
$ rpki-client -vvf rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/323830343a383065303a383030303a3a2f33332d3333203d3e20323732343138.roa
File: 323830343a383065303a383030303a3a2f33332d3333203d3e20323732343138.roa (raw, json)
Hash identifier: oo+eZE/zP5YQKHiy50gQ1Nr1QtFcBitHyG+Err2q/1M=
Subject key identifier: 1F:A3:82:34:D3:4E:0A:AC:76:69:12:43:92:1A:D4:07:F0:5C:A7:0B
Certificate issuer: /CN=40CDEA2B39C5894A623B9432B6CE9D6053783B78
Certificate serial: 5A0A4998BA58630908C9DF18D2728186A17A319F
Authority key identifier: 40:CD:EA:2B:39:C5:89:4A:62:3B:94:32:B6:CE:9D:60:53:78:3B:78
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CDEA2B39C5894A623B9432B6CE9D6053783B78.cer
Subject info access: rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/323830343a383065303a383030303a3a2f33332d3333203d3e20323732343138.roa
Signing time: Fri 08 May 2026 20:31:30 +0000
ROA not before: Fri 08 May 2026 20:26:30 +0000
ROA not after: Fri 07 May 2027 20:31:30 +0000
asID: 272418
IP address blocks: 2804:80e0:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/40CDEA2B39C5894A623B9432B6CE9D6053783B78.crl
rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/40CDEA2B39C5894A623B9432B6CE9D6053783B78.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CDEA2B39C5894A623B9432B6CE9D6053783B78.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 14 May 2026 09:15:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:0a:49:98:ba:58:63:09:08:c9:df:18:d2:72:81:86:a1:7a:31:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40CDEA2B39C5894A623B9432B6CE9D6053783B78
Validity
Not Before: May 8 20:26:30 2026 GMT
Not After : May 7 20:31:30 2027 GMT
Subject: CN=1FA38234D34E0AAC76691243921AD407F05CA70B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d2:00:fb:80:2f:bd:86:17:13:0f:e4:db:d1:
18:70:ed:6c:1b:37:b7:58:80:94:23:ae:86:89:7b:
76:30:7c:80:96:52:f5:a8:e6:e4:66:0d:19:4f:f9:
5c:54:a2:29:5e:28:ad:60:bf:d9:1f:13:4f:9b:18:
a2:19:74:41:9e:92:ef:63:67:ab:e5:3b:9f:e9:ff:
d8:3f:73:a4:7d:ce:29:38:9d:53:d8:15:98:a4:01:
9b:98:07:74:21:8b:b1:25:ee:21:58:a4:fc:cb:32:
40:65:c9:9c:68:7a:dd:e9:61:87:19:c8:cd:b8:f5:
36:b9:fc:8a:38:c9:7f:bc:27:36:c2:bb:80:6e:24:
86:3d:8d:11:6a:39:fa:31:57:96:c9:7e:60:75:ba:
a3:75:db:03:b8:bd:c4:81:b2:ea:41:5a:79:db:37:
ec:c3:72:31:d4:e9:f9:e5:db:8c:67:5b:35:03:b9:
f4:08:1f:e0:08:f5:35:b0:49:10:92:61:1c:2a:d8:
85:e5:75:2d:3f:c5:d8:b9:01:82:d7:27:51:27:dd:
a3:4f:93:5b:fd:fe:34:a8:f0:4e:3e:57:61:83:f5:
95:f3:0d:65:5b:79:fa:31:ef:39:76:77:a7:c4:5d:
cb:64:28:99:67:8b:76:e1:a8:d2:e4:e8:40:0f:41:
97:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A3:82:34:D3:4E:0A:AC:76:69:12:43:92:1A:D4:07:F0:5C:A7:0B
X509v3 Authority Key Identifier:
keyid:40:CD:EA:2B:39:C5:89:4A:62:3B:94:32:B6:CE:9D:60:53:78:3B:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/40CDEA2B39C5894A623B9432B6CE9D6053783B78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CDEA2B39C5894A623B9432B6CE9D6053783B78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/323830343a383065303a383030303a3a2f33332d3333203d3e20323732343138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:80e0:8000::/33
Signature Algorithm: sha256WithRSAEncryption
5c:87:c3:5b:b2:6f:ec:f9:c1:ee:bf:07:aa:52:b5:8a:8a:2e:
0f:e4:c3:43:92:ee:e8:da:5e:15:36:35:05:69:20:50:a4:c2:
e2:fe:5a:7c:c7:28:ca:cd:4a:83:39:7c:d0:a7:ce:30:a5:51:
58:b9:b3:52:a3:33:a2:ff:58:27:25:7f:e8:8b:4d:a4:34:2c:
2f:c4:0e:92:23:1f:e8:fa:8b:bc:e6:fe:90:9b:68:7e:2f:32:
73:c3:ac:50:19:d4:16:cd:c6:6a:e8:96:4b:b9:83:e9:79:31:
e3:9c:e7:e6:56:49:29:9a:8c:f6:e6:3e:94:a3:c7:7e:62:d3:
80:bb:a0:0a:9c:54:05:20:b2:f4:d2:60:3d:40:4b:64:1d:5a:
1b:d8:ee:7f:f8:75:69:51:33:41:d3:06:a6:d8:3b:31:45:8e:
12:b9:1b:34:ef:6c:30:d4:90:73:45:63:44:e6:14:6d:b7:db:
6e:68:0b:fe:e0:fa:28:ce:dc:ef:5a:75:2c:69:e1:61:dc:5f:
cd:27:37:3c:61:4d:0a:4a:09:92:8c:b7:16:24:b1:36:c3:29:
ca:fe:97:2f:0e:0b:60:48:77:58:4f:d7:fb:ee:67:c0:3d:47:
04:ba:92:01:05:d5:e6:8e:bd:e8:c2:68:52:8f:ef:c8:c0:0a:
56:70:7c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:14:35 2026 by rpki-client