
$ rpki-client -vvf rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/323830343a363732633a3830303a3a2f33372d3337203d3e20323639363039.roa
File: 323830343a363732633a3830303a3a2f33372d3337203d3e20323639363039.roa (raw, json)
Hash identifier: WcIYnV7boTCASpivjdnur4ArMqxzfMRheJGTUHx4cRc=
Subject key identifier: 5B:FD:0F:A9:11:60:12:1A:49:DF:95:83:51:28:7D:1D:01:A5:9F:AD
Certificate issuer: /CN=43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29
Certificate serial: 1AAF1E4CE0916E9227900D43D5E0B7272EC23024
Authority key identifier: 43:EA:8C:DC:41:05:B8:7E:D9:C2:FC:8C:A4:1C:A1:D3:5C:18:7B:29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/323830343a363732633a3830303a3a2f33372d3337203d3e20323639363039.roa
Signing time: Tue 14 Apr 2026 11:30:59 +0000
ROA not before: Tue 14 Apr 2026 11:25:59 +0000
ROA not after: Tue 13 Apr 2027 11:30:59 +0000
asID: 269609
IP address blocks: 2804:672c:800::/37 maxlen: 37
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.crl
rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 19 Apr 2026 09:14:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:af:1e:4c:e0:91:6e:92:27:90:0d:43:d5:e0:b7:27:2e:c2:30:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29
Validity
Not Before: Apr 14 11:25:59 2026 GMT
Not After : Apr 13 11:30:59 2027 GMT
Subject: CN=5BFD0FA91160121A49DF958351287D1D01A59FAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:66:cc:21:ab:8a:df:ed:8b:17:f7:ef:c0:66:
cb:6a:13:e6:af:5d:7e:9f:49:ce:44:9d:a6:06:75:
4a:69:e0:4f:95:9c:d6:c3:0e:da:90:d4:5e:90:57:
12:71:f3:a1:e0:c1:04:83:a9:01:75:bd:f3:bd:a5:
f1:58:a6:14:28:df:fa:a5:85:53:a3:cc:89:d1:52:
a6:cb:1d:65:31:75:24:de:7c:ec:0f:61:02:d5:4c:
c4:eb:ac:1d:7d:f6:a9:47:ee:2d:06:d3:86:c1:39:
07:f2:55:7e:c3:65:63:71:05:5e:2b:62:75:9f:3c:
57:c3:9a:4a:a8:65:bd:53:19:af:a7:13:94:69:f1:
df:9a:55:de:a6:2a:ae:24:bc:71:9f:f9:94:cc:81:
33:5e:04:db:94:6e:3a:af:a3:6b:79:24:b8:16:b1:
26:3c:94:fb:b1:ff:8c:67:1e:5a:3a:16:f9:e1:27:
26:5a:38:6e:e6:10:ff:29:48:8c:f5:a9:1d:cb:56:
b4:77:a6:ae:32:31:60:74:d8:ac:43:26:39:a8:55:
dd:79:75:b4:f0:48:cb:cd:6b:a6:fe:98:34:90:65:
17:3d:a7:a2:06:53:d5:26:34:81:e8:59:a1:8e:3a:
2c:34:97:32:c9:5f:38:fe:d2:69:b2:d5:84:b2:5d:
40:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:FD:0F:A9:11:60:12:1A:49:DF:95:83:51:28:7D:1D:01:A5:9F:AD
X509v3 Authority Key Identifier:
keyid:43:EA:8C:DC:41:05:B8:7E:D9:C2:FC:8C:A4:1C:A1:D3:5C:18:7B:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/323830343a363732633a3830303a3a2f33372d3337203d3e20323639363039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:672c:800::/37
Signature Algorithm: sha256WithRSAEncryption
06:87:6a:e7:62:17:93:e5:57:07:ff:13:c1:67:08:8b:5e:77:
24:45:86:73:df:99:09:b5:8d:a0:0d:d5:ed:61:e2:48:08:1e:
87:a2:5b:e6:50:a9:49:44:c2:14:94:a4:e5:08:3a:ff:f0:df:
c5:e4:49:d8:8e:6c:f0:b2:d7:cf:87:ff:fb:1f:80:8b:fd:19:
90:38:eb:f4:95:b8:75:ab:37:9a:48:c5:75:40:1a:40:d9:cb:
ac:49:d8:70:e3:03:79:1a:58:7c:0a:ea:23:e0:7b:07:67:dd:
7f:10:b5:6a:23:d3:62:df:e2:79:d4:78:30:ff:c5:e1:d9:5b:
12:e8:b7:70:89:8f:96:00:81:df:24:d2:ea:6a:37:08:94:89:
14:e9:d4:d5:ab:4b:8f:e9:ce:37:f1:49:cd:15:68:88:97:52:
eb:f1:55:fa:6c:b4:9b:58:ac:0e:ea:0f:7f:3e:50:3b:a6:1b:
57:6c:3a:c4:d0:91:64:6c:ec:c9:18:10:90:09:3b:1f:cd:4d:
d9:64:25:7a:18:55:96:fc:d2:00:98:4d:15:13:31:e5:20:83:
38:ac:c3:ee:e4:17:c0:f8:a2:39:b5:3a:c6:ce:12:7c:4a:90:
8d:2e:ac:55:e0:e9:7a:d2:f5:cb:5d:23:da:53:a7:6d:ad:89:
27:79:29:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:31:39 2026 by rpki-client