
$ rpki-client -vvvf rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/323830343a316635343a3a2f33322d3332203d3e20323732323230.roa
File: 323830343a316635343a3a2f33322d3332203d3e20323732323230.roa (raw, json)
Hash identifier: a01Q2lL2SiG2UZZLO1cvgx+kike9mwvW2v220F3GjF4=
Subject key identifier: 4A:9A:E1:18:82:58:72:2D:6F:9A:41:B3:3A:09:41:1F:21:3E:88:CD
Certificate issuer: /CN=43F6494105F288322AFC1D7A1BF2AD6C876579D8
Certificate serial: 67DE510635D2C70839F8E60F239BFD0112E1E09F
Authority key identifier: 43:F6:49:41:05:F2:88:32:2A:FC:1D:7A:1B:F2:AD:6C:87:65:79:D8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43F6494105F288322AFC1D7A1BF2AD6C876579D8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/323830343a316635343a3a2f33322d3332203d3e20323732323230.roa
Signing time: Tue 29 Sep 2026 12:00:00 +0000
ROA not before: Tue 29 Sep 2026 11:55:00 +0000
ROA not after: Tue 28 Sep 2027 12:00:00 +0000
asID: 272220
IP address blocks: 2804:1f54::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/43F6494105F288322AFC1D7A1BF2AD6C876579D8.crl
rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/43F6494105F288322AFC1D7A1BF2AD6C876579D8.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43F6494105F288322AFC1D7A1BF2AD6C876579D8.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Oct 2026 08:27:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:de:51:06:35:d2:c7:08:39:f8:e6:0f:23:9b:fd:01:12:e1:e0:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43F6494105F288322AFC1D7A1BF2AD6C876579D8
Validity
Not Before: Sep 29 11:55:00 2026 GMT
Not After : Sep 28 12:00:00 2027 GMT
Subject: CN=4A9AE1188258722D6F9A41B33A09411F213E88CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ec:5f:42:75:61:ed:b0:b3:34:25:07:c6:54:
5a:a5:26:77:3a:b3:b3:26:63:34:43:af:2b:47:a6:
bf:2a:dd:94:bb:90:e8:5c:1d:76:ac:3a:a0:04:9d:
73:d6:43:3e:27:2d:e1:9f:fc:c7:8f:c6:ca:3c:44:
ae:76:99:04:75:1a:0f:91:a9:b4:a7:a7:26:4d:63:
65:20:39:af:c5:8b:55:96:c9:a5:f8:dd:a7:ea:68:
d5:27:22:26:ca:5b:98:25:58:17:74:0e:d7:e4:ce:
81:10:ea:8d:27:0b:f0:28:a3:3c:3a:60:c2:88:40:
14:f5:d0:77:b0:72:74:90:7c:a0:60:1f:70:5d:25:
be:d0:9e:62:6e:e5:4f:c3:09:81:35:ee:dc:78:9b:
42:5c:28:aa:cb:9d:28:b7:ff:1f:27:ab:c7:84:02:
ac:c3:68:1a:f6:1a:bd:c8:83:28:8d:19:e6:f2:d9:
8f:d7:cf:4a:6b:ea:ec:78:80:ee:4b:50:5c:88:e7:
b0:4d:26:8a:2d:69:88:67:9d:a5:54:f0:09:94:61:
54:9a:f1:fa:44:0b:72:ed:32:74:24:b2:32:45:33:
c6:31:a8:66:9a:44:81:4c:a9:43:64:fe:6b:df:03:
d4:f3:0f:05:01:fb:c2:b1:62:be:a5:be:37:cf:69:
af:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9A:E1:18:82:58:72:2D:6F:9A:41:B3:3A:09:41:1F:21:3E:88:CD
X509v3 Authority Key Identifier:
keyid:43:F6:49:41:05:F2:88:32:2A:FC:1D:7A:1B:F2:AD:6C:87:65:79:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/43F6494105F288322AFC1D7A1BF2AD6C876579D8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43F6494105F288322AFC1D7A1BF2AD6C876579D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/323830343a316635343a3a2f33322d3332203d3e20323732323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1f54::/32
