
$ rpki-client -vvf rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/323830343a316235303a323030303a3a2f33352d3335203d3e203631373139.roa
File: 323830343a316235303a323030303a3a2f33352d3335203d3e203631373139.roa (raw, json)
Hash identifier: Z6YcFDsIsk22oWUD/EM4ho5UIOP+KvTt5gwTSN+xyHw=
Subject key identifier: 7B:FA:24:82:C0:0F:E9:32:72:DA:67:56:B7:5F:66:51:AF:BC:41:D9
Certificate issuer: /CN=573658E4241F21CAB22CB9FC150BF6FB898271EA
Certificate serial: 3FACC8952F18E487BAB6FB9F4993559FBC25EDFF
Authority key identifier: 57:36:58:E4:24:1F:21:CA:B2:2C:B9:FC:15:0B:F6:FB:89:82:71:EA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/323830343a316235303a323030303a3a2f33352d3335203d3e203631373139.roa
Signing time: Thu 02 Jul 2026 11:27:17 +0000
ROA not before: Thu 02 Jul 2026 11:22:17 +0000
ROA not after: Thu 01 Jul 2027 11:27:17 +0000
asID: 61719
IP address blocks: 2804:1b50:2000::/35 maxlen: 35
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.crl
rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 26 Jul 2026 00:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:ac:c8:95:2f:18:e4:87:ba:b6:fb:9f:49:93:55:9f:bc:25:ed:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=573658E4241F21CAB22CB9FC150BF6FB898271EA
Validity
Not Before: Jul 2 11:22:17 2026 GMT
Not After : Jul 1 11:27:17 2027 GMT
Subject: CN=7BFA2482C00FE93272DA6756B75F6651AFBC41D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:08:69:59:46:c9:db:85:e8:c4:be:c3:a3:a3:
c2:30:74:44:5e:06:09:0d:b2:a7:60:5a:ed:81:3b:
7d:98:d3:dc:ac:c2:ac:ef:0f:e9:83:70:21:33:14:
5f:11:87:b1:e0:aa:5b:43:f7:29:4b:46:08:61:be:
75:74:64:52:f6:a8:35:bc:1d:79:19:16:e6:4f:41:
fa:66:0c:c3:37:c8:83:0e:2a:f1:ef:e0:34:33:11:
fe:60:e8:02:a7:03:5a:ae:a6:de:35:43:64:8f:d2:
36:c9:7e:b6:81:a3:72:1c:a0:04:e6:e0:b8:1b:c8:
33:ec:e3:2f:e0:22:ff:8a:4c:f9:71:0b:9f:e9:d3:
cb:cd:fe:ce:3b:38:18:b6:45:74:4d:1d:09:23:13:
c0:16:1b:b6:94:63:83:c5:75:40:e8:7e:9b:b5:07:
7f:71:03:12:54:6f:43:e1:02:4a:a1:4d:42:54:40:
04:54:98:6c:1b:d9:82:4c:97:3a:8c:9e:96:fe:91:
c3:94:60:55:15:0a:2c:ff:15:33:30:ed:96:95:0e:
d2:d5:b3:16:9d:ce:10:44:04:18:3d:42:73:97:b0:
77:14:6e:11:cb:16:95:1f:a4:b9:08:b9:e8:0c:2b:
bc:cb:1f:c5:1a:40:a9:ac:4f:31:5f:23:72:d5:1a:
27:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:FA:24:82:C0:0F:E9:32:72:DA:67:56:B7:5F:66:51:AF:BC:41:D9
X509v3 Authority Key Identifier:
keyid:57:36:58:E4:24:1F:21:CA:B2:2C:B9:FC:15:0B:F6:FB:89:82:71:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/323830343a316235303a323030303a3a2f33352d3335203d3e203631373139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1b50:2000::/35
Signature Algorithm: sha256WithRSAEncryption
10:30:4b:68:ef:df:86:4a:37:fc:78:49:3a:76:62:b6:c6:0b:
6c:bc:78:4f:ea:00:92:71:93:a7:8d:fa:8a:4f:9c:7b:d4:a7:
a4:97:a2:3e:ef:e5:f4:b2:72:ab:90:d2:6c:51:1b:39:06:57:
18:4e:d2:cf:2d:06:b6:48:3c:53:b5:46:f5:4a:fc:d5:79:d9:
30:5d:23:21:e2:9a:9e:93:bf:31:7f:bd:1f:ba:a9:a6:f1:ec:
95:f0:04:76:8f:20:43:55:82:8c:75:87:1e:c3:80:d9:b1:73:
40:ea:5d:06:d0:6a:7f:a4:0c:f9:8a:ea:c0:25:14:cf:68:de:
ca:8f:bd:71:48:77:49:83:39:70:3b:4d:a5:f0:95:52:b2:32:
4a:4c:b3:76:5e:b2:ff:63:81:23:be:1e:b5:7a:ec:c4:5a:a1:
d9:aa:e8:f3:e3:76:d3:8e:67:94:e7:5a:48:1e:cd:c0:fa:23:
81:d5:ff:40:36:a6:46:5e:b7:ac:eb:e6:83:1d:b4:e7:8d:a6:
d5:64:fa:61:60:2c:a8:cb:6b:df:61:3c:7a:50:27:4b:cd:f0:
1a:56:7e:14:1b:8c:0e:48:71:00:fc:02:b0:d4:05:df:a5:8c:
9c:2d:d9:80:69:d7:84:34:b2:cd:a3:51:f0:a5:bb:31:71:d0:
06:5b:9e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:01:24 2026 by rpki-client