
$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/323830343a35633a3a2f33322d3438203d3e203238323031.roa
File: 323830343a35633a3a2f33322d3438203d3e203238323031.roa (raw, json)
Hash identifier: R4VH6SJzg/Pkj2YpHIjRqrtK+lsjnModOWp1dwqtiOw=
Subject key identifier: 1E:C2:A0:AC:B8:6F:E5:E9:91:EB:CA:07:9A:EC:97:43:3D:7F:01:67
Certificate issuer: /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial: 38E1EA200C28F9A3B4F0777EC7ECEF67CEB5DCC7
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/323830343a35633a3a2f33322d3438203d3e203238323031.roa
Signing time: Sat 04 Jul 2026 13:43:50 +0000
ROA not before: Sat 04 Jul 2026 13:38:50 +0000
ROA not after: Sat 03 Jul 2027 13:43:50 +0000
asID: 28201
IP address blocks: 2804:5c::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 25 Jul 2026 05:58:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:e1:ea:20:0c:28:f9:a3:b4:f0:77:7e:c7:ec:ef:67:ce:b5:dc:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Validity
Not Before: Jul 4 13:38:50 2026 GMT
Not After : Jul 3 13:43:50 2027 GMT
Subject: CN=1EC2A0ACB86FE5E991EBCA079AEC97433D7F0167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1e:2b:ac:17:65:24:8f:09:cf:81:60:48:96:
74:21:a8:2e:12:d0:19:b4:ba:e1:98:f8:fe:e4:cb:
e0:aa:ae:94:e2:6e:f2:83:a5:3d:15:c1:06:35:df:
9e:81:48:f7:df:80:3f:3f:37:d6:53:b4:9c:73:0d:
8c:5b:f9:63:4b:1c:37:9e:9c:61:ac:7c:20:c0:29:
b2:19:bf:c8:99:1e:af:aa:b5:52:e8:1b:5d:ca:8c:
d2:26:b4:41:c0:9d:52:ea:18:be:de:c3:86:24:ee:
e4:3a:39:86:18:e9:64:cd:a0:50:ea:cc:b9:e8:ea:
37:3d:ec:c5:4f:ea:fd:69:d1:c7:0d:99:17:05:aa:
30:4c:63:51:a3:39:83:24:6f:1b:23:de:a6:ad:01:
b4:63:46:ff:16:cd:31:8b:43:f6:33:9b:f8:26:52:
8f:56:de:9f:41:2c:96:95:22:11:ed:f4:d3:24:4e:
81:97:0a:e5:43:c9:51:c0:f1:68:02:42:1b:1b:5a:
11:2f:d1:8a:1c:93:e5:d0:b0:5f:a2:58:a1:07:35:
6f:dd:2f:5e:55:46:e9:bb:bc:82:d2:14:d2:c5:8b:
70:93:10:77:7d:86:c8:f3:57:89:29:df:a7:5e:a2:
b1:61:be:ab:b0:04:3f:62:35:d0:a6:6e:a8:d4:e3:
87:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C2:A0:AC:B8:6F:E5:E9:91:EB:CA:07:9A:EC:97:43:3D:7F:01:67
X509v3 Authority Key Identifier:
keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/323830343a35633a3a2f33322d3438203d3e203238323031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5c::/32
Signature Algorithm: sha256WithRSAEncryption
77:7d:a6:53:bc:5d:a6:17:e1:2d:31:b5:5b:84:1f:a1:32:4d:
bf:63:d4:93:32:7f:f6:d5:48:d8:bc:5b:55:b3:f2:2b:92:88:
72:d3:cf:85:70:e5:b2:2d:a7:6f:af:6e:43:8b:96:52:6d:43:
87:a6:fb:55:1a:8c:aa:c1:f1:c4:4c:65:83:9d:e6:a9:f7:59:
2b:9b:f5:8e:17:af:e8:16:c6:31:f6:0b:78:b7:95:d6:97:60:
e3:ed:67:cd:67:b1:bd:60:ee:62:66:20:77:15:b1:be:f0:c7:
70:b3:ad:46:93:c2:53:89:d3:47:b6:3b:33:9a:ac:2a:35:43:
0c:d1:b7:22:49:b1:c7:e8:92:e3:e7:fc:bb:97:7a:5e:2d:86:
f3:97:ae:4d:c4:fa:fb:85:81:5d:91:71:ad:84:ac:50:f5:32:
76:02:fe:da:c6:e0:42:58:f2:e0:d0:ac:56:62:8e:44:03:74:
de:c7:5b:03:81:98:9f:ff:21:5d:88:54:86:a5:db:60:21:d5:
77:3d:ba:7f:4a:01:da:eb:6f:65:9d:30:2d:9b:0e:41:b0:98:
fd:ce:92:5c:13:17:09:56:35:7c:e1:85:43:ec:4c:94:0d:5d:
c1:e4:72:67:5f:c1:94:ec:33:75:b1:fc:e8:62:a2:18:2e:e3:
9a:89:81:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:35:16 2026 by rpki-client