
$ rpki-client -vvf rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/323830343a343136303a383030303a3a2f33342d3334203d3e20323637343239.roa
File: 323830343a343136303a383030303a3a2f33342d3334203d3e20323637343239.roa (raw, json)
Hash identifier: lDtG7VbZaJK8VHpI59XbLfTHYm1UMjbl7FsdCcFgIrA=
Subject key identifier: 35:D0:20:A3:B1:33:F9:DD:14:84:F0:8E:8C:B5:40:94:50:9F:B5:FD
Certificate issuer: /CN=CEDD21E1F1AAAE1AE4E480B6373AA48CA5126324
Certificate serial: 60BE6E19AA6BCA74F89285B7871EAA5CB7EB952B
Authority key identifier: CE:DD:21:E1:F1:AA:AE:1A:E4:E4:80:B6:37:3A:A4:8C:A5:12:63:24
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEDD21E1F1AAAE1AE4E480B6373AA48CA5126324.cer
Subject info access: rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/323830343a343136303a383030303a3a2f33342d3334203d3e20323637343239.roa
Signing time: Thu 07 May 2026 13:38:57 +0000
ROA not before: Thu 07 May 2026 13:33:57 +0000
ROA not after: Thu 06 May 2027 13:38:57 +0000
asID: 267429
IP address blocks: 2804:4160:8000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/CEDD21E1F1AAAE1AE4E480B6373AA48CA5126324.crl
rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/CEDD21E1F1AAAE1AE4E480B6373AA48CA5126324.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEDD21E1F1AAAE1AE4E480B6373AA48CA5126324.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 13 May 2026 22:15:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:be:6e:19:aa:6b:ca:74:f8:92:85:b7:87:1e:aa:5c:b7:eb:95:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CEDD21E1F1AAAE1AE4E480B6373AA48CA5126324
Validity
Not Before: May 7 13:33:57 2026 GMT
Not After : May 6 13:38:57 2027 GMT
Subject: CN=35D020A3B133F9DD1484F08E8CB54094509FB5FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ac:01:70:6f:52:d2:e5:77:85:8f:dd:4f:bc:
17:ee:eb:c5:b7:ce:42:27:f2:59:04:58:8d:a3:75:
8f:ff:b7:a1:0b:09:41:f2:7b:90:9a:a3:2d:05:e3:
15:5b:dd:b8:b3:d4:10:28:0f:89:b7:fb:dd:03:d6:
bc:6f:f2:45:9f:1c:31:33:cb:4f:15:c3:34:78:fc:
ad:9c:d5:38:25:c4:8a:60:1c:82:ba:61:8d:67:58:
61:11:2c:bb:b1:05:0c:a3:42:93:a1:16:5f:ad:dd:
51:dd:d7:1d:ea:b2:27:94:ae:92:c0:47:63:aa:2d:
a4:ac:9a:19:05:28:ef:28:c5:40:6b:77:8a:ad:5f:
45:9c:fe:3b:72:af:22:86:bc:21:3b:77:4a:0f:d2:
56:44:e1:a1:cf:34:66:ca:4d:7e:da:d6:87:fe:e0:
16:d0:ba:f7:2a:03:49:63:4d:9b:a4:22:b1:34:82:
19:00:3a:2f:ab:0a:61:cb:ad:70:54:a7:4a:9e:33:
07:54:56:1c:bb:00:00:9e:a9:73:e4:6b:89:55:92:
a8:12:bf:20:96:ca:ce:bf:a4:7c:f8:19:df:86:27:
2a:68:7f:39:70:b8:1e:8a:fe:03:6c:13:66:0b:b8:
3b:ba:e7:31:e9:2f:1c:28:13:5e:27:b3:1a:6d:c9:
c0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D0:20:A3:B1:33:F9:DD:14:84:F0:8E:8C:B5:40:94:50:9F:B5:FD
X509v3 Authority Key Identifier:
keyid:CE:DD:21:E1:F1:AA:AE:1A:E4:E4:80:B6:37:3A:A4:8C:A5:12:63:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/CEDD21E1F1AAAE1AE4E480B6373AA48CA5126324.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEDD21E1F1AAAE1AE4E480B6373AA48CA5126324.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/323830343a343136303a383030303a3a2f33342d3334203d3e20323637343239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4160:8000::/34
Signature Algorithm: sha256WithRSAEncryption
33:c3:58:b4:2c:9d:6f:b2:61:78:e0:8f:60:12:68:7e:82:4f:
58:85:df:8a:4b:25:a7:aa:6e:76:8e:a2:65:6f:15:e6:be:cc:
31:4c:89:ca:2e:52:e9:0c:00:65:c4:4c:2b:ee:7b:12:81:ca:
b4:4d:c4:08:c8:cf:9b:30:81:e2:ce:6d:75:70:b0:a7:f6:d9:
3f:39:87:7f:c9:59:3d:0d:bc:e8:9d:55:9d:c9:d8:5a:3d:04:
28:5b:19:15:56:cd:4c:48:bb:89:92:0b:dc:4a:30:37:3c:0c:
b3:14:3b:b9:06:9a:10:66:69:dd:78:4c:d1:b2:64:0d:07:b5:
33:40:98:d6:08:a4:49:20:32:84:cf:fd:62:0c:be:f1:7e:61:
cc:20:9a:c9:5c:7b:46:d8:d7:b7:5e:a2:b0:14:07:d3:86:ca:
23:85:25:23:2f:e1:a1:df:df:2d:31:21:ed:1a:0b:24:d8:fb:
e6:25:1b:1b:c0:6b:d3:83:7e:ae:8f:18:24:64:1f:c7:ee:95:
cf:e3:11:ad:71:c7:df:b1:df:d1:9f:c5:3a:97:6e:c8:5e:6d:
f8:8b:60:9c:83:42:49:45:4c:27:94:f6:2c:c6:08:f8:d1:bf:
4f:9f:57:6d:0a:c0:fb:51:2f:ae:39:f8:d4:b1:1f:c2:06:37:
8b:d6:83:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:36:47 2026 by rpki-client