
$ rpki-client -vvf rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/323830343a386538343a3a2f33322d3332203d3e20323733343331.roa
File: 323830343a386538343a3a2f33322d3332203d3e20323733343331.roa (raw, json)
Hash identifier: HI0z7Jw80DtFdYNuTRgCmY7o8VQ7oY6Sb/nIlLD9G7k=
Subject key identifier: AF:21:F1:9E:E3:53:2B:B8:9F:6E:25:E6:1B:7C:F1:25:42:44:FA:10
Certificate issuer: /CN=88BBA01D8BF5C5D5AC36704286B4BCBAF29D8671
Certificate serial: 5DA37765662039A130BB3287F6CF49337BDDA811
Authority key identifier: 88:BB:A0:1D:8B:F5:C5:D5:AC:36:70:42:86:B4:BC:BA:F2:9D:86:71
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88BBA01D8BF5C5D5AC36704286B4BCBAF29D8671.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/323830343a386538343a3a2f33322d3332203d3e20323733343331.roa
Signing time: Mon 15 Jun 2026 11:58:30 +0000
ROA not before: Mon 15 Jun 2026 11:53:30 +0000
ROA not after: Mon 14 Jun 2027 11:58:30 +0000
asID: 273431
IP address blocks: 2804:8e84::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/88BBA01D8BF5C5D5AC36704286B4BCBAF29D8671.crl
rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/88BBA01D8BF5C5D5AC36704286B4BCBAF29D8671.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88BBA01D8BF5C5D5AC36704286B4BCBAF29D8671.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 25 Jul 2026 04:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:a3:77:65:66:20:39:a1:30:bb:32:87:f6:cf:49:33:7b:dd:a8:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88BBA01D8BF5C5D5AC36704286B4BCBAF29D8671
Validity
Not Before: Jun 15 11:53:30 2026 GMT
Not After : Jun 14 11:58:30 2027 GMT
Subject: CN=AF21F19EE3532BB89F6E25E61B7CF1254244FA10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:32:7a:af:c4:98:d2:34:5a:13:13:fb:ef:3a:
25:75:08:c4:9c:d5:8c:2c:6d:41:e5:5c:01:c0:62:
43:2c:c5:28:ba:10:a1:42:f7:55:6a:64:9f:b5:cb:
11:fa:60:2a:13:7e:42:65:1b:ac:ed:f6:fc:60:5a:
e6:97:9e:0b:c1:f6:63:f6:df:39:73:f8:23:16:ca:
ad:16:10:fc:14:59:95:59:78:11:9b:6e:01:ad:f6:
81:ba:aa:ed:b7:6f:60:ac:60:c3:40:22:18:e1:df:
f3:48:97:22:5c:27:3a:44:b8:4a:93:00:04:b8:8f:
78:3a:7a:fc:69:04:ec:77:44:c8:7d:29:f9:17:48:
77:1f:9d:91:c4:a9:90:a9:87:1b:5f:34:d8:32:d3:
67:5c:2c:4f:6c:0a:30:5a:fa:51:03:8d:2e:9c:f9:
2c:f3:30:af:05:e7:aa:04:3e:a1:99:8e:33:ec:c3:
d9:a7:51:77:5b:c5:6c:fd:83:9c:cf:e3:da:26:07:
e1:15:fc:96:5c:14:92:a0:27:d7:8d:6f:39:ca:d6:
00:b6:26:54:0a:f6:20:b5:ce:41:9a:61:eb:e9:20:
32:7f:c1:1b:52:6a:15:54:03:24:0c:57:ef:a9:e9:
7c:d7:52:25:03:ba:11:ea:6a:3f:4c:b5:d6:ae:51:
bd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:21:F1:9E:E3:53:2B:B8:9F:6E:25:E6:1B:7C:F1:25:42:44:FA:10
X509v3 Authority Key Identifier:
keyid:88:BB:A0:1D:8B:F5:C5:D5:AC:36:70:42:86:B4:BC:BA:F2:9D:86:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/88BBA01D8BF5C5D5AC36704286B4BCBAF29D8671.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88BBA01D8BF5C5D5AC36704286B4BCBAF29D8671.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/323830343a386538343a3a2f33322d3332203d3e20323733343331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8e84::/32
