
$ rpki-client -vvf rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/323830343a346337633a383030303a3a2f33332d3333203d3e20323637333733.roa
File: 323830343a346337633a383030303a3a2f33332d3333203d3e20323637333733.roa (raw, json)
Hash identifier: h1dDA5ZyeQXs/UC/Gdy8hngAZLXhdJ17+oiJW1xH4HU=
Subject key identifier: BF:5F:6A:01:5B:BE:F3:94:E9:74:0D:3B:02:76:D2:ED:CC:58:B8:F3
Certificate issuer: /CN=67E390BE3E2214C4FBBADD091C55EEBAE671D882
Certificate serial: 1BC25E0345FCA5A14659EA2DDB78FE8862C14704
Authority key identifier: 67:E3:90:BE:3E:22:14:C4:FB:BA:DD:09:1C:55:EE:BA:E6:71:D8:82
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/323830343a346337633a383030303a3a2f33332d3333203d3e20323637333733.roa
Signing time: Thu 26 Mar 2026 19:33:13 +0000
ROA not before: Thu 26 Mar 2026 19:28:13 +0000
ROA not after: Thu 25 Mar 2027 19:33:13 +0000
asID: 267373
IP address blocks: 2804:4c7c:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.crl
rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 21:43:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:c2:5e:03:45:fc:a5:a1:46:59:ea:2d:db:78:fe:88:62:c1:47:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67E390BE3E2214C4FBBADD091C55EEBAE671D882
Validity
Not Before: Mar 26 19:28:13 2026 GMT
Not After : Mar 25 19:33:13 2027 GMT
Subject: CN=BF5F6A015BBEF394E9740D3B0276D2EDCC58B8F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:04:86:27:b9:db:34:a7:23:6b:4a:c4:87:a4:
74:85:4e:a7:ec:da:75:78:e8:f6:e6:2c:77:66:ae:
93:01:d2:63:6b:4a:67:ca:8c:d0:7b:86:42:2e:41:
8a:77:30:20:d9:ed:61:d7:eb:b0:a8:19:d7:33:b2:
3e:3e:ae:f3:09:25:ac:1d:6e:57:a8:4b:37:e9:fe:
b8:3e:f3:88:7d:41:c2:23:f5:4e:f9:86:b2:76:5a:
08:2c:5d:66:f3:f8:11:4d:58:0e:8d:f2:9f:6d:62:
da:f7:c7:0e:a5:4c:16:f7:3c:37:66:a6:60:13:6e:
81:38:50:cf:2e:b5:34:cc:40:1e:69:0a:ba:7b:a9:
50:1d:33:c7:f4:69:95:ac:98:2c:82:05:93:9f:f3:
d3:98:5e:56:15:e3:36:12:d1:c5:e2:5f:eb:64:97:
e5:66:bf:83:4e:29:38:c3:d1:bd:8e:0f:37:01:38:
a2:01:a6:65:82:d1:8c:ff:f0:7c:fd:54:ef:31:35:
00:1a:f3:77:88:0a:ef:cd:2c:41:7e:19:c9:2f:4e:
d9:6d:9d:ed:88:31:1d:6c:60:9e:54:c8:79:d8:bc:
18:ff:a9:4f:e8:ec:05:b1:a8:f8:20:a5:e8:fa:f1:
7b:1a:a5:c9:2b:eb:d6:88:dd:99:22:d9:7d:28:20:
21:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:5F:6A:01:5B:BE:F3:94:E9:74:0D:3B:02:76:D2:ED:CC:58:B8:F3
X509v3 Authority Key Identifier:
keyid:67:E3:90:BE:3E:22:14:C4:FB:BA:DD:09:1C:55:EE:BA:E6:71:D8:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/323830343a346337633a383030303a3a2f33332d3333203d3e20323637333733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4c7c:8000::/33
Signature Algorithm: sha256WithRSAEncryption
28:0c:d1:cb:bf:e1:27:6f:b5:23:3f:82:7f:3c:db:eb:e1:93:
7b:bf:e5:00:43:10:a0:4f:8d:e6:00:38:fa:42:a7:ef:d4:5c:
5c:7e:03:51:be:cf:44:b1:51:9e:aa:ea:9c:56:08:b9:e0:28:
ab:1a:c2:13:b3:9a:44:75:58:d9:90:6d:73:d5:2f:c1:f6:7a:
bb:f4:b5:64:af:d6:a5:a8:ad:0c:e1:51:42:25:c6:c6:c8:e0:
d1:72:11:6c:36:49:82:60:4e:ba:49:16:cb:80:bc:f2:5e:3c:
18:59:b0:fc:8c:37:5c:b4:d6:80:f2:13:2b:93:56:fc:43:23:
bf:dc:cd:54:13:03:18:9a:32:2c:27:7f:78:39:de:d8:f4:c4:
46:1d:53:54:7f:6f:98:a4:d5:c3:a8:b0:78:c0:9c:80:d1:88:
09:c2:a6:9b:86:05:65:b4:46:d3:e1:15:24:4f:fd:d6:ca:a5:
93:4d:22:05:61:27:bf:e8:fa:9f:9f:d2:ee:14:02:08:d7:34:
75:56:c7:b8:47:13:04:6a:79:d8:97:c8:ef:33:8f:4a:8d:a7:
52:53:4b:77:08:ce:60:d8:20:bc:e4:0c:5e:8c:06:6f:88:5d:
1a:b9:ba:89:68:15:ad:10:9a:8c:86:bf:68:34:9b:50:9f:a8:
cb:e2:5c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:46:26 2026 by rpki-client