
$ rpki-client -vvf rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/323830343a313066633a3a2f33322d3334203d3e20323633363536.roa
File: 323830343a313066633a3a2f33322d3334203d3e20323633363536.roa (raw, json)
Hash identifier: YplvbWvmhYXYhTo8Lcmj/5HGe48e5FY06evNKf+ymA4=
Subject key identifier: DA:53:F2:21:CE:F4:40:D7:DF:7B:E6:99:45:75:6B:12:30:BE:39:F7
Certificate issuer: /CN=E1D88A3412BFA4DB8D3C7F3CE9BDCA998F42B150
Certificate serial: 43EA5C512B3A2F612CBE9824859ADCBB2133F0AE
Authority key identifier: E1:D8:8A:34:12:BF:A4:DB:8D:3C:7F:3C:E9:BD:CA:99:8F:42:B1:50
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1D88A3412BFA4DB8D3C7F3CE9BDCA998F42B150.cer
Subject info access: rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/323830343a313066633a3a2f33322d3334203d3e20323633363536.roa
Signing time: Tue 30 Jun 2026 14:37:55 +0000
ROA not before: Tue 30 Jun 2026 14:32:55 +0000
ROA not after: Tue 29 Jun 2027 14:37:55 +0000
asID: 263656
IP address blocks: 2804:10fc::/32 maxlen: 34
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/E1D88A3412BFA4DB8D3C7F3CE9BDCA998F42B150.crl
rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/E1D88A3412BFA4DB8D3C7F3CE9BDCA998F42B150.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1D88A3412BFA4DB8D3C7F3CE9BDCA998F42B150.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 09 Jul 2026 19:52:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:ea:5c:51:2b:3a:2f:61:2c:be:98:24:85:9a:dc:bb:21:33:f0:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1D88A3412BFA4DB8D3C7F3CE9BDCA998F42B150
Validity
Not Before: Jun 30 14:32:55 2026 GMT
Not After : Jun 29 14:37:55 2027 GMT
Subject: CN=DA53F221CEF440D7DF7BE69945756B1230BE39F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d1:67:e5:e2:99:22:fb:e0:0a:73:3f:85:33:
5f:56:8f:af:72:8f:a9:90:01:16:53:00:99:de:7c:
dd:e5:33:9d:e9:d4:6a:17:fa:27:4b:67:83:17:e9:
6b:a8:26:2d:06:32:a9:1b:c7:56:87:fd:a5:6d:27:
13:53:89:d3:5b:f0:7d:18:db:26:04:04:14:7e:84:
ac:1f:9b:d6:5c:c5:b2:d0:a5:76:28:8a:27:47:d9:
a1:10:58:74:eb:42:84:90:f5:8d:bd:b4:e6:0b:81:
4c:44:38:3c:0a:ae:3d:19:93:e0:38:83:1e:27:c5:
47:a2:4d:8b:b7:11:c1:26:06:df:fc:20:5d:f0:73:
37:e9:b1:1c:1b:56:dc:71:49:29:d2:46:9e:d5:a7:
71:2e:7e:dc:34:dc:83:dd:df:94:e9:c4:64:d3:dc:
d6:b3:66:fd:6d:dc:78:08:d7:d6:7a:3a:f2:25:9d:
cd:2e:33:80:67:83:3a:f9:ac:9b:2e:b2:70:f8:e3:
bf:f5:da:ef:33:81:2b:03:b7:06:d0:4d:aa:0a:05:
45:03:b8:ad:e5:ad:56:ba:89:3c:04:d1:b3:74:48:
c5:73:ca:cc:62:be:5a:45:f8:83:f5:af:04:58:15:
f1:c7:e8:8a:55:e9:a4:7f:ae:e9:83:7e:6c:a9:03:
38:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:53:F2:21:CE:F4:40:D7:DF:7B:E6:99:45:75:6B:12:30:BE:39:F7
X509v3 Authority Key Identifier:
keyid:E1:D8:8A:34:12:BF:A4:DB:8D:3C:7F:3C:E9:BD:CA:99:8F:42:B1:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/E1D88A3412BFA4DB8D3C7F3CE9BDCA998F42B150.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1D88A3412BFA4DB8D3C7F3CE9BDCA998F42B150.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/323830343a313066633a3a2f33322d3334203d3e20323633363536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:10fc::/32
Signature Algorithm: sha256WithRSAEncryption
6c:7a:8e:d3:5b:12:19:fe:62:68:d5:c3:64:57:6b:89:93:6d:
24:83:7b:8b:da:95:f3:bd:48:71:72:a0:0c:73:24:31:d8:56:
70:b1:15:5b:3f:b4:b9:45:eb:82:a9:8d:47:a3:a8:69:a0:e1:
57:cb:72:d6:60:da:d2:d3:b5:3a:03:9c:99:c5:6f:e4:28:ec:
da:8f:ad:b4:1f:2c:45:8d:51:a8:2a:f5:01:d2:c4:99:e2:af:
6f:97:4b:ee:53:e2:38:e2:4c:a2:40:96:00:b6:f2:1b:3a:ca:
10:ae:55:7b:9a:a6:82:7a:36:2a:6c:ce:32:1c:90:9b:5c:f9:
af:a3:f1:34:b6:97:bc:2e:52:3f:aa:69:20:69:4a:40:44:b0:
51:d0:bc:5d:cd:e3:d2:b4:fb:f3:40:42:ff:8c:7a:35:ed:ae:
1a:d4:7f:3b:e4:35:57:d8:03:48:51:65:c8:e3:0e:38:e9:5a:
03:76:d5:36:81:b7:c3:47:49:2d:82:60:c1:38:c2:ab:fc:8f:
88:f4:14:7f:e7:16:4e:f9:61:1d:a5:0d:27:e6:ce:58:68:02:
07:13:10:c9:e6:c3:93:6a:cb:54:d7:43:3d:da:c4:58:8a:fb:
40:b8:6d:b7:fe:cb:e9:9f:f6:b2:a8:43:4b:52:39:1f:c6:a9:
52:47:3e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:55:05 2026 by rpki-client