
$ rpki-client -vvf rpki-repo.registro.br/repo/BRQft5eS3acTCS4kKrMXMBcEpHTjkSiYrAd82k6T2jnq/0/323830343a356331303a3a2f33322d3438203d3e20323638383835.roa
File: 323830343a356331303a3a2f33322d3438203d3e20323638383835.roa (raw, json)
Hash identifier: MQkQM/hxevZNuPnNhx80Kg5XT/j7pK9T3zkZf+6sVMY=
Subject key identifier: 04:E9:1C:34:01:20:C0:CB:3C:7B:47:C3:EC:A2:9B:C7:D6:23:82:40
Certificate issuer: /CN=FAA3CA7253FF7DA2F25A4D4C953367E9662154DD
Certificate serial: 20E0F06394CEE30F748EED4853EA2FAC10540F02
Authority key identifier: FA:A3:CA:72:53:FF:7D:A2:F2:5A:4D:4C:95:33:67:E9:66:21:54:DD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA3CA7253FF7DA2F25A4D4C953367E9662154DD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BRQft5eS3acTCS4kKrMXMBcEpHTjkSiYrAd82k6T2jnq/0/323830343a356331303a3a2f33322d3438203d3e20323638383835.roa
Signing time: Thu 26 Mar 2026 12:55:16 +0000
ROA not before: Thu 26 Mar 2026 12:50:16 +0000
ROA not after: Thu 25 Mar 2027 12:55:16 +0000
asID: 268885
IP address blocks: 2804:5c10::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BRQft5eS3acTCS4kKrMXMBcEpHTjkSiYrAd82k6T2jnq/0/FAA3CA7253FF7DA2F25A4D4C953367E9662154DD.crl
rsync://rpki-repo.registro.br/repo/BRQft5eS3acTCS4kKrMXMBcEpHTjkSiYrAd82k6T2jnq/0/FAA3CA7253FF7DA2F25A4D4C953367E9662154DD.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA3CA7253FF7DA2F25A4D4C953367E9662154DD.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 14:58:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:e0:f0:63:94:ce:e3:0f:74:8e:ed:48:53:ea:2f:ac:10:54:0f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FAA3CA7253FF7DA2F25A4D4C953367E9662154DD
Validity
Not Before: Mar 26 12:50:16 2026 GMT
Not After : Mar 25 12:55:16 2027 GMT
Subject: CN=04E91C340120C0CB3C7B47C3ECA29BC7D6238240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b9:3d:16:c0:a8:53:75:f7:c2:c7:19:e2:46:
3d:e8:0f:2c:b2:80:c7:98:d0:57:46:d9:6f:78:90:
27:a1:f0:c7:54:b4:7b:f5:fc:78:23:3e:1f:93:40:
10:bc:a4:17:1f:bd:93:e0:97:30:96:32:f7:9e:f0:
be:ba:3e:f1:ca:ab:a8:30:13:b3:25:a5:0f:56:6e:
d7:ea:74:01:b6:7b:ac:c0:02:be:e4:56:62:a8:f4:
79:22:94:33:54:69:3c:64:79:31:64:b5:52:4f:57:
03:e4:1e:a4:28:eb:e8:1e:65:a0:c1:ef:65:48:f7:
bb:3c:ee:56:5a:18:47:aa:ad:2c:b0:db:c6:fa:a4:
fd:0d:06:79:25:34:c8:1e:fc:5b:ea:bf:94:dc:71:
f8:4c:14:1d:c3:a4:bd:bc:25:f0:e8:f9:d7:ec:84:
d8:0b:49:8c:72:e3:4f:64:47:7b:80:f3:c3:bb:d1:
3c:ae:21:26:16:84:96:37:ff:3a:2d:0c:21:f4:8c:
99:19:48:0f:70:d6:37:5e:3f:b8:ce:96:1c:90:f4:
65:61:10:80:87:5b:ad:bc:79:6d:8d:d6:95:56:f5:
5c:51:0d:88:3e:08:d2:ab:a3:cd:31:92:99:0c:d8:
be:c0:9a:d6:b1:0a:fd:c8:70:a5:5c:bf:44:02:6b:
c1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E9:1C:34:01:20:C0:CB:3C:7B:47:C3:EC:A2:9B:C7:D6:23:82:40
X509v3 Authority Key Identifier:
