
$ rpki-client -vvvf rpki-repo.registro.br/repo/HE4HFuDBLdZCTAjneirr3pWRAWGZvCCDfudVVtqfeifQ/0/323830343a343435633a633030303a3a2f33342d3334203d3e20323637363238.roa
File: 323830343a343435633a633030303a3a2f33342d3334203d3e20323637363238.roa (raw, json)
Hash identifier: yc0BksG+TaiZD2kSSFxRNRkk8n3Y2rlh8l9i32DNaaE=
Subject key identifier: 01:9B:E1:5F:D2:BF:62:E7:B5:90:DE:1E:33:43:7A:60:66:7C:EA:9B
Certificate issuer: /CN=1BF980B5FE300DE9C6E04A0593E2B16B4B14C213
Certificate serial: 5664BEA11824198A921470571689265E1A3841BF
Authority key identifier: 1B:F9:80:B5:FE:30:0D:E9:C6:E0:4A:05:93:E2:B1:6B:4B:14:C2:13
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BF980B5FE300DE9C6E04A0593E2B16B4B14C213.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HE4HFuDBLdZCTAjneirr3pWRAWGZvCCDfudVVtqfeifQ/0/323830343a343435633a633030303a3a2f33342d3334203d3e20323637363238.roa
Signing time: Wed 14 Oct 2026 18:27:11 +0000
ROA not before: Wed 14 Oct 2026 18:22:11 +0000
ROA not after: Wed 13 Oct 2027 18:27:11 +0000
asID: 267628
IP address blocks: 2804:445c:c000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HE4HFuDBLdZCTAjneirr3pWRAWGZvCCDfudVVtqfeifQ/0/1BF980B5FE300DE9C6E04A0593E2B16B4B14C213.crl
rsync://rpki-repo.registro.br/repo/HE4HFuDBLdZCTAjneirr3pWRAWGZvCCDfudVVtqfeifQ/0/1BF980B5FE300DE9C6E04A0593E2B16B4B14C213.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BF980B5FE300DE9C6E04A0593E2B16B4B14C213.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Nov 2026 22:44:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:64:be:a1:18:24:19:8a:92:14:70:57:16:89:26:5e:1a:38:41:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BF980B5FE300DE9C6E04A0593E2B16B4B14C213
Validity
Not Before: Oct 14 18:22:11 2026 GMT
Not After : Oct 13 18:27:11 2027 GMT
Subject: CN=019BE15FD2BF62E7B590DE1E33437A60667CEA9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2a:e9:c1:b4:b0:2f:70:83:86:d8:e8:84:b9:
1d:0f:9e:47:c7:e2:47:f8:fa:8d:f3:ad:05:85:e5:
25:0c:9b:b1:80:8c:0d:6b:ca:ea:b0:95:8b:73:57:
a5:4c:c1:1b:7c:45:7b:25:12:16:bb:e4:0d:a8:fa:
49:28:c3:1a:9a:62:73:e0:c2:80:00:10:f3:0b:ea:
d4:f1:cb:80:24:cb:a4:2a:85:8e:af:c0:0f:52:cb:
44:c6:b6:cb:54:fe:9c:25:4f:02:0a:6e:ae:f8:58:
8c:f0:70:3f:c7:62:2d:39:45:5b:83:38:a9:d2:26:
cb:d7:ee:b0:2c:87:0b:1f:4a:4e:4e:1e:56:ac:60:
4f:6b:38:27:29:6b:4e:33:cd:74:97:46:c2:93:a3:
71:5e:8e:c5:7f:a1:f1:21:94:95:3b:74:0d:5d:a5:
51:c0:86:9c:11:72:12:8a:27:d2:aa:e7:fd:b8:3a:
8a:32:be:0d:8b:da:70:dc:56:21:15:68:f3:10:53:
89:12:7d:00:d1:ca:21:65:36:d0:36:ae:e4:fa:7a:
ad:3c:ee:b7:75:95:e0:19:d2:19:f0:81:a1:4e:03:
9c:54:1e:a3:02:34:40:72:4b:a4:aa:ec:05:5c:1c:
49:5a:cf:b0:f7:2e:c2:82:34:6f:29:91:ac:b7:1c:
16:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:9B:E1:5F:D2:BF:62:E7:B5:90:DE:1E:33:43:7A:60:66:7C:EA:9B
X509v3 Authority Key Identifier:
keyid:1B:F9:80:B5:FE:30:0D:E9:C6:E0:4A:05:93:E2:B1:6B:4B:14:C2:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HE4HFuDBLdZCTAjneirr3pWRAWGZvCCDfudVVtqfeifQ/0/1BF980B5FE300DE9C6E04A0593E2B16B4B14C213.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BF980B5FE300DE9C6E04A0593E2B16B4B14C213.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HE4HFuDBLdZCTAjneirr3pWRAWGZvCCDfudVVtqfeifQ/0/323830343a343435633a633030303a3a2f33342d3334203d3e20323637363238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:445c:c000::/34
Signature Algorithm: sha256WithRSAEncryption
0e:25:c2:47:0f:e2:da:0b:bd:de:3d:fe:05:4e:4b:f7:6b:b3:
53:84:93:29:af:22:49:a2:e4:95:d8:af:9a:96:32:ff:8d:4d:
05:de:b5:7f:27:26:8f:02:41:08:ad:46:c2:0b:dc:23:2d:07:
0c:da:4c:34:b4:d7:ea:97:e9:41:b8:b3:56:f3:ff:ff:a0:f6:
6b:f8:2c:5e:61:ca:73:f0:2d:3f:85:f3:50:f0:3a:89:37:d7:
98:09:84:26:0a:42:4d:28:ab:f3:5b:4b:d0:41:03:8f:20:00:
d4:9d:54:a8:71:bd:51:ca:bd:c0:75:9e:79:22:83:9d:78:b2:
10:e0:44:63:40:85:ef:95:6e:e3:fc:97:f4:a5:06:05:09:db:
3e:c8:65:4b:7e:c1:21:9f:98:5c:5a:42:54:bf:32:c7:fe:3b:
5b:cf:ee:ad:a7:59:5d:e5:ce:da:55:72:25:0d:f8:16:1e:cc:
e5:34:43:ca:cc:06:25:fa:23:54:5d:24:4e:c4:cf:4c:15:ac:
65:63:59:2d:5c:2b:c4:04:9d:50:9d:46:42:0c:cf:7d:ef:7c:
b6:24:01:13:91:e0:74:9f:82:7b:8c:b1:56:89:f2:0f:10:07:
68:7a:3b:64:97:1f:64:f6:fa:fd:46:9e:fe:4c:36:b2:9a:bc:
90:43:9b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 08:26:43 2026 by rpki-client