
$ rpki-client -vvf rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/323830343a313534343a323038303a3a2f34312d3431203d3e203238323532.roa
File: 323830343a313534343a323038303a3a2f34312d3431203d3e203238323532.roa (raw, json)
Hash identifier: Gc9qziJpKsxWNOLZd6rH7bRV9zIdLm2RbUSK2gpLz0w=
Subject key identifier: F1:0D:C9:96:D7:01:C7:88:E4:D8:3A:8B:68:1B:8F:41:CD:09:F0:B0
Certificate issuer: /CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
Certificate serial: 3205CFEE2B5998BBC4ABE66819F2EE724683A8F8
Authority key identifier: 16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/323830343a313534343a323038303a3a2f34312d3431203d3e203238323532.roa
Signing time: Wed 11 Mar 2026 19:13:13 +0000
ROA not before: Wed 11 Mar 2026 19:08:13 +0000
ROA not after: Wed 10 Mar 2027 19:13:13 +0000
asID: 28252
IP address blocks: 2804:1544:2080::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl
rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 03:36:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:05:cf:ee:2b:59:98:bb:c4:ab:e6:68:19:f2:ee:72:46:83:a8:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
Validity
Not Before: Mar 11 19:08:13 2026 GMT
Not After : Mar 10 19:13:13 2027 GMT
Subject: CN=F10DC996D701C788E4D83A8B681B8F41CD09F0B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:02:59:f5:13:e9:7f:de:cd:c7:06:64:6b:0a:
a7:6b:c7:c0:ea:c1:74:05:33:43:ba:25:4c:78:f6:
ac:92:29:67:ba:17:7d:25:c7:5a:17:2f:ba:40:cb:
1d:4d:5b:41:3b:f7:39:b5:9b:82:d6:95:7d:a2:26:
da:03:18:f0:fd:4f:87:83:2a:86:dd:2b:08:f8:42:
d0:ad:f3:d8:ad:2c:cc:30:b5:32:ad:9e:20:ab:ec:
94:db:43:f5:8a:c2:e0:eb:c9:1a:b3:bb:be:b9:1c:
c6:ef:ab:de:72:c4:4e:e8:77:51:a1:eb:04:87:7e:
20:c8:50:c8:56:2d:ae:ac:bb:7a:2d:a5:0d:fa:4a:
c7:e8:6f:00:f1:22:0e:f0:ec:ed:16:41:e0:08:8a:
f0:fe:17:f5:86:a2:66:b8:c2:19:00:79:f1:7a:af:
54:2b:26:0f:7b:6d:b5:0b:96:72:00:b4:f8:3a:92:
09:de:70:2d:d8:fd:12:ce:59:da:5e:f1:0d:f9:c6:
da:9c:19:eb:bf:ea:7f:ba:38:da:73:1b:2f:40:67:
1d:76:10:a8:ca:02:b3:a5:d2:5e:6b:70:47:23:78:
07:6b:80:69:da:f2:89:e9:66:e2:d1:03:c3:0c:fe:
a1:cc:f9:c7:c2:44:f5:6f:01:d3:b0:74:99:89:ff:
50:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0D:C9:96:D7:01:C7:88:E4:D8:3A:8B:68:1B:8F:41:CD:09:F0:B0
X509v3 Authority Key Identifier:
keyid:16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/323830343a313534343a323038303a3a2f34312d3431203d3e203238323532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1544:2080::/41
Signature Algorithm: sha256WithRSAEncryption
3a:94:98:d9:96:1a:55:dc:1b:f7:49:0e:56:f0:b2:36:f5:1a:
df:03:b7:b6:dd:10:0a:03:d7:b6:44:84:8d:c2:33:32:0e:46:
9f:c3:24:be:da:52:5f:27:55:a5:fe:67:96:6c:44:56:1a:03:
29:ec:b1:28:41:63:dd:74:27:c0:7f:4c:88:35:c4:88:43:06:
b2:9c:86:5b:b5:c4:2b:0b:2a:ae:0e:ba:fd:2c:11:dc:fc:56:
63:4a:83:2d:8c:17:50:76:cd:6f:69:f6:08:78:2e:b3:f1:d2:
a2:8e:74:1c:bc:0e:5c:19:fc:16:6f:85:d6:a5:81:bb:f6:73:
65:85:6d:45:04:08:4f:0e:69:9b:eb:69:cb:2d:83:25:2c:6b:
32:99:5f:36:7e:44:5f:28:d0:44:de:5d:9b:42:a7:6a:1f:c8:
fc:d7:67:dc:f3:8f:0b:5c:07:cd:81:c7:e8:17:fd:cf:9b:28:
09:e7:bf:9d:be:02:d7:98:15:06:02:6b:2c:e4:ac:f4:1a:66:
fb:b5:91:4f:6d:ad:5c:e4:e0:ff:cc:92:ac:aa:4f:0b:74:e6:
1f:95:68:a2:6b:13:7b:c1:02:45:51:b8:d8:4a:47:9f:c0:bc:
43:10:fd:db:ed:f3:f0:24:e8:c4:cf:a4:93:91:27:7b:aa:0a:
96:26:c8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:34:31 2026 by rpki-client