Signature Algorithm: sha256WithRSAEncryption
79:23:41:b5:16:db:f9:a9:5c:f2:36:a7:74:5d:18:4f:58:5e:
ea:83:49:9e:e0:40:e4:1a:84:92:0b:99:90:69:d8:c5:55:a6:
e8:a1:9f:2b:f3:9b:55:b9:80:ee:d9:68:19:8f:5f:9d:88:69:
db:2a:9a:e9:57:1e:15:dc:2a:dc:0b:71:6a:8d:5e:8f:da:d7:
52:32:54:ea:f4:4c:f3:d9:86:48:9f:be:a2:1c:da:6f:15:81:
d2:5b:7d:66:88:7f:e3:8a:08:d8:71:4e:09:fb:be:56:fb:32:
01:b9:71:ce:7f:5f:dd:0c:df:a2:dc:22:95:53:8e:e8:c3:07:
ec:f4:27:56:8b:db:6d:f7:5a:a7:26:b2:95:06:17:8d:72:48:
d7:53:68:ac:5d:38:47:0a:b4:78:ff:f6:42:f5:30:59:36:c2:
51:86:03:f1:ff:34:c8:c1:0a:79:43:24:33:be:d4:ea:5d:47:
87:98:19:13:1e:cb:f7:03:e4:db:41:8b:8d:56:81:6a:e4:15:
5b:4c:41:4d:78:fd:d2:df:e6:af:88:8c:88:50:4f:cb:4c:0b:
be:4f:0b:c6:95:56:6d:c5:69:ce:09:8a:78:26:bf:76:a0:88:
51:c6:ff:9c:61:5f:c9:69:ae:b5:ae:d1:d4:ff:5e:d2:1f:37:
9b:7a:e4:7d
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUXaN3ZWYgOaEwuzKH9s9JM3vdqBEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhCQkEwMUQ4QkY1QzVENUFDMzY3MDQyODZCNEJDQkFG
MjlEODY3MTAeFw0yNjA2MTUxMTUzMzBaFw0yNzA2MTQxMTU4MzBaMDMxMTAvBgNV
BAMTKEFGMjFGMTlFRTM1MzJCQjg5RjZFMjVFNjFCN0NGMTI1NDI0NEZBMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRMnqvxJjSNFoTE/vvOiV1CMSc
1YwsbUHlXAHAYkMsxSi6EKFC91VqZJ+1yxH6YCoTfkJlG6zt9vxgWuaXngvB9mP2
3zlz+CMWyq0WEPwUWZVZeBGbbgGt9oG6qu23b2CsYMNAIhjh3/NIlyJcJzpEuEqT
AAS4j3g6evxpBOx3RMh9KfkXSHcfnZHEqZCphxtfNNgy02dcLE9sCjBa+lEDjS6c
+SzzMK8F56oEPqGZjjPsw9mnUXdbxWz9g5zP49omB+EV/JZcFJKgJ9eNbznK1gC2
JlQK9iC1zkGaYevpIDJ/wRtSahVUAyQMV++p6XzXUiUDuhHqaj9MtdauUb1nAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUryHxnuNTK7ifbiXmG3zxJUJE+hAwHwYDVR0j
BBgwFoAUiLugHYv1xdWsNnBChrS8uvKdhnEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGlwazRlUWQ5elV1Y3lFeExrc0NZeHlLNFNxRWR2R1FzSkxMazlNc3Bt
RlgvMC84OEJCQTAxRDhCRjVDNUQ1QUMzNjcwNDI4NkI0QkNCQUYyOUQ4NjcxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg4QkJBMDFEOEJGNUM1RDVB
QzM2NzA0Mjg2QjRCQ0JBRjI5RDg2NzEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRpcGs0ZVFkOXpVdWN5RXhMa3NDWXh5SzRTcUVkdkdRc0pMTGs5TXNwbUZYLzAv
MzIzODMwMzQzYTM4NjUzODM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMz
MzQzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASOhDANBgkqhkiG9w0BAQsFAAOCAQEAeSNBtRbb
+alc8jandF0YT1he6oNJnuBA5BqEkguZkGnYxVWm6KGfK/ObVbmA7tloGY9fnYhp
2yqa6VceFdwq3Atxao1ej9rXUjJU6vRM89mGSJ++ohzabxWB0lt9Zoh/44oI2HFO
Cfu+VvsyAblxzn9f3QzfotwilVOO6MMH7PQnVovbbfdapyaylQYXjXJI11NorF04
Rwq0eP/2QvUwWTbCUYYD8f80yMEKeUMkM77U6l1Hh5gZEx7L9wPk20GLjVaBauQV
W0xBTXj90t/mr4iMiFBPy0wLvk8LxpVWbcVpzgmKeCa/dqCIUcb/nGFfyWmuta7R
1P9e0h83m3rkfQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:19:19 2026 by rpki-client