
$ rpki-client -vvvf rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a623030303a3a2f34382d3438203d3e20323638373037.roa
File: 323830343a353938343a623030303a3a2f34382d3438203d3e20323638373037.roa (raw, json)
Hash identifier: K0pcIMza6fz2pNg/qeBngdtoFmhG47N6sHFIyhkt4Vg=
Subject key identifier: F1:AB:19:3A:05:82:B6:86:61:BF:75:56:7E:4A:79:EB:F0:B8:6E:2F
Certificate issuer: /CN=C35549FD881F7AAE59D817159EC9B19049B93616
Certificate serial: 5D15636C42E65123F6CFC7AD4F18F4203A1A6A6E
Authority key identifier: C3:55:49:FD:88:1F:7A:AE:59:D8:17:15:9E:C9:B1:90:49:B9:36:16
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C35549FD881F7AAE59D817159EC9B19049B93616.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a623030303a3a2f34382d3438203d3e20323638373037.roa
Signing time: Sun 06 Sep 2026 20:12:58 +0000
ROA not before: Sun 06 Sep 2026 20:07:58 +0000
ROA not after: Sun 05 Sep 2027 20:12:58 +0000
asID: 268707
IP address blocks: 2804:5984:b000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/C35549FD881F7AAE59D817159EC9B19049B93616.crl
rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/C35549FD881F7AAE59D817159EC9B19049B93616.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C35549FD881F7AAE59D817159EC9B19049B93616.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Oct 2026 19:36:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:15:63:6c:42:e6:51:23:f6:cf:c7:ad:4f:18:f4:20:3a:1a:6a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C35549FD881F7AAE59D817159EC9B19049B93616
Validity
Not Before: Sep 6 20:07:58 2026 GMT
Not After : Sep 5 20:12:58 2027 GMT
Subject: CN=F1AB193A0582B68661BF75567E4A79EBF0B86E2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:97:1b:e3:8a:f3:14:d6:76:12:bd:b8:1e:05:
85:c7:4e:ea:2c:76:3e:35:23:58:d1:7c:96:94:0d:
f8:ac:96:7a:97:07:a6:a2:60:42:05:a8:f7:e9:00:
35:ac:d4:e2:3c:b4:93:c4:45:79:c2:53:4c:fd:f8:
0d:c6:c6:67:63:4c:71:48:a1:f7:aa:55:66:dd:d3:
d9:21:b2:2d:e3:2c:56:30:ec:9d:b6:e9:08:21:99:
02:ec:fa:33:65:0e:d1:5f:4a:a2:a5:a7:fb:57:41:
e3:33:01:43:05:e4:7d:60:69:2d:fb:ff:ad:9c:22:
aa:a9:bd:23:ff:2c:1c:17:49:ac:4e:42:da:87:e2:
af:56:7b:ab:e1:e3:d6:85:c0:dc:5a:e9:13:07:ac:
c1:73:5f:48:c4:94:2c:06:ea:34:9e:9a:02:c5:fd:
8e:a0:5a:a7:bb:78:8d:fa:7c:e7:9b:a6:35:21:37:
73:7b:5c:48:45:da:23:34:d5:93:fb:b3:f0:2e:02:
75:ea:a6:7b:d2:94:78:0f:c4:91:fd:52:5c:e5:d3:
db:1a:26:0a:62:2e:82:df:85:4a:00:27:dd:af:eb:
f6:b0:fa:7d:26:2c:70:f5:32:07:b4:d2:00:78:9b:
cb:f2:43:ea:67:c9:cb:c7:93:86:bd:89:69:38:b7:
01:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:AB:19:3A:05:82:B6:86:61:BF:75:56:7E:4A:79:EB:F0:B8:6E:2F
X509v3 Authority Key Identifier:
keyid:C3:55:49:FD:88:1F:7A:AE:59:D8:17:15:9E:C9:B1:90:49:B9:36:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/C35549FD881F7AAE59D817159EC9B19049B93616.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C35549FD881F7AAE59D817159EC9B19049B93616.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a623030303a3a2f34382d3438203d3e20323638373037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5984:b000::/48
