
$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/323830343a346333343a633032373a3a2f34382d3438203d3e203631353932.roa
File: 323830343a346333343a633032373a3a2f34382d3438203d3e203631353932.roa (raw, json)
Hash identifier: sPt7WPgKQ3YBXnlNBbX8RuD15qJxZmXFZlrw82h5kk8=
Subject key identifier: CD:DB:BA:16:F5:4E:F1:3B:D1:11:EB:11:B3:AC:28:7B:EE:19:DD:FD
Certificate issuer: /CN=909E9FEA566321BE0782982D2D8BAB3FE3A8D22B
Certificate serial: 724BA32603BE1CB96693275C1928061FE2C5A3E5
Authority key identifier: 90:9E:9F:EA:56:63:21:BE:07:82:98:2D:2D:8B:AB:3F:E3:A8:D2:2B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/323830343a346333343a633032373a3a2f34382d3438203d3e203631353932.roa
Signing time: Fri 27 Feb 2026 20:29:54 +0000
ROA not before: Fri 27 Feb 2026 20:24:54 +0000
ROA not after: Fri 26 Feb 2027 20:29:54 +0000
asID: 61592
IP address blocks: 2804:4c34:c027::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.crl
rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 03:38:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:4b:a3:26:03:be:1c:b9:66:93:27:5c:19:28:06:1f:e2:c5:a3:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=909E9FEA566321BE0782982D2D8BAB3FE3A8D22B
Validity
Not Before: Feb 27 20:24:54 2026 GMT
Not After : Feb 26 20:29:54 2027 GMT
Subject: CN=CDDBBA16F54EF13BD111EB11B3AC287BEE19DDFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:25:7c:ce:20:f3:9c:2f:4e:c4:38:fa:24:87:
c5:a9:5e:b0:f0:e0:64:a0:83:27:70:b2:90:56:41:
fb:07:8d:2b:64:99:f7:2f:85:9f:48:e0:67:e9:16:
0d:58:66:ca:55:a8:ec:43:44:01:e2:4d:27:56:3b:
bb:f2:e3:c7:5c:3f:d4:f7:9c:10:cf:d2:17:02:8a:
60:69:27:7e:8b:ea:04:85:b3:4f:2a:0f:b6:0c:6f:
e7:c4:63:7c:97:95:a8:3b:9e:ba:c9:92:fe:0e:f7:
cf:d9:ef:53:c7:e5:b0:5b:6b:cb:40:8e:e9:ec:5f:
d9:ad:d0:77:46:f4:70:b4:d6:6f:38:9d:d7:9f:0d:
32:fd:6a:47:35:89:22:ba:31:0e:fb:39:15:01:ef:
43:94:81:f7:d4:11:1f:e7:08:02:b0:04:ff:70:a3:
f5:f0:21:60:2c:85:df:fe:9e:e8:07:29:00:c8:62:
09:fd:ba:2d:08:cb:3d:7c:d2:8a:7a:06:ff:a7:01:
84:15:d0:c0:82:69:31:dc:3a:77:dd:0c:94:76:33:
2c:2a:43:83:b3:e8:04:77:b9:d2:51:96:1d:c1:d0:
b2:84:2d:5a:78:38:ab:f5:d1:e3:f5:11:07:62:a7:
16:df:ad:2e:de:4c:fe:60:d6:de:f3:8f:25:13:c1:
2c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:DB:BA:16:F5:4E:F1:3B:D1:11:EB:11:B3:AC:28:7B:EE:19:DD:FD
X509v3 Authority Key Identifier:
keyid:90:9E:9F:EA:56:63:21:BE:07:82:98:2D:2D:8B:AB:3F:E3:A8:D2:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/323830343a346333343a633032373a3a2f34382d3438203d3e203631353932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4c34:c027::/48
Signature Algorithm: sha256WithRSAEncryption
98:40:91:e6:0a:42:de:9a:0b:65:72:34:f3:e7:c1:e6:2f:6a:
77:06:fe:e5:3d:bb:e7:c6:9d:1b:60:5b:cf:7e:a5:e6:0d:1b:
0f:8b:8b:55:33:b2:d5:ff:98:bb:03:15:42:ce:7d:b0:34:7f:
bf:43:7c:a3:16:6e:ea:c9:11:66:ef:da:65:09:8c:a9:3f:a9:
05:74:32:31:dd:70:04:d7:ff:7a:5b:6c:61:af:90:0e:cd:63:
ea:8c:d4:e5:b6:fb:6c:80:a9:b9:ab:05:7b:72:b6:03:3b:90:
5a:78:00:48:3d:24:fa:4a:f2:0f:fa:c1:e3:e9:96:77:64:c2:
3c:3a:2a:5e:21:1b:de:69:04:df:8f:f0:55:7e:34:19:c8:f6:
74:1a:fc:0b:e4:27:98:8a:88:c5:b9:89:70:c8:c0:36:99:55:
0c:aa:4c:08:0d:b9:5a:f7:bc:df:13:8e:07:62:17:89:85:33:
89:bc:2e:57:73:9a:6a:8d:b9:0c:87:7c:eb:e2:33:7c:0b:c3:
5e:20:f2:ba:82:35:b7:f5:6f:ed:95:20:32:43:41:c7:23:70:
e4:7d:09:4a:aa:31:65:04:77:63:13:11:4e:06:d6:99:fc:03:
93:05:46:86:e9:42:67:d5:f9:c9:53:5e:6d:ca:2b:94:ca:aa:
44:f9:57:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:37:45 2026 by rpki-client