
$ rpki-client -vvf rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/0/323830343a3464383a3a2f33322d3336203d3e203532393935.roa
File: 323830343a3464383a3a2f33322d3336203d3e203532393935.roa (raw, json)
Hash identifier: ot1QIiB0zoXUbXJbzbLlTGdEWi2pdVMkKk95d46G/lI=
Subject key identifier: 70:8D:66:C5:87:06:65:94:1D:EE:F1:11:21:02:65:7B:58:C8:18:42
Certificate issuer: /CN=1E5F9067846F1D128DA384BACDA2B1C825AAB969
Certificate serial: 0CD6F238E55EAFBC9C0093A66AB08A3A7BDC73FD
Authority key identifier: 1E:5F:90:67:84:6F:1D:12:8D:A3:84:BA:CD:A2:B1:C8:25:AA:B9:69
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E5F9067846F1D128DA384BACDA2B1C825AAB969.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/0/323830343a3464383a3a2f33322d3336203d3e203532393935.roa
Signing time: Tue 07 Apr 2026 14:05:29 +0000
ROA not before: Tue 07 Apr 2026 14:00:29 +0000
ROA not after: Tue 06 Apr 2027 14:05:29 +0000
asID: 52995
IP address blocks: 2804:4d8::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/0/1E5F9067846F1D128DA384BACDA2B1C825AAB969.crl
rsync://rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/0/1E5F9067846F1D128DA384BACDA2B1C825AAB969.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E5F9067846F1D128DA384BACDA2B1C825AAB969.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 13 Apr 2026 23:18:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:d6:f2:38:e5:5e:af:bc:9c:00:93:a6:6a:b0:8a:3a:7b:dc:73:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1E5F9067846F1D128DA384BACDA2B1C825AAB969
Validity
Not Before: Apr 7 14:00:29 2026 GMT
Not After : Apr 6 14:05:29 2027 GMT
Subject: CN=708D66C5870665941DEEF1112102657B58C81842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a3:1c:62:30:8f:f1:a8:33:21:19:42:79:5e:
c3:fd:a7:44:fd:e8:34:96:a3:1e:f9:79:2f:a9:00:
ed:0e:f7:9e:b2:64:d8:54:93:a8:e3:d3:be:46:18:
a0:4a:c3:a7:e6:c6:f0:13:d3:21:07:da:4d:9c:f6:
8c:ad:35:62:3d:81:fe:b3:92:2b:a0:b6:82:19:7b:
52:54:07:e6:19:47:12:4d:ad:8c:a1:a1:27:ad:6a:
f3:5c:cb:3d:70:8a:44:48:cd:ca:45:ef:7a:dd:69:
ec:50:ca:5f:6e:98:6e:8f:31:95:34:c4:6a:bb:7d:
4a:37:f8:40:29:0e:52:2a:2e:fb:4f:54:57:46:a3:
16:e3:2b:1a:a3:ac:55:e9:d2:53:67:97:78:c9:5e:
80:da:e1:71:19:d4:f2:88:c3:3a:99:0b:e9:96:a9:
fd:ae:eb:62:fd:32:a6:36:a3:2d:95:cc:f3:f4:5c:
0a:53:fa:b4:09:1b:a3:c4:36:f7:30:85:c7:5a:bf:
b3:a1:3b:5b:4e:6b:6e:f1:85:ae:7a:e2:83:ee:a8:
4e:27:98:75:b0:66:8a:9c:66:85:09:ba:0d:4b:87:
f9:da:d5:f0:0d:20:de:60:e3:b8:99:21:cd:cc:74:
90:db:be:5e:39:94:2b:57:28:4b:75:d7:44:f7:b6:
fc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:8D:66:C5:87:06:65:94:1D:EE:F1:11:21:02:65:7B:58:C8:18:42
X509v3 Authority Key Identifier:
keyid:1E:5F:90:67:84:6F:1D:12:8D:A3:84:BA:CD:A2:B1:C8:25:AA:B9:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/0/1E5F9067846F1D128DA384BACDA2B1C825AAB969.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E5F9067846F1D128DA384BACDA2B1C825AAB969.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/0/323830343a3464383a3a2f33322d3336203d3e203532393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4d8::/32
Signature Algorithm: sha256WithRSAEncryption
87:aa:5a:a7:e7:67:c4:2c:44:43:e3:e9:99:6d:05:7e:fc:e2:
28:ed:f4:64:d2:44:9c:ae:21:6f:bd:70:09:c6:6e:f0:a4:58:
aa:65:a3:2c:ea:44:ad:e7:67:35:ce:15:80:f2:4c:bc:fb:38:
81:bb:f8:fc:53:89:4b:67:43:58:5c:1a:76:7a:f2:3b:05:7d:
ef:20:f0:24:b6:7d:1b:72:b4:38:30:8a:f7:3c:28:94:7a:70:
aa:6e:61:6e:f7:08:d0:13:66:a7:df:b8:d1:1f:a5:46:8f:fd:
32:d5:9d:c1:72:66:13:ca:36:41:bc:29:5d:96:26:6a:df:e4:
bd:94:ef:3b:fd:bb:37:62:af:f7:b3:1a:fb:8e:86:61:ec:84:
40:49:80:db:d3:5d:2f:ea:2a:17:e6:ba:19:41:fb:f2:7f:4e:
ec:6d:62:b0:9d:02:a5:b4:f6:fc:98:d4:15:ea:3f:2b:21:b5:
85:65:b4:06:93:08:00:09:88:83:3e:31:4a:89:ec:a6:75:27:
bd:78:69:b6:ea:9b:c3:be:41:6c:26:9d:0d:7d:c0:5f:7e:a2:
9d:59:df:8d:8e:2c:c6:f4:7c:b6:0d:f8:a8:68:9e:10:06:e7:
10:39:83:1f:cf:24:f0:f4:65:89:f4:f3:ff:64:49:99:76:06:
85:4f:3e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 01:40:52 2026 by rpki-client