
$ rpki-client -vvvf rpki-repo.registro.br/repo/3R887NsyxtjBRp2dX4g67duHi2TUak2CkTftbfpeppks/1/323830343a3534633a3a2f33322d3332203d3e20323632353037.roa
File: 323830343a3534633a3a2f33322d3332203d3e20323632353037.roa (raw, json)
Hash identifier: iMjKuGXqg7InAYm0Tpozf261LFNAF64xh2jKiWON/6g=
Subject key identifier: C1:F8:F9:64:FF:47:AA:44:B2:11:CD:4F:7D:44:A9:8D:A7:D6:A5:8E
Certificate issuer: /CN=3AE3EDD46F605039FDACCAA3132DB6915BB2A8D8
Certificate serial: 393568F81C30287C963936FEB498FB884DE547ED
Authority key identifier: 3A:E3:ED:D4:6F:60:50:39:FD:AC:CA:A3:13:2D:B6:91:5B:B2:A8:D8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AE3EDD46F605039FDACCAA3132DB6915BB2A8D8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3R887NsyxtjBRp2dX4g67duHi2TUak2CkTftbfpeppks/1/323830343a3534633a3a2f33322d3332203d3e20323632353037.roa
Signing time: Mon 14 Sep 2026 11:00:32 +0000
ROA not before: Mon 14 Sep 2026 10:55:32 +0000
ROA not after: Mon 13 Sep 2027 11:00:32 +0000
asID: 262507
IP address blocks: 2804:54c::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3R887NsyxtjBRp2dX4g67duHi2TUak2CkTftbfpeppks/1/3AE3EDD46F605039FDACCAA3132DB6915BB2A8D8.crl
rsync://rpki-repo.registro.br/repo/3R887NsyxtjBRp2dX4g67duHi2TUak2CkTftbfpeppks/1/3AE3EDD46F605039FDACCAA3132DB6915BB2A8D8.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AE3EDD46F605039FDACCAA3132DB6915BB2A8D8.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 13 Oct 2026 18:13:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:35:68:f8:1c:30:28:7c:96:39:36:fe:b4:98:fb:88:4d:e5:47:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3AE3EDD46F605039FDACCAA3132DB6915BB2A8D8
Validity
Not Before: Sep 14 10:55:32 2026 GMT
Not After : Sep 13 11:00:32 2027 GMT
Subject: CN=C1F8F964FF47AA44B211CD4F7D44A98DA7D6A58E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c5:60:0e:33:55:28:b4:6c:f6:f5:35:b5:00:
af:a1:93:d8:f3:99:78:74:bb:8e:2f:97:89:25:51:
f4:c7:00:93:b1:0d:a4:d8:55:52:8e:6b:b3:a1:78:
cb:0f:11:44:b5:16:8e:98:96:9d:ed:ed:cc:4b:09:
f1:11:c8:08:66:e9:41:78:c4:52:03:f5:25:10:fa:
35:4c:84:76:25:b0:04:da:19:41:a3:57:7e:31:f1:
4e:d4:01:c4:ed:ae:ce:84:7c:86:a9:d4:30:a0:67:
d9:92:29:92:81:c1:ff:79:ed:4c:59:d1:6a:4a:a7:
40:e0:e8:0d:76:5a:81:37:31:57:98:1f:62:a5:b1:
9c:ce:3a:65:76:63:61:d9:09:ea:0f:66:5c:d5:31:
b8:69:e6:af:dc:f6:45:82:00:bc:19:87:4b:d3:06:
98:6d:1f:86:2f:b9:72:02:a0:52:f2:bc:b4:b1:ff:
1b:21:1b:8d:22:5c:82:19:25:ad:db:77:c4:25:ec:
67:80:67:d4:95:82:4a:54:7e:6e:a1:ee:69:34:b1:
14:7d:c0:5a:ad:b1:5d:a5:df:cb:10:25:52:7b:f1:
0d:c6:0a:2e:e0:7c:fb:52:7c:60:7c:2f:f2:8c:c7:
ab:9f:1f:71:ec:5f:f8:50:34:6d:6d:e3:5b:0a:d7:
4a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F8:F9:64:FF:47:AA:44:B2:11:CD:4F:7D:44:A9:8D:A7:D6:A5:8E
X509v3 Authority Key Identifier:
keyid:3A:E3:ED:D4:6F:60:50:39:FD:AC:CA:A3:13:2D:B6:91:5B:B2:A8:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3R887NsyxtjBRp2dX4g67duHi2TUak2CkTftbfpeppks/1/3AE3EDD46F605039FDACCAA3132DB6915BB2A8D8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AE3EDD46F605039FDACCAA3132DB6915BB2A8D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3R887NsyxtjBRp2dX4g67duHi2TUak2CkTftbfpeppks/1/323830343a3534633a3a2f33322d3332203d3e20323632353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:54c::/32
Signature Algorithm: sha256WithRSAEncryption
40:e2:90:02:76:d0:0b:40:82:e3:49:55:8f:88:8d:53:03:fa:
98:16:0e:59:d5:52:9f:dc:8e:7c:40:a6:02:42:88:66:55:7e:
2c:a1:d3:91:b5:35:9c:ae:42:a2:c9:68:41:11:02:db:66:66:
0d:3e:31:e2:46:97:a6:0e:95:ce:a8:ec:53:25:ca:fd:8e:33:
f7:1a:17:da:a4:58:fd:f8:dc:5d:31:0d:7a:b3:38:c8:7d:be:
9f:21:c3:1b:f9:d7:8b:3d:4f:da:6b:f5:c9:b9:0d:34:77:ca:
b0:cd:28:39:68:67:33:3b:42:7c:ce:ed:20:7c:ed:5f:12:f2:
b0:e0:6d:cc:a7:1e:5d:ed:22:a7:1d:d9:7b:97:1c:89:1d:dc:
4d:80:71:96:22:28:16:15:b1:f6:3e:cf:1a:15:4d:a1:1e:ae:
c8:83:cb:0f:3f:e0:6f:2f:58:cd:b8:19:e2:a6:10:52:c7:86:
34:bf:91:74:3d:b3:7b:f9:a1:1f:ee:41:23:58:a5:8a:9c:a5:
e6:80:8e:6f:c2:f2:c7:e5:17:ea:ec:cc:f0:7e:2d:9d:9f:83:
34:5e:b6:02:37:db:dc:21:cd:b1:14:31:a6:61:9e:0d:13:08:
33:1e:da:99:39:91:36:fe:53:f8:95:7a:34:3c:34:91:07:40:
d6:15:74:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:52:57 2026 by rpki-client