
$ rpki-client -vvf rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/323830343a346337633a3a2f33332d3333203d3e20323637333733.roa
File: 323830343a346337633a3a2f33332d3333203d3e20323637333733.roa (raw, json)
Hash identifier: i+wympsFZ7DTbQCGlqvgvPRqwylAw4y3i5s6eLWj2lA=
Subject key identifier: FA:C3:12:F8:DA:2D:92:E4:38:C9:5D:BC:CA:2D:5D:85:ED:C9:FB:68
Certificate issuer: /CN=67E390BE3E2214C4FBBADD091C55EEBAE671D882
Certificate serial: 0ECE362714C004AB96528962EDE55BADCF0C8986
Authority key identifier: 67:E3:90:BE:3E:22:14:C4:FB:BA:DD:09:1C:55:EE:BA:E6:71:D8:82
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/323830343a346337633a3a2f33332d3333203d3e20323637333733.roa
Signing time: Thu 26 Mar 2026 19:33:11 +0000
ROA not before: Thu 26 Mar 2026 19:28:11 +0000
ROA not after: Thu 25 Mar 2027 19:33:11 +0000
asID: 267373
IP address blocks: 2804:4c7c::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.crl
rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 21:43:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:ce:36:27:14:c0:04:ab:96:52:89:62:ed:e5:5b:ad:cf:0c:89:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67E390BE3E2214C4FBBADD091C55EEBAE671D882
Validity
Not Before: Mar 26 19:28:11 2026 GMT
Not After : Mar 25 19:33:11 2027 GMT
Subject: CN=FAC312F8DA2D92E438C95DBCCA2D5D85EDC9FB68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:22:af:cd:96:c3:64:ad:86:2f:22:aa:a2:5e:
5f:0b:0a:d3:36:41:ad:a4:2f:4e:2e:69:10:7a:f3:
d2:46:8a:24:23:46:6a:ec:26:80:42:bb:8e:8a:5c:
4c:10:f7:ba:2e:93:6b:ee:f1:34:27:3f:54:12:16:
6b:70:aa:dc:fa:2f:5d:2c:ec:54:60:c6:84:8e:62:
80:1c:e7:cc:9e:29:7b:5c:d9:3d:d5:af:f2:78:a5:
fe:20:e2:21:c6:27:56:88:d2:0e:a0:c9:d3:a6:63:
93:b4:87:c8:77:38:50:2e:7f:d2:2e:ed:ad:a1:be:
75:7b:eb:b5:ed:84:e3:a2:06:01:5f:4c:fb:86:7f:
ac:3d:84:f5:de:bc:e9:13:29:21:fe:3e:9a:6c:72:
16:0d:5a:52:39:ae:0b:f5:bd:94:2d:62:1d:26:6b:
04:41:77:95:47:7f:bb:c1:87:be:a0:8d:65:ef:0d:
ff:bd:00:7c:5c:bc:b2:fb:a4:23:a8:45:bb:f1:90:
90:7a:c1:dc:1d:bd:49:f6:ae:b7:00:67:23:03:aa:
15:2e:52:c7:bd:29:e6:3e:ef:ad:a8:cd:fb:8f:13:
16:c0:ae:07:f4:6c:0a:b2:ac:33:6a:13:cd:aa:10:
3c:67:d3:7a:82:d0:5f:57:df:0b:47:90:20:33:3e:
1b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C3:12:F8:DA:2D:92:E4:38:C9:5D:BC:CA:2D:5D:85:ED:C9:FB:68
X509v3 Authority Key Identifier:
keyid:67:E3:90:BE:3E:22:14:C4:FB:BA:DD:09:1C:55:EE:BA:E6:71:D8:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/323830343a346337633a3a2f33332d3333203d3e20323637333733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4c7c::/33
Signature Algorithm: sha256WithRSAEncryption
67:30:c4:43:a7:2a:e3:84:81:32:e6:c1:ae:56:09:66:b9:f8:
d3:51:24:ff:d9:5c:64:db:41:8f:ac:c7:3d:6e:3e:a5:d4:a5:
91:d8:26:cb:0a:90:f4:ec:b5:0e:72:55:bf:7f:bc:4f:f0:30:
e6:42:2f:6a:6a:4c:21:a6:96:1c:61:dc:ab:34:98:c5:32:56:
cd:34:a4:fe:9b:8b:ca:66:5d:9e:dd:af:3f:e7:fa:82:28:e2:
32:ce:26:cb:fa:24:bd:61:29:cf:aa:03:ef:ea:56:5c:7b:2b:
de:3b:db:af:00:a8:86:03:a8:69:a0:6a:4e:30:37:75:59:5b:
f5:13:46:48:39:0e:d9:a1:0d:66:5d:af:77:5b:ae:c1:de:59:
47:62:00:60:ea:ea:be:42:bc:17:3b:ce:14:fb:24:b9:9d:db:
02:bf:ad:e2:b4:e3:99:a1:e3:96:e9:ad:8a:5c:93:89:42:ff:
99:c9:d7:18:d3:a5:c1:b9:da:34:4f:5a:45:22:ed:70:06:bd:
fa:29:1e:42:cb:02:a1:4b:84:33:34:46:5d:d1:52:5a:5e:52:
8d:08:da:f9:71:3f:21:19:22:7b:78:06:55:1b:c0:e0:ab:df:
3e:01:bd:75:e6:70:0b:97:76:39:67:c1:2d:85:9a:cf:71:da:
4d:76:3a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:43:40 2026 by rpki-client