
$ rpki-client -vvvf rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/323830343a3462633a3a2f33322d3438203d3e20323632343632.roa
File: 323830343a3462633a3a2f33322d3438203d3e20323632343632.roa (raw, json)
Hash identifier: +QIg7xWQClfmJ0xB8MTxUfh7x0XKQIed7NXD9OnVhFE=
Subject key identifier: C9:B1:F6:AE:08:1C:90:C6:E4:BD:52:51:DC:A6:E7:08:ED:99:07:6F
Certificate issuer: /CN=DD57F54CD0114823ABB5B5203F91EF5EEC26B06F
Certificate serial: 52B33BC7DACD6D9E889007428A98B2AF177217B3
Authority key identifier: DD:57:F5:4C:D0:11:48:23:AB:B5:B5:20:3F:91:EF:5E:EC:26:B0:6F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/323830343a3462633a3a2f33322d3438203d3e20323632343632.roa
Signing time: Wed 26 Aug 2026 11:58:41 +0000
ROA not before: Wed 26 Aug 2026 11:53:41 +0000
ROA not after: Wed 25 Aug 2027 11:58:41 +0000
asID: 262462
IP address blocks: 2804:4bc::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.crl
rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Oct 2026 08:10:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:b3:3b:c7:da:cd:6d:9e:88:90:07:42:8a:98:b2:af:17:72:17:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD57F54CD0114823ABB5B5203F91EF5EEC26B06F
Validity
Not Before: Aug 26 11:53:41 2026 GMT
Not After : Aug 25 11:58:41 2027 GMT
Subject: CN=C9B1F6AE081C90C6E4BD5251DCA6E708ED99076F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c5:77:c4:76:e7:85:93:9b:77:3e:cd:a4:0b:
a7:2b:b3:59:a6:75:3e:f2:3f:c2:9b:e2:6d:cc:73:
10:69:6f:be:9d:ac:40:9a:c3:7c:1c:74:9e:89:37:
ef:75:4e:99:c2:89:b8:eb:a0:c7:aa:f8:51:03:c9:
0b:d0:2a:34:32:bf:d9:71:e6:62:aa:4f:ac:b5:8a:
b4:67:c7:1d:e0:2d:3a:cd:7a:21:4a:dd:74:73:60:
e2:f4:b7:68:52:66:c1:7c:7f:d6:de:ec:9b:ce:5e:
10:a8:d0:2b:9a:ef:5e:76:25:00:81:91:de:1f:eb:
58:8d:b8:84:f1:39:99:f0:53:df:36:3a:40:fa:61:
23:a1:fd:ae:23:9c:73:9d:6e:b2:36:76:89:1e:d2:
70:21:15:fe:03:6e:97:bf:e0:75:d6:3f:86:7a:31:
56:89:88:3d:ae:c3:4c:e2:7f:da:ed:bf:06:7b:ac:
2f:77:3b:f8:46:c6:e4:23:3b:f1:1a:6f:39:f8:0d:
fa:17:b7:f3:35:52:75:b8:14:23:a5:6f:58:7d:e9:
96:20:03:41:22:2e:52:41:bd:f0:18:e3:db:86:bc:
46:26:ce:85:63:95:65:52:40:ea:25:e5:59:df:c4:
2e:9d:6c:cc:5d:41:82:98:ce:cc:d8:67:83:c4:d7:
73:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B1:F6:AE:08:1C:90:C6:E4:BD:52:51:DC:A6:E7:08:ED:99:07:6F
X509v3 Authority Key Identifier:
keyid:DD:57:F5:4C:D0:11:48:23:AB:B5:B5:20:3F:91:EF:5E:EC:26:B0:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/323830343a3462633a3a2f33322d3438203d3e20323632343632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4bc::/32
Signature Algorithm: sha256WithRSAEncryption
68:c7:36:4c:91:5e:7c:ea:c1:09:11:8f:cc:6e:7a:0b:6f:4d:
89:f3:ce:43:1d:91:76:7a:75:14:c3:95:02:6f:2a:fb:50:48:
f2:28:8c:3b:e6:c4:04:da:7e:50:96:39:e6:17:2f:95:ac:fc:
9c:12:f7:e9:b6:d6:28:66:68:c3:fe:4c:55:41:a9:07:1f:d6:
c2:95:53:60:0b:fe:66:27:59:97:f1:4c:d0:df:cd:d8:7f:38:
9b:87:02:50:f6:37:08:2d:43:62:ee:73:a3:d6:1a:98:31:c6:
95:89:c1:49:0a:c0:ef:82:fe:61:ac:81:b3:14:06:71:bd:f6:
22:7d:18:3b:b8:cf:bc:2f:1f:0a:cd:6c:a7:f3:c5:ea:d9:9c:
19:ff:72:d6:83:bd:5e:7c:c9:dd:2c:45:51:4c:1c:00:b5:ba:
ad:37:d0:2c:75:43:ac:12:77:b1:bd:58:40:0f:b4:63:89:53:
02:8b:8a:65:d8:63:c5:af:73:15:51:64:5a:a9:ac:18:39:04:
42:d1:fe:31:8a:42:8b:83:23:6c:02:98:80:85:fb:8b:1e:23:
95:34:cf:c0:e2:92:71:56:a3:9c:da:36:9b:f2:e3:ac:3d:28:
4a:1b:de:db:f2:8d:1e:70:78:3f:db:bc:ed:4e:67:fa:66:b5:
f6:2c:9d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:53:08 2026 by rpki-client