
$ rpki-client -vvf rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/323830343a313534343a323030303a3a2f33352d3335203d3e203238323532.roa
File: 323830343a313534343a323030303a3a2f33352d3335203d3e203238323532.roa (raw, json)
Hash identifier: 2VSGxutaiNN/yejhLMiszT/Tpfy3dDyW7IGUjEV7BSI=
Subject key identifier: 7E:EC:D2:5B:FF:58:5D:FE:0D:87:87:25:8F:9F:16:37:75:D4:D8:7F
Certificate issuer: /CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
Certificate serial: 3F41039CB4E1AA031E03376ACC1022EEDFB2DF47
Authority key identifier: 16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/323830343a313534343a323030303a3a2f33352d3335203d3e203238323532.roa
Signing time: Wed 11 Mar 2026 19:13:22 +0000
ROA not before: Wed 11 Mar 2026 19:08:22 +0000
ROA not after: Wed 10 Mar 2027 19:13:22 +0000
asID: 28252
IP address blocks: 2804:1544:2000::/35 maxlen: 35
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl
rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 03:36:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:41:03:9c:b4:e1:aa:03:1e:03:37:6a:cc:10:22:ee:df:b2:df:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
Validity
Not Before: Mar 11 19:08:22 2026 GMT
Not After : Mar 10 19:13:22 2027 GMT
Subject: CN=7EECD25BFF585DFE0D8787258F9F163775D4D87F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:13:cd:24:18:45:5d:06:ca:46:ef:39:a5:31:
c0:15:74:02:f1:f0:83:e1:d5:0a:98:e1:c7:58:40:
27:2d:e0:7a:85:d9:cd:95:1a:97:dd:14:02:0c:d9:
dc:41:4d:d1:1c:f4:5d:d1:17:16:da:8b:ba:dd:7d:
9b:e6:c3:b3:52:f0:07:bb:78:6e:22:76:9a:ae:15:
33:65:d4:fb:36:eb:c3:df:cd:1b:ca:4b:8d:9a:ca:
4d:b8:e1:c9:92:e3:57:46:9a:16:63:65:4e:77:23:
e0:b2:8a:c6:89:89:23:77:c5:76:85:1e:a4:24:fb:
a8:ba:3b:3e:74:1d:66:bf:39:87:78:8a:4e:86:a8:
e1:0e:cb:10:4c:67:93:56:e0:1a:a8:8d:be:ea:8f:
65:42:cc:ae:f0:4f:ef:6d:ca:17:a3:ee:3b:47:e2:
6f:6c:c8:af:bb:8f:2f:f8:6d:36:9f:f4:58:66:35:
be:13:c9:e5:79:13:52:24:12:ec:2f:1b:17:36:84:
80:5e:d4:54:b6:1b:f6:92:17:7f:29:c4:c0:7b:77:
3f:4a:4a:45:9f:34:8f:24:f3:26:be:bf:22:fc:29:
04:aa:a0:f0:b7:0c:7c:83:5c:97:4e:3f:14:23:0a:
54:35:a8:eb:dc:9e:59:88:25:55:b8:c7:52:59:e4:
33:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:EC:D2:5B:FF:58:5D:FE:0D:87:87:25:8F:9F:16:37:75:D4:D8:7F
X509v3 Authority Key Identifier:
keyid:16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/323830343a313534343a323030303a3a2f33352d3335203d3e203238323532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1544:2000::/35
Signature Algorithm: sha256WithRSAEncryption
84:0b:a9:10:3f:68:e6:d3:0a:f1:85:a7:7f:dd:54:12:a5:93:
7b:41:7d:4a:b6:b0:12:95:5c:2d:37:86:c3:52:a5:78:4c:9c:
25:da:bb:99:f2:6b:fd:0b:17:59:6b:55:fc:2b:58:2d:d0:73:
43:5e:d5:4a:c6:8c:fb:ae:22:ab:b8:53:b9:3a:b2:44:ef:b4:
87:08:04:9f:2f:98:06:59:47:2b:b2:06:af:84:01:b1:58:73:
8d:77:05:4c:4a:c7:de:0a:1b:fe:9a:e1:94:9d:76:bf:09:82:
85:04:76:44:17:28:0b:74:11:d3:3d:ac:e5:74:68:16:09:2d:
cb:13:c9:19:07:99:45:2d:9a:b8:32:0e:fe:ff:fc:20:d4:a4:
98:f0:1a:e3:e2:41:69:e5:ee:ab:03:0d:39:6a:46:26:8d:a1:
2d:84:d8:d6:72:20:3a:65:e5:1d:9b:77:c3:17:f6:10:5f:a0:
78:b7:65:95:4c:8e:76:d0:2d:d6:e5:6d:24:bd:24:a6:68:3b:
56:f1:ca:46:a6:2a:f6:83:23:43:e0:ec:30:2f:8c:7d:d2:62:
22:6a:ba:36:24:0d:27:91:66:be:21:a2:14:b7:ce:ae:57:cf:
cc:32:af:24:bd:1f:7c:b5:1b:3d:1d:86:78:6b:ed:dd:71:a8:
8c:b8:c0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:30:38 2026 by rpki-client