
$ rpki-client -vvf rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/323830343a383232343a343030303a3a2f33342d3334203d3e20323732353031.roa
File: 323830343a383232343a343030303a3a2f33342d3334203d3e20323732353031.roa (raw, json)
Hash identifier: Amuh9GwwhSGuzQJSUvVg3cUWVUnyseSwyxNHEgynj5A=
Subject key identifier: C0:EF:2F:77:DF:34:E5:63:E4:49:C1:95:3D:0C:A3:FD:81:05:E4:35
Certificate issuer: /CN=E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF
Certificate serial: 10052CA52A34BE0F106A6B09407CFCA6A6421CAC
Authority key identifier: E5:9C:BB:F1:8F:C7:A7:9D:C8:32:8B:AD:E1:6A:C7:12:C9:9C:FF:BF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/323830343a383232343a343030303a3a2f33342d3334203d3e20323732353031.roa
Signing time: Tue 24 Feb 2026 23:20:58 +0000
ROA not before: Tue 24 Feb 2026 23:15:58 +0000
ROA not after: Tue 23 Feb 2027 23:20:58 +0000
asID: 272501
IP address blocks: 2804:8224:4000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF.crl
rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 14:39:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:05:2c:a5:2a:34:be:0f:10:6a:6b:09:40:7c:fc:a6:a6:42:1c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF
Validity
Not Before: Feb 24 23:15:58 2026 GMT
Not After : Feb 23 23:20:58 2027 GMT
Subject: CN=C0EF2F77DF34E563E449C1953D0CA3FD8105E435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f1:f5:4c:81:41:72:5a:a3:23:88:08:32:d5:
d8:2c:c3:06:a0:97:79:f2:fb:f2:77:73:77:50:09:
0d:36:8c:9f:0c:b3:eb:a1:ee:ec:a8:6e:ed:aa:63:
16:76:f4:d3:14:77:72:15:cd:73:a9:e3:6c:13:ca:
71:1b:ba:f3:a5:60:73:a0:34:b5:bf:dd:10:d7:8a:
47:11:51:3a:4f:d9:fe:69:16:55:77:fa:47:8b:85:
19:ee:04:ec:98:c5:04:b3:e5:a9:37:cc:a1:ec:14:
4c:7c:74:08:53:4c:23:9e:d0:46:bb:10:9a:51:0d:
aa:52:61:76:47:09:ca:3c:94:1f:6a:cf:52:6b:6b:
2a:ac:34:52:a8:b1:62:c3:e7:a3:e7:49:a5:50:5a:
8c:82:16:4e:fb:e8:b7:5a:d6:04:c8:f0:11:7e:45:
2c:45:39:e6:eb:39:80:5f:5b:a9:59:b0:99:e0:ab:
4e:cd:69:37:fe:fa:5b:ac:66:3e:4d:c3:8f:61:4d:
3d:10:67:34:51:50:38:21:4f:f8:e4:4e:11:0e:05:
41:30:29:65:ca:77:11:ab:ce:03:cf:b5:b3:93:81:
6d:df:63:14:f2:2c:26:e3:4c:21:2d:b9:0c:4b:d6:
08:09:4b:60:bf:88:3a:09:76:28:7c:90:f6:82:a0:
a4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:EF:2F:77:DF:34:E5:63:E4:49:C1:95:3D:0C:A3:FD:81:05:E4:35
X509v3 Authority Key Identifier:
keyid:E5:9C:BB:F1:8F:C7:A7:9D:C8:32:8B:AD:E1:6A:C7:12:C9:9C:FF:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/323830343a383232343a343030303a3a2f33342d3334203d3e20323732353031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8224:4000::/34
Signature Algorithm: sha256WithRSAEncryption
25:82:e8:9e:7c:15:99:a6:89:c3:96:09:64:1a:65:36:b1:5a:
61:30:97:4c:88:75:22:39:00:1d:af:3c:49:00:ee:59:be:63:
0e:8a:ea:2d:0c:a1:65:6c:82:cb:ba:f5:10:89:f4:9a:0f:fc:
b9:f1:9d:62:52:42:cb:60:dd:5e:1a:b5:86:3f:d3:94:08:22:
a5:0f:57:42:1b:19:bf:79:14:bc:de:71:63:19:4e:a9:3a:78:
cf:1d:9e:81:f6:4c:c1:7a:81:cf:5b:96:17:e0:f7:84:a3:90:
ac:3f:eb:87:eb:bc:ee:6a:73:c1:a5:21:ed:8e:1c:2e:8d:3f:
ab:a4:ca:bc:49:a5:1b:0d:7b:05:f1:fb:e9:dd:10:da:a6:86:
5b:03:0f:29:e9:44:cd:f6:de:65:37:86:e9:58:66:12:48:05:
aa:8d:d2:e1:09:47:9e:d7:43:3a:4a:9f:ed:b6:63:5b:a1:b2:
32:2a:21:90:51:e6:9e:dc:18:0e:16:23:83:c7:d4:00:6e:45:
d4:75:f7:c7:0f:3c:aa:ad:ce:7d:86:70:54:4b:58:ae:a3:89:
f6:2e:59:22:bc:f5:60:a2:ef:d9:70:54:05:50:d0:a4:44:29:
86:62:5d:c6:81:9b:e8:82:92:aa:f1:9f:29:14:75:6e:ef:3c:
98:10:c5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:59:46 2026 by rpki-client