
$ rpki-client -vvvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/323830343a326635633a633030303a3a2f34382d3438203d3e20323634383836.roa
File: 323830343a326635633a633030303a3a2f34382d3438203d3e20323634383836.roa (raw, json)
Hash identifier: Jh5bzRZ9MX0RdmR47Yh7CREQcB9g9qL1ybjf7gsJ60c=
Subject key identifier: 97:76:A8:87:37:D6:9F:DF:2A:D1:EB:69:A8:56:6F:C6:A6:24:9D:96
Certificate issuer: /CN=09B74F5AE0A9C9687059CF905757A70385D63DD2
Certificate serial: 3810C870FE68338AC2CC2E4D51816C81F88C816B
Authority key identifier: 09:B7:4F:5A:E0:A9:C9:68:70:59:CF:90:57:57:A7:03:85:D6:3D:D2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/323830343a326635633a633030303a3a2f34382d3438203d3e20323634383836.roa
Signing time: Fri 14 Aug 2026 17:56:07 +0000
ROA not before: Fri 14 Aug 2026 17:51:07 +0000
ROA not after: Fri 13 Aug 2027 17:56:07 +0000
asID: 264886
IP address blocks: 2804:2f5c:c000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.crl
rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 26 Aug 2026 14:14:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:10:c8:70:fe:68:33:8a:c2:cc:2e:4d:51:81:6c:81:f8:8c:81:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09B74F5AE0A9C9687059CF905757A70385D63DD2
Validity
Not Before: Aug 14 17:51:07 2026 GMT
Not After : Aug 13 17:56:07 2027 GMT
Subject: CN=9776A88737D69FDF2AD1EB69A8566FC6A6249D96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c1:43:14:0b:90:03:11:ed:7c:f4:bd:97:57:
ea:b0:95:6a:22:c0:00:a7:29:b5:c1:e4:8f:52:57:
29:b2:7c:15:0e:bf:7b:b8:30:cc:9c:a5:58:90:d2:
26:95:7d:53:61:de:17:ab:51:f8:fb:39:aa:ad:5d:
0b:65:cb:2d:69:00:08:8c:09:ea:18:2f:01:00:d8:
26:bc:5a:39:61:f3:26:64:5f:b8:4e:0e:4d:f3:3e:
e4:c1:52:7c:4a:00:b2:55:1f:6e:22:36:c4:d3:de:
af:3f:35:53:03:51:5b:1c:06:73:4a:00:50:06:d3:
4c:2f:d2:e5:29:61:c1:6b:8e:67:b7:09:71:f0:fd:
64:2d:6d:7c:47:cb:b3:96:a5:22:37:64:4b:a8:4d:
af:a6:02:87:da:6a:99:f6:f2:c0:9b:d6:f0:34:44:
dc:97:36:9b:b1:e1:10:cf:28:9e:5e:f2:f3:1c:12:
a6:03:ac:19:62:4c:54:15:88:18:2d:60:fd:bd:0f:
a5:02:38:1f:dd:18:52:b1:53:42:e5:b4:3e:62:0a:
6c:45:1a:33:39:db:bb:53:a0:3d:41:dc:32:e5:f5:
c9:57:78:f2:64:95:81:d6:a1:1f:8a:20:d0:71:95:
90:07:e1:ca:c0:9b:98:e4:30:87:06:5b:68:e9:08:
ff:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:76:A8:87:37:D6:9F:DF:2A:D1:EB:69:A8:56:6F:C6:A6:24:9D:96
X509v3 Authority Key Identifier:
keyid:09:B7:4F:5A:E0:A9:C9:68:70:59:CF:90:57:57:A7:03:85:D6:3D:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/323830343a326635633a633030303a3a2f34382d3438203d3e20323634383836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2f5c:c000::/48
Signature Algorithm: sha256WithRSAEncryption
7f:a1:63:90:ce:c7:e4:6b:d6:45:fd:08:ef:26:d0:d0:b0:24:
