
$ rpki-client -vvf rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a653030303a3a2f33362d3336203d3e20323634313230.roa
File: 323830343a323263303a653030303a3a2f33362d3336203d3e20323634313230.roa (raw, json)
Hash identifier: Lt385412dPqMCz+dM0zYyxILr/7hOZhTizPAVf3pyPg=
Subject key identifier: 72:EC:D5:BE:D0:02:45:52:53:F4:A8:0C:98:A1:DD:5B:95:8B:89:DD
Certificate issuer: /CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
Certificate serial: 78A57BA101958450CB73E3B56FE99E53AA44620E
Authority key identifier: 1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a653030303a3a2f33362d3336203d3e20323634313230.roa
Signing time: Mon 02 Mar 2026 15:36:28 +0000
ROA not before: Mon 02 Mar 2026 15:31:28 +0000
ROA not after: Mon 01 Mar 2027 15:36:28 +0000
asID: 264120
IP address blocks: 2804:22c0:e000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl
rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 17:53:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:a5:7b:a1:01:95:84:50:cb:73:e3:b5:6f:e9:9e:53:aa:44:62:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
Validity
Not Before: Mar 2 15:31:28 2026 GMT
Not After : Mar 1 15:36:28 2027 GMT
Subject: CN=72ECD5BED002455253F4A80C98A1DD5B958B89DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:30:7f:07:59:38:c0:ad:a1:ea:fc:53:9f:7d:
30:dc:c3:bf:6f:b3:0a:bb:dc:0b:a4:13:49:f7:82:
66:f5:6b:26:81:5f:09:be:c4:72:11:50:a8:23:8e:
8a:5a:b0:1b:49:25:71:d3:d1:f3:4e:22:f2:01:dd:
82:b8:78:8e:15:57:b9:72:23:c4:55:bd:a4:c9:7e:
eb:97:b5:9f:5a:f5:70:0f:f6:35:11:91:d8:06:65:
6f:3e:f8:e9:15:73:21:af:70:6c:e0:73:5d:75:49:
ff:65:7a:c8:43:f5:21:c3:0a:7e:bf:01:a4:d5:81:
e1:65:71:0b:4b:36:d4:49:81:f6:96:3f:87:e7:ab:
c0:d4:eb:c0:71:ea:0f:7c:fd:76:25:3d:bb:01:f4:
f1:1f:95:ec:31:eb:af:cd:9d:0d:d3:e6:a9:99:da:
65:dc:67:a0:2c:9e:4c:73:bb:59:53:fb:ac:e4:48:
a4:0e:d1:f5:48:37:54:e6:cb:e8:f5:88:cc:fd:70:
16:87:be:a4:8b:cb:de:1f:a5:8c:30:96:4e:e4:8a:
4b:fb:72:53:d6:0e:1b:07:89:4b:d6:2e:60:65:ae:
0c:df:4a:13:e3:46:ac:78:82:d6:b0:64:3d:bf:be:
4a:1e:e2:be:15:1a:3f:76:0c:83:2b:ca:f8:c7:f4:
18:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:EC:D5:BE:D0:02:45:52:53:F4:A8:0C:98:A1:DD:5B:95:8B:89:DD
X509v3 Authority Key Identifier:
keyid:1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a653030303a3a2f33362d3336203d3e20323634313230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:22c0:e000::/36
Signature Algorithm: sha256WithRSAEncryption
65:7a:29:78:d2:76:cf:82:a1:4c:09:29:e2:a4:88:b1:e7:65:
dc:56:bd:5d:43:f9:13:e6:a9:53:e3:cd:1b:52:e0:e9:30:3f:
a0:b8:55:8f:93:1f:d0:59:bb:8f:7b:bc:78:a8:1e:12:81:ac:
91:d4:be:09:2f:73:b3:0d:75:85:a0:26:5d:21:2c:f0:9d:dd:
4b:c6:fb:a7:8e:9a:88:4a:c3:3e:3f:e0:d6:13:64:43:94:cd:
26:17:94:69:32:ea:c4:1e:3d:39:c7:15:f0:8a:46:6f:8a:f7:
cc:6c:56:ef:58:dd:0f:0a:7a:37:a2:c5:b2:fd:cd:a8:05:25:
b4:c2:5d:c4:b8:8f:92:2e:38:29:ec:b8:1d:52:9f:7b:4a:29:
1f:6f:02:5c:1b:c0:5e:b6:05:af:86:f3:48:6a:7e:2b:33:fd:
86:cf:dc:bc:16:13:c6:76:30:5f:ac:29:32:54:3a:28:bc:28:
2d:41:b7:74:21:3b:ed:2f:0a:23:24:2d:cf:13:d7:26:c8:af:
31:7f:08:87:33:8c:68:6c:11:0c:a0:c2:0d:3e:25:4f:2e:97:
a0:79:9a:48:57:29:2d:06:93:77:e4:20:b9:0a:fb:89:9b:31:
55:a4:5e:bf:2e:cb:d7:a0:0a:26:23:3d:f2:70:4c:a0:c2:95:
12:06:2c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:53:20 2026 by rpki-client