
$ rpki-client -vvvf rpki-repo.registro.br/repo/7CrjYrup4TjMhDAFim5Duurf4byhrPhqofF8CCKhSFcp/0/323830343a336637383a666430303a3a2f34302d3430203d3e20323635383934.roa
File: 323830343a336637383a666430303a3a2f34302d3430203d3e20323635383934.roa (raw, json)
Hash identifier: KXKPMb/5FYiu/kcElhKvayY3YLy+txbGhACLznHrPJM=
Subject key identifier: F1:98:8C:57:65:E2:8F:0A:2B:56:DA:D9:C3:95:5A:32:B2:64:DA:6F
Certificate issuer: /CN=284FA0BD055CB8B97A3D58D11C2FF10CAFDF3957
Certificate serial: 4CCFF088DCD62412520E2AB8D1F90F396F9D1313
Authority key identifier: 28:4F:A0:BD:05:5C:B8:B9:7A:3D:58:D1:1C:2F:F1:0C:AF:DF:39:57
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/284FA0BD055CB8B97A3D58D11C2FF10CAFDF3957.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7CrjYrup4TjMhDAFim5Duurf4byhrPhqofF8CCKhSFcp/0/323830343a336637383a666430303a3a2f34302d3430203d3e20323635383934.roa
Signing time: Wed 14 Oct 2026 18:06:26 +0000
ROA not before: Wed 14 Oct 2026 18:01:26 +0000
ROA not after: Wed 13 Oct 2027 18:06:26 +0000
asID: 265894
IP address blocks: 2804:3f78:fd00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7CrjYrup4TjMhDAFim5Duurf4byhrPhqofF8CCKhSFcp/0/284FA0BD055CB8B97A3D58D11C2FF10CAFDF3957.crl
rsync://rpki-repo.registro.br/repo/7CrjYrup4TjMhDAFim5Duurf4byhrPhqofF8CCKhSFcp/0/284FA0BD055CB8B97A3D58D11C2FF10CAFDF3957.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/284FA0BD055CB8B97A3D58D11C2FF10CAFDF3957.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Oct 2026 06:49:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:cf:f0:88:dc:d6:24:12:52:0e:2a:b8:d1:f9:0f:39:6f:9d:13:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=284FA0BD055CB8B97A3D58D11C2FF10CAFDF3957
Validity
Not Before: Oct 14 18:01:26 2026 GMT
Not After : Oct 13 18:06:26 2027 GMT
Subject: CN=F1988C5765E28F0A2B56DAD9C3955A32B264DA6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:21:be:93:09:67:e3:8e:02:89:98:f7:f7:ec:
19:b8:db:15:84:ba:fb:ec:4b:72:d5:1f:80:cf:df:
cf:a8:b3:af:2b:f4:65:69:05:bc:ab:5c:eb:8d:1c:
7c:10:9a:af:d7:69:cc:c9:88:48:64:9e:71:6d:7f:
b3:7c:96:b4:26:93:ab:1c:e1:8b:2c:81:cf:4c:05:
c1:82:38:70:d6:39:7a:61:14:c4:28:09:68:54:8b:
e6:e0:91:1d:a9:dc:51:d9:39:89:7b:3b:bc:70:fa:
a2:33:e9:73:f3:0d:a6:27:fd:94:5b:eb:86:cb:d5:
a9:a6:90:5b:dc:b9:ca:e6:2a:2b:3f:df:b7:da:75:
e0:33:76:81:27:24:44:f8:ba:67:de:bb:3e:99:e5:
5a:ea:ad:95:63:a0:35:6c:a5:23:26:be:2a:05:3f:
78:be:e2:6d:d0:ed:29:5b:9f:95:e0:79:a3:e8:9c:
b4:48:e7:41:a6:04:5a:63:cb:43:32:89:1d:24:e9:
63:d0:e3:25:77:7f:05:4a:14:4b:aa:ee:22:56:f0:
7f:0d:25:48:e4:8d:cf:96:5d:7e:8d:8f:c3:cc:d2:
66:bd:95:d8:1d:34:7f:0c:57:2a:ae:26:4e:8b:4a:
c9:27:c8:63:27:b7:80:44:b8:fc:dc:71:9a:f2:4d:
00:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:98:8C:57:65:E2:8F:0A:2B:56:DA:D9:C3:95:5A:32:B2:64:DA:6F
X509v3 Authority Key Identifier:
keyid:28:4F:A0:BD:05:5C:B8:B9:7A:3D:58:D1:1C:2F:F1:0C:AF:DF:39:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7CrjYrup4TjMhDAFim5Duurf4byhrPhqofF8CCKhSFcp/0/284FA0BD055CB8B97A3D58D11C2FF10CAFDF3957.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/284FA0BD055CB8B97A3D58D11C2FF10CAFDF3957.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7CrjYrup4TjMhDAFim5Duurf4byhrPhqofF8CCKhSFcp/0/323830343a336637383a666430303a3a2f34302d3430203d3e20323635383934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3f78:fd00::/40
Signature Algorithm: sha256WithRSAEncryption
9a:10:39:f8:bb:83:c1:45:69:66:39:13:42:c2:85:c6:b4:5f:
26:09:41:6f:51:b2:27:04:9d:52:f5:b1:ae:39:dc:dc:15:79:
20:90:fe:0d:ca:2d:b1:f0:c5:a1:af:9f:96:0f:62:84:c6:b1:
04:4e:e1:53:1f:64:34:f4:ba:14:10:db:f8:0a:e0:f5:f5:dd:
56:c4:f5:56:8d:6c:be:28:ab:c4:33:46:85:b2:c3:d0:aa:3f:
dc:b7:01:88:93:dd:6b:53:53:d2:6e:72:90:d8:1b:10:3c:69:
eb:85:e8:0f:3d:98:94:27:3c:1d:59:6d:59:ca:0c:fe:3b:19:
ff:5b:7e:62:b6:a6:13:34:94:12:6b:09:fa:7b:99:28:ba:a2:
56:a2:e4:e4:d0:5e:2c:1b:79:45:61:af:ed:61:2d:21:12:ad:
7f:28:a7:4c:72:08:4a:90:99:92:97:c0:4f:7a:5a:2c:04:27:
54:29:88:a0:29:bd:32:02:1f:02:22:1e:ba:e8:42:bc:fd:db:
9d:bd:c7:c9:7f:d6:fa:57:c2:6b:50:de:18:85:6c:11:d6:91:
60:a8:9e:d4:7d:14:9d:fa:c0:2d:e5:be:94:14:77:22:75:6e:
de:b1:bb:3b:88:1a:77:8d:35:56:68:50:8a:2a:94:8e:99:37:
51:e8:d0:60
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUTM/wiNzWJBJSDiq40fkPOW+dExMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjg0RkEwQkQwNTVDQjhCOTdBM0Q1OEQxMUMyRkYxMENB
RkRGMzk1NzAeFw0yNjEwMTQxODAxMjZaFw0yNzEwMTMxODA2MjZaMDMxMTAvBgNV
BAMTKEYxOTg4QzU3NjVFMjhGMEEyQjU2REFEOUMzOTU1QTMyQjI2NERBNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfIb6TCWfjjgKJmPf37Bm42xWE
uvvsS3LVH4DP38+os68r9GVpBbyrXOuNHHwQmq/XaczJiEhknnFtf7N8lrQmk6sc
4Yssgc9MBcGCOHDWOXphFMQoCWhUi+bgkR2p3FHZOYl7O7xw+qIz6XPzDaYn/ZRb
64bL1ammkFvcucrmKis/37fadeAzdoEnJET4umfeuz6Z5VrqrZVjoDVspSMmvioF
P3i+4m3Q7Slbn5XgeaPonLRI50GmBFpjy0MyiR0k6WPQ4yV3fwVKFEuq7iJW8H8N
JUjkjc+WXX6Nj8PM0ma9ldgdNH8MVyquJk6LSsknyGMnt4BEuPzccZryTQCjAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU8ZiMV2XijworVtrZw5VaMrJk2m8wHwYDVR0j
BBgwFoAUKE+gvQVcuLl6PVjRHC/xDK/fOVcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0NyallydXA0VGpNaERBRmltNUR1dXJmNGJ5aHJQaHFvZkY4Q0NLaFNG
Y3AvMC8yODRGQTBCRDA1NUNCOEI5N0EzRDU4RDExQzJGRjEwQ0FGREYzOTU3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4NEZBMEJEMDU1Q0I4Qjk3
QTNENThEMTFDMkZGMTBDQUZERjM5NTcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdDcmpZcnVwNFRqTWhEQUZpbTVEdXVyZjRieWhyUGhxb2ZGOENDS2hTRmNwLzAv
MzIzODMwMzQzYTMzNjYzNzM4M2E2NjY0MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzNTM4MzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEP3j9MA0GCSqGSIb3DQEBCwUA
A4IBAQCaEDn4u4PBRWlmORNCwoXGtF8mCUFvUbInBJ1S9bGuOdzcFXkgkP4Nyi2x
8MWhr5+WD2KExrEETuFTH2Q09LoUENv4CuD19d1WxPVWjWy+KKvEM0aFssPQqj/c
twGIk91rU1PSbnKQ2BsQPGnrhegPPZiUJzwdWW1Zygz+Oxn/W35itqYTNJQSawn6
e5kouqJWouTk0F4sG3lFYa/tYS0hEq1/KKdMcghKkJmSl8BPelosBCdUKYigKb0y
Ah8CIh666EK8/dudvcfJf9b6V8JrUN4YhWwR1pFgqJ7UfRSd+sAt5b6UFHcidW7e
sbs7iBp3jTVWaFCKKpSOmTdR6NBg
-----END CERTIFICATE-----
Generated at Wed Oct 28 15:20:50 2026 by rpki-client