
$ rpki-client -vvf rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/323830343a326432383a3a2f33322d313238203d3e20323635323634.roa
File: 323830343a326432383a3a2f33322d313238203d3e20323635323634.roa (raw, json)
Hash identifier: ETvkOo5GFk96k4J+OJe/boHp2fy3fAAB3jwF59vvq8I=
Subject key identifier: 43:B8:66:5D:FA:F4:88:70:22:BA:C8:1E:A9:50:BA:9B:98:BB:97:6A
Certificate issuer: /CN=653837D7ECA1FE1145D0CE15E0BF895EE06A27E2
Certificate serial: 2A1EDADDC2C1711CB8E36B6A4C1721E7B620B95A
Authority key identifier: 65:38:37:D7:EC:A1:FE:11:45:D0:CE:15:E0:BF:89:5E:E0:6A:27:E2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/323830343a326432383a3a2f33322d313238203d3e20323635323634.roa
Signing time: Wed 18 Mar 2026 20:24:10 +0000
ROA not before: Wed 18 Mar 2026 20:19:10 +0000
ROA not after: Wed 17 Mar 2027 20:24:10 +0000
asID: 265264
IP address blocks: 2804:2d28::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl
rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 26 Mar 2026 11:28:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:1e:da:dd:c2:c1:71:1c:b8:e3:6b:6a:4c:17:21:e7:b6:20:b9:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=653837D7ECA1FE1145D0CE15E0BF895EE06A27E2
Validity
Not Before: Mar 18 20:19:10 2026 GMT
Not After : Mar 17 20:24:10 2027 GMT
Subject: CN=43B8665DFAF4887022BAC81EA950BA9B98BB976A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e8:72:81:af:91:7b:1e:37:23:7f:5b:af:2c:
30:6c:98:39:55:12:70:0e:0a:d5:20:61:6c:38:eb:
92:c4:15:cd:16:cc:ae:09:55:18:a7:b7:ba:2d:0b:
42:cb:89:73:b9:68:8d:d5:2b:a8:b3:02:aa:66:ce:
c9:06:4c:7a:fc:29:b4:af:e7:bf:22:a7:f6:87:4e:
0e:3b:8d:6b:fd:36:e6:a9:c0:b3:3a:26:6f:ca:ce:
34:6f:10:28:fb:a3:03:cf:a9:ab:e8:bd:04:cd:60:
f2:c1:79:12:00:11:39:67:b5:2d:4e:5c:89:bf:f8:
55:da:69:39:6e:0a:79:1d:f7:81:16:38:7c:55:0d:
6c:7c:a1:3c:16:e6:12:1a:91:1b:96:37:f9:33:2a:
d1:84:6f:3d:a9:be:53:26:dd:f3:c3:8b:a8:2c:b4:
c1:e1:eb:aa:62:44:cb:f0:c3:ab:e5:e8:2b:ff:bf:
8c:a2:97:76:c0:62:09:0a:e1:e4:62:ca:5e:5b:b4:
8e:b5:16:22:8f:32:a9:29:d1:33:a4:94:a6:c4:a6:
e6:7e:7a:e8:f4:c5:d0:43:d6:b1:ee:fd:64:82:e2:
d6:57:ad:40:5d:49:3d:29:b5:00:b1:6d:fc:40:b1:
24:3e:ae:e0:9e:36:56:a0:a5:fd:14:ee:86:ce:f6:
46:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B8:66:5D:FA:F4:88:70:22:BA:C8:1E:A9:50:BA:9B:98:BB:97:6A
X509v3 Authority Key Identifier:
keyid:65:38:37:D7:EC:A1:FE:11:45:D0:CE:15:E0:BF:89:5E:E0:6A:27:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/323830343a326432383a3a2f33322d313238203d3e20323635323634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2d28::/32
Signature Algorithm: sha256WithRSAEncryption
3a:51:99:7d:5a:61:f8:21:11:14:42:19:63:69:b1:b1:7d:38:
49:f2:42:5a:73:06:c3:27:f2:b6:47:eb:74:3d:6e:8b:6e:6f:
03:1c:bb:5a:88:2a:39:41:05:a8:b9:5a:63:a5:73:76:c6:09:
d9:ef:94:b8:0a:86:40:fb:d7:c2:e3:bc:57:c1:aa:fb:78:33:
95:3a:6e:85:47:12:ce:c2:2d:90:9d:23:a3:ea:38:da:d3:12:
db:c4:93:77:d0:4f:4d:45:7f:3d:dd:02:25:5c:79:43:d7:10:
81:01:96:17:d6:a9:33:00:54:9e:ba:1d:ab:de:cb:63:61:a3:
da:46:30:95:8d:88:3a:3d:0f:e2:8e:b5:e6:34:f2:9b:a2:23:
4a:2f:15:d9:aa:11:a0:30:9c:93:c0:7a:58:40:01:d5:f9:ff:
c8:2e:ea:04:78:dd:86:f9:53:41:69:7a:4e:6e:46:1a:03:95:
21:e0:2e:44:6d:bb:88:8e:2d:08:27:f2:b6:f5:90:42:a8:7a:
99:df:06:54:a5:2d:16:5a:35:1a:e0:db:05:bd:aa:10:cf:9c:
5b:80:68:df:9e:44:f7:df:fa:1f:bb:85:de:01:79:e2:45:24:
bc:4e:45:3a:e1:e1:7e:ca:1d:80:e3:51:38:86:2f:63:f3:ee:
e8:9f:ae:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:05:53 2026 by rpki-client