
$ rpki-client -vvf rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a393030303a3a2f33362d3336203d3e20323634313230.roa
File: 323830343a323263303a393030303a3a2f33362d3336203d3e20323634313230.roa (raw, json)
Hash identifier: ZIAO3QddXvhxe6Q6Px8kZy/S3yFwJLOH2yfTr6pa05E=
Subject key identifier: E8:7A:F0:9C:BA:09:B5:84:46:0E:08:46:0D:8C:4A:73:8B:88:1C:13
Certificate issuer: /CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
Certificate serial: 4C099CACFB9D44D0AFB2E87722EF5A998AD746DB
Authority key identifier: 1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a393030303a3a2f33362d3336203d3e20323634313230.roa
Signing time: Mon 02 Mar 2026 15:35:16 +0000
ROA not before: Mon 02 Mar 2026 15:30:16 +0000
ROA not after: Mon 01 Mar 2027 15:35:16 +0000
asID: 264120
IP address blocks: 2804:22c0:9000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl
rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 17:53:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:09:9c:ac:fb:9d:44:d0:af:b2:e8:77:22:ef:5a:99:8a:d7:46:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
Validity
Not Before: Mar 2 15:30:16 2026 GMT
Not After : Mar 1 15:35:16 2027 GMT
Subject: CN=E87AF09CBA09B584460E08460D8C4A738B881C13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:05:0f:36:5e:98:43:52:54:06:3f:77:42:d8:
cb:15:de:03:51:ea:0f:e1:2c:48:39:3e:4e:92:6c:
bd:dc:fd:89:64:20:16:74:a3:4f:f5:f0:c9:0f:7d:
3f:ef:90:d5:66:bf:58:4b:7f:a5:71:65:04:53:aa:
ae:b1:95:29:e8:cb:4b:49:6d:08:17:1a:a2:d2:fc:
c2:bb:25:f6:b4:7f:61:bc:2d:cc:a0:3c:73:93:b1:
2b:df:7a:a6:b0:31:6b:17:a4:fb:cf:fd:13:56:8a:
4a:1f:e6:75:cf:78:2f:53:c3:73:da:dc:99:c7:2a:
bb:5f:3c:83:91:56:e3:e9:91:0e:87:bf:6c:50:9b:
29:61:8a:56:65:b9:cb:96:d6:f6:c2:36:b8:9f:9f:
1f:e7:40:4e:88:04:6c:56:f6:b5:77:0c:30:b1:e2:
2b:ed:d8:a1:46:9f:79:6a:1f:e8:8f:c6:f5:47:c0:
f9:ae:3e:2a:ff:12:9c:4f:28:00:8e:08:b7:7b:5e:
1f:13:8b:6d:b2:88:25:1a:dd:11:88:d4:e1:d9:65:
c4:09:2d:9f:c7:27:27:25:9c:9c:57:87:d7:a9:a4:
26:7c:f2:1a:b3:bc:f1:62:28:f2:81:5d:af:39:44:
8c:a6:43:0e:d6:9e:9a:e8:81:75:bc:72:eb:62:8c:
55:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:7A:F0:9C:BA:09:B5:84:46:0E:08:46:0D:8C:4A:73:8B:88:1C:13
X509v3 Authority Key Identifier:
keyid:1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a393030303a3a2f33362d3336203d3e20323634313230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:22c0:9000::/36
Signature Algorithm: sha256WithRSAEncryption
af:b7:c2:3b:8f:80:c3:41:44:c4:43:dd:09:98:79:18:e0:00:
2f:c7:6d:d5:45:50:29:0a:d8:0e:f9:87:13:83:2c:b7:25:85:
25:3f:69:5e:5a:f7:3c:4b:ca:e3:75:7d:e5:93:3c:44:91:7e:
e7:b5:b6:58:a9:22:19:33:d9:0f:9e:4e:73:c7:51:8c:d3:77:
93:57:9e:2a:39:ac:4e:29:2e:9d:0c:68:ec:7e:fc:ef:3c:91:
6f:7a:de:0b:0e:b5:7c:4d:e6:d9:8a:c7:7d:ef:cb:44:85:9c:
65:2e:dd:59:d5:5d:c7:be:31:8f:72:50:11:bc:b3:21:22:72:
ba:6b:59:1b:a8:f4:96:a1:19:7c:8a:0e:75:3a:37:ca:89:63:
fc:03:5c:01:20:79:02:ef:e3:22:1c:4a:9c:f5:4e:c9:e7:0d:
48:89:e2:c7:d6:3d:c9:1f:9a:bd:8c:0c:55:6c:b4:fa:59:03:
28:6a:f7:45:2a:92:ae:13:22:c9:8b:0e:38:f7:e4:61:dc:9d:
68:b5:d4:47:18:74:cc:7a:d1:6a:86:f4:4f:12:ca:3a:72:a0:
79:e1:9a:67:ec:ee:00:fb:6c:ff:9c:c8:0d:0f:79:d8:8d:4a:
6e:67:fb:7b:8e:37:83:52:3e:9c:0d:48:b8:45:35:ac:dc:89:
1f:8c:88:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:53:16 2026 by rpki-client