
$ rpki-client -vvf rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/323830343a6262633a3a2f33322d313238203d3e203532383232.roa
File: 323830343a6262633a3a2f33322d313238203d3e203532383232.roa (raw, json)
Hash identifier: UncjGq5TZGfZozMutXMWV+C/0UpTQ5K5N19Rbyzx5qU=
Subject key identifier: 5D:31:09:91:1D:ED:FE:B7:1C:3A:AE:5D:04:30:6E:C8:01:40:A9:5A
Certificate issuer: /CN=2ECFD6270713C15F56BC52BA66D1A749FFE56168
Certificate serial: 5D8BAA549DB80B82837C594A4EE4E1FB1443890F
Authority key identifier: 2E:CF:D6:27:07:13:C1:5F:56:BC:52:BA:66:D1:A7:49:FF:E5:61:68
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ECFD6270713C15F56BC52BA66D1A749FFE56168.cer
Subject info access: rsync://rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/323830343a6262633a3a2f33322d313238203d3e203532383232.roa
Signing time: Wed 22 Apr 2026 18:31:32 +0000
ROA not before: Wed 22 Apr 2026 18:26:32 +0000
ROA not after: Wed 21 Apr 2027 18:31:32 +0000
asID: 52822
IP address blocks: 2804:bbc::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/2ECFD6270713C15F56BC52BA66D1A749FFE56168.crl
rsync://rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/2ECFD6270713C15F56BC52BA66D1A749FFE56168.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ECFD6270713C15F56BC52BA66D1A749FFE56168.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 14 May 2026 05:46:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:8b:aa:54:9d:b8:0b:82:83:7c:59:4a:4e:e4:e1:fb:14:43:89:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ECFD6270713C15F56BC52BA66D1A749FFE56168
Validity
Not Before: Apr 22 18:26:32 2026 GMT
Not After : Apr 21 18:31:32 2027 GMT
Subject: CN=5D3109911DEDFEB71C3AAE5D04306EC80140A95A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c2:96:c7:13:51:bb:55:ec:f7:53:ce:0e:76:
f9:ac:ff:ca:4e:0a:a4:54:4d:0f:40:10:bb:20:85:
42:42:b8:97:1f:88:64:e7:68:d0:b5:65:f8:fa:5f:
e1:bc:e0:cc:b8:c7:3d:dd:46:8c:c1:db:c9:eb:04:
98:e0:69:0d:d8:b0:fe:c2:16:67:53:42:83:7f:e6:
ab:c6:ad:52:c2:c9:38:43:3b:c6:6a:12:ee:e7:18:
df:90:10:5e:7d:27:01:09:98:46:1d:a6:d1:6e:5d:
d1:dc:c0:a0:42:31:6a:c2:c5:e3:5f:1d:d3:f9:97:
91:ab:f5:5c:52:db:9b:57:96:f4:e0:94:9e:c0:88:
74:ce:6e:01:8c:de:ca:e2:c4:67:a2:00:65:8a:f8:
6b:b6:dd:3b:8b:7f:91:4b:40:80:98:ce:a4:72:9e:
d5:3d:30:ce:76:67:ee:c2:9f:ed:bf:eb:bb:c2:f8:
49:b6:c0:3f:d6:e8:e0:fb:e1:4f:ea:eb:c0:b5:ea:
b1:ff:31:8c:3d:4f:78:ec:01:04:0c:2a:5b:be:99:
8c:fe:3c:ef:dc:af:a0:a9:f1:b8:9c:f6:d8:e8:6b:
a5:3b:68:36:85:43:0f:5e:4c:91:1d:c2:49:fa:e1:
93:42:85:16:f8:d7:ce:1d:d0:b7:d7:c6:98:b8:23:
8c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:31:09:91:1D:ED:FE:B7:1C:3A:AE:5D:04:30:6E:C8:01:40:A9:5A
X509v3 Authority Key Identifier:
keyid:2E:CF:D6:27:07:13:C1:5F:56:BC:52:BA:66:D1:A7:49:FF:E5:61:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/2ECFD6270713C15F56BC52BA66D1A749FFE56168.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ECFD6270713C15F56BC52BA66D1A749FFE56168.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/323830343a6262633a3a2f33322d313238203d3e203532383232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:bbc::/32
Signature Algorithm: sha256WithRSAEncryption
76:70:4f:0d:91:56:76:4c:8d:28:31:3e:87:d2:7e:c5:9f:55:
3d:fe:fe:c7:bd:55:fb:dd:19:af:51:6c:b2:86:be:cf:fc:5b:
46:5a:e9:97:48:59:ce:75:5d:95:a9:7c:f5:be:2c:55:8a:54:
e0:3f:2c:51:e2:fd:b5:b5:a4:6f:c1:92:fd:23:cd:6c:68:5a:
9a:97:80:be:12:3a:85:e2:3c:02:4e:2d:a7:39:02:44:a4:98:
da:d8:b2:86:6d:60:23:af:55:bc:df:a8:61:a4:cb:00:f7:6a:
3d:ff:06:34:2b:58:45:e9:74:cc:a3:9a:cf:55:dd:50:15:dc:
c4:1b:c4:a0:d7:23:5f:3e:c1:0f:56:8f:f3:f8:cd:de:50:93:
26:a2:10:e4:5e:68:84:81:6d:f1:1c:b1:d1:31:49:ca:e9:99:
38:1a:2b:96:71:31:04:38:88:57:b9:5f:87:77:82:25:54:09:
83:8e:01:75:17:08:fe:c1:7f:ff:00:86:2c:ea:4b:45:bb:07:
6e:b1:46:47:82:c3:b2:f0:68:75:01:27:cd:08:08:f3:3b:93:
02:0f:96:93:10:72:54:fe:ac:93:11:aa:03:23:f3:78:36:10:
7f:ca:a7:fb:56:76:ff:2c:02:73:95:26:73:8d:14:0e:4d:0d:
84:6f:52:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:15:48 2026 by rpki-client