
$ rpki-client -vvvf rpki-repo.registro.br/repo/Gn3YhRekQgC4zYpRkXxwXw9qyHnGnLZ4Cq8gATvpCSfB/0/323830343a383736633a3a2f33322d313238203d3e20323732373038.roa
File: 323830343a383736633a3a2f33322d313238203d3e20323732373038.roa (raw, json)
Hash identifier: 3GKCTwfj+1xsSTyQsWVokFjSaKnGS/iKrj5ykdzCK1M=
Subject key identifier: D3:CE:BB:FB:18:96:61:E5:54:40:5E:C2:F9:5E:C8:5F:0E:21:26:42
Certificate issuer: /CN=70911199E45AA71DB1DD46C834826910CBC30651
Certificate serial: 50298CE32C51C9FF64F7E646677A4F7D25AE440F
Authority key identifier: 70:91:11:99:E4:5A:A7:1D:B1:DD:46:C8:34:82:69:10:CB:C3:06:51
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70911199E45AA71DB1DD46C834826910CBC30651.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Gn3YhRekQgC4zYpRkXxwXw9qyHnGnLZ4Cq8gATvpCSfB/0/323830343a383736633a3a2f33322d313238203d3e20323732373038.roa
Signing time: Fri 04 Sep 2026 11:32:34 +0000
ROA not before: Fri 04 Sep 2026 11:27:34 +0000
ROA not after: Fri 03 Sep 2027 11:32:34 +0000
asID: 272708
IP address blocks: 2804:876c::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Gn3YhRekQgC4zYpRkXxwXw9qyHnGnLZ4Cq8gATvpCSfB/0/70911199E45AA71DB1DD46C834826910CBC30651.crl
rsync://rpki-repo.registro.br/repo/Gn3YhRekQgC4zYpRkXxwXw9qyHnGnLZ4Cq8gATvpCSfB/0/70911199E45AA71DB1DD46C834826910CBC30651.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70911199E45AA71DB1DD46C834826910CBC30651.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Oct 2026 00:31:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:29:8c:e3:2c:51:c9:ff:64:f7:e6:46:67:7a:4f:7d:25:ae:44:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70911199E45AA71DB1DD46C834826910CBC30651
Validity
Not Before: Sep 4 11:27:34 2026 GMT
Not After : Sep 3 11:32:34 2027 GMT
Subject: CN=D3CEBBFB189661E554405EC2F95EC85F0E212642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cf:82:79:dc:35:3e:fe:43:f3:1e:43:61:30:
f1:63:cd:ab:66:10:34:91:16:25:97:23:41:e9:10:
14:aa:cf:cd:62:16:74:84:43:a2:6e:17:b8:da:ff:
f3:5b:7b:2d:08:31:03:6a:83:ad:dd:42:5c:ba:a0:
d8:09:eb:b9:29:42:0d:41:6a:29:f6:73:b9:cd:49:
a1:bb:42:fa:96:d2:8b:b8:ec:62:54:d3:99:16:d9:
69:f5:86:c8:3d:72:8c:02:aa:83:e6:c0:43:99:a9:
65:9d:8f:b3:4b:4d:2b:61:d6:e5:44:93:67:51:c1:
25:2d:b5:3d:2d:1c:db:d8:41:74:96:c0:4b:23:b1:
5d:a7:88:38:56:07:f8:81:73:ab:d3:6b:f1:79:b8:
1f:74:87:73:14:0a:1e:7c:eb:48:c2:01:27:99:34:
dd:17:2d:a8:cd:10:01:41:74:31:43:97:f9:40:e6:
8c:62:81:97:38:1b:8e:29:ce:87:81:f6:89:8a:6b:
b7:8c:16:07:15:6d:d8:59:31:e1:cb:10:c7:f2:6d:
af:b5:9e:9f:c7:19:cd:6a:b2:d7:84:ce:81:75:ae:
1a:06:a7:61:03:5a:ff:46:07:28:2e:56:37:bc:13:
b7:d8:ef:a1:68:e8:94:1f:02:a2:fd:c4:aa:a5:bf:
5a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CE:BB:FB:18:96:61:E5:54:40:5E:C2:F9:5E:C8:5F:0E:21:26:42
X509v3 Authority Key Identifier:
