e1:52:c3:27:
f9:01:ca:e7:4f:f0:cd:e4:0e:68:fb:af:bd:a6:42:92:93:2d:
f0:88:5d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 14:31:54 2026 by rpki-client