
$ rpki-client -vvf rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/323830343a333437633a633030303a3a2f33362d3336203d3e20323635343631.roa
File: 323830343a333437633a633030303a3a2f33362d3336203d3e20323635343631.roa (raw, json)
Hash identifier: 1H9P4UdLqiNZxZLENk8IQQ080cbJwpTRH2czPS0ItZA=
Subject key identifier: C4:45:FE:C5:85:01:35:F1:28:C1:4A:6F:CE:E0:35:73:66:C4:B7:BD
Certificate issuer: /CN=065E3409E65889AAF6B851D59C66CD22E4619409
Certificate serial: 4D36DF873CCD94A6ECE016E578F81B4CA10B2350
Authority key identifier: 06:5E:34:09:E6:58:89:AA:F6:B8:51:D5:9C:66:CD:22:E4:61:94:09
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/065E3409E65889AAF6B851D59C66CD22E4619409.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/323830343a333437633a633030303a3a2f33362d3336203d3e20323635343631.roa
Signing time: Wed 11 Mar 2026 13:53:59 +0000
ROA not before: Wed 11 Mar 2026 13:48:59 +0000
ROA not after: Wed 10 Mar 2027 13:53:59 +0000
asID: 265461
IP address blocks: 2804:347c:c000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/065E3409E65889AAF6B851D59C66CD22E4619409.crl
rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/065E3409E65889AAF6B851D59C66CD22E4619409.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/065E3409E65889AAF6B851D59C66CD22E4619409.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 21:55:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:36:df:87:3c:cd:94:a6:ec:e0:16:e5:78:f8:1b:4c:a1:0b:23:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=065E3409E65889AAF6B851D59C66CD22E4619409
Validity
Not Before: Mar 11 13:48:59 2026 GMT
Not After : Mar 10 13:53:59 2027 GMT
Subject: CN=C445FEC5850135F128C14A6FCEE0357366C4B7BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8f:74:73:fe:78:2c:ee:37:bf:dc:cf:6a:39:
91:ae:a4:00:e0:5e:6b:cd:db:98:b8:85:fb:1f:a2:
ac:df:8b:ac:03:b3:3a:eb:64:23:c5:57:0f:bb:19:
ea:7f:84:10:4b:34:ee:30:80:b7:d7:f2:fe:8e:b6:
1c:8f:89:21:13:4d:9d:b4:e6:75:d6:7f:02:b8:f9:
5d:b1:51:7a:45:28:da:29:26:19:55:7d:b8:37:a4:
eb:51:65:16:79:39:55:09:80:a3:54:3d:41:1f:91:
d7:6e:3f:c2:84:a0:06:01:34:dc:83:74:9c:77:31:
ba:ee:db:a4:68:52:4d:b2:31:c3:fc:b7:83:a4:c2:
f1:76:b5:9e:df:01:dc:c2:d6:bd:a9:19:d6:90:80:
53:36:74:4a:c4:8a:8f:27:da:98:15:c5:21:01:a2:
b8:b3:f8:7a:d7:ce:7a:e4:59:58:bf:9d:64:e1:43:
a1:d7:98:c5:e5:ce:ae:a5:53:40:8e:2b:0d:27:fa:
3d:15:a5:a5:61:a9:28:c3:6c:65:43:d4:ac:f2:ec:
7e:e5:98:27:35:91:fd:ec:4b:f1:36:6a:2d:bc:5b:
f7:44:82:60:fb:3f:26:84:d5:68:99:19:37:c4:e2:
81:de:b9:84:3d:cc:09:8b:7c:79:dc:67:08:38:a1:
a9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:45:FE:C5:85:01:35:F1:28:C1:4A:6F:CE:E0:35:73:66:C4:B7:BD
X509v3 Authority Key Identifier:
keyid:06:5E:34:09:E6:58:89:AA:F6:B8:51:D5:9C:66:CD:22:E4:61:94:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/065E3409E65889AAF6B851D59C66CD22E4619409.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/065E3409E65889AAF6B851D59C66CD22E4619409.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/323830343a333437633a633030303a3a2f33362d3336203d3e20323635343631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:347c:c000::/36
Signature Algorithm: sha256WithRSAEncryption
44:0c:da:4d:29:f9:cf:ce:a1:8a:18:56:78:2b:fb:40:78:e0:
46:d2:0e:01:e5:44:68:0a:e5:89:64:ee:93:9f:0f:3e:35:65:
a6:34:75:80:90:de:84:26:a1:31:34:d7:37:c5:d2:0d:f9:f7:
37:65:fe:99:bd:f0:a1:28:7c:c6:23:2e:1d:b0:74:62:b6:82:
bd:42:14:c1:03:d0:cf:c6:fd:82:0c:0b:21:f7:b4:66:08:79:
34:40:9e:8d:05:66:08:78:6d:31:ca:23:e2:64:40:d1:96:eb:
13:e1:9f:ce:14:9a:43:64:bd:42:47:b4:eb:62:91:87:15:d8:
72:d2:4a:1a:9a:f8:b7:c5:bb:b0:47:3a:98:3e:3e:36:41:cb:
c7:01:87:0c:ae:7b:3b:de:53:c8:5a:64:dd:e3:73:42:70:6b:
76:b2:b1:be:67:47:6d:c4:2f:94:8b:87:38:76:7f:bb:14:96:
b7:16:92:56:81:f6:28:12:0b:6f:ec:c1:24:81:05:29:46:05:
eb:d3:c1:45:c3:fa:8c:ac:9c:df:6e:ff:5e:a2:08:05:15:1d:
c4:e4:a8:1d:1a:36:a3:29:2e:77:52:80:c2:67:d4:25:73:4e:
6b:25:4d:f5:6b:d8:fb:fa:eb:07:b5:4a:52:84:89:e5:9a:60:
a3:67:e9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:24:17 2026 by rpki-client