
$ rpki-client -vvvf rpki-repo.registro.br/repo/C9NkTP9stB8EccRWEG9PySXiRgn4aGhoNXmejcLXgNZu/0/323830343a386137383a3a2f33382d3338203d3e20323733363731.roa
File: 323830343a386137383a3a2f33382d3338203d3e20323733363731.roa (raw, json)
Hash identifier: YHQGnqsRHZ8UUEf0+wgk9pJXxKjAJCDR5zaRbkwQBek=
Subject key identifier: 4B:8B:4C:9A:1B:1D:2E:64:E1:E4:0E:CA:E5:12:21:04:F0:B0:04:96
Certificate issuer: /CN=AAD323D383FD095C028E5F5C220F91747C58895D
Certificate serial: 08756C3250022794269CDD43A77CAAA5788174D3
Authority key identifier: AA:D3:23:D3:83:FD:09:5C:02:8E:5F:5C:22:0F:91:74:7C:58:89:5D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAD323D383FD095C028E5F5C220F91747C58895D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/C9NkTP9stB8EccRWEG9PySXiRgn4aGhoNXmejcLXgNZu/0/323830343a386137383a3a2f33382d3338203d3e20323733363731.roa
Signing time: Tue 29 Sep 2026 01:27:16 +0000
ROA not before: Tue 29 Sep 2026 01:22:16 +0000
ROA not after: Tue 28 Sep 2027 01:27:16 +0000
asID: 273671
IP address blocks: 2804:8a78::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/C9NkTP9stB8EccRWEG9PySXiRgn4aGhoNXmejcLXgNZu/0/AAD323D383FD095C028E5F5C220F91747C58895D.crl
rsync://rpki-repo.registro.br/repo/C9NkTP9stB8EccRWEG9PySXiRgn4aGhoNXmejcLXgNZu/0/AAD323D383FD095C028E5F5C220F91747C58895D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAD323D383FD095C028E5F5C220F91747C58895D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 13 Oct 2026 00:35:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:75:6c:32:50:02:27:94:26:9c:dd:43:a7:7c:aa:a5:78:81:74:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AAD323D383FD095C028E5F5C220F91747C58895D
Validity
Not Before: Sep 29 01:22:16 2026 GMT
Not After : Sep 28 01:27:16 2027 GMT
Subject: CN=4B8B4C9A1B1D2E64E1E40ECAE5122104F0B00496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bc:c3:b1:4c:d1:65:78:69:3e:82:9c:9b:f2:
ea:34:43:15:09:c3:cf:f9:11:75:cd:b8:77:4b:51:
c3:bc:62:10:00:2e:b3:6f:ee:61:2b:15:e6:ae:21:
82:57:e0:c6:a9:b5:cb:a4:48:21:55:77:9f:6d:c7:
cd:7d:8a:9f:4b:c9:2a:59:d1:23:96:d3:de:c9:ab:
b2:40:6d:e8:59:d6:9b:ca:ab:50:5e:d4:cb:c2:a4:
3b:02:77:70:1b:f8:c8:44:53:a4:64:07:0c:8d:90:
d0:de:98:cd:62:8b:75:f9:0c:22:6f:c2:52:61:96:
f0:12:79:11:af:42:20:36:23:c8:1a:06:ac:47:77:
42:88:26:37:86:bb:64:7f:f4:98:05:25:36:5c:5d:
19:93:83:de:f1:54:dd:70:83:97:08:e6:ac:50:02:
84:21:0b:ef:c3:8e:e2:05:0d:e5:56:f1:83:a0:c3:
19:b3:a9:5d:cd:f7:01:ac:f5:2a:7d:b4:30:61:1d:
a6:70:04:57:cb:f0:23:77:53:f4:35:35:be:5c:04:
b8:a1:9f:f0:8c:9a:9c:ad:0a:2f:14:de:b2:78:96:
d4:75:41:f7:b5:95:4d:0d:34:74:c1:30:84:5a:65:
32:c7:e1:22:81:87:e9:05:72:65:bf:d6:45:f8:2a:
05:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:8B:4C:9A:1B:1D:2E:64:E1:E4:0E:CA:E5:12:21:04:F0:B0:04:96
X509v3 Authority Key Identifier:
keyid:AA:D3:23:D3:83:FD:09:5C:02:8E:5F:5C:22:0F:91:74:7C:58:89:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/C9NkTP9stB8EccRWEG9PySXiRgn4aGhoNXmejcLXgNZu/0/AAD323D383FD095C028E5F5C220F91747C58895D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAD323D383FD095C028E5F5C220F91747C58895D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9NkTP9stB8EccRWEG9PySXiRgn4aGhoNXmejcLXgNZu/0/323830343a386137383a3a2f33382d3338203d3e20323733363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8a78::/38
Signature Algorithm: sha256WithRSAEncryption
40:90:4c:5a:bb:36:f4:9f:9c:bf:50:47:93:b8:2b:86:cf:97:
86:5a:68:b7:0c:16:fe:0c:70:ff:87:f3:44:ad:ec:86:7b:33:
a5:5c:c2:6a:e8:96:eb:94:f6:2b:cc:92:36:0a:6e:3f:b2:fa:
03:5b:47:a0:c3:db:7d:26:aa:c5:3e:5a:a4:92:15:b0:ad:3c:
53:b1:1c:03:d5:f7:c3:e0:1c:c2:66:43:85:58:73:f3:4b:6f:
1c:63:11:c8:db:90:8e:af:95:ae:67:99:f0:ad:fa:db:6d:fb:
15:da:1e:28:ba:bd:ee:95:13:1e:d3:5e:17:77:83:fa:a6:be:
00:9d:86:a1:9e:51:32:73:a0:da:ac:90:ff:d2:94:3a:5c:cb:
ec:fc:c8:2e:35:5e:87:1d:79:b5:e3:67:f8:32:88:11:a3:f3:
f9:9c:3d:5b:16:26:80:9d:e8:c2:c3:85:c0:2b:10:91:70:e8:
56:6c:51:56:f1:a4:5e:90:f5:75:52:a0:08:83:7f:ee:63:f9:
08:84:86:bb:f6:15:ed:40:cb:72:5e:85:73:7b:fb:41:4e:47:
00:91:5a:79:a9:a4:ea:14:88:44:07:b2:54:91:21:03:73:25:
0a:cd:87:35:db:ed:aa:14:df:b9:82:ec:c0:62:f9:d9:e6:38:
fb:57:02:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:19:10 2026 by rpki-client