
$ rpki-client -vvf rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/323830343a363862633a3a2f33322d3334203d3e20323639373132.roa
File: 323830343a363862633a3a2f33322d3334203d3e20323639373132.roa (raw, json)
Hash identifier: 3+NVFd5MqCKA38ozbxCW233TDJZBROiekZTzCToZHOs=
Subject key identifier: 20:8E:65:4F:72:E6:6D:53:C8:7E:7F:8E:19:9B:B6:F3:9F:08:F3:F8
Certificate issuer: /CN=9B40C2CC13EAB50345EDACFACC15DB43E60B85A2
Certificate serial: 60DBC912575B71664E1F0D19272BDF58E2022352
Authority key identifier: 9B:40:C2:CC:13:EA:B5:03:45:ED:AC:FA:CC:15:DB:43:E6:0B:85:A2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/323830343a363862633a3a2f33322d3334203d3e20323639373132.roa
Signing time: Mon 01 Jun 2026 14:03:07 +0000
ROA not before: Mon 01 Jun 2026 13:58:07 +0000
ROA not after: Mon 31 May 2027 14:03:07 +0000
asID: 269712
IP address blocks: 2804:68bc::/32 maxlen: 34
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl
rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 15 Jun 2026 04:58:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:db:c9:12:57:5b:71:66:4e:1f:0d:19:27:2b:df:58:e2:02:23:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B40C2CC13EAB50345EDACFACC15DB43E60B85A2
Validity
Not Before: Jun 1 13:58:07 2026 GMT
Not After : May 31 14:03:07 2027 GMT
Subject: CN=208E654F72E66D53C87E7F8E199BB6F39F08F3F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:90:c7:f7:42:8a:78:ab:9c:a5:16:4f:47:cb:
26:74:44:38:0f:7e:c5:4d:45:b3:c1:6b:c9:d8:3c:
b9:bb:b8:58:9c:3d:a2:38:75:62:d8:fb:48:35:ca:
e0:6e:6a:a9:0c:f1:f3:2c:8e:28:8a:55:b2:6e:a4:
de:c1:dd:c8:ec:d3:ba:b3:18:90:43:3f:3f:12:29:
14:5a:dc:e9:d6:d4:6e:40:60:38:e4:a7:3c:85:8d:
01:44:c5:7c:47:c5:4f:fa:18:37:92:b6:12:8d:96:
7e:aa:63:4a:1c:6e:d0:af:12:99:6c:86:9c:ee:00:
e4:dd:b4:5c:1d:02:11:ac:ee:bb:5a:07:b7:eb:aa:
70:9b:f0:0f:0f:c0:eb:7b:4d:45:e7:56:91:18:47:
49:ab:b8:e4:76:d6:2b:4a:d1:34:ee:19:f6:dc:20:
d5:54:de:e1:8b:69:24:30:e1:d0:be:9c:7a:76:d1:
9a:b1:bb:b1:9c:39:60:6c:02:d2:06:72:07:ab:97:
9b:5b:67:8a:51:0c:61:76:f0:95:76:ec:d4:bb:f2:
36:45:c7:2f:94:00:50:25:ca:65:5d:b8:27:86:83:
66:c5:2a:b8:9e:07:8a:30:d0:ac:7b:e8:23:4a:c5:
1e:27:79:98:d2:e5:ac:dc:43:09:d1:8f:d4:0f:a0:
66:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:8E:65:4F:72:E6:6D:53:C8:7E:7F:8E:19:9B:B6:F3:9F:08:F3:F8
X509v3 Authority Key Identifier:
keyid:9B:40:C2:CC:13:EA:B5:03:45:ED:AC:FA:CC:15:DB:43:E6:0B:85:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/323830343a363862633a3a2f33322d3334203d3e20323639373132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:68bc::/32
Signature Algorithm: sha256WithRSAEncryption
9a:fb:d6:55:c5:4b:5d:aa:21:bf:a9:2d:f3:78:08:8f:76:06:
25:64:14:a4:5d:84:47:78:ed:09:77:f5:47:d1:2e:17:f2:84:
1e:34:20:37:ca:af:3f:c9:ea:86:7e:fc:12:dd:35:80:bd:f8:
a8:02:ad:33:45:cc:f2:b2:44:66:44:24:33:f3:bb:ab:af:b0:
2d:7d:ae:28:f6:aa:58:27:14:96:3a:e5:12:4c:d6:61:db:83:
57:0f:91:68:b1:75:da:66:1b:d1:ff:ff:b3:71:c4:2c:13:be:
28:a9:b8:39:b8:37:42:20:49:aa:de:fc:11:49:ed:88:f7:a4:
68:81:9c:d0:03:03:53:41:d9:6f:ce:cc:fe:6a:d1:35:27:fa:
b7:5c:fb:65:9b:e6:ab:c1:73:48:12:fc:7f:5d:9f:39:a4:48:
c4:a8:e1:54:37:bf:8c:84:ca:91:6b:9b:2c:9f:d0:01:5e:a7:
2b:f0:36:47:99:17:4d:3f:4e:78:be:f8:a9:c8:84:58:df:0e:
14:be:7d:c4:86:92:f9:5f:b2:92:c6:1f:35:b2:53:e5:c7:c4:
a0:b0:12:62:f6:e7:fc:6e:30:a8:2e:9a:a4:23:a5:c6:72:8c:
47:44:37:df:80:69:ee:64:db:ab:08:27:43:d0:3f:08:82:38:
c5:33:9f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:19:10 2026 by rpki-client