
$ rpki-client -vvf rpki-repo.registro.br/repo/3R887NsyxtjBRp2dX4g67duHi2TUak2CkTftbfpeppks/1/323830343a3534633a3a2f33322d313238203d3e20323632353037.roa
File: 323830343a3534633a3a2f33322d313238203d3e20323632353037.roa (raw, json)
Hash identifier: 26Q9UM1CuDv2/YqrUpygKEhJYm/Pl+HmO07pfOy0mag=
Subject key identifier: 00:CF:14:86:0F:81:21:ED:D0:0F:98:1E:09:AD:06:6A:D1:5D:44:C0
Certificate issuer: /CN=3AE3EDD46F605039FDACCAA3132DB6915BB2A8D8
Certificate serial: 327D1B59D0FEB30773865E190EB9C9C93F642558
Authority key identifier: 3A:E3:ED:D4:6F:60:50:39:FD:AC:CA:A3:13:2D:B6:91:5B:B2:A8:D8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AE3EDD46F605039FDACCAA3132DB6915BB2A8D8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3R887NsyxtjBRp2dX4g67duHi2TUak2CkTftbfpeppks/1/323830343a3534633a3a2f33322d313238203d3e20323632353037.roa
Signing time: Thu 12 Mar 2026 00:16:23 +0000
ROA not before: Thu 12 Mar 2026 00:11:23 +0000
ROA not after: Thu 11 Mar 2027 00:16:23 +0000
asID: 262507
IP address blocks: 2804:54c::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3R887NsyxtjBRp2dX4g67duHi2TUak2CkTftbfpeppks/1/3AE3EDD46F605039FDACCAA3132DB6915BB2A8D8.crl
rsync://rpki-repo.registro.br/repo/3R887NsyxtjBRp2dX4g67duHi2TUak2CkTftbfpeppks/1/3AE3EDD46F605039FDACCAA3132DB6915BB2A8D8.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AE3EDD46F605039FDACCAA3132DB6915BB2A8D8.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 22:36:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:7d:1b:59:d0:fe:b3:07:73:86:5e:19:0e:b9:c9:c9:3f:64:25:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3AE3EDD46F605039FDACCAA3132DB6915BB2A8D8
Validity
Not Before: Mar 12 00:11:23 2026 GMT
Not After : Mar 11 00:16:23 2027 GMT
Subject: CN=00CF14860F8121EDD00F981E09AD066AD15D44C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b2:46:30:37:78:3b:d4:5e:40:d3:e7:71:04:
8b:f7:04:30:fb:8f:c7:17:bb:7b:e5:b3:9a:7a:51:
3e:14:38:cd:50:81:6b:dd:29:2b:b1:df:21:11:f5:
d0:67:f3:f5:14:54:ce:4d:b9:92:69:f0:50:5d:08:
d3:a2:4d:ef:e5:3c:6e:80:a9:b2:cf:e3:89:da:c6:
53:68:bf:3c:0a:27:c5:dc:b8:c7:bc:2c:e5:0e:50:
d5:71:45:a4:3c:33:bb:37:1c:ba:b2:db:5e:c0:ab:
8b:5f:92:90:78:5f:28:02:cb:70:d6:ee:f0:10:dd:
bf:c1:b3:2f:12:e8:41:1b:cc:78:73:1b:c9:c2:2d:
ca:b5:23:4e:d3:38:22:49:3b:5b:5d:d7:3c:75:61:
ce:aa:41:b8:53:06:79:3b:0d:7d:09:f4:1e:e7:68:
9b:15:2b:a9:ff:42:39:1b:d5:f5:ba:b6:0e:be:2d:
23:d0:62:00:08:28:13:bb:49:18:9b:a6:9a:d8:54:
06:2a:47:79:eb:ce:5c:07:98:67:10:34:90:17:bf:
b9:11:bf:46:b7:28:92:43:f8:39:79:ba:05:54:8f:
a9:b6:c2:44:da:43:0a:82:1e:c7:8f:8a:35:5b:f3:
eb:05:37:46:5e:41:ea:84:90:d7:2a:7c:8f:3c:a2:
47:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:CF:14:86:0F:81:21:ED:D0:0F:98:1E:09:AD:06:6A:D1:5D:44:C0
X509v3 Authority Key Identifier:
keyid:3A:E3:ED:D4:6F:60:50:39:FD:AC:CA:A3:13:2D:B6:91:5B:B2:A8:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3R887NsyxtjBRp2dX4g67duHi2TUak2CkTftbfpeppks/1/3AE3EDD46F605039FDACCAA3132DB6915BB2A8D8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AE3EDD46F605039FDACCAA3132DB6915BB2A8D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3R887NsyxtjBRp2dX4g67duHi2TUak2CkTftbfpeppks/1/323830343a3534633a3a2f33322d313238203d3e20323632353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:54c::/32
Signature Algorithm: sha256WithRSAEncryption
5f:2b:ae:63:e1:cf:2b:e5:ec:80:b2:ce:21:d0:8f:9f:62:9d:
43:12:83:ad:7a:a4:af:62:f2:eb:05:1e:7b:65:c7:a1:c4:e5:
1a:9f:d2:7c:40:a6:55:8f:61:d4:bb:57:86:94:fb:17:6a:6c:
55:56:e2:76:6b:40:a2:18:94:f1:5b:4b:c5:a9:6e:af:52:30:
5b:ee:4b:0d:53:4b:6d:49:11:da:54:da:49:46:16:eb:cc:5d:
1c:c9:5e:42:63:cc:ac:91:7a:b5:81:ad:7a:04:e5:62:13:04:
1f:e6:df:fe:c3:a9:a5:55:2a:a0:8a:1f:a6:27:e8:1b:39:26:
9c:64:dd:a2:68:11:96:1f:f2:7c:c8:07:fa:99:9b:7e:3e:97:
e9:a6:82:94:e2:23:2e:c9:bb:21:ce:f7:ac:8b:13:75:e3:e4:
93:c0:08:4f:96:d0:92:1d:08:f3:5c:09:cc:97:af:8a:b0:c5:
06:1e:e3:2f:6a:26:be:fb:9c:d1:46:75:ab:62:5c:87:f8:21:
8d:0a:d3:18:15:6f:b3:05:e5:56:4b:0f:97:2e:8f:2e:8b:f1:
13:2e:1c:e2:3b:c6:56:7e:18:99:75:ca:f4:a0:d8:1f:81:37:
aa:ea:53:2c:99:5c:42:e1:26:f9:e3:ab:e7:5d:a8:02:61:a8:
7e:ce:ed:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:16:44 2026 by rpki-client