
$ rpki-client -vvf rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/323830343a356534343a383030303a3a2f33362d3336203d3e20323639303232.roa
File: 323830343a356534343a383030303a3a2f33362d3336203d3e20323639303232.roa (raw, json)
Hash identifier: SqMkjq7Ewv80rIhGWhUb9zCYwyYMsw07TxzFZ/m3hSc=
Subject key identifier: 96:A5:B2:53:D0:82:5A:F8:1E:75:6B:7F:2E:A3:92:C8:CF:54:48:6A
Certificate issuer: /CN=CDCD83F4405AFD2B52943F9838374A340858512F
Certificate serial: 1E526D5BE0EE3D7ED8FA61EB2685F3D54065D81D
Authority key identifier: CD:CD:83:F4:40:5A:FD:2B:52:94:3F:98:38:37:4A:34:08:58:51:2F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDCD83F4405AFD2B52943F9838374A340858512F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/323830343a356534343a383030303a3a2f33362d3336203d3e20323639303232.roa
Signing time: Mon 02 Mar 2026 15:48:15 +0000
ROA not before: Mon 02 Mar 2026 15:43:15 +0000
ROA not after: Mon 01 Mar 2027 15:48:15 +0000
asID: 269022
IP address blocks: 2804:5e44:8000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/CDCD83F4405AFD2B52943F9838374A340858512F.crl
rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/CDCD83F4405AFD2B52943F9838374A340858512F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDCD83F4405AFD2B52943F9838374A340858512F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 16:51:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:52:6d:5b:e0:ee:3d:7e:d8:fa:61:eb:26:85:f3:d5:40:65:d8:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDCD83F4405AFD2B52943F9838374A340858512F
Validity
Not Before: Mar 2 15:43:15 2026 GMT
Not After : Mar 1 15:48:15 2027 GMT
Subject: CN=96A5B253D0825AF81E756B7F2EA392C8CF54486A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ed:af:2d:d5:a6:66:3a:45:d3:bd:c7:43:ed:
89:92:80:cf:df:1a:cf:66:e8:9c:b0:d0:fc:b5:84:
88:d2:b8:54:70:12:4c:2e:65:0b:8c:bd:f3:61:ac:
3d:89:fa:19:ec:c0:96:d9:98:d7:17:ad:bf:db:19:
91:3c:3f:5b:6e:e0:8c:88:de:69:8d:71:17:00:bd:
4b:f6:76:52:1d:8f:bb:7e:1b:2a:36:3f:9a:76:dd:
7b:d5:1f:b9:7b:79:88:be:77:87:37:49:28:ff:79:
a0:5f:9d:b6:82:8e:a5:ba:3c:d0:f7:4c:c2:8c:83:
78:1e:ae:fd:2d:9f:45:f5:6a:01:51:94:5d:07:d7:
e3:c4:e4:6c:00:93:2b:36:80:9a:dc:53:4f:8e:90:
ed:6c:3e:dc:08:71:81:f3:d3:5e:bc:6c:bc:df:ce:
05:0c:8a:d0:1f:12:a7:1f:28:bd:25:e3:85:f5:60:
9a:66:1c:30:d1:9b:38:47:64:c0:af:63:8e:21:26:
d0:ac:a0:0e:66:5d:ab:81:51:3c:fc:ec:37:6e:7b:
ab:d2:e4:b6:cf:78:e2:85:2b:85:0a:87:fb:5f:9c:
53:a8:5b:63:89:14:a4:13:06:a6:ce:2d:33:8e:19:
c2:73:e6:26:93:d9:3f:e7:f3:3d:0c:8e:6b:38:58:
f5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A5:B2:53:D0:82:5A:F8:1E:75:6B:7F:2E:A3:92:C8:CF:54:48:6A
X509v3 Authority Key Identifier:
keyid:CD:CD:83:F4:40:5A:FD:2B:52:94:3F:98:38:37:4A:34:08:58:51:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/CDCD83F4405AFD2B52943F9838374A340858512F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDCD83F4405AFD2B52943F9838374A340858512F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/323830343a356534343a383030303a3a2f33362d3336203d3e20323639303232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5e44:8000::/36
Signature Algorithm: sha256WithRSAEncryption
01:18:c9:da:a3:87:b9:e5:f6:74:cd:63:cc:91:15:de:9e:0c:
5f:52:2d:e6:67:83:8e:1b:7e:72:51:9e:2a:33:81:4c:b8:97:
26:ce:f3:78:10:7b:f1:d1:03:83:43:ec:37:73:68:5c:57:c7:
23:62:66:fd:1e:58:49:70:25:7d:b3:56:b6:bd:33:84:40:e0:
8d:d1:36:4c:28:e5:b7:af:cb:02:15:51:21:76:6b:bb:2b:15:
52:a3:f5:4f:bd:54:b5:2e:5e:cf:00:c4:4b:57:72:d6:e4:5a:
f0:ec:35:cd:bc:96:59:28:bc:a1:fb:5a:70:a4:b6:fa:c3:02:
50:a9:0c:40:31:b6:29:12:d5:7c:c9:de:17:f9:48:12:72:85:
5c:05:11:5a:36:29:98:6e:fd:b3:8d:2e:95:79:b3:f0:66:6a:
59:6a:a9:aa:ae:84:91:d4:a4:c9:e4:dc:2d:a0:00:1b:dc:fa:
82:1e:21:b0:2d:eb:b1:9f:80:56:22:d5:a2:da:7c:90:0c:af:
32:60:e8:8a:fc:48:a0:b3:a9:d6:c7:0b:20:cd:3f:15:ce:68:
f3:de:77:90:5c:2a:3c:5b:c4:c1:2e:e6:c3:ba:b5:9e:8c:fd:
ef:7f:9a:35:86:17:ad:60:7e:93:46:a2:6f:a3:85:a1:51:6b:
2f:1b:cf:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:12:09 2026 by rpki-client