
$ rpki-client -vvvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a626330303a3a2f33382d3338203d3e20323639343633.roa
File: 323830343a363530343a626330303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier: 3nFLxhMZGNhDZwpTX4Cu7UJCNCSOdbYgQHT6+GVAgLs=
Subject key identifier: 3C:3D:04:5B:5F:62:9F:67:02:DE:04:82:E5:F3:C5:9E:18:36:12:0C
Certificate issuer: /CN=7297B39E134A71F8E01953E79E3C2D28E2424397
Certificate serial: 21E0C3256B2CB5408986E08C13E0B64ED42E15FE
Authority key identifier: 72:97:B3:9E:13:4A:71:F8:E0:19:53:E7:9E:3C:2D:28:E2:42:43:97
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a626330303a3a2f33382d3338203d3e20323639343633.roa
Signing time: Tue 06 Oct 2026 11:45:15 +0000
ROA not before: Tue 06 Oct 2026 11:40:15 +0000
ROA not after: Tue 05 Oct 2027 11:45:15 +0000
asID: 269463
IP address blocks: 2804:6504:bc00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.crl
rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 27 Oct 2026 21:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:e0:c3:25:6b:2c:b5:40:89:86:e0:8c:13:e0:b6:4e:d4:2e:15:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7297B39E134A71F8E01953E79E3C2D28E2424397
Validity
Not Before: Oct 6 11:40:15 2026 GMT
Not After : Oct 5 11:45:15 2027 GMT
Subject: CN=3C3D045B5F629F6702DE0482E5F3C59E1836120C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:41:17:af:b9:74:d4:67:1f:64:9d:b6:c5:1e:
31:76:60:bb:9e:b8:43:93:4e:36:91:12:cc:d4:41:
19:67:61:dd:89:ba:0a:05:ab:3d:13:3b:bd:22:da:
8e:8f:4d:8a:3d:f4:db:bd:2e:c1:7f:e8:4c:f1:78:
4a:23:6e:fe:e3:23:5d:b7:0e:ee:9f:5c:2f:25:aa:
c6:60:bf:74:7b:13:72:af:b8:95:aa:4e:ba:6f:c7:
be:2e:83:a6:47:90:e6:65:bf:2c:4f:09:ed:0d:e4:
a0:16:4b:99:2c:be:b7:03:c1:a0:63:cb:70:79:93:
e1:e4:89:78:75:40:2e:37:8e:4c:23:bc:5a:a1:a8:
f7:97:b1:50:3c:10:62:1a:8b:d6:15:df:42:a1:7b:
bf:77:53:dc:51:32:9b:f6:1f:12:4b:23:7e:9f:c7:
43:5b:98:1b:c2:41:d8:aa:49:a7:6a:e2:0c:4d:eb:
38:60:45:68:db:7f:ec:6a:d4:f7:ac:8d:12:49:06:
14:b3:86:d2:42:d4:2e:b8:63:9c:0b:9c:db:27:17:
38:11:79:4b:8e:c1:4d:8b:26:19:c3:be:01:ce:02:
68:a6:53:71:73:b6:2a:07:29:fb:80:10:31:b5:d1:
23:59:ee:43:29:f8:3e:ef:44:28:e2:a1:d9:b6:69:
0b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3D:04:5B:5F:62:9F:67:02:DE:04:82:E5:F3:C5:9E:18:36:12:0C
X509v3 Authority Key Identifier:
keyid:72:97:B3:9E:13:4A:71:F8:E0:19:53:E7:9E:3C:2D:28:E2:42:43:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a626330303a3a2f33382d3338203d3e20323639343633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6504:bc00::/38
Signature Algorithm: sha256WithRSAEncryption
