
$ rpki-client -vvvf rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/323830343a386637303a393030303a3a2f33362d3336203d3e20323632353835.roa
File: 323830343a386637303a393030303a3a2f33362d3336203d3e20323632353835.roa (raw, json)
Hash identifier: 4A64qZ3jEZmyN2hnv6kfMDXbp+eeLGjwEHh7wqUJgUY=
Subject key identifier: 8D:AB:6F:8A:0B:B3:F3:F8:E0:37:B0:DE:92:B6:D6:53:4F:F6:1D:F0
Certificate issuer: /CN=5AC853AE3F9CB62CC01BAF4379BF8072926B07A7
Certificate serial: 487F90BD2F2922EB7E1FFC78BDB3993941797365
Authority key identifier: 5A:C8:53:AE:3F:9C:B6:2C:C0:1B:AF:43:79:BF:80:72:92:6B:07:A7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/323830343a386637303a393030303a3a2f33362d3336203d3e20323632353835.roa
Signing time: Thu 17 Sep 2026 17:00:35 +0000
ROA not before: Thu 17 Sep 2026 16:55:35 +0000
ROA not after: Thu 16 Sep 2027 17:00:35 +0000
asID: 262585
IP address blocks: 2804:8f70:9000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.crl
rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 04 Nov 2026 23:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:7f:90:bd:2f:29:22:eb:7e:1f:fc:78:bd:b3:99:39:41:79:73:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5AC853AE3F9CB62CC01BAF4379BF8072926B07A7
Validity
Not Before: Sep 17 16:55:35 2026 GMT
Not After : Sep 16 17:00:35 2027 GMT
Subject: CN=8DAB6F8A0BB3F3F8E037B0DE92B6D6534FF61DF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d7:24:35:72:22:c6:4d:e0:e6:95:94:af:a4:
04:d0:66:9c:46:78:4b:6b:c8:f1:99:96:0e:23:3f:
f2:79:b3:d1:15:b7:1b:5c:be:8a:1e:82:71:5f:f8:
07:d5:b5:63:e1:97:bc:48:82:bc:f0:de:aa:af:ea:
f1:58:8a:87:f6:25:35:8c:38:d8:94:53:6e:ee:d8:
0b:75:3e:03:6f:01:1f:73:3d:c2:d8:f7:16:d5:1b:
c5:3d:66:a9:6b:0c:d0:b8:f3:18:46:73:bd:28:fa:
4b:90:44:e2:10:7c:d4:1c:f8:2c:b7:b5:4c:11:63:
84:c3:4f:c2:b1:2d:f1:48:b6:08:e1:ea:c1:d4:cd:
53:24:ec:69:25:81:14:d4:8e:e7:4b:a6:59:ad:ef:
d4:a4:15:19:6a:37:b0:11:6c:41:5f:65:2b:1c:70:
73:96:a0:60:47:21:00:06:51:41:2b:1e:c3:68:6d:
b0:86:a4:bd:7a:ee:86:0d:01:32:e7:88:9c:56:ba:
16:31:57:3c:27:db:a4:41:0e:ec:ca:12:3b:61:0e:
df:b0:ee:b2:bb:1b:92:3a:ba:aa:9a:47:c7:4b:a8:
9c:76:29:04:ca:0e:7c:4c:bc:ef:e1:2e:9e:b6:36:
ad:bf:11:80:13:28:c5:d9:6e:10:4d:d9:06:fb:95:
31:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:AB:6F:8A:0B:B3:F3:F8:E0:37:B0:DE:92:B6:D6:53:4F:F6:1D:F0
X509v3 Authority Key Identifier:
keyid:5A:C8:53:AE:3F:9C:B6:2C:C0:1B:AF:43:79:BF:80:72:92:6B:07:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/323830343a386637303a393030303a3a2f33362d3336203d3e20323632353835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8f70:9000::/36
Signature Algorithm: sha256WithRSAEncryption
1c:a6:a1:61:40:a3:ae:55:88:b0:77:d2:0b:82:a8:d6:bb:8c:
f6:b4:75:17:d2:5d:de:03:24:9f:fb:31:78:fd:50:66:f1:45:
df:6c:95:ef:3e:2f:09:1b:49:a3:ae:3b:d8:12:52:db:03:86:
e2:8c:28:93:01:d8:9d:70:f6:f1:9a:cf:c6:1d:0b:96:91:68:
36:0e:08:00:27:4a:41:92:4d:08:6b:a2:79:01:b1:e3:8d:ad:
e1:74:31:2f:0a:72:f2:71:2d:9b:49:af:8f:8d:87:d3:14:12:
5b:67:62:dc:0f:91:03:d6:5a:36:a9:81:70:2e:3f:7c:4c:f6:
83:23:c7:af:28:fb:bf:e3:dd:3c:82:13:93:f4:18:87:ec:58:
e2:1b:d0:af:3f:d0:5b:cb:f0:34:f7:96:7b:a0:63:17:1f:8c:
f5:a9:11:4e:5e:53:04:02:77:f8:dd:a2:6d:aa:ac:95:4b:a1:
70:10:47:0a:48:10:79:3e:ee:50:93:61:64:ad:08:0f:db:56:
42:d3:57:92:1e:ac:73:5f:af:f1:78:4e:ad:cf:7d:b9:75:52:
56:e0:f3:65:c3:7e:9e:33:d5:a5:7c:30:a3:0b:27:6b:d6:2c:
86:7c:3c:e2:99:ce:05:5d:70:f3:5f:32:28:28:1a:d9:41:46:
67:8c:00:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 13:23:40 2026 by rpki-client