Signature Algorithm: sha256WithRSAEncryption
9b:5b:16:92:1a:22:04:34:05:8e:c3:bc:65:27:93:41:67:d0:
9d:f6:8b:4e:fa:44:42:fc:ac:97:c3:7b:2c:52:be:7b:3c:1e:
4f:a0:14:f4:e9:21:91:97:2d:c3:4f:c1:35:9d:45:65:b1:1d:
cd:b8:61:7d:98:82:9c:56:7e:5c:2d:a1:6b:8a:ce:4c:e7:f5:
16:7a:b8:60:7a:76:4f:d4:7b:ad:d8:2b:90:f9:cc:d5:98:6d:
e6:ba:cd:64:73:92:8b:ea:6d:96:00:30:35:8f:1c:65:bc:4f:
27:4e:d5:f8:b9:56:d4:6f:e9:0f:06:66:28:ab:49:eb:bf:0d:
ef:07:19:80:72:b6:e9:50:7f:b8:fe:89:ba:d0:f9:2a:be:56:
9f:65:7a:77:f8:c5:49:ff:8d:f2:e7:18:3d:07:77:dd:5a:eb:
06:55:9e:c1:40:e8:c2:e1:6e:29:5a:1b:8e:1c:ac:b4:f4:bb:
a4:88:68:b3:35:7d:6a:16:4e:46:e1:01:ec:43:83:06:19:58:
48:54:ec:1a:7b:1c:d8:53:2a:30:c0:6a:31:8f:2f:44:41:75:
21:d5:a3:11:eb:3f:68:5a:8f:2c:40:be:d9:48:7c:b2:95:13:
70:e3:46:a9:cc:03:39:36:a0:31:e3:6d:ca:07:8f:22:57:97:
17:bb:bd:4d
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUXRVjbELmUSP2z8etTxj0IDoaam4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzM1NTQ5RkQ4ODFGN0FBRTU5RDgxNzE1OUVDOUIxOTA0
OUI5MzYxNjAeFw0yNjA5MDYyMDA3NThaFw0yNzA5MDUyMDEyNThaMDMxMTAvBgNV
BAMTKEYxQUIxOTNBMDU4MkI2ODY2MUJGNzU1NjdFNEE3OUVCRjBCODZFMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvlxvjivMU1nYSvbgeBYXHTuos
dj41I1jRfJaUDfislnqXB6aiYEIFqPfpADWs1OI8tJPERXnCU0z9+A3GxmdjTHFI
ofeqVWbd09khsi3jLFYw7J226QghmQLs+jNlDtFfSqKlp/tXQeMzAUMF5H1gaS37
/62cIqqpvSP/LBwXSaxOQtqH4q9We6vh49aFwNxa6RMHrMFzX0jElCwG6jSemgLF
/Y6gWqe7eI36fOebpjUhN3N7XEhF2iM01ZP7s/AuAnXqpnvSlHgPxJH9Ulzl09sa
JgpiLoLfhUoAJ92v6/aw+n0mLHD1Mge00gB4m8vyQ+pnycvHk4a9iWk4twGvAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQU8asZOgWCtoZhv3VWfkp56/C4bi8wHwYDVR0j
BBgwFoAUw1VJ/Ygfeq5Z2BcVnsmxkEm5NhYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXFFRHF1NVJOaDhGdE1qZXlHbmtXaFBDVmdMUzJ1cWY0eW1SaFVLN3I5
RVYvMC9DMzU1NDlGRDg4MUY3QUFFNTlEODE3MTU5RUM5QjE5MDQ5QjkzNjE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MzNTU0OUZEODgxRjdBQUU1
OUQ4MTcxNTlFQzlCMTkwNDlCOTM2MTYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FxRURxdTVSTmg4RnRNamV5R25rV2hQQ1ZnTFMydXFmNHltUmhVSzdyOUVWLzAv
MzIzODMwMzQzYTM1MzkzODM0M2E2MjMwMzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzODM3MzAzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEWYSwADANBgkqhkiG9w0BAQsF
AAOCAQEAm1sWkhoiBDQFjsO8ZSeTQWfQnfaLTvpEQvysl8N7LFK+ezweT6AU9Okh
kZctw0/BNZ1FZbEdzbhhfZiCnFZ+XC2ha4rOTOf1Fnq4YHp2T9R7rdgrkPnM1Zht
5rrNZHOSi+ptlgAwNY8cZbxPJ07V+LlW1G/pDwZmKKtJ678N7wcZgHK26VB/uP6J
utD5Kr5Wn2V6d/jFSf+N8ucYPQd33VrrBlWewUDowuFuKVobjhystPS7pIhoszV9
ahZORuEB7EODBhlYSFTsGnsc2FMqMMBqMY8vREF1IdWjEes/aFqPLEC+2Uh8spUT
cONGqcwDOTagMeNtygePIleXF7u9TQ==
-----END CERTIFICATE-----
Generated at Wed Oct 28 19:44:45 2026 by rpki-client