6c:6b:a0:3d:ce:a8:a2:3a:28:9e:94:28:32:20:d6:e2:4a:6a:
2a:f2:54:8b:92:a4:5e:ef:17:b3:f0:d2:e8:1d:17:09:80:d4:
9f:53:6a:9f:33:48:77:68:bb:42:e4:28:6b:e9:c3:9c:48:8f:
d1:6f:ef:ba:37:95:7f:09:a2:16:d2:37:91:a9:95:e9:48:fc:
f1:08:fc:32:98:1f:5f:54:5e:67:92:fb:9d:e0:ce:0c:31:23:
62:95:ce:06:18:a7:5d:9a:d1:6b:3d:74:4e:8c:20:47:87:bf:
dc:d1:87:52:7b:f6:9b:81:4b:13:d7:a6:44:51:c3:20:d1:06:
49:59:c0:d8:33:9b:c1:31:d2:ec:d0:00:d8:da:76:59:74:40:
90:f5:34:2a:a2:fb:13:b1:5a:19:df:48:f4:b9:bc:20:f9:0b:
11:9d:03:89:67:49:3e:b8:6e:62:e7:f6:1d:4a:ce:1b:b9:f0:
1f:f0:21:0b:e3:20:4f:a9:a0:1e:9b:0e:6a:7f:e5:5f:f9:39:
c0:98:df:f9:58:ec:6c:f6:45:d0:ff:7b:a5:2d:98:4c:de:b0:
a6:a9:d8:e4:e7:8b:f1:d2:2b:51:3c:82:1a:b2:d3:05:0d:5a:
1c:69:b4:cf
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUOBDIcP5oM4rCzC5NUYFsgfiMgWswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDlCNzRGNUFFMEE5Qzk2ODcwNTlDRjkwNTc1N0E3MDM4
NUQ2M0REMjAeFw0yNjA4MTQxNzUxMDdaFw0yNzA4MTMxNzU2MDdaMDMxMTAvBgNV
BAMTKDk3NzZBODg3MzdENjlGREYyQUQxRUI2OUE4NTY2RkM2QTYyNDlEOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfwUMUC5ADEe189L2XV+qwlWoi
wACnKbXB5I9SVymyfBUOv3u4MMycpViQ0iaVfVNh3herUfj7OaqtXQtlyy1pAAiM
CeoYLwEA2Ca8Wjlh8yZkX7hODk3zPuTBUnxKALJVH24iNsTT3q8/NVMDUVscBnNK
AFAG00wv0uUpYcFrjme3CXHw/WQtbXxHy7OWpSI3ZEuoTa+mAofaapn28sCb1vA0
RNyXNpux4RDPKJ5e8vMcEqYDrBliTFQViBgtYP29D6UCOB/dGFKxU0LltD5iCmxF
GjM527tToD1B3DLl9clXePJklYHWoR+KINBxlZAH4crAm5jkMIcGW2jpCP/hAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUl3aohzfWn98q0etpqFZvxqYknZYwHwYDVR0j
BBgwFoAUCbdPWuCpyWhwWc+QV1enA4XWPdIwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9hZlhGTWtReXBKamFTYVV6dDNFUVFvSk5jVnV6aGhtZEJOdTFXNFhFbzNp
LzAvMDlCNzRGNUFFMEE5Qzk2ODcwNTlDRjkwNTc1N0E3MDM4NUQ2M0REMi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8wOUI3NEY1QUUwQTlDOTY4NzA1
OUNGOTA1NzU3QTcwMzg1RDYzREQyLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIG
CCsGAQUFBzALhoGVcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9h
ZlhGTWtReXBKamFTYVV6dDNFUVFvSk5jVnV6aGhtZEJOdTFXNFhFbzNpLzAvMzIz
ODMwMzQzYTMyNjYzNTYzM2E2MzMwMzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2Uy
MDMyMzYzNDM4MzgzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEL1zAADANBgkqhkiG9w0BAQsFAAOC
AQEAf6FjkM7H5GvWRf0I7ybQ0LAkbGugPc6oojoonpQoMiDW4kpqKvJUi5KkXu8X
s/DS6B0XCYDUn1NqnzNId2i7QuQoa+nDnEiP0W/vujeVfwmiFtI3kamV6Uj88Qj8
MpgfX1ReZ5L7neDODDEjYpXOBhinXZrRaz10TowgR4e/3NGHUnv2m4FLE9emRFHD
INEGSVnA2DObwTHS7NAA2Np2WXRAkPU0KqL7E7FaGd9I9Lm8IPkLEZ0DiWdJPrhu
Yuf2HUrOG7nwH/AhC+MgT6mgHpsOan/lX/k5wJjf+VjsbPZF0P97pS2YTN6wpqnY
5OeL8dIrUTyCGrLTBQ1aHGm0zw==
-----END CERTIFICATE-----
Generated at Tue Aug 25 20:25:32 2026 by rpki-client