Signature Algorithm: sha256WithRSAEncryption
df:be:a1:68:da:cd:29:39:ea:ac:60:2e:54:b1:83:81:18:da:
b2:d3:8f:28:f7:29:20:e9:81:16:b6:28:4b:b7:6c:f0:ae:f0:
3a:2e:c6:0c:5e:27:63:d3:d9:19:cd:1e:ff:0a:80:a9:1f:38:
3e:93:bf:fc:a3:1a:fb:69:b1:ab:38:27:66:ab:23:5b:80:05:
56:d0:41:ea:77:1e:b3:86:cf:06:56:79:95:d9:f1:09:86:12:
55:ed:c9:0f:9d:24:b6:9e:06:be:fc:24:5f:2d:c7:a0:69:e1:
27:57:c5:22:9c:5b:b3:6a:8e:36:53:38:90:04:21:5b:80:fc:
b3:36:eb:08:fe:4c:40:61:0e:e6:17:8e:54:64:89:10:1a:12:
77:19:9f:0f:f8:a7:37:41:ac:6a:7b:b9:36:9a:1f:fc:bb:d9:
96:55:de:ec:15:af:b6:44:66:fa:23:b3:f8:d6:db:f0:dc:42:
77:22:e4:4e:6b:33:ea:74:bb:2f:ab:2d:51:e5:a0:19:c3:96:
7a:80:76:7d:8d:f0:70:5c:4e:8b:ae:af:2e:a7:cd:16:9c:aa:
a0:8d:62:1e:22:56:1e:7b:6e:32:a6:15:71:89:32:dd:20:b1:
90:49:e6:eb:c4:db:a3:88:ba:08:e2:21:25:47:0b:09:b5:d1:
2f:40:35:e8
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUZ95RBjXSxwg5+OYPI5v9ARLh4J8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNGNjQ5NDEwNUYyODgzMjJBRkMxRDdBMUJGMkFENkM4
NzY1NzlEODAeFw0yNjA5MjkxMTU1MDBaFw0yNzA5MjgxMjAwMDBaMDMxMTAvBgNV
BAMTKDRBOUFFMTE4ODI1ODcyMkQ2RjlBNDFCMzNBMDk0MTFGMjEzRTg4Q0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt7F9CdWHtsLM0JQfGVFqlJnc6
s7MmYzRDrytHpr8q3ZS7kOhcHXasOqAEnXPWQz4nLeGf/MePxso8RK52mQR1Gg+R
qbSnpyZNY2UgOa/Fi1WWyaX43afqaNUnIibKW5glWBd0DtfkzoEQ6o0nC/Aoozw6
YMKIQBT10HewcnSQfKBgH3BdJb7QnmJu5U/DCYE17tx4m0JcKKrLnSi3/x8nq8eE
AqzDaBr2Gr3IgyiNGeby2Y/Xz0pr6ux4gO5LUFyI57BNJootaYhnnaVU8AmUYVSa
8fpEC3LtMnQksjJFM8YxqGaaRIFMqUNk/mvfA9TzDwUB+8KxYr6lvjfPaa/pAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUSprhGIJYci1vmkGzOglBHyE+iM0wHwYDVR0j
BBgwFoAUQ/ZJQQXyiDIq/B16G/KtbIdledgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmFkRDRXMkF5b25wRDRGTVZveENFQ2Z2c2VnN3hESGlrYUFqc2R0WEFj
RXUvMC80M0Y2NDk0MTA1RjI4ODMyMkFGQzFEN0ExQkYyQUQ2Qzg3NjU3OUQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzRjY0OTQxMDVGMjg4MzIy
QUZDMUQ3QTFCRjJBRDZDODc2NTc5RDguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JhZEQ0VzJBeW9ucEQ0Rk1Wb3hDRUNmdnNlZzd4REhpa2FBanNkdFhBY0V1LzAv
MzIzODMwMzQzYTMxNjYzNTM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMy
MzIzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQfVDANBgkqhkiG9w0BAQsFAAOCAQEA376haNrN
KTnqrGAuVLGDgRjastOPKPcpIOmBFrYoS7ds8K7wOi7GDF4nY9PZGc0e/wqAqR84
PpO//KMa+2mxqzgnZqsjW4AFVtBB6nces4bPBlZ5ldnxCYYSVe3JD50ktp4Gvvwk
Xy3HoGnhJ1fFIpxbs2qONlM4kAQhW4D8szbrCP5MQGEO5heOVGSJEBoSdxmfD/in
N0Gsanu5Npof/LvZllXe7BWvtkRm+iOz+Nbb8NxCdyLkTmsz6nS7L6stUeWgGcOW
eoB2fY3wcFxOi66vLqfNFpyqoI1iHiJWHntuMqYVcYky3SCxkEnm68Tbo4i6COIh
JUcLCbXRL0A16A==
-----END CERTIFICATE-----
Generated at Sat Oct 17 02:32:34 2026 by rpki-client