keyid:FA:A3:CA:72:53:FF:7D:A2:F2:5A:4D:4C:95:33:67:E9:66:21:54:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BRQft5eS3acTCS4kKrMXMBcEpHTjkSiYrAd82k6T2jnq/0/FAA3CA7253FF7DA2F25A4D4C953367E9662154DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA3CA7253FF7DA2F25A4D4C953367E9662154DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRQft5eS3acTCS4kKrMXMBcEpHTjkSiYrAd82k6T2jnq/0/323830343a356331303a3a2f33322d3438203d3e20323638383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5c10::/32
Signature Algorithm: sha256WithRSAEncryption
e3:a8:ae:32:07:55:b2:3f:a9:ce:d2:a7:de:c3:c7:c3:47:ec:
d1:65:af:3f:0e:31:aa:83:c7:db:7d:fb:40:19:a5:c4:38:56:
92:31:86:be:d7:1c:42:8e:e5:8a:dc:69:ac:4f:38:5f:a7:f0:
e2:dc:f2:c5:46:fe:fa:fc:53:f8:3a:3b:24:c4:12:1f:c1:cd:
17:90:66:75:48:88:3c:eb:f4:f5:b8:0b:d3:a0:f8:d2:a8:9d:
46:92:1e:15:d2:74:ea:1a:84:75:68:e4:0e:03:27:68:59:af:
75:cf:85:46:df:dd:0f:87:cf:a4:9e:53:d5:0e:77:b2:de:ee:
cb:61:7b:fd:cd:9e:66:3b:cd:1e:86:52:ab:7c:05:78:a3:26:
e9:86:0b:42:fb:2e:fe:ef:c8:ef:c1:ce:31:40:ad:03:ec:7c:
9b:16:f4:35:46:1e:98:ca:ff:1c:da:6e:01:96:39:81:b1:38:
2a:fc:79:b7:ff:cf:c4:57:93:e3:ba:af:e0:35:13:e4:2f:1a:
20:ea:9b:7b:cc:3b:11:03:94:0e:94:31:15:56:87:4c:78:9d:
a4:0d:c5:13:1b:08:20:1e:58:55:1f:28:1c:12:85:8d:5b:d0:
a8:df:c7:21:7f:21:02:c0:cc:11:a1:b3:1e:13:fc:75:91:eb:
58:7c:cd:53
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUIODwY5TO4w90ju1IU+ovrBBUDwIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkFBM0NBNzI1M0ZGN0RBMkYyNUE0RDRDOTUzMzY3RTk2
NjIxNTRERDAeFw0yNjAzMjYxMjUwMTZaFw0yNzAzMjUxMjU1MTZaMDMxMTAvBgNV
BAMTKDA0RTkxQzM0MDEyMEMwQ0IzQzdCNDdDM0VDQTI5QkM3RDYyMzgyNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4uT0WwKhTdffCxxniRj3oDyyy
gMeY0FdG2W94kCeh8MdUtHv1/HgjPh+TQBC8pBcfvZPglzCWMvee8L66PvHKq6gw
E7MlpQ9WbtfqdAG2e6zAAr7kVmKo9HkilDNUaTxkeTFktVJPVwPkHqQo6+geZaDB
72VI97s87lZaGEeqrSyw28b6pP0NBnklNMge/Fvqv5TccfhMFB3DpL28JfDo+dfs
hNgLSYxy409kR3uA88O70TyuISYWhJY3/zotDCH0jJkZSA9w1jdeP7jOlhyQ9GVh
EICHW628eW2N1pVW9VxRDYg+CNKro80xkpkM2L7AmtaxCv3IcKVcv0QCa8GHAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUBOkcNAEgwMs8e0fD7KKbx9YjgkAwHwYDVR0j
BBgwFoAU+qPKclP/faLyWk1MlTNn6WYhVN0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlJRZnQ1ZVMzYWNUQ1M0a0tyTVhNQmNFcEhUamtTaVlyQWQ4Mms2VDJq
bnEvMC9GQUEzQ0E3MjUzRkY3REEyRjI1QTRENEM5NTMzNjdFOTY2MjE1NERELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZBQTNDQTcyNTNGRjdEQTJG
MjVBNEQ0Qzk1MzM2N0U5NjYyMTU0REQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JSUWZ0NWVTM2FjVENTNGtLck1YTUJjRXBIVGprU2lZckFkODJrNlQyam5xLzAv
MzIzODMwMzQzYTM1NjMzMTMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM4
MzgzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARcEDANBgkqhkiG9w0BAQsFAAOCAQEA46iuMgdV
sj+pztKn3sPHw0fs0WWvPw4xqoPH2337QBmlxDhWkjGGvtccQo7litxprE84X6fw
4tzyxUb++vxT+Do7JMQSH8HNF5BmdUiIPOv09bgL06D40qidRpIeFdJ06hqEdWjk
DgMnaFmvdc+FRt/dD4fPpJ5T1Q53st7uy2F7/c2eZjvNHoZSq3wFeKMm6YYLQvsu
/u/I78HOMUCtA+x8mxb0NUYemMr/HNpuAZY5gbE4Kvx5t//PxFeT47qv4DUT5C8a
IOqbe8w7EQOUDpQxFVaHTHidpA3FExsIIB5YVR8oHBKFjVvQqN/HIX8hAsDMEaGz
HhP8dZHrWHzNUw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:43:26 2026 by rpki-client