
$ rpki-client -vvf rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/323030313a313239633a3a2f33322d3438203d3e203232333536.roa
File: 323030313a313239633a3a2f33322d3438203d3e203232333536.roa (raw, json)
Hash identifier: m5Nc9dH10neNbKM+w3cyytiacRROX+YRbx16uynq/lQ=
Subject key identifier: 53:23:D3:B4:E3:2A:32:3B:93:D3:BA:3C:66:39:E2:3D:FF:02:05:90
Certificate issuer: /CN=968400C9DFC16D643EF5C94C34F993F17C7568AA
Certificate serial: 5A1B36ED9831D238A1CB1A54690390A8960123D5
Authority key identifier: 96:84:00:C9:DF:C1:6D:64:3E:F5:C9:4C:34:F9:93:F1:7C:75:68:AA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968400C9DFC16D643EF5C94C34F993F17C7568AA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/323030313a313239633a3a2f33322d3438203d3e203232333536.roa
Signing time: Fri 20 Mar 2026 15:30:33 +0000
ROA not before: Fri 20 Mar 2026 15:25:33 +0000
ROA not after: Fri 19 Mar 2027 15:30:33 +0000
asID: 22356
IP address blocks: 2001:129c::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.crl
rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968400C9DFC16D643EF5C94C34F993F17C7568AA.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:1b:36:ed:98:31:d2:38:a1:cb:1a:54:69:03:90:a8:96:01:23:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=968400C9DFC16D643EF5C94C34F993F17C7568AA
Validity
Not Before: Mar 20 15:25:33 2026 GMT
Not After : Mar 19 15:30:33 2027 GMT
Subject: CN=5323D3B4E32A323B93D3BA3C6639E23DFF020590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:dd:85:c3:b8:b3:db:c0:1c:ec:cd:b9:26:4d:
62:0e:ed:35:fe:bb:b5:56:19:c1:66:15:b5:23:bb:
a9:11:d0:5a:7a:d5:02:09:85:94:1e:e5:19:56:9a:
98:f3:c7:23:13:42:79:12:74:6a:c0:f3:ca:c9:fb:
7d:e7:8d:1c:09:1e:27:78:f3:b6:64:d3:a0:fa:e8:
22:6c:d1:c4:f2:b8:43:e0:36:26:c5:50:19:ee:b5:
f1:a4:16:50:c8:2e:69:ee:77:ad:80:4e:55:bd:91:
41:29:ef:5a:1a:dc:02:b7:49:56:6d:14:d4:ed:08:
d3:7b:4c:68:59:ab:f6:59:08:b0:27:e9:86:8d:53:
72:35:37:48:ae:1b:4d:71:4e:2c:0c:34:cb:43:f0:
b5:66:15:ea:14:a6:8a:ee:41:92:36:ca:c9:76:1a:
7d:b5:4a:57:a7:fb:2a:ce:32:47:32:63:74:d8:59:
3a:66:34:17:ff:bc:6e:d9:0b:75:16:bf:14:aa:04:
f1:a8:c0:f5:35:b9:e4:01:4e:09:43:f5:cc:eb:32:
b6:a2:f9:ca:57:ea:65:5b:cc:cd:1e:0e:30:89:2c:
aa:b8:4c:33:95:ce:ff:52:3e:90:d1:e8:e7:8c:41:
5e:c0:08:f6:57:4e:b9:84:c3:fe:5c:e5:36:b4:a6:
aa:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:23:D3:B4:E3:2A:32:3B:93:D3:BA:3C:66:39:E2:3D:FF:02:05:90
X509v3 Authority Key Identifier:
keyid:96:84:00:C9:DF:C1:6D:64:3E:F5:C9:4C:34:F9:93:F1:7C:75:68:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968400C9DFC16D643EF5C94C34F993F17C7568AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/323030313a313239633a3a2f33322d3438203d3e203232333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:129c::/32
Signature Algorithm: sha256WithRSAEncryption
6e:d8:36:50:68:e2:66:53:6f:b2:0c:34:21:57:c4:47:50:b4:
c2:da:a4:41:ea:f6:5e:9f:76:65:d5:f4:8b:d8:de:bb:16:13:
82:93:2e:e2:b2:91:25:51:ec:c4:d2:b0:8d:33:7e:d5:7a:49:
c3:2d:da:2b:72:ef:9e:3f:93:2b:d1:c9:24:b3:cf:cc:a2:6f:
04:80:3b:48:6b:2c:0d:89:c4:ed:a3:44:bd:66:ac:44:51:2c:
37:1b:95:de:7e:48:2f:c4:9d:60:ed:09:42:55:18:17:88:cd:
88:fe:2d:2c:eb:b5:64:7c:97:fc:7e:e2:d6:ad:37:a4:30:00:
da:13:07:88:4a:f6:ab:5f:63:b5:35:b2:97:ff:d5:0a:93:23:
a7:e5:ef:b3:19:e9:fa:4e:9b:37:fa:6a:ab:df:13:a4:cf:bb:
2f:99:67:8e:d6:ee:89:3e:33:49:4a:9e:e2:1d:49:aa:0c:32:
da:4b:55:59:81:88:d7:35:1e:f8:d0:87:9c:ff:72:b7:12:b8:
3f:1f:0e:66:cc:b1:7a:d9:7a:5f:64:33:f6:eb:49:8d:b6:66:
d1:84:e3:c5:78:2e:59:6e:29:25:bc:51:a5:87:cd:cd:c5:a4:
36:e1:82:7e:24:d5:45:ca:fd:b7:fd:54:8c:45:4a:4b:50:9c:
59:3c:4c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:01:57 2026 by rpki-client