
$ rpki-client -vvf rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/323830343a323931303a383030303a3a2f34342d3434203d3e20323633393935.roa
File: 323830343a323931303a383030303a3a2f34342d3434203d3e20323633393935.roa (raw, json)
Hash identifier: kTWv9KF4trGETE/yudWVTHuz8wCbqpwnTyj/mv+mzFo=
Subject key identifier: 3B:40:71:46:19:E6:40:AB:8A:09:D4:3D:27:57:A1:E2:D9:45:92:FC
Certificate issuer: /CN=9D50FB519292216D7FC7F38F04CB060FC0353867
Certificate serial: 53DC7AABE88D5B192C6A10079AD1F59D9FA07108
Authority key identifier: 9D:50:FB:51:92:92:21:6D:7F:C7:F3:8F:04:CB:06:0F:C0:35:38:67
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D50FB519292216D7FC7F38F04CB060FC0353867.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/323830343a323931303a383030303a3a2f34342d3434203d3e20323633393935.roa
Signing time: Wed 25 Feb 2026 14:08:33 +0000
ROA not before: Wed 25 Feb 2026 14:03:33 +0000
ROA not after: Wed 24 Feb 2027 14:08:33 +0000
asID: 263995
IP address blocks: 2804:2910:8000::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/9D50FB519292216D7FC7F38F04CB060FC0353867.crl
rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/9D50FB519292216D7FC7F38F04CB060FC0353867.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D50FB519292216D7FC7F38F04CB060FC0353867.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 19:51:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:dc:7a:ab:e8:8d:5b:19:2c:6a:10:07:9a:d1:f5:9d:9f:a0:71:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D50FB519292216D7FC7F38F04CB060FC0353867
Validity
Not Before: Feb 25 14:03:33 2026 GMT
Not After : Feb 24 14:08:33 2027 GMT
Subject: CN=3B40714619E640AB8A09D43D2757A1E2D94592FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:dd:95:2e:0b:59:6d:42:5a:26:91:52:93:e7:
7c:bb:3b:e8:54:81:25:5c:01:0c:86:83:33:8f:bb:
3e:df:34:5c:81:d9:ae:ef:1c:a3:b4:4a:91:78:09:
11:00:ab:6d:3b:b0:fe:ee:eb:c5:fd:79:36:0e:45:
b8:57:3e:00:d8:73:82:73:cf:71:5d:c0:e4:b2:e1:
34:d2:13:db:62:d4:be:73:55:c0:5c:ae:7c:df:54:
fb:66:d7:75:9b:d4:3f:46:83:4b:8f:71:7e:aa:53:
0a:2f:dd:46:eb:de:59:a3:83:dd:02:8f:bc:7b:53:
29:dc:1c:93:91:6e:8b:64:bc:02:a3:f0:2a:0b:47:
c6:ce:c3:26:29:74:ff:29:24:f1:34:61:cb:e1:0f:
aa:f8:60:2d:b3:ac:db:7d:f1:29:76:7f:66:f2:c9:
7d:dc:33:96:3f:c0:0d:61:e2:0f:e6:3c:14:b8:03:
ca:23:54:a1:a3:8f:13:a9:d4:8c:69:38:f9:13:c4:
5c:6f:2e:4f:d1:3a:b7:8c:24:1c:03:6a:73:42:52:
85:4f:24:96:2f:62:53:c8:b9:17:3b:8d:9a:66:dc:
f8:71:4a:2e:00:76:3a:a0:a1:b8:3a:e9:3b:29:74:
fd:1e:23:a7:2c:e5:8d:72:6b:05:9f:ba:a6:ee:b4:
00:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:40:71:46:19:E6:40:AB:8A:09:D4:3D:27:57:A1:E2:D9:45:92:FC
X509v3 Authority Key Identifier:
keyid:9D:50:FB:51:92:92:21:6D:7F:C7:F3:8F:04:CB:06:0F:C0:35:38:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/9D50FB519292216D7FC7F38F04CB060FC0353867.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D50FB519292216D7FC7F38F04CB060FC0353867.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/323830343a323931303a383030303a3a2f34342d3434203d3e20323633393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2910:8000::/44
Signature Algorithm: sha256WithRSAEncryption
74:67:bf:94:3c:42:30:26:36:04:e4:b8:7f:d3:a7:e7:06:23:
52:5a:52:3e:f7:7d:93:f9:87:f5:5c:ae:ab:60:bc:cd:1d:35:
62:59:b2:9e:69:f9:23:49:5a:07:8b:77:89:e7:93:ca:cb:12:
ab:70:0d:cb:42:f8:b6:95:fd:83:95:ca:8d:37:16:0e:9e:0c:
54:78:85:f3:f3:27:30:c2:71:84:28:7f:85:6d:42:5a:de:40:
7b:1d:c9:ee:7a:c3:b5:e3:21:79:30:f4:bb:c2:98:c2:17:04:
71:b5:ed:4b:5d:f8:35:62:a7:21:0c:98:50:db:cd:32:54:4b:
75:69:d5:b6:3c:dd:45:1b:b7:2a:b9:ca:5f:7c:30:2d:cb:c5:
ad:c9:61:4b:7b:c1:21:94:11:fb:76:9e:04:db:76:4e:97:b3:
dc:11:80:e6:88:3f:93:93:c1:00:18:23:68:ce:1e:f9:cf:ab:
35:79:c5:2a:b3:dd:6d:96:a0:7e:59:47:b4:42:33:cd:00:01:
ae:24:ea:ac:76:b3:52:6d:49:83:73:3c:c4:b7:f0:9c:21:fc:
ed:cc:c9:1e:3f:39:f5:ef:c6:1a:90:f4:ab:e9:55:1e:64:33:
6a:c0:02:ea:69:ee:e5:7f:97:20:5c:02:b4:8d:d9:a3:3e:05:
a2:b4:a1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:36:49 2026 by rpki-client