
$ rpki-client -vvvf rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/323830343a353130343a3630303a3a2f34302d3430203d3e20323638343235.roa
File: 323830343a353130343a3630303a3a2f34302d3430203d3e20323638343235.roa (raw, json)
Hash identifier: lCywda/P1By9NqrtXMyJUSkUBjNvt1HA/zjksqdrurU=
Subject key identifier: A4:E4:F3:89:9C:9E:24:95:67:5B:07:A9:AC:2F:31:78:45:B0:70:08
Certificate issuer: /CN=E968F08C3BD0A821112BDBD86914ED5964A1FF29
Certificate serial: 382AB93E7B2061909A5653E8C107D9B2050E71D3
Authority key identifier: E9:68:F0:8C:3B:D0:A8:21:11:2B:DB:D8:69:14:ED:59:64:A1:FF:29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E968F08C3BD0A821112BDBD86914ED5964A1FF29.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/323830343a353130343a3630303a3a2f34302d3430203d3e20323638343235.roa
Signing time: Tue 22 Sep 2026 11:44:23 +0000
ROA not before: Tue 22 Sep 2026 11:39:23 +0000
ROA not after: Tue 21 Sep 2027 11:44:23 +0000
asID: 268425
IP address blocks: 2804:5104:600::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/E968F08C3BD0A821112BDBD86914ED5964A1FF29.crl
rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/E968F08C3BD0A821112BDBD86914ED5964A1FF29.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E968F08C3BD0A821112BDBD86914ED5964A1FF29.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Oct 2026 16:43:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:2a:b9:3e:7b:20:61:90:9a:56:53:e8:c1:07:d9:b2:05:0e:71:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E968F08C3BD0A821112BDBD86914ED5964A1FF29
Validity
Not Before: Sep 22 11:39:23 2026 GMT
Not After : Sep 21 11:44:23 2027 GMT
Subject: CN=A4E4F3899C9E2495675B07A9AC2F317845B07008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:24:b3:6b:c1:0c:c0:50:6f:de:6f:25:e7:46:
84:e6:ad:91:5b:a9:67:29:be:27:07:01:87:c1:b8:
0c:9a:85:40:a6:a3:30:7a:95:aa:1b:88:c7:ff:c5:
dd:37:6a:fb:74:bc:10:96:a1:74:b7:3c:7c:61:7c:
65:f6:ac:0a:8b:26:61:c9:fd:16:c0:87:d9:30:ae:
fc:c4:c8:21:56:a6:b4:e6:ba:1f:58:90:19:5c:bb:
0f:ba:ce:dc:74:6f:6d:02:1f:6f:94:95:4f:5b:6b:
8e:5d:6f:f3:c2:8e:18:23:3b:8d:cf:60:35:95:fc:
a9:38:54:40:fd:4b:9a:29:4d:84:e7:3b:e7:b7:5b:
e8:52:3a:1e:62:77:30:3c:54:de:af:4c:94:c8:3c:
02:94:a7:01:ef:a4:9b:8b:9c:e2:6b:ee:00:d5:a4:
74:f0:71:6b:e8:01:42:53:d6:ac:72:7e:9d:97:d1:
00:da:a5:32:96:8d:1f:14:08:d7:f0:15:f4:c5:6e:
d2:0d:3e:b1:10:ef:88:b8:a3:51:22:6e:e2:d7:d0:
e8:66:eb:6e:53:ce:01:14:7d:fe:d6:37:70:a2:ad:
de:35:ee:af:bf:d3:4e:2a:44:c3:7e:90:89:6a:d9:
25:32:1e:d7:91:f1:9a:d1:38:a6:3d:2e:2c:0f:8b:
b1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E4:F3:89:9C:9E:24:95:67:5B:07:A9:AC:2F:31:78:45:B0:70:08
X509v3 Authority Key Identifier:
keyid:E9:68:F0:8C:3B:D0:A8:21:11:2B:DB:D8:69:14:ED:59:64:A1:FF:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/E968F08C3BD0A821112BDBD86914ED5964A1FF29.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E968F08C3BD0A821112BDBD86914ED5964A1FF29.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/323830343a353130343a3630303a3a2f34302d3430203d3e20323638343235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5104:600::/40
Signature Algorithm: sha256WithRSAEncryption
3c:27:4f:22:4d:3c:1d:90:3f:2f:c4:8f:42:c7:19:4a:25:44:
c1:03:38:e7:c6:f7:38:f9:ff:3a:aa:bc:14:01:05:48:35:59:
a2:62:ea:d4:e6:cf:1c:d2:5d:f1:c1:13:7a:a5:b6:36:70:ce:
fa:85:89:48:8f:ea:85:60:fe:d0:d3:96:3f:1f:89:fd:21:38:
ca:f2:18:0e:72:eb:97:00:10:be:18:33:1e:70:89:f3:35:0a:
e2:1e:98:ab:04:45:15:9a:34:68:bd:d9:4f:86:81:e3:4f:39:
08:6f:a1:c8:9d:3d:66:2b:5c:a2:d7:3d:2d:cb:b6:a1:67:e4:
0b:eb:0a:fd:14:90:3d:4c:c6:60:2f:1f:8c:7a:90:ef:e8:48:
42:fc:3a:61:9d:b2:32:7f:05:f4:9b:11:92:31:a8:94:fb:52:
e7:b1:fa:61:bc:aa:54:dc:af:bc:40:c7:22:e9:51:92:a2:7b:
fa:be:19:04:c4:a1:a2:2f:7b:94:55:d0:aa:e3:84:8f:01:b6:
f9:b0:17:2c:a3:d0:a4:d0:1d:ae:83:2c:14:29:9b:b9:c7:ae:
66:5b:b7:db:b1:07:6a:64:a0:95:dc:57:4d:8d:b7:97:7d:b2:
06:64:64:c6:56:13:a9:6c:c5:55:e6:df:04:7f:ce:7f:d1:ef:
de:4a:68:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:45:10 2026 by rpki-client