
$ rpki-client -vvvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a613030303a3a2f33382d3338203d3e20323639343633.roa
File: 323830343a363530343a613030303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier: e33aLgCNclbNTRV+3ZTw7JQNAI8OUeMaS6SYQ9SGIGo=
Subject key identifier: 15:2C:52:F4:70:47:FE:D8:B9:4B:08:AB:F1:78:4B:D8:9F:10:D0:4F
Certificate issuer: /CN=7297B39E134A71F8E01953E79E3C2D28E2424397
Certificate serial: 5A79E826FBCE030C7E96E82A91FC311B64CA20AE
Authority key identifier: 72:97:B3:9E:13:4A:71:F8:E0:19:53:E7:9E:3C:2D:28:E2:42:43:97
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a613030303a3a2f33382d3338203d3e20323639343633.roa
Signing time: Tue 06 Oct 2026 11:44:52 +0000
ROA not before: Tue 06 Oct 2026 11:39:52 +0000
ROA not after: Tue 05 Oct 2027 11:44:52 +0000
asID: 269463
IP address blocks: 2804:6504:a000::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.crl
rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Nov 2026 00:38:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:79:e8:26:fb:ce:03:0c:7e:96:e8:2a:91:fc:31:1b:64:ca:20:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7297B39E134A71F8E01953E79E3C2D28E2424397
Validity
Not Before: Oct 6 11:39:52 2026 GMT
Not After : Oct 5 11:44:52 2027 GMT
Subject: CN=152C52F47047FED8B94B08ABF1784BD89F10D04F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:64:5f:b6:ec:a2:be:72:ba:c2:16:88:ff:31:
db:ba:34:42:40:8c:8c:a8:af:fe:b3:e2:61:9a:8c:
55:1e:db:5f:cd:84:b5:bf:06:87:d2:42:fd:76:9a:
70:26:c9:9e:9f:7b:20:19:9c:a1:95:87:e6:5b:08:
0c:2a:1b:cc:2b:b2:74:e6:2c:41:cb:dc:b7:4b:51:
21:24:b6:47:c5:0a:06:49:e8:e8:c0:a6:b7:6f:29:
6d:32:da:c3:49:ef:50:a3:37:05:78:fd:23:46:4a:
41:cf:05:47:18:21:ac:09:d3:b7:e3:33:ed:2a:49:
2c:62:a8:85:f4:a6:a5:22:b7:66:df:da:60:78:bf:
e5:6b:1e:70:96:84:e3:21:76:c1:93:ed:11:4a:eb:
3f:b1:fd:50:aa:f0:4f:cc:f5:cd:43:44:8d:27:ba:
5f:40:d5:47:40:fe:e7:b7:74:ff:86:81:89:27:98:
e2:0c:83:a3:70:d9:75:ad:45:70:7b:43:0f:fa:6a:
6f:14:74:77:e8:f1:0a:1a:8c:0d:b1:02:e4:47:17:
5d:ad:77:81:62:9f:53:a7:2b:ca:bc:ed:e7:f8:10:
f1:a9:e1:03:a1:59:ae:3f:09:9e:86:7b:e4:46:79:
b9:73:38:9e:86:4c:ea:69:0b:30:5b:10:7a:65:42:
98:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:2C:52:F4:70:47:FE:D8:B9:4B:08:AB:F1:78:4B:D8:9F:10:D0:4F
X509v3 Authority Key Identifier:
keyid:72:97:B3:9E:13:4A:71:F8:E0:19:53:E7:9E:3C:2D:28:E2:42:43:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a613030303a3a2f33382d3338203d3e20323639343633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6504:a000::/38
Signature Algorithm: sha256WithRSAEncryption