keyid:70:91:11:99:E4:5A:A7:1D:B1:DD:46:C8:34:82:69:10:CB:C3:06:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Gn3YhRekQgC4zYpRkXxwXw9qyHnGnLZ4Cq8gATvpCSfB/0/70911199E45AA71DB1DD46C834826910CBC30651.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70911199E45AA71DB1DD46C834826910CBC30651.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn3YhRekQgC4zYpRkXxwXw9qyHnGnLZ4Cq8gATvpCSfB/0/323830343a383736633a3a2f33322d313238203d3e20323732373038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:876c::/32
Signature Algorithm: sha256WithRSAEncryption
84:16:83:5d:9a:11:1a:d1:ac:94:75:3a:be:a5:19:80:1f:c1:
c8:80:f0:28:f6:cf:49:71:e1:7f:fe:34:a3:94:5c:b3:44:fe:
a0:29:ca:4d:4c:62:5b:58:68:61:87:66:4b:81:cf:30:82:be:
bf:1c:47:62:11:bd:b9:5a:72:f4:e8:f2:dd:60:1b:44:6c:b0:
0e:35:6b:b7:3f:7f:d6:9c:c2:2a:df:da:0d:8a:6d:6d:71:e4:
98:9c:76:c3:85:6e:55:da:0d:14:92:4c:cb:44:0b:58:e3:44:
61:1d:13:5c:8e:61:55:db:fb:4b:e4:a5:f3:aa:ba:2e:34:a7:
f5:78:03:f0:f7:ff:e9:65:14:7c:0b:ba:e7:fb:48:3e:4f:4a:
b0:37:0f:44:43:00:b4:8d:ae:84:de:35:37:55:3c:f3:06:84:
03:77:ea:a7:ea:47:6f:a5:6d:28:d1:13:17:fc:39:20:19:44:
89:9a:5f:24:b1:51:ee:9d:ee:14:6a:2d:33:3c:e6:ec:dd:fb:
26:df:25:3c:5f:0b:35:31:a3:ef:7a:f4:44:0a:07:cb:3e:1d:
70:fc:e7:93:7f:6c:9d:c3:84:88:0e:c9:2f:67:51:10:38:ea:
b7:ca:97:ee:d6:76:b8:b4:31:cf:a0:c4:c0:be:ca:d0:12:51:
da:9d:66:c9
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUUCmM4yxRyf9k9+ZGZ3pPfSWuRA8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzA5MTExOTlFNDVBQTcxREIxREQ0NkM4MzQ4MjY5MTBD
QkMzMDY1MTAeFw0yNjA5MDQxMTI3MzRaFw0yNzA5MDMxMTMyMzRaMDMxMTAvBgNV
BAMTKEQzQ0VCQkZCMTg5NjYxRTU1NDQwNUVDMkY5NUVDODVGMEUyMTI2NDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsz4J53DU+/kPzHkNhMPFjzatm
EDSRFiWXI0HpEBSqz81iFnSEQ6JuF7ja//Nbey0IMQNqg63dQly6oNgJ67kpQg1B
ain2c7nNSaG7QvqW0ou47GJU05kW2Wn1hsg9cowCqoPmwEOZqWWdj7NLTSth1uVE
k2dRwSUttT0tHNvYQXSWwEsjsV2niDhWB/iBc6vTa/F5uB90h3MUCh5860jCASeZ
NN0XLajNEAFBdDFDl/lA5oxigZc4G44pzoeB9omKa7eMFgcVbdhZMeHLEMfyba+1
np/HGc1qsteEzoF1rhoGp2EDWv9GByguVje8E7fY76Fo6JQfAqL9xKqlv1plAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU0867+xiWYeVUQF7C+V7IXw4hJkIwHwYDVR0j
BBgwFoAUcJERmeRapx2x3UbINIJpEMvDBlEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR24zWWhSZWtRZ0M0ellwUmtYeHdYdzlxeUhuR25MWjRDcThnQVR2cENT
ZkIvMC83MDkxMTE5OUU0NUFBNzFEQjFERDQ2QzgzNDgyNjkxMENCQzMwNjUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcwOTExMTk5RTQ1QUE3MURC
MURENDZDODM0ODI2OTEwQ0JDMzA2NTEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0duM1loUmVrUWdDNHpZcFJrWHh3WHc5cXlIbkduTFo0Q3E4Z0FUdnBDU2ZCLzAv
MzIzODMwMzQzYTM4MzczNjYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzIzNzMwMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBIdsMA0GCSqGSIb3DQEBCwUAA4IBAQCEFoNd
mhEa0ayUdTq+pRmAH8HIgPAo9s9JceF//jSjlFyzRP6gKcpNTGJbWGhhh2ZLgc8w
gr6/HEdiEb25WnL06PLdYBtEbLAONWu3P3/WnMIq39oNim1tceSYnHbDhW5V2g0U
kkzLRAtY40RhHRNcjmFV2/tL5KXzqrouNKf1eAPw9//pZRR8C7rn+0g+T0qwNw9E
QwC0ja6E3jU3VTzzBoQDd+qn6kdvpW0o0RMX/DkgGUSJml8ksVHune4Uai0zPObs
3fsm3yU8Xws1MaPvevRECgfLPh1w/OeTf2ydw4SIDskvZ1EQOOq3ypfu1na4tDHP
oMTAvsrQElHanWbJ
-----END CERTIFICATE-----
Generated at Wed Oct 28 15:38:23 2026 by rpki-client