
$ rpki-client -vvf rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a383030303a3a2f33362d3336203d3e20323634313230.roa
File: 323830343a323263303a383030303a3a2f33362d3336203d3e20323634313230.roa (raw, json)
Hash identifier: rnh8ehVMWdf6xFPi1EQoGkO/AoAbIFa55T1KPDoVuy0=
Subject key identifier: 81:1D:73:30:5B:B4:78:7F:B3:C0:6E:1C:3E:ED:48:DA:CB:59:BF:9F
Certificate issuer: /CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
Certificate serial: 298357A89045993A9575D4668FCE4C354AFC07C4
Authority key identifier: 1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a383030303a3a2f33362d3336203d3e20323634313230.roa
Signing time: Mon 02 Mar 2026 15:35:05 +0000
ROA not before: Mon 02 Mar 2026 15:30:05 +0000
ROA not after: Mon 01 Mar 2027 15:35:05 +0000
asID: 264120
IP address blocks: 2804:22c0:8000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl
rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 17:53:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:83:57:a8:90:45:99:3a:95:75:d4:66:8f:ce:4c:35:4a:fc:07:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
Validity
Not Before: Mar 2 15:30:05 2026 GMT
Not After : Mar 1 15:35:05 2027 GMT
Subject: CN=811D73305BB4787FB3C06E1C3EED48DACB59BF9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d8:b5:9e:2f:96:e6:32:ef:ff:36:0f:a1:fd:
17:de:5f:f7:cc:9e:90:e2:1a:c0:2c:c9:e1:f4:46:
df:41:bb:5d:c7:b7:63:fb:d7:ea:43:db:56:60:cb:
12:23:59:42:b0:52:86:0a:b3:ad:85:ae:9c:52:2a:
94:3f:61:ec:22:d2:b7:97:d5:b3:a4:be:a5:59:9d:
54:ec:7f:6e:f5:28:4f:ae:1a:97:da:df:40:50:e5:
ef:05:e3:c6:1a:e6:f4:db:6a:82:e5:b9:f9:54:a2:
03:ce:be:43:72:bf:9c:01:30:23:07:1a:6a:ad:bc:
9d:73:e8:d9:59:0d:8f:7b:c1:84:78:f7:54:c2:80:
7e:88:ec:cd:4f:a3:97:61:51:49:2d:2a:df:07:2c:
8b:ae:da:f1:3c:8e:d3:fe:97:59:35:41:8a:d1:bb:
6f:33:30:47:34:51:ad:b2:fd:47:08:e2:20:1d:6a:
25:54:58:7c:7c:22:6c:c2:3e:b7:e7:0e:2d:1c:16:
50:1d:10:82:29:64:e1:d8:29:82:c5:a1:e4:9b:16:
65:ed:24:c2:c1:6d:13:23:c4:57:9a:bf:de:a6:37:
0b:37:5f:78:33:6e:ca:8e:79:92:49:51:86:a1:b1:
52:65:54:5c:2c:7a:d2:53:98:f4:ba:f6:f0:40:e4:
04:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:1D:73:30:5B:B4:78:7F:B3:C0:6E:1C:3E:ED:48:DA:CB:59:BF:9F
X509v3 Authority Key Identifier:
keyid:1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a383030303a3a2f33362d3336203d3e20323634313230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:22c0:8000::/36
Signature Algorithm: sha256WithRSAEncryption
d2:47:6f:9d:9e:7d:9e:7e:b7:ef:1a:d1:b1:5d:c8:d2:52:cd:
8a:7c:db:b6:71:e6:ab:d3:04:61:f3:5b:a5:48:2e:47:89:ac:
65:08:dd:da:d6:b3:e6:f4:f2:84:75:a6:30:28:60:45:af:f6:
2b:e9:e1:8d:04:a5:8f:f9:e5:e8:2e:46:4f:41:66:e5:16:6f:
17:11:26:4b:35:5a:04:6c:7b:97:c6:c1:4a:c4:22:97:15:a5:
40:05:f4:31:de:59:85:94:c1:5e:0e:e4:d3:83:c8:9b:83:8e:
9c:2c:88:a5:f1:f9:4f:8f:81:4e:d3:80:ae:d0:48:fc:89:59:
df:6b:7d:4a:cc:5a:d8:5c:8c:5a:22:27:1d:d7:c1:fb:01:f9:
c2:f6:38:61:0b:a2:86:0b:18:92:2a:e1:f2:b4:00:2e:6a:d6:
88:6f:37:14:20:2b:68:42:20:b9:cd:09:cc:2c:c1:61:50:5e:
c9:c1:5d:a7:f5:63:f4:74:f2:6e:2d:51:2e:85:af:3e:4e:c5:
f5:66:79:b1:19:89:75:83:fb:f1:82:95:9f:f0:03:b0:be:63:
75:bf:24:68:83:2b:81:be:3b:93:76:95:96:5e:1f:9e:6a:4c:
54:dd:72:33:28:1b:10:a8:21:2e:29:67:c9:d2:e1:e9:04:0d:
24:3a:1f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:53:17 2026 by rpki-client