
$ rpki-client -vvf rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/323830343a363732633a373830303a3a2f33382d3338203d3e20323639363039.roa
File: 323830343a363732633a373830303a3a2f33382d3338203d3e20323639363039.roa (raw, json)
Hash identifier: V4IG9wkG2/yFUQ2aVlbJrs4ZVEqYdeJGJX9WwMVheok=
Subject key identifier: D5:30:7D:71:04:89:9C:9B:39:54:BD:0A:0A:AD:1B:B4:24:AD:1E:D2
Certificate issuer: /CN=43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29
Certificate serial: 4D7319CA84F166D40173267CB8D0DFA9B92706DB
Authority key identifier: 43:EA:8C:DC:41:05:B8:7E:D9:C2:FC:8C:A4:1C:A1:D3:5C:18:7B:29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/323830343a363732633a373830303a3a2f33382d3338203d3e20323639363039.roa
Signing time: Tue 14 Apr 2026 11:31:26 +0000
ROA not before: Tue 14 Apr 2026 11:26:26 +0000
ROA not after: Tue 13 Apr 2027 11:31:26 +0000
asID: 269609
IP address blocks: 2804:672c:7800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.crl
rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 19 Apr 2026 09:14:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:73:19:ca:84:f1:66:d4:01:73:26:7c:b8:d0:df:a9:b9:27:06:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29
Validity
Not Before: Apr 14 11:26:26 2026 GMT
Not After : Apr 13 11:31:26 2027 GMT
Subject: CN=D5307D7104899C9B3954BD0A0AAD1BB424AD1ED2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:46:ae:44:f7:6b:68:1d:f3:7c:a3:85:cc:44:
f6:06:95:d6:6a:bc:c4:33:ae:90:57:04:d9:15:45:
e9:f7:88:09:a8:3f:58:65:e6:45:7a:1c:d9:17:b3:
fd:09:e0:0b:ea:4d:59:6a:f3:9b:c9:eb:27:7d:06:
93:66:2a:62:fa:c6:71:ef:0b:ca:77:69:47:de:19:
b2:dd:f9:d0:86:a8:3d:40:c3:9b:58:3d:0d:19:70:
29:38:a4:49:68:58:62:98:12:47:2c:5f:ce:71:a7:
2b:44:8d:9a:7a:52:4f:b7:d0:30:c8:9c:6b:cf:55:
b0:77:73:98:53:8e:7b:1f:02:88:8d:8a:ca:32:bc:
cc:94:1f:ab:c6:90:66:e2:a2:ec:42:da:39:da:96:
05:6b:70:c3:2f:98:8c:a8:6e:c5:f8:1d:db:c8:bd:
2e:73:77:56:39:ab:83:73:6d:54:19:7d:5c:c7:66:
07:86:fb:82:56:22:b7:3e:d5:c1:44:c1:61:ed:59:
58:77:3e:0d:97:d7:0c:45:ea:c3:41:c0:07:ca:83:
df:c8:df:92:b4:5b:9c:4d:39:f3:72:4b:45:b2:b9:
5d:51:8a:c0:2b:1d:6a:57:4f:f5:37:3a:bc:ee:0d:
30:7b:0c:08:42:cd:ff:69:bf:e5:d1:b3:f7:ab:f8:
5f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:30:7D:71:04:89:9C:9B:39:54:BD:0A:0A:AD:1B:B4:24:AD:1E:D2
X509v3 Authority Key Identifier:
keyid:43:EA:8C:DC:41:05:B8:7E:D9:C2:FC:8C:A4:1C:A1:D3:5C:18:7B:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/323830343a363732633a373830303a3a2f33382d3338203d3e20323639363039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:672c:7800::/38
Signature Algorithm: sha256WithRSAEncryption
0b:98:fc:3b:d0:96:87:16:f5:fb:18:63:44:53:8a:c2:d2:60:
e7:96:cd:d7:03:f2:62:c8:bc:6d:ae:cf:8a:72:16:33:7d:8a:
c1:1a:6d:66:23:81:18:ef:1c:f9:98:82:e5:b1:58:76:d7:7f:
b4:b9:0c:2d:ca:9f:3b:00:45:27:84:14:bf:2c:a2:21:ac:a7:
03:22:27:d7:21:99:dd:f7:37:1f:24:d5:a6:56:94:2f:d9:e8:
59:ad:31:c3:48:1d:0c:15:c1:75:8a:a3:99:55:b6:3c:fb:89:
ac:b1:d9:f9:21:ce:95:20:a9:5f:e0:27:b5:29:4f:5b:73:84:
75:bd:d2:3c:21:ae:71:66:7a:c8:51:af:c3:ed:33:25:3b:05:
13:a4:0f:50:4e:48:d0:bd:6c:af:3d:c8:a9:07:35:66:e0:ab:
d8:af:1d:bb:6b:b0:ae:2d:42:60:59:ee:5f:53:d8:6e:d2:76:
3d:7b:ad:f8:42:07:2d:02:9e:94:eb:84:6f:38:fa:65:87:4b:
a8:d2:ee:65:42:c9:a8:30:bc:00:29:74:c3:b9:06:6c:02:ad:
98:9e:a6:3c:62:71:b1:91:f1:5d:1e:1e:85:c5:2d:40:10:04:
7c:91:3d:eb:f7:02:59:14:64:55:06:54:dc:a2:4b:48:14:b5:
2d:3d:2e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:32:49 2026 by rpki-client