
$ rpki-client -vvf rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/323830343a333264383a3a2f33322d3430203d3e203238323132.roa
File: 323830343a333264383a3a2f33322d3430203d3e203238323132.roa (raw, json)
Hash identifier: IPaFoaBl5hj6rncz5PwbqRcJfQqgI+nonnkVCiDrolk=
Subject key identifier: 97:E2:7A:33:40:A6:F0:D0:33:39:83:1B:D1:69:38:6E:9D:26:89:36
Certificate issuer: /CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C
Certificate serial: 221A49EC7B49F766BE454DD90E26232908906415
Authority key identifier: 02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/323830343a333264383a3a2f33322d3430203d3e203238323132.roa
Signing time: Tue 21 Apr 2026 04:38:07 +0000
ROA not before: Tue 21 Apr 2026 04:33:07 +0000
ROA not after: Tue 20 Apr 2027 04:38:07 +0000
asID: 28212
IP address blocks: 2804:32d8::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.crl
rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 14 May 2026 18:36:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:1a:49:ec:7b:49:f7:66:be:45:4d:d9:0e:26:23:29:08:90:64:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C
Validity
Not Before: Apr 21 04:33:07 2026 GMT
Not After : Apr 20 04:38:07 2027 GMT
Subject: CN=97E27A3340A6F0D03339831BD169386E9D268936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5a:99:85:06:6d:67:33:2b:72:79:4e:9c:6b:
d6:d3:3c:77:07:d1:54:c1:08:e3:ca:a4:a5:13:2b:
b3:38:28:5f:5c:83:6d:76:b6:3a:4c:28:fd:66:7b:
83:34:70:ba:39:0f:ee:8d:6f:8b:03:28:7f:1f:23:
f8:85:fa:ef:bf:8c:6b:38:9e:64:b9:49:15:32:c9:
e1:27:71:a0:af:ac:87:48:ca:f1:37:44:ef:65:b0:
a8:d7:d4:d0:f5:42:8a:d7:df:b4:e5:1b:9c:20:ab:
bb:78:e5:cb:f9:da:e3:c9:23:d4:83:f4:70:f6:55:
ce:85:5c:77:52:d8:1e:a0:f2:49:1c:e1:f8:3d:73:
11:93:88:04:c8:6f:27:b0:a9:51:f3:5c:1e:5a:bf:
4d:1f:f6:5e:53:eb:1f:91:2b:12:68:d8:d9:60:aa:
df:ca:46:73:b3:73:81:73:f0:49:5d:0a:9c:f0:0b:
67:db:04:6a:c7:6f:37:84:ff:e1:c8:5f:78:d0:ba:
bf:9f:d4:a6:5a:97:8e:c8:ee:a2:6c:af:36:a9:d5:
43:d0:53:4b:f6:85:e1:7c:4b:2a:86:0c:7c:50:ca:
9a:bd:fd:b6:8d:17:b8:70:f0:7a:0c:09:2e:33:e1:
2e:a9:10:60:95:16:40:99:20:e4:4a:fb:26:8d:44:
1a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E2:7A:33:40:A6:F0:D0:33:39:83:1B:D1:69:38:6E:9D:26:89:36
X509v3 Authority Key Identifier:
keyid:02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/323830343a333264383a3a2f33322d3430203d3e203238323132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:32d8::/32
Signature Algorithm: sha256WithRSAEncryption
58:a5:7f:1f:c5:0a:73:d5:0d:0c:80:5c:be:f9:68:cd:5e:97:
79:e5:19:e7:6b:85:65:e5:16:95:69:d8:fd:26:5c:28:69:69:
c8:16:c6:f2:60:09:df:d8:45:cc:70:8b:6e:e9:d4:02:6a:3f:
93:e9:98:d2:04:01:31:e4:f6:55:82:84:a9:58:32:87:b2:e1:
32:72:03:8f:a9:d7:b2:cb:25:29:f8:70:ad:7b:94:49:64:42:
9a:67:05:1f:06:92:4d:82:3e:ab:40:23:04:bc:4a:a3:fb:89:
18:36:34:07:eb:bd:b0:17:96:3c:98:70:1b:0c:ca:be:ea:90:
75:8a:17:80:42:1a:7d:b2:c2:fd:5a:04:94:23:c5:cc:77:6c:
64:76:ea:ab:50:88:7b:98:f5:5c:91:30:a6:13:3f:1d:27:54:
d2:8c:09:6a:49:f5:20:58:89:e9:2a:6d:dc:92:c5:1a:3a:c9:
bf:5c:5c:b8:5d:ba:50:86:71:4e:21:56:63:cc:8a:5e:12:b0:
13:e7:57:0c:ab:75:a6:99:76:e8:4c:b0:a3:a3:db:09:f5:e2:
53:fc:cb:0b:d9:72:5c:af:3d:d4:4d:c9:9b:1f:6c:d5:b5:31:
8c:5e:62:dd:0d:fa:f8:16:bf:fc:d4:29:1c:4e:43:91:35:c7:
7b:30:d0:46
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUIhpJ7HtJ92a+RU3ZDiYjKQiQZBUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDJEOEEyQUQ1MzFGMTI5RTIxRDkyRDI3NUUwRUZEMzgw
QzkzRkMzQzAeFw0yNjA0MjEwNDMzMDdaFw0yNzA0MjAwNDM4MDdaMDMxMTAvBgNV
BAMTKDk3RTI3QTMzNDBBNkYwRDAzMzM5ODMxQkQxNjkzODZFOUQyNjg5MzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQWpmFBm1nMytyeU6ca9bTPHcH
0VTBCOPKpKUTK7M4KF9cg212tjpMKP1me4M0cLo5D+6Nb4sDKH8fI/iF+u+/jGs4
nmS5SRUyyeEncaCvrIdIyvE3RO9lsKjX1ND1QorX37TlG5wgq7t45cv52uPJI9SD
9HD2Vc6FXHdS2B6g8kkc4fg9cxGTiATIbyewqVHzXB5av00f9l5T6x+RKxJo2Nlg
qt/KRnOzc4Fz8EldCpzwC2fbBGrHbzeE/+HIX3jQur+f1KZal47I7qJsrzap1UPQ
U0v2heF8SyqGDHxQypq9/baNF7hw8HoMCS4z4S6pEGCVFkCZIORK+yaNRBoDAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUl+J6M0Cm8NAzOYMb0Wk4bp0miTYwHwYDVR0j
BBgwFoAUAtiirVMfEp4h2S0nXg79OAyT/DwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0JwV2pFWGlQRFNMTXhYZUVLdEIyM01UdGVpcXNOdUFMUFlKdzV6V1lW
a1gvMS8wMkQ4QTJBRDUzMUYxMjlFMjFEOTJEMjc1RTBFRkQzODBDOTNGQzNDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAyRDhBMkFENTMxRjEyOUUy
MUQ5MkQyNzVFMEVGRDM4MEM5M0ZDM0MuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NCcFdqRVhpUERTTE14WGVFS3RCMjNNVHRlaXFzTnVBTFBZSnc1eldZVmtYLzEv
MzIzODMwMzQzYTMzMzI2NDM4M2EzYTJmMzMzMjJkMzQzMDIwM2QzZTIwMzIzODMy
MzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEMtgwDQYJKoZIhvcNAQELBQADggEBAFilfx/FCnPV
DQyAXL75aM1el3nlGedrhWXlFpVp2P0mXChpacgWxvJgCd/YRcxwi27p1AJqP5Pp
mNIEATHk9lWChKlYMoey4TJyA4+p17LLJSn4cK17lElkQppnBR8Gkk2CPqtAIwS8
SqP7iRg2NAfrvbAXljyYcBsMyr7qkHWKF4BCGn2ywv1aBJQjxcx3bGR26qtQiHuY
9VyRMKYTPx0nVNKMCWpJ9SBYiekqbdySxRo6yb9cXLhdulCGcU4hVmPMil4SsBPn
VwyrdaaZduhMsKOj2wn14lP8ywvZclyvPdRNyZsfbNW1MYxeYt0N+vgWv/zUKRxO
Q5E1x3sw0EY=
-----END CERTIFICATE-----
Generated at Wed May 13 19:55:48 2026 by rpki-client