
$ rpki-client -vvf rpki-repo.registro.br/repo/9qfdey7QoiByWt1GLd48NMekhLgtiREBs9fKYZaUmwFL/0/323830343a373232633a3a2f33322d3334203d3e20323730383337.roa
File: 323830343a373232633a3a2f33322d3334203d3e20323730383337.roa (raw, json)
Hash identifier: gtMfEnGGZhFM+bOCmVQ8xhZYxotfjMXpd1JRUJxhk1Q=
Subject key identifier: 24:57:B4:DD:E2:0D:79:05:BB:4A:63:1F:28:F0:D6:C6:CB:A8:E5:2C
Certificate issuer: /CN=21A4AB054FAD83CEEA3A934B082B50B209645B17
Certificate serial: 33A95548B1F49ACBC9F4191556548C789A9136AC
Authority key identifier: 21:A4:AB:05:4F:AD:83:CE:EA:3A:93:4B:08:2B:50:B2:09:64:5B:17
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21A4AB054FAD83CEEA3A934B082B50B209645B17.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9qfdey7QoiByWt1GLd48NMekhLgtiREBs9fKYZaUmwFL/0/323830343a373232633a3a2f33322d3334203d3e20323730383337.roa
Signing time: Mon 16 Mar 2026 20:06:44 +0000
ROA not before: Mon 16 Mar 2026 20:01:44 +0000
ROA not after: Mon 15 Mar 2027 20:06:44 +0000
asID: 270837
IP address blocks: 2804:722c::/32 maxlen: 34
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9qfdey7QoiByWt1GLd48NMekhLgtiREBs9fKYZaUmwFL/0/21A4AB054FAD83CEEA3A934B082B50B209645B17.crl
rsync://rpki-repo.registro.br/repo/9qfdey7QoiByWt1GLd48NMekhLgtiREBs9fKYZaUmwFL/0/21A4AB054FAD83CEEA3A934B082B50B209645B17.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21A4AB054FAD83CEEA3A934B082B50B209645B17.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 16:44:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:a9:55:48:b1:f4:9a:cb:c9:f4:19:15:56:54:8c:78:9a:91:36:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21A4AB054FAD83CEEA3A934B082B50B209645B17
Validity
Not Before: Mar 16 20:01:44 2026 GMT
Not After : Mar 15 20:06:44 2027 GMT
Subject: CN=2457B4DDE20D7905BB4A631F28F0D6C6CBA8E52C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d3:b2:58:74:ae:96:05:b4:25:30:9d:5d:06:
3d:e6:00:d2:7c:48:10:71:08:5c:3b:23:c5:1f:ff:
e2:de:01:b6:5a:5e:9d:cc:37:c6:58:8b:4d:b7:42:
59:57:1a:1f:1c:f8:73:ad:de:93:0d:6b:e3:c9:89:
fc:1c:05:86:31:11:33:21:52:97:d1:07:03:ea:72:
5b:2f:55:06:86:37:93:f9:b1:75:62:a2:ad:6a:b4:
99:74:da:6d:e5:e4:28:c9:42:c0:6c:17:0d:dc:05:
66:84:9b:24:29:9b:b2:b0:4e:8a:66:b3:78:1f:78:
59:45:02:f5:c8:b5:5e:c8:7a:30:7c:a0:10:d6:11:
08:4e:12:86:bf:2c:bd:8c:c6:c8:6d:f9:02:9e:d1:
b3:4f:19:8a:ac:17:59:2c:2f:1d:de:64:db:58:96:
82:47:62:e3:08:b9:f1:3c:90:b1:c1:31:4e:2d:04:
13:6f:93:1c:fe:7d:0b:9c:fc:20:d5:ff:84:e5:89:
57:62:e4:f7:70:8a:b5:e4:c2:5e:15:b0:4a:8e:e3:
92:0e:d6:49:1e:74:93:ea:d6:21:7c:48:4d:3b:c2:
ab:f3:82:10:c5:3a:f6:01:58:6b:25:23:c2:e0:67:
1e:fd:c7:c0:59:9d:94:b6:7d:ee:50:34:86:61:1a:
5f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:57:B4:DD:E2:0D:79:05:BB:4A:63:1F:28:F0:D6:C6:CB:A8:E5:2C
X509v3 Authority Key Identifier:
keyid:21:A4:AB:05:4F:AD:83:CE:EA:3A:93:4B:08:2B:50:B2:09:64:5B:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9qfdey7QoiByWt1GLd48NMekhLgtiREBs9fKYZaUmwFL/0/21A4AB054FAD83CEEA3A934B082B50B209645B17.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21A4AB054FAD83CEEA3A934B082B50B209645B17.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qfdey7QoiByWt1GLd48NMekhLgtiREBs9fKYZaUmwFL/0/323830343a373232633a3a2f33322d3334203d3e20323730383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:722c::/32
Signature Algorithm: sha256WithRSAEncryption
15:0e:c7:9f:b6:07:d2:2e:88:f6:b0:5f:0f:92:e7:48:1d:d7:
e7:a7:aa:97:2d:fd:de:31:df:d5:5f:8f:a4:22:7b:17:06:6d:
94:b1:a7:48:ec:63:fc:bb:8f:ae:23:1f:86:98:de:98:ae:89:
d5:6d:a5:70:69:82:bd:46:f7:0c:67:7c:6b:67:0d:76:80:86:
b8:a1:0f:1a:6b:e2:5f:b6:75:06:ac:2e:07:33:f3:0e:a6:70:
08:15:91:48:eb:f0:6b:ad:b9:b0:8a:f4:78:ca:00:d2:ae:f3:
2e:5b:5c:50:9d:f2:03:f6:f9:fb:a6:1c:1e:92:a9:f9:99:70:
bc:50:f3:0c:2f:65:c7:a1:7d:ca:98:89:e9:51:a5:7e:41:dc:
4d:91:ac:f9:a0:70:ad:98:d0:bd:c5:43:fb:41:bc:7c:b8:76:
b8:fb:c6:47:8e:b7:d5:2f:9d:2e:e1:31:d6:64:52:0c:e7:c9:
3c:e9:7e:c9:5e:72:13:93:2d:d5:a5:c0:8e:64:bf:bf:f4:61:
bb:63:34:33:9a:73:e7:65:6c:5d:ef:3a:fa:2d:2e:f9:aa:74:
db:be:73:4f:ab:18:26:35:10:5d:dc:a8:69:aa:07:e3:92:ae:
54:c1:35:22:a8:33:de:5c:89:99:72:5e:9c:4d:33:e3:e2:ce:
50:df:97:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 08:09:29 2026 by rpki-client