
$ rpki-client -vvvf rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/323830343a346337633a3a2f33332d3334203d3e20323637333733.roa
File: 323830343a346337633a3a2f33332d3334203d3e20323637333733.roa (raw, json)
Hash identifier: Zq6WuVRUO3mpcJh9xzsS35zS5Jo2QHSSiG0D9YUl+/0=
Subject key identifier: 03:7B:A5:05:16:EA:B6:3E:39:2D:91:14:53:99:44:79:1F:3A:E1:12
Certificate issuer: /CN=02717EC1E65FB47AF994C220A5D781D4760D1309
Certificate serial: 72D21F70C6E04C58AD6BFAF2D8C1F96127D95493
Authority key identifier: 02:71:7E:C1:E6:5F:B4:7A:F9:94:C2:20:A5:D7:81:D4:76:0D:13:09
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02717EC1E65FB47AF994C220A5D781D4760D1309.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/323830343a346337633a3a2f33332d3334203d3e20323637333733.roa
Signing time: Tue 27 Oct 2026 14:33:19 +0000
ROA not before: Tue 27 Oct 2026 14:28:19 +0000
ROA not after: Tue 26 Oct 2027 14:33:19 +0000
asID: 267373
IP address blocks: 2804:4c7c::/33 maxlen: 34
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/02717EC1E65FB47AF994C220A5D781D4760D1309.crl
rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/02717EC1E65FB47AF994C220A5D781D4760D1309.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02717EC1E65FB47AF994C220A5D781D4760D1309.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Nov 2026 00:05:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:d2:1f:70:c6:e0:4c:58:ad:6b:fa:f2:d8:c1:f9:61:27:d9:54:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02717EC1E65FB47AF994C220A5D781D4760D1309
Validity
Not Before: Oct 27 14:28:19 2026 GMT
Not After : Oct 26 14:33:19 2027 GMT
Subject: CN=037BA50516EAB63E392D9114539944791F3AE112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5e:5f:09:0a:3e:7b:db:72:32:18:a5:eb:b7:
2a:47:8d:7e:71:f4:5b:98:d1:58:97:fd:97:0e:78:
97:fe:77:8d:76:14:ea:98:ec:46:bc:34:30:b4:83:
46:06:b3:b4:6e:89:3d:9a:fe:ac:00:5c:8c:f6:88:
a9:d3:78:cb:a9:34:52:11:6d:6a:03:aa:7a:be:f1:
b2:13:99:c6:76:43:44:43:d6:e6:bf:66:ae:16:b0:
0b:49:fb:38:a7:64:e2:14:57:43:a5:3a:42:07:c4:
ad:57:aa:50:29:22:77:17:b4:61:0f:e1:87:66:3f:
54:6c:c6:f4:e1:52:ea:a1:67:2f:f4:21:23:46:33:
7a:b4:ff:9f:39:50:ac:f3:89:62:bd:ab:eb:b8:89:
f8:b5:cd:db:7c:2c:79:21:c6:07:f3:60:a0:ed:a0:
45:1a:7f:85:de:04:80:b5:2d:ec:d5:b6:83:91:55:
a0:fb:25:fe:18:59:d8:da:dc:3b:78:26:d3:eb:c9:
45:d2:91:7b:eb:b3:60:be:a6:22:10:14:77:68:10:
35:2f:4f:e8:40:d0:dc:0e:26:1c:c7:30:89:33:87:
5f:70:52:c8:5a:9b:a0:62:cd:6a:9c:b1:9b:d3:e3:
a5:3d:45:cc:68:d7:cd:3e:d2:1b:46:e2:85:13:18:
0b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:7B:A5:05:16:EA:B6:3E:39:2D:91:14:53:99:44:79:1F:3A:E1:12
X509v3 Authority Key Identifier:
keyid:02:71:7E:C1:E6:5F:B4:7A:F9:94:C2:20:A5:D7:81:D4:76:0D:13:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/02717EC1E65FB47AF994C220A5D781D4760D1309.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02717EC1E65FB47AF994C220A5D781D4760D1309.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/323830343a346337633a3a2f33332d3334203d3e20323637333733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4c7c::/33
Signature Algorithm: sha256WithRSAEncryption
4f:24:65:ea:de:c7:69:95:97:f4:bd:e1:44:4e:a2:6e:a3:72:
bf:ca:03:e0:b7:d9:6f:9e:52:96:77:8e:bf:38:b2:dc:95:ce:
3c:ad:d7:47:ac:9b:ea:6a:3e:e6:7c:4e:1e:b0:13:65:f0:fe:
84:e6:64:d3:1b:e8:fe:5d:a1:36:92:d1:2b:3c:7d:6b:bc:c5:
e2:ee:fa:0b:22:ac:19:37:95:9b:d4:5c:b1:19:2d:60:91:5f:
88:5c:c6:0c:f1:c6:62:96:91:88:8c:d6:d8:3e:91:90:5f:f6:
72:81:d3:5f:3f:bf:44:58:b8:66:9d:09:98:73:d9:5f:ad:b8:
37:77:bc:88:11:f3:4e:cb:be:04:a3:a9:6d:fc:ca:d1:50:ad:
9e:19:24:eb:73:29:a6:9d:93:4e:d9:70:f8:61:cb:54:a1:46:
69:87:9f:2f:8a:0d:85:a9:e9:5d:ee:4a:d8:49:c8:25:ca:b4:
a7:1b:6b:72:4e:e7:1b:9e:b4:1b:f7:4c:6a:b6:60:22:ed:73:
0c:27:71:dd:fa:25:33:1d:45:19:63:8f:86:b4:1d:af:8c:38:
5d:bb:19:d1:c8:bf:93:5f:7a:f7:94:ef:14:18:04:a8:66:27:
72:e8:9f:9a:aa:b7:ad:ae:9d:9e:b7:7b:e5:1a:25:86:49:f9:
0c:b2:5b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 07:24:08 2026 by rpki-client