7a:fb:24:32:d3:6e:95:46:e2:a4:bd:e0:63:17:48:c9:b5:de:
2b:29:12:94:fe:0e:0b:65:97:30:b4:a7:86:5b:0b:d1:df:9e:
0a:45:7d:30:b6:8a:d9:96:15:00:fd:91:79:6a:48:3f:48:79:
4b:96:2c:20:88:d0:fb:84:20:04:5e:0d:e3:3b:26:90:1c:ae:
7d:4c:ed:5f:2c:e1:b8:b0:7d:17:19:ad:b6:ea:a0:e9:c0:3f:
64:81:65:c9:7e:71:48:9d:cc:40:85:f1:d8:0e:dc:1a:13:1b:
26:e7:ae:a5:68:d4:37:6a:e4:ae:a1:12:a2:13:bc:8e:c9:f1:
93:8e:57:b3:95:43:13:fa:32:14:23:af:89:fe:f5:04:a3:2d:
e4:20:be:73:12:b5:30:29:a8:7c:70:9f:9c:52:ff:73:58:fa:
f7:69:aa:65:bd:5f:fa:cb:76:24:cb:11:34:52:b8:2c:0d:92:
34:ef:1d:34:4e:16:4d:ab:5e:54:ea:7f:da:41:d4:c7:1b:5a:
00:2f:e4:a1:3e:41:47:b2:46:1d:40:70:84:c9:c4:73:30:13:
a4:5a:a4:a8:4c:c1:10:ef:2b:e7:ba:08:f3:7a:80:d4:52:0e:
97:a9:81:be:00:35:74:ff:51:b7:2e:fe:05:9d:0c:d1:8a:71:
34:0b:ac:c8
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUWnnoJvvOAwx+lugqkfwxG2TKIK4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzI5N0IzOUUxMzRBNzFGOEUwMTk1M0U3OUUzQzJEMjhF
MjQyNDM5NzAeFw0yNjEwMDYxMTM5NTJaFw0yNzEwMDUxMTQ0NTJaMDMxMTAvBgNV
BAMTKDE1MkM1MkY0NzA0N0ZFRDhCOTRCMDhBQkYxNzg0QkQ4OUYxMEQwNEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZZF+27KK+crrCFoj/Mdu6NEJA
jIyor/6z4mGajFUe21/NhLW/BofSQv12mnAmyZ6feyAZnKGVh+ZbCAwqG8wrsnTm
LEHL3LdLUSEktkfFCgZJ6OjAprdvKW0y2sNJ71CjNwV4/SNGSkHPBUcYIawJ07fj
M+0qSSxiqIX0pqUit2bf2mB4v+VrHnCWhOMhdsGT7RFK6z+x/VCq8E/M9c1DRI0n
ul9A1UdA/ue3dP+GgYknmOIMg6Nw2XWtRXB7Qw/6am8UdHfo8QoajA2xAuRHF12t
d4Fin1OnK8q87ef4EPGp4QOhWa4/CZ6Ge+RGeblzOJ6GTOppCzBbEHplQphJAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUFSxS9HBH/ti5Swir8XhL2J8Q0E8wHwYDVR0j
BBgwFoAUcpeznhNKcfjgGVPnnjwtKOJCQ5cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2lDd2JBUzFMbmc1TG9UY3F5RHJKY3FCbnY3ZVdmcXVMakRqN1gxTmhN
Mk0vMC83Mjk3QjM5RTEzNEE3MUY4RTAxOTUzRTc5RTNDMkQyOEUyNDI0Mzk3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcyOTdCMzlFMTM0QTcxRjhF
MDE5NTNFNzlFM0MyRDI4RTI0MjQzOTcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dpQ3diQVMxTG5nNUxvVGNxeURySmNxQm52N2VXZnF1TGpEajdYMU5oTTJNLzAv
MzIzODMwMzQzYTM2MzUzMDM0M2E2MTMwMzAzMDNhM2EyZjMzMzgyZDMzMzgyMDNk
M2UyMDMyMzYzOTM0MzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAigEZQSgMA0GCSqGSIb3DQEBCwUA
A4IBAQB6+yQy026VRuKkveBjF0jJtd4rKRKU/g4LZZcwtKeGWwvR354KRX0wtorZ
lhUA/ZF5akg/SHlLliwgiND7hCAEXg3jOyaQHK59TO1fLOG4sH0XGa226qDpwD9k
gWXJfnFIncxAhfHYDtwaExsm566laNQ3auSuoRKiE7yOyfGTjlezlUMT+jIUI6+J
/vUEoy3kIL5zErUwKah8cJ+cUv9zWPr3aaplvV/6y3YkyxE0UrgsDZI07x00ThZN
q15U6n/aQdTHG1oAL+ShPkFHskYdQHCEycRzMBOkWqSoTMEQ7yvnugjzeoDUUg6X
qYG+ADV0/1G3Lv4FnQzRinE0C6zI
-----END CERTIFICATE-----
Generated at Mon Nov 2 07:30:29 2026 by rpki-client