
$ rpki-client -vvvf rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/323830343a333336303a3a2f33322d3438203d3e20323632373235.roa
File: 323830343a333336303a3a2f33322d3438203d3e20323632373235.roa (raw, json)
Hash identifier: zxp1fU7G/b7wgO5rS8TqkZW42npO48Ojv/0usTqYZnk=
Subject key identifier: D1:D0:3A:A9:84:14:2D:B9:B3:D0:49:05:A5:BA:DF:44:26:20:77:1E
Certificate issuer: /CN=33D99D98BFD993CB7DE4284CD0B834BDAA1FB768
Certificate serial: 4FAD41B73808BC178E712137724E156EDDC78B4F
Authority key identifier: 33:D9:9D:98:BF:D9:93:CB:7D:E4:28:4C:D0:B8:34:BD:AA:1F:B7:68
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/323830343a333336303a3a2f33322d3438203d3e20323632373235.roa
Signing time: Tue 15 Sep 2026 16:46:46 +0000
ROA not before: Tue 15 Sep 2026 16:41:46 +0000
ROA not after: Tue 14 Sep 2027 16:46:46 +0000
asID: 262725
IP address blocks: 2804:3360::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.crl
rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 13 Oct 2026 18:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:ad:41:b7:38:08:bc:17:8e:71:21:37:72:4e:15:6e:dd:c7:8b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33D99D98BFD993CB7DE4284CD0B834BDAA1FB768
Validity
Not Before: Sep 15 16:41:46 2026 GMT
Not After : Sep 14 16:46:46 2027 GMT
Subject: CN=D1D03AA984142DB9B3D04905A5BADF442620771E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:18:1d:bf:e9:f9:8c:00:39:a5:33:f4:02:9b:
15:1d:04:da:b9:fb:2a:13:0c:bf:41:3e:11:bf:ca:
15:4a:e7:ca:1b:d5:69:db:ed:76:99:07:f7:d4:cb:
f6:0b:a2:6a:40:5d:2f:fe:b8:83:d2:c7:42:8b:44:
f9:dc:cf:10:ed:8e:c5:a2:e4:9a:62:ad:1c:d7:c8:
34:b0:b0:f1:78:7e:06:39:b3:c9:d0:26:5e:55:28:
44:7e:c4:f9:3f:18:6f:12:5e:0a:8e:0f:62:e7:85:
ec:fd:d0:c6:42:1f:c1:35:e7:3e:18:61:e1:5e:68:
f8:a5:bb:44:25:56:9f:c7:08:df:f2:fd:c0:e8:3a:
e2:2a:ac:81:1e:90:51:b2:78:46:19:67:3e:d0:3f:
25:f1:6f:15:84:6e:cf:72:93:50:47:12:52:fb:6d:
bc:ab:6a:4d:54:dc:95:68:eb:9d:1b:90:5b:e2:da:
e8:9e:63:63:ce:07:28:ee:63:67:49:54:96:b8:ec:
c7:d6:20:c1:51:2d:0e:40:8f:1b:bb:d0:fa:04:42:
a0:4e:f0:b9:25:e8:4d:9e:d3:a6:23:39:be:46:7d:
6b:ad:65:60:f3:b8:b7:14:67:85:13:18:33:9d:16:
57:f6:98:90:67:17:cd:fb:dd:a1:27:29:6c:5c:e0:
d6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D0:3A:A9:84:14:2D:B9:B3:D0:49:05:A5:BA:DF:44:26:20:77:1E
X509v3 Authority Key Identifier:
keyid:33:D9:9D:98:BF:D9:93:CB:7D:E4:28:4C:D0:B8:34:BD:AA:1F:B7:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/323830343a333336303a3a2f33322d3438203d3e20323632373235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3360::/32
Signature Algorithm: sha256WithRSAEncryption
2e:ec:fc:00:85:7c:4b:c2:fa:2d:33:82:e7:05:f7:6f:42:b9:
94:64:00:dd:0a:b1:ad:30:54:f5:6a:3b:0a:4e:36:3f:da:f0:
0b:93:8c:9b:56:b4:4b:55:c5:e5:2a:d5:cd:fe:c8:86:33:52:
76:14:20:90:d5:a5:42:aa:69:f1:99:58:8c:38:84:77:d5:d2:
c6:05:1f:7a:1a:b1:4e:b9:2a:9e:96:40:78:ce:7a:4a:da:dd:
0b:4d:46:29:0d:3e:b4:ab:97:33:15:6f:ea:6d:84:80:7a:70:
6d:d0:1b:97:fa:40:aa:be:c8:e7:6a:16:55:d5:16:4e:6d:cc:
bd:f1:6f:de:e9:3a:9c:34:e3:ee:fc:05:4a:89:4c:4c:be:87:
a5:52:dd:b4:47:22:5d:78:70:21:a8:23:4f:f7:bf:48:67:91:
79:3e:4a:e4:7e:a6:a5:ff:c1:a3:23:0c:86:1d:3f:7b:a9:7b:
c1:03:60:9b:e9:ae:b3:29:af:32:19:a8:44:98:54:ae:3b:09:
0e:d4:fc:1b:c0:9b:f6:c7:79:5d:1d:93:1f:90:4c:c0:21:76:
50:b4:1c:e3:eb:ab:9a:ea:56:69:3e:d3:97:5f:3a:35:9f:4c:
74:f5:73:5d:78:4a:e4:55:b3:9a:8e:49:35:b6:c0:17:b0:9b:
1d:30:46:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 09:28:59 2026 by rpki-client