
$ rpki-client -vvvf rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/323830343a386637303a313030303a3a2f33362d3336203d3e20323632353835.roa
File: 323830343a386637303a313030303a3a2f33362d3336203d3e20323632353835.roa (raw, json)
Hash identifier: WGcQlpfVma363UyBz2Z8v+O1anuF1VwD0QOCPSiRNSk=
Subject key identifier: FB:C5:89:C3:E9:2D:4B:9C:02:61:35:3C:82:14:FD:5C:26:DD:6B:F4
Certificate issuer: /CN=5AC853AE3F9CB62CC01BAF4379BF8072926B07A7
Certificate serial: 5364F1569D4567C02A65028ED3F669BE43DF2A60
Authority key identifier: 5A:C8:53:AE:3F:9C:B6:2C:C0:1B:AF:43:79:BF:80:72:92:6B:07:A7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/323830343a386637303a313030303a3a2f33362d3336203d3e20323632353835.roa
Signing time: Thu 17 Sep 2026 17:00:35 +0000
ROA not before: Thu 17 Sep 2026 16:55:35 +0000
ROA not after: Thu 16 Sep 2027 17:00:35 +0000
asID: 262585
IP address blocks: 2804:8f70:1000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.crl
rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 20 Oct 2026 17:59:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:64:f1:56:9d:45:67:c0:2a:65:02:8e:d3:f6:69:be:43:df:2a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5AC853AE3F9CB62CC01BAF4379BF8072926B07A7
Validity
Not Before: Sep 17 16:55:35 2026 GMT
Not After : Sep 16 17:00:35 2027 GMT
Subject: CN=FBC589C3E92D4B9C0261353C8214FD5C26DD6BF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:72:c4:62:c7:9e:f9:de:90:2a:84:5e:db:d4:
52:a0:63:54:3b:9f:dc:66:8c:79:cd:74:75:48:23:
dc:43:fa:ce:63:3b:37:ff:e0:0a:f8:c1:e4:bd:03:
b6:d1:da:e5:c9:0d:3b:04:68:ca:68:d3:09:8b:3b:
5f:63:3e:8b:78:29:ca:6e:f4:4a:6b:01:75:ff:39:
a4:55:7d:30:8d:8c:f5:90:e3:5a:c0:97:fb:d2:f7:
d6:03:95:8a:4e:34:55:1e:58:1d:b8:77:8c:6f:10:
68:c5:90:0d:6b:87:d2:2d:39:78:78:1d:9b:2e:43:
da:c1:57:52:d8:c4:cc:1b:fb:72:fe:a8:36:ba:cb:
95:b6:27:7f:f1:d6:9d:c3:d3:45:11:09:ec:92:5d:
87:8e:13:3f:bf:ef:2f:fa:c1:81:a7:73:f3:16:ca:
3d:55:4a:aa:10:64:69:9f:22:fc:1e:8b:0b:b0:9e:
ae:0b:18:32:35:75:d5:2f:fc:46:31:0d:f6:74:4d:
8d:02:fa:d1:f9:9c:04:4c:98:1b:22:10:c1:8c:94:
f4:32:5d:ad:04:5a:b0:ac:63:f0:60:d6:56:68:2d:
ed:6f:2d:77:d6:90:28:28:7a:8d:a1:0e:96:63:5d:
d8:1c:6f:67:6e:2b:6b:94:a3:55:3a:39:c9:ac:e2:
33:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C5:89:C3:E9:2D:4B:9C:02:61:35:3C:82:14:FD:5C:26:DD:6B:F4
X509v3 Authority Key Identifier:
keyid:5A:C8:53:AE:3F:9C:B6:2C:C0:1B:AF:43:79:BF:80:72:92:6B:07:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/323830343a386637303a313030303a3a2f33362d3336203d3e20323632353835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8f70:1000::/36
Signature Algorithm: sha256WithRSAEncryption
2f:1c:a0:0b:78:66:3e:28:52:9c:66:ce:42:4c:98:a2:c4:4d:
88:81:d3:60:f1:5e:3c:c8:b8:7b:1f:2c:cd:46:1b:b4:80:63:
79:24:78:c7:8b:da:8c:3e:86:2a:31:13:2f:5f:e2:d6:2a:d5:
f1:da:7f:b4:93:6d:1c:cf:f2:df:11:aa:a6:d0:28:dd:fc:3e:
47:2c:d1:06:b9:55:85:cd:29:72:40:80:d3:00:69:53:ac:2b:
66:d9:3d:ca:56:0d:e6:9e:75:a9:4a:63:f0:b8:1d:99:15:01:
be:ef:a0:ea:70:76:5d:e1:9f:38:f2:38:40:44:ef:d8:a7:76:
d0:28:c8:e6:67:7c:a7:6c:b9:83:60:7c:31:29:85:5e:ae:b4:
25:23:ec:88:a2:b9:46:c0:3a:57:3d:fb:b3:07:ad:2e:93:6e:
33:01:56:8f:91:68:b7:bb:12:25:54:45:30:a5:f9:e0:06:43:
e1:9c:9c:f5:ec:9c:b6:cf:7b:b8:08:99:0d:31:11:ff:73:7c:
ff:d7:14:22:71:d4:36:95:db:44:43:27:2c:dc:14:b6:43:de:
6e:7e:1c:bb:9a:8d:39:6e:42:b9:3a:2a:72:82:e5:65:c0:cc:
8d:47:b1:59:02:34:c7:66:ec:1b:ee:55:4f:09:31:e7:bd:03:
22:e4:0e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:52:52 2026 by rpki-client