
$ rpki-client -vvf rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/323830343a383232343a3a2f33322d3332203d3e20323732353031.roa
File: 323830343a383232343a3a2f33322d3332203d3e20323732353031.roa (raw, json)
Hash identifier: mpqSu2vppyE85xkR/iis3eQT/RqkjGSn8nwaZovspZw=
Subject key identifier: 89:6E:49:05:1D:DF:3E:10:66:41:6E:4D:84:B5:CC:AC:AA:A6:D9:CA
Certificate issuer: /CN=E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF
Certificate serial: 45E1A8B644C43BFFD4508DFA4F63EC1A1834123C
Authority key identifier: E5:9C:BB:F1:8F:C7:A7:9D:C8:32:8B:AD:E1:6A:C7:12:C9:9C:FF:BF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/323830343a383232343a3a2f33322d3332203d3e20323732353031.roa
Signing time: Tue 24 Feb 2026 23:20:57 +0000
ROA not before: Tue 24 Feb 2026 23:15:57 +0000
ROA not after: Tue 23 Feb 2027 23:20:57 +0000
asID: 272501
IP address blocks: 2804:8224::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF.crl
rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 14:39:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:e1:a8:b6:44:c4:3b:ff:d4:50:8d:fa:4f:63:ec:1a:18:34:12:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF
Validity
Not Before: Feb 24 23:15:57 2026 GMT
Not After : Feb 23 23:20:57 2027 GMT
Subject: CN=896E49051DDF3E1066416E4D84B5CCACAAA6D9CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bb:99:d1:1a:ac:fe:f4:d5:5a:d0:73:5f:f3:
73:21:4a:0b:48:b3:ec:a8:e2:d6:eb:41:a8:ac:95:
9e:04:33:57:74:6e:fc:c3:f8:10:82:d0:2c:e0:65:
8f:dd:bc:46:2b:0b:54:17:08:1f:c5:b1:7c:ce:16:
11:17:13:fc:44:0f:0c:41:fa:98:1e:bf:18:80:04:
3f:51:83:38:d8:0d:38:fc:06:0b:bd:dc:e7:9d:6a:
f8:89:97:0c:25:c3:a1:43:ef:08:17:28:00:41:2e:
aa:0a:91:df:25:24:b9:7d:d6:8d:9b:3a:de:42:82:
e6:ae:67:96:31:dd:d5:e5:c3:ed:68:ba:41:77:db:
b5:ed:f7:ab:f8:5d:31:56:9c:7d:91:eb:11:02:e1:
cb:ad:f9:49:08:80:cb:c7:46:0e:d5:93:32:27:15:
ec:c8:28:a9:1b:8b:a1:07:45:89:df:7d:b4:86:49:
f0:a8:a7:68:85:e3:f6:f2:f1:02:f1:3b:1a:df:6e:
2e:02:be:02:78:3c:3c:d8:d0:13:46:30:24:20:66:
87:fd:46:e2:c7:a2:b4:e0:e7:ad:b6:ac:3b:cf:f5:
3a:65:17:3c:ff:c9:e5:49:43:5e:77:73:4f:ca:fe:
7a:5d:49:93:54:5e:80:17:b8:ce:cb:7b:4e:47:d5:
84:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:6E:49:05:1D:DF:3E:10:66:41:6E:4D:84:B5:CC:AC:AA:A6:D9:CA
X509v3 Authority Key Identifier:
keyid:E5:9C:BB:F1:8F:C7:A7:9D:C8:32:8B:AD:E1:6A:C7:12:C9:9C:FF:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/323830343a383232343a3a2f33322d3332203d3e20323732353031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8224::/32
Signature Algorithm: sha256WithRSAEncryption
65:e2:dc:53:18:16:f0:76:98:8c:2c:23:95:3d:b3:35:bf:81:
cc:26:ae:19:63:ae:a9:59:53:20:37:27:e0:d0:a1:21:7c:39:
24:84:f6:b6:74:e5:4f:ea:46:d5:d6:b2:b0:4b:23:d1:94:c7:
39:86:4b:de:07:df:ef:21:77:5d:b9:f1:df:7a:38:d6:7e:99:
36:a1:33:a5:1f:99:98:3f:0c:5a:01:58:6f:34:67:86:94:66:
8e:66:e5:bb:0b:84:99:d9:ad:ad:1a:19:c1:bb:e4:ad:7f:e3:
e0:c3:e6:b5:2f:88:ed:c3:f0:5e:a2:4d:0b:a3:8f:0b:fe:25:
99:83:44:81:12:e7:ab:24:a2:06:8a:09:24:56:7a:48:5d:cc:
22:1e:f7:77:61:55:fb:1d:49:33:ac:0c:3a:15:64:41:e5:17:
8d:77:42:ff:62:5f:51:d1:82:9c:10:2c:5c:79:14:73:76:58:
d5:1f:de:71:2b:b4:48:9a:1a:10:6c:1b:1a:08:98:8a:c4:a2:
01:b1:c4:fa:3a:37:1f:78:b3:c1:5a:77:62:cd:a9:55:7e:21:
3a:76:7d:f4:eb:eb:7c:63:0b:d8:37:75:ed:d3:b0:6a:f9:bb:
b0:08:c7:f4:d3:36:3f:e0:96:17:49:75:b7:c5:8b:b1:49:f6:
f7:fe:2a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:59:28 2026 by rpki-client