
$ rpki-client -vvf rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/323830343a363732633a383030303a3a2f33332d3333203d3e20323639363039.roa
File: 323830343a363732633a383030303a3a2f33332d3333203d3e20323639363039.roa (raw, json)
Hash identifier: TraAQwxAUThNUy2KjiwlRo5rDoKD3dmrkdbokhA35TA=
Subject key identifier: 1E:00:B5:74:30:6D:86:25:B7:6B:18:BD:4E:40:F5:84:5B:0A:13:C7
Certificate issuer: /CN=43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29
Certificate serial: 790925436155B053360F7D82AA28DE4B25977B55
Authority key identifier: 43:EA:8C:DC:41:05:B8:7E:D9:C2:FC:8C:A4:1C:A1:D3:5C:18:7B:29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/323830343a363732633a383030303a3a2f33332d3333203d3e20323639363039.roa
Signing time: Tue 14 Apr 2026 11:31:30 +0000
ROA not before: Tue 14 Apr 2026 11:26:30 +0000
ROA not after: Tue 13 Apr 2027 11:31:30 +0000
asID: 269609
IP address blocks: 2804:672c:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.crl
rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 19 Apr 2026 09:14:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:09:25:43:61:55:b0:53:36:0f:7d:82:aa:28:de:4b:25:97:7b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29
Validity
Not Before: Apr 14 11:26:30 2026 GMT
Not After : Apr 13 11:31:30 2027 GMT
Subject: CN=1E00B574306D8625B76B18BD4E40F5845B0A13C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:07:a4:a4:ec:7c:23:21:29:9a:5e:34:99:cc:
55:b9:d4:26:63:28:aa:07:23:70:23:2c:6f:d3:ea:
e2:c9:ed:ff:fb:b1:1a:31:f7:ac:84:d6:e5:d8:00:
cd:3b:45:a5:74:cd:69:9c:b2:ac:7a:0e:dd:86:43:
f4:c9:de:1e:aa:b5:1a:dd:ed:cf:55:d7:7a:7d:a6:
8b:47:fa:ba:a6:de:2c:9d:f2:87:97:6b:24:cb:dd:
af:c8:d8:b8:c0:81:6f:23:7f:69:8b:97:a6:73:3f:
ca:53:6a:24:1c:d1:c4:b4:29:5f:12:42:e0:79:19:
39:17:93:f6:16:b0:e0:a5:44:6b:4d:12:b7:5f:15:
6b:01:e9:79:b4:1e:a1:7c:1b:22:f4:97:a7:4d:f2:
08:79:7f:ff:a9:fc:8a:4c:b1:8d:3d:24:b3:41:08:
52:71:75:a3:81:5e:6c:8e:bc:9a:2a:ef:3a:7b:ff:
32:a8:d2:96:84:7f:d2:33:d2:7c:c6:54:15:9c:98:
dd:d4:93:8c:b4:d2:13:9b:1b:59:c5:73:7d:77:a5:
72:27:ae:1a:45:f6:d8:f9:9e:78:3b:46:29:25:74:
94:5d:63:b8:72:ab:0f:74:10:35:bf:2b:e4:32:41:
ad:02:7e:58:f5:1e:3d:2b:29:20:8a:c3:b0:37:6d:
02:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:00:B5:74:30:6D:86:25:B7:6B:18:BD:4E:40:F5:84:5B:0A:13:C7
X509v3 Authority Key Identifier:
keyid:43:EA:8C:DC:41:05:B8:7E:D9:C2:FC:8C:A4:1C:A1:D3:5C:18:7B:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/323830343a363732633a383030303a3a2f33332d3333203d3e20323639363039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:672c:8000::/33
Signature Algorithm: sha256WithRSAEncryption
59:21:aa:68:36:22:4a:68:42:1c:ff:d5:64:09:22:e3:03:04:
f0:ba:78:cc:ee:b1:24:e6:29:14:be:8c:25:1c:de:86:01:4e:
8e:e8:b3:0d:b2:10:87:c3:15:03:d1:76:c8:38:c9:4b:af:1c:
aa:33:88:85:90:65:36:b5:64:c8:f0:60:77:2b:ed:28:76:04:
3a:b4:ad:2d:12:47:ed:c6:bd:fe:84:bb:f4:cb:b8:08:96:e2:
3e:4b:f1:3b:88:ba:c7:24:68:27:60:e4:cc:c0:b0:34:11:5e:
58:70:db:fc:5f:50:e7:73:8f:cf:28:06:36:df:b0:34:51:f3:
1d:c3:38:07:96:ae:e8:e2:47:a9:0a:47:0d:b2:f8:c8:3c:b7:
86:ed:d6:6f:1f:cf:83:98:1c:b3:8d:5c:e2:f1:a1:0b:a4:1e:
84:7c:5f:a9:7d:8a:80:af:e3:39:82:31:bd:c1:ce:53:80:8d:
c9:88:16:06:99:d4:4a:38:e3:7e:c1:85:f3:74:a2:3b:9a:1b:
e8:01:c0:5a:19:cd:75:98:f0:eb:f9:a5:dd:98:93:e7:cc:fd:
3d:07:10:ea:16:8e:01:0e:9a:d2:39:2b:6c:b8:b3:89:bf:37:
97:fc:09:61:bc:e8:d8:d4:9a:73:e8:21:f2:55:98:de:3f:89:
4f:39:63:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:26:41 2026 by rpki-client