bb:d0:01:fe:b6:73:a3:27:ce:17:fc:91:21:f0:dc:72:7e:30:
b6:18:52:b1:00:37:8a:47:99:3d:7f:c0:34:ce:34:db:67:d2:
87:13:27:cf:47:50:1f:65:3e:5c:dd:cb:ae:1c:59:3b:02:da:
48:20:0f:1e:d2:37:8c:24:48:2e:a7:d2:ec:2d:fb:77:d2:43:
a9:16:3c:70:85:a6:4e:af:06:4a:3a:98:f3:31:61:37:a4:37:
96:ef:16:9b:ab:a8:64:27:d2:bc:a0:2d:9a:84:1f:f1:7b:a2:
f9:7a:2d:3b:cb:95:2d:dd:a2:b2:0c:51:c0:30:e1:c2:36:01:
87:1e:78:14:45:2b:00:a8:4a:0b:a5:00:74:60:ce:0f:fa:94:
9b:10:25:db:18:ba:ac:90:19:24:78:c2:a0:30:17:cb:c9:86:
17:81:f8:0a:69:69:0d:5d:20:34:2e:20:c6:91:d3:55:3b:e6:
87:5d:ce:35:83:ad:33:21:0a:d0:c8:bd:77:2e:d6:79:6a:bb:
69:94:c6:35:fd:81:d2:a2:9c:1a:b5:c5:3d:4d:f7:3f:a9:29:
f0:7d:10:59:af:ac:c8:00:0e:c5:4d:18:6c:12:9c:a8:83:a4:
54:59:72:3a:fe:9e:83:a3:84:f3:84:ad:a7:82:19:66:00:5c:
2a:28:3a:64
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUIeDDJWsstUCJhuCME+C2TtQuFf4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzI5N0IzOUUxMzRBNzFGOEUwMTk1M0U3OUUzQzJEMjhF
MjQyNDM5NzAeFw0yNjEwMDYxMTQwMTVaFw0yNzEwMDUxMTQ1MTVaMDMxMTAvBgNV
BAMTKDNDM0QwNDVCNUY2MjlGNjcwMkRFMDQ4MkU1RjNDNTlFMTgzNjEyMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrQRevuXTUZx9knbbFHjF2YLue
uEOTTjaREszUQRlnYd2JugoFqz0TO70i2o6PTYo99Nu9LsF/6EzxeEojbv7jI123
Du6fXC8lqsZgv3R7E3KvuJWqTrpvx74ug6ZHkOZlvyxPCe0N5KAWS5ksvrcDwaBj
y3B5k+HkiXh1QC43jkwjvFqhqPeXsVA8EGIai9YV30Khe793U9xRMpv2HxJLI36f
x0NbmBvCQdiqSadq4gxN6zhgRWjbf+xq1PesjRJJBhSzhtJC1C64Y5wLnNsnFzgR
eUuOwU2LJhnDvgHOAmimU3FztioHKfuAEDG10SNZ7kMp+D7vRCjiodm2aQt3AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUPD0EW19in2cC3gSC5fPFnhg2EgwwHwYDVR0j
BBgwFoAUcpeznhNKcfjgGVPnnjwtKOJCQ5cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2lDd2JBUzFMbmc1TG9UY3F5RHJKY3FCbnY3ZVdmcXVMakRqN1gxTmhN
Mk0vMC83Mjk3QjM5RTEzNEE3MUY4RTAxOTUzRTc5RTNDMkQyOEUyNDI0Mzk3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcyOTdCMzlFMTM0QTcxRjhF
MDE5NTNFNzlFM0MyRDI4RTI0MjQzOTcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dpQ3diQVMxTG5nNUxvVGNxeURySmNxQm52N2VXZnF1TGpEajdYMU5oTTJNLzAv
MzIzODMwMzQzYTM2MzUzMDM0M2E2MjYzMzAzMDNhM2EyZjMzMzgyZDMzMzgyMDNk
M2UyMDMyMzYzOTM0MzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAigEZQS8MA0GCSqGSIb3DQEBCwUA
A4IBAQC70AH+tnOjJ84X/JEh8NxyfjC2GFKxADeKR5k9f8A0zjTbZ9KHEyfPR1Af
ZT5c3cuuHFk7AtpIIA8e0jeMJEgup9LsLft30kOpFjxwhaZOrwZKOpjzMWE3pDeW
7xabq6hkJ9K8oC2ahB/xe6L5ei07y5Ut3aKyDFHAMOHCNgGHHngURSsAqEoLpQB0
YM4P+pSbECXbGLqskBkkeMKgMBfLyYYXgfgKaWkNXSA0LiDGkdNVO+aHXc41g60z
IQrQyL13LtZ5artplMY1/YHSopwatcU9Tfc/qSnwfRBZr6zIAA7FTRhsEpyog6RU
WXI6/p6Do4TzhK2nghlmAFwqKDpk
-----END CERTIFICATE-----
Generated at Tue Oct 27 17:07:31 2026 by rpki-client