
$ rpki-client -vvf rpki-repo.registro.br/repo/8CdNyVQQ6YVbknmENwsDusXZPQcRApdnYKiRh3uCnGCy/0/323830343a393437633a313030303a3a2f34302d3430203d3e20323734343631.roa
File: 323830343a393437633a313030303a3a2f34302d3430203d3e20323734343631.roa (raw, json)
Hash identifier: RjVQmAXS1Jvi0ifDxtizKk45kZS/G85DZHRMfune5R0=
Subject key identifier: 67:59:56:64:06:F7:82:9B:68:3A:B7:6B:F0:41:CA:8D:DA:2C:66:AA
Certificate issuer: /CN=67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53
Certificate serial: 6060F2F8D86A2BDEEF52E1C07ED20D2B82410A53
Authority key identifier: 67:B2:A3:33:36:25:25:C9:EC:D5:AE:47:B1:BD:12:E1:E2:FC:BC:53
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8CdNyVQQ6YVbknmENwsDusXZPQcRApdnYKiRh3uCnGCy/0/323830343a393437633a313030303a3a2f34302d3430203d3e20323734343631.roa
Signing time: Sat 21 Mar 2026 05:02:43 +0000
ROA not before: Sat 21 Mar 2026 04:57:43 +0000
ROA not after: Sat 20 Mar 2027 05:02:43 +0000
asID: 274461
IP address blocks: 2804:947c:1000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8CdNyVQQ6YVbknmENwsDusXZPQcRApdnYKiRh3uCnGCy/0/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.crl
rsync://rpki-repo.registro.br/repo/8CdNyVQQ6YVbknmENwsDusXZPQcRApdnYKiRh3uCnGCy/0/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 16:08:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:60:f2:f8:d8:6a:2b:de:ef:52:e1:c0:7e:d2:0d:2b:82:41:0a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53
Validity
Not Before: Mar 21 04:57:43 2026 GMT
Not After : Mar 20 05:02:43 2027 GMT
Subject: CN=6759566406F7829B683AB76BF041CA8DDA2C66AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:00:61:89:3d:ec:17:69:ec:4e:86:a1:8c:c2:
67:34:b5:ad:6d:04:bc:32:f1:05:d0:43:50:4d:b3:
0b:03:92:cd:ac:fb:81:72:5b:d7:68:1a:43:d3:e3:
e6:79:fd:07:d0:57:91:52:5d:38:be:b7:db:eb:de:
d4:57:e1:f3:60:81:82:90:44:f6:36:f5:ab:cf:2a:
ec:b5:a0:40:51:f8:5e:61:30:67:40:f4:22:4a:b2:
e7:f3:73:15:70:4a:7b:7c:af:c9:25:60:bf:0b:90:
e1:b1:83:4e:e6:66:0b:8e:f3:be:6d:ae:e5:46:15:
7d:c1:b3:f6:e3:d8:16:cf:56:d8:9b:ad:0d:df:cf:
9c:48:e4:01:f7:37:05:3a:8e:3f:a4:d1:c1:14:f1:
9c:e5:25:2e:0e:1d:9a:7a:43:22:57:02:77:b2:57:
22:bb:4d:db:b0:88:1d:bb:54:ac:9e:bd:d7:f7:73:
3e:3e:70:13:90:3f:66:a4:f5:3c:6e:e7:21:32:39:
ea:bf:a5:95:63:59:c5:72:8a:1b:f7:35:3b:80:be:
4c:8b:80:95:43:f4:c3:07:bc:b6:67:49:64:3a:6f:
63:92:6b:d4:79:ca:b5:ea:eb:7f:a4:c2:ad:d7:27:
9e:00:70:b8:ae:6c:61:f7:d5:33:c1:82:b9:94:47:
26:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:59:56:64:06:F7:82:9B:68:3A:B7:6B:F0:41:CA:8D:DA:2C:66:AA
X509v3 Authority Key Identifier:
keyid:67:B2:A3:33:36:25:25:C9:EC:D5:AE:47:B1:BD:12:E1:E2:FC:BC:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8CdNyVQQ6YVbknmENwsDusXZPQcRApdnYKiRh3uCnGCy/0/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8CdNyVQQ6YVbknmENwsDusXZPQcRApdnYKiRh3uCnGCy/0/323830343a393437633a313030303a3a2f34302d3430203d3e20323734343631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:947c:1000::/40
Signature Algorithm: sha256WithRSAEncryption
a2:22:55:c5:76:4f:99:a3:d8:84:5c:27:78:ac:33:75:66:66:
9e:82:26:54:60:41:56:63:2c:fb:ca:33:61:69:2a:b9:12:4c:
c9:00:93:1e:67:3f:b1:e7:08:1a:72:61:5b:21:ca:3b:19:bf:
2f:9d:22:d1:04:2b:52:ab:a1:49:42:68:fa:c2:84:7b:f3:c9:
93:69:64:82:b8:24:23:24:05:7c:d5:45:23:8f:b1:db:04:da:
e1:a4:26:83:9a:b3:5f:83:cd:bc:ae:ed:98:36:53:9f:0c:d3:
01:4a:3f:47:78:b3:62:19:77:d5:84:25:53:96:15:1a:41:be:
e2:cb:35:8e:2d:3e:5c:31:0a:86:f6:2e:67:c8:ef:39:76:87:
a8:a8:eb:a6:cf:23:c5:57:0f:fd:a9:d0:80:d3:55:df:4f:e2:
94:8d:23:19:7c:a5:6e:1a:e3:97:52:ce:a9:06:35:b7:58:f5:
2d:91:4a:ae:fd:70:c2:40:f9:8e:81:91:1a:e7:fa:ea:72:01:
28:0f:0a:58:be:86:9d:fe:e0:bf:25:b5:91:37:bb:13:2f:60:
01:5e:99:56:e4:1c:49:cb:c5:5d:e8:27:a4:9e:42:72:9c:d8:
2d:e3:81:88:c3:76:91:76:ff:64:dc:67:64:6e:73:62:6e:8f:
d2:70:85:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:19:55 2026 by rpki-client