
$ rpki-client -vvf rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/323830343a336265343a3a2f33322d3438203d3e20323636313738.roa
File: 323830343a336265343a3a2f33322d3438203d3e20323636313738.roa (raw, json)
Hash identifier: pbTRcYqu0xp7wJ3/QTzOzuX2E0FB18LAxEe5+ZoQvPI=
Subject key identifier: 5E:D3:F5:5A:9E:6B:0F:99:F4:F4:43:78:45:6E:78:39:F4:06:C8:9B
Certificate issuer: /CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90
Certificate serial: 39E88DE703F3E858CEBAC52DE7723F58DC5483F4
Authority key identifier: 8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer
Subject info access: rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/323830343a336265343a3a2f33322d3438203d3e20323636313738.roa
Signing time: Sat 21 Mar 2026 21:20:13 +0000
ROA not before: Sat 21 Mar 2026 21:15:13 +0000
ROA not after: Sat 20 Mar 2027 21:20:13 +0000
asID: 266178
IP address blocks: 2804:3be4::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl
rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 07:16:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:e8:8d:e7:03:f3:e8:58:ce:ba:c5:2d:e7:72:3f:58:dc:54:83:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90
Validity
Not Before: Mar 21 21:15:13 2026 GMT
Not After : Mar 20 21:20:13 2027 GMT
Subject: CN=5ED3F55A9E6B0F99F4F44378456E7839F406C89B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8f:a0:fd:bc:ed:da:9e:b6:98:ed:5e:e0:c7:
6b:45:4a:f2:70:70:4d:44:f0:e8:66:86:bf:09:46:
a0:df:81:d8:8e:e2:0d:b4:85:e7:6f:46:65:c4:9e:
3e:b1:0c:0e:fe:44:33:6c:16:ea:09:3c:b3:90:32:
26:4c:51:ce:ec:3e:87:b7:14:a6:61:e2:6b:ce:d3:
39:f4:79:c6:48:4d:f8:bb:2d:d5:52:7e:aa:58:19:
f3:99:6a:59:25:90:88:76:5a:98:59:e0:e7:8c:c7:
82:fe:08:5f:3a:30:ab:6b:d4:d9:f2:06:d3:84:01:
31:f8:39:fa:dd:bf:54:04:ec:f3:86:36:f9:3b:57:
d0:8c:a7:40:25:88:3b:2f:a3:90:14:9e:2c:9c:23:
f9:cf:84:59:4e:f3:22:79:ac:5d:64:6c:2c:8d:e0:
b5:6e:fc:1f:1f:13:ab:b4:67:3e:9b:19:a1:40:76:
79:5a:21:42:e7:3a:f4:4e:20:7a:e8:15:18:3b:44:
c6:89:85:82:61:84:63:63:25:0c:ac:fd:9f:60:64:
80:fd:21:6f:2b:4e:74:be:8e:2a:8b:10:7a:8a:20:
1c:75:d5:8d:dd:f3:83:fb:b8:0a:cc:f0:74:a7:d6:
9c:65:c1:ee:f7:18:28:91:99:cf:68:a5:0e:4d:c6:
e9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D3:F5:5A:9E:6B:0F:99:F4:F4:43:78:45:6E:78:39:F4:06:C8:9B
X509v3 Authority Key Identifier:
keyid:8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/323830343a336265343a3a2f33322d3438203d3e20323636313738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3be4::/32
Signature Algorithm: sha256WithRSAEncryption
99:d1:1e:0f:b8:21:d7:6e:e2:5b:11:23:77:ee:c2:69:96:ae:
d6:13:8b:86:8a:ae:17:cf:be:ad:a3:58:a4:a9:33:65:af:41:
66:69:97:9d:ab:33:7d:2d:c2:aa:44:50:9d:ea:8c:71:e5:c6:
15:c4:bc:89:d3:96:25:2f:7e:0f:11:4c:6a:06:b9:80:95:43:
ad:95:1c:38:a1:8f:36:64:6e:b9:ef:91:a7:28:36:14:ad:b6:
0b:10:e5:d0:2c:ff:64:dd:af:e9:de:6b:71:41:85:2e:bb:19:
a3:2a:86:b4:e9:05:67:83:42:37:2a:58:92:74:5b:85:b1:ec:
c5:ef:69:44:35:88:4e:26:2e:18:13:88:cb:36:98:9e:fc:2b:
11:83:77:eb:7b:03:85:79:b9:78:8a:bf:2e:0c:a4:4f:c4:a6:
84:f6:ea:c5:f4:84:2e:57:c0:9c:75:40:f9:e8:3b:c2:d5:9f:
07:2c:05:a4:e9:81:cc:f5:6c:e7:12:8c:69:d6:46:64:4e:64:
61:40:34:08:28:de:90:77:ba:72:a0:56:1c:5e:0b:05:63:a9:
85:6f:6b:0e:10:94:e2:28:f5:c6:2f:39:01:a1:cc:84:2c:44:
f4:85:64:3f:8e:c8:99:a3:58:ab:17:c7:22:fb:41:3f:8a:e1:
24:41:7e:60
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUOeiN5wPz6FjOusUt53I/WNxUg/QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEJCMjNGQjBGMzhGN0NERTE3ODUyREM2MUJEMjM0RENF
QkMzQkI5MDAeFw0yNjAzMjEyMTE1MTNaFw0yNzAzMjAyMTIwMTNaMDMxMTAvBgNV
BAMTKDVFRDNGNTVBOUU2QjBGOTlGNEY0NDM3ODQ1NkU3ODM5RjQwNkM4OUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/j6D9vO3anraY7V7gx2tFSvJw
cE1E8Ohmhr8JRqDfgdiO4g20hedvRmXEnj6xDA7+RDNsFuoJPLOQMiZMUc7sPoe3
FKZh4mvO0zn0ecZITfi7LdVSfqpYGfOZalklkIh2WphZ4OeMx4L+CF86MKtr1Nny
BtOEATH4Ofrdv1QE7POGNvk7V9CMp0AliDsvo5AUniycI/nPhFlO8yJ5rF1kbCyN
4LVu/B8fE6u0Zz6bGaFAdnlaIULnOvROIHroFRg7RMaJhYJhhGNjJQys/Z9gZID9
IW8rTnS+jiqLEHqKIBx11Y3d84P7uArM8HSn1pxlwe73GCiRmc9opQ5Nxun3AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUXtP1Wp5rD5n09EN4RW54OfQGyJswHwYDVR0j
BBgwFoAUi7I/sPOPfN4XhS3GG9I03OvDu5AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzFFQ2VOYTZKRnJRTk55U1pndVNpODJTejExNGdBNWpSeFFZTTJQb3Ix
cVEvMS84QkIyM0ZCMEYzOEY3Q0RFMTc4NTJEQzYxQkQyMzREQ0VCQzNCQjkwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhCQjIzRkIwRjM4RjdDREUx
Nzg1MkRDNjFCRDIzNERDRUJDM0JCOTAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzMxRUNlTmE2SkZyUU5OeVNaZ3VTaTgyU3oxMTRnQTVqUnhRWU0yUG9yMXFRLzEv
MzIzODMwMzQzYTMzNjI2NTM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM2
MzEzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ75DANBgkqhkiG9w0BAQsFAAOCAQEAmdEeD7gh
127iWxEjd+7CaZau1hOLhoquF8++raNYpKkzZa9BZmmXnaszfS3CqkRQneqMceXG
FcS8idOWJS9+DxFMaga5gJVDrZUcOKGPNmRuue+Rpyg2FK22CxDl0Cz/ZN2v6d5r
cUGFLrsZoyqGtOkFZ4NCNypYknRbhbHsxe9pRDWITiYuGBOIyzaYnvwrEYN363sD
hXm5eIq/LgykT8SmhPbqxfSELlfAnHVA+eg7wtWfBywFpOmBzPVs5xKMadZGZE5k
YUA0CCjekHe6cqBWHF4LBWOphW9rDhCU4ij1xi85AaHMhCxE9IVkP47ImaNYqxfH
IvtBP4rhJEF+YA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:33:05 2026 by rpki-client