
$ rpki-client -vvf rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/323830343a343263633a3a2f33322d313238203d3e20323637353238.roa
File: 323830343a343263633a3a2f33322d313238203d3e20323637353238.roa (raw, json)
Hash identifier: PIlRQltrUdhiGTMrlNBLmA0cy+LED9T3Iu4ZRFUOcso=
Subject key identifier: A3:B6:7E:F8:0D:16:C9:09:38:75:D0:06:3C:BD:7C:0E:AC:C0:12:9B
Certificate issuer: /CN=5BA4DDBBE974E5C2A25A952BF4431147F1D195BD
Certificate serial: 4A0BF58EC27AE5267D21A1605A31E5A3390DB39C
Authority key identifier: 5B:A4:DD:BB:E9:74:E5:C2:A2:5A:95:2B:F4:43:11:47:F1:D1:95:BD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/323830343a343263633a3a2f33322d313238203d3e20323637353238.roa
Signing time: Mon 23 Feb 2026 12:21:57 +0000
ROA not before: Mon 23 Feb 2026 12:16:57 +0000
ROA not after: Mon 22 Feb 2027 12:21:57 +0000
asID: 267528
IP address blocks: 2804:42cc::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.crl
rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 03:37:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:0b:f5:8e:c2:7a:e5:26:7d:21:a1:60:5a:31:e5:a3:39:0d:b3:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5BA4DDBBE974E5C2A25A952BF4431147F1D195BD
Validity
Not Before: Feb 23 12:16:57 2026 GMT
Not After : Feb 22 12:21:57 2027 GMT
Subject: CN=A3B67EF80D16C9093875D0063CBD7C0EACC0129B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:76:80:6e:a5:0f:a0:93:c3:dc:b1:f8:b3:35:
ff:03:16:0e:59:97:1e:e8:9c:ec:a8:64:f4:62:61:
ef:bb:ce:40:67:07:32:fc:b4:ea:12:6c:64:f1:24:
27:30:03:2e:3c:56:a8:14:02:9a:d2:70:4a:26:66:
91:71:95:de:ee:69:60:0d:3a:f5:43:75:f6:30:72:
d7:e3:de:98:42:6d:e7:2e:0e:0e:be:a7:c1:55:43:
c9:be:b6:ec:82:41:55:c1:88:dc:51:c1:f0:fb:c2:
bf:c5:f4:db:a2:f2:ec:ac:08:12:5c:00:c5:56:74:
78:a6:e8:12:30:4b:5a:8d:cf:2f:82:c5:1c:ba:59:
25:92:36:46:00:24:69:4d:ac:b1:d9:be:9b:fc:e1:
c5:1d:26:9f:be:ea:28:9e:3b:70:44:9a:c5:af:fb:
e5:be:92:58:29:cd:47:f3:95:98:55:9c:8e:23:6e:
8c:1b:bb:f2:52:90:12:a4:9e:fe:01:02:6b:28:d2:
ce:66:e2:0c:7d:67:c8:46:e5:1f:15:3c:93:1b:2b:
c4:8a:91:2b:25:db:a1:30:2c:b4:52:40:78:95:4e:
62:dc:29:43:31:f3:fb:bf:37:6f:76:f3:f4:62:4a:
64:29:ae:1b:09:a0:5f:6b:97:c0:c5:91:04:fa:4c:
57:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B6:7E:F8:0D:16:C9:09:38:75:D0:06:3C:BD:7C:0E:AC:C0:12:9B
X509v3 Authority Key Identifier:
keyid:5B:A4:DD:BB:E9:74:E5:C2:A2:5A:95:2B:F4:43:11:47:F1:D1:95:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/323830343a343263633a3a2f33322d313238203d3e20323637353238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:42cc::/32
Signature Algorithm: sha256WithRSAEncryption
08:39:85:86:f0:4b:21:13:c7:c4:3f:f1:33:df:ac:55:5c:f1:
6c:0f:d4:e2:57:fd:dd:01:74:d7:36:09:e7:f4:a4:9f:a9:37:
7d:86:4c:b0:a5:65:d2:1c:41:c0:a7:ba:55:19:3c:66:da:c8:
3b:6b:95:b8:29:46:3d:ee:9b:dd:c9:d7:f7:e6:40:9b:16:a1:
f3:0b:67:25:55:56:0c:65:3d:5b:cd:a4:c1:0b:0e:23:2b:21:
cd:91:43:55:b0:13:01:fb:69:67:02:a6:c9:e1:5c:49:f0:c4:
66:15:02:8c:10:48:94:44:a4:9b:f7:cd:f1:89:6d:15:9c:7e:
4d:d5:2e:93:53:fc:44:0d:5d:40:b7:8c:32:5e:82:f4:43:4a:
d5:cb:5b:e2:1c:8c:5a:40:08:43:58:35:f3:24:33:ed:92:be:
0d:ab:1f:2c:dd:93:f9:c5:c9:ae:a4:3a:32:d4:62:82:76:fa:
5d:52:25:40:7a:78:c3:7a:4d:14:2e:57:08:a2:2d:4c:ff:70:
31:7b:74:55:ce:b3:9e:35:ee:75:28:15:41:c1:20:e1:7c:1c:
c8:37:4f:c2:8c:1b:cd:28:a2:67:18:9b:99:dd:db:69:d7:90:
2a:7c:41:68:e6:f5:fc:87:19:02:a6:f5:08:f5:26:5e:23:82:
dd:38:4b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:13:21 2026 by rpki-client