
$ rpki-client -vvvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a613830303a3a2f33382d3338203d3e20323639343633.roa
File: 323830343a363530343a613830303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier: kry5LLvmUdoSq4gRNJrekfPzX46AoqhknIr/zP/IHkQ=
Subject key identifier: B2:14:20:79:73:BC:78:E2:5A:11:0C:36:7A:93:C8:C9:5A:FA:79:C4
Certificate issuer: /CN=7297B39E134A71F8E01953E79E3C2D28E2424397
Certificate serial: 5D34C7711C5DC218A083AAF5651F7850F023CC75
Authority key identifier: 72:97:B3:9E:13:4A:71:F8:E0:19:53:E7:9E:3C:2D:28:E2:42:43:97
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a613830303a3a2f33382d3338203d3e20323639343633.roa
Signing time: Tue 06 Oct 2026 11:45:00 +0000
ROA not before: Tue 06 Oct 2026 11:40:00 +0000
ROA not after: Tue 05 Oct 2027 11:45:00 +0000
asID: 269463
IP address blocks: 2804:6504:a800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.crl
rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 27 Oct 2026 21:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:34:c7:71:1c:5d:c2:18:a0:83:aa:f5:65:1f:78:50:f0:23:cc:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7297B39E134A71F8E01953E79E3C2D28E2424397
Validity
Not Before: Oct 6 11:40:00 2026 GMT
Not After : Oct 5 11:45:00 2027 GMT
Subject: CN=B214207973BC78E25A110C367A93C8C95AFA79C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7e:65:63:7d:9a:12:5b:d9:8e:33:c4:c5:ba:
f4:25:46:11:ea:fa:75:6a:6b:dc:b2:01:c6:c8:a4:
77:26:35:e6:db:56:3f:8b:0d:8c:13:ee:92:f6:f1:
2e:17:95:34:5b:76:af:70:e8:fc:0b:a9:01:06:04:
63:ea:b0:15:76:f5:6a:65:c6:d2:7a:99:1a:4c:3e:
3a:54:62:fe:24:6b:5b:1f:e2:cd:96:af:7e:71:98:
cd:6c:04:1c:5f:2a:a5:ed:8f:c9:4a:90:99:14:67:
e4:96:8b:aa:6b:9c:4a:dd:aa:cb:fd:70:b3:22:3b:
a3:92:1d:0d:ff:5b:c1:f3:1e:07:16:f1:25:b6:ac:
5a:88:7d:11:4c:72:6e:e0:bf:51:f2:f1:18:f6:4f:
6b:9d:a4:42:ad:70:f4:67:00:d5:85:9b:be:6d:09:
48:3f:4c:53:ec:5b:4a:07:11:a5:c6:65:c2:57:2c:
76:f6:7a:2e:e4:d8:70:58:96:21:3a:ec:96:85:31:
dc:95:25:cb:3f:70:09:b6:4b:ab:d0:7a:1a:b3:29:
e1:fc:b0:dc:ee:5a:bc:17:df:35:47:be:8c:a5:84:
80:82:7c:bf:5a:1d:e8:6d:a3:52:96:2a:a5:03:12:
6a:be:2f:97:3f:5a:39:7f:37:96:4c:15:b2:d7:96:
4f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:14:20:79:73:BC:78:E2:5A:11:0C:36:7A:93:C8:C9:5A:FA:79:C4
X509v3 Authority Key Identifier:
keyid:72:97:B3:9E:13:4A:71:F8:E0:19:53:E7:9E:3C:2D:28:E2:42:43:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a613830303a3a2f33382d3338203d3e20323639343633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6504:a800::/38
Signature Algorithm: sha256WithRSAEncryption
a3:cc:be:f0:64:b3:c6:a3:32:1b:6d:d8:09:fa:cb:7e:22:5b:
63:49:86:fe:a9:be:0c:de:5f:03:c7:b2:65:fe:2e:f3:ad:4a:
89:e6:ff:85:db:d6:c0:38:76:40:3a:bc:bc:7e:ab:54:08:82:
56:c5:0a:09:48:d6:62:59:9b:a9:c7:93:db:16:1b:b7:74:6d:
8f:96:d0:a7:39:87:6d:f9:11:dd:5f:d8:0a:ed:ed:d4:37:a7:
43:b9:e1:98:fa:db:47:26:81:17:3f:da:d3:11:7c:71:b6:d0:
a1:74:4f:52:ad:7f:ac:e8:07:89:83:2c:af:43:07:cb:af:44:
b8:7e:22:4d:50:99:16:54:59:1e:b8:36:13:ad:01:16:f8:37:
7b:00:38:a9:29:df:91:ea:c1:32:62:9b:e0:f5:16:5e:17:36:
3f:08:46:2e:26:81:4f:b5:72:39:c3:dc:55:2b:bc:39:5d:8d:
0c:9e:1f:31:39:67:50:24:56:26:72:bc:3f:d5:74:3a:48:0e:
04:ba:49:fb:3d:69:df:72:8b:c8:2c:14:3b:51:ec:71:45:44:
30:98:67:5e:23:ab:71:5d:aa:f5:8f:1d:d4:4c:2e:06:51:52:
64:63:f7:f7:16:62:38:bb:43:94:80:bf:50:7e:9b:d4:81:20:
fb:7e:43:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:07:28 2026 by rpki-client