
$ rpki-client -vvf rpki-repo.registro.br/repo/HEPmq54S7VB9RCN8cETasmrFeGDWnpnpQAnYAM3wDH6B/0/323830343a393835343a3a2f33322d313238203d3e20323735363831.roa
File: 323830343a393835343a3a2f33322d313238203d3e20323735363831.roa (raw, json)
Hash identifier: pBQCnitnC2KK6biAca0iFm7QN7pel9/X2RUyXq/jUE4=
Subject key identifier: 47:20:D5:75:EC:D9:D5:6B:6C:3A:9B:FB:0C:16:EF:21:5A:D7:70:32
Certificate issuer: /CN=D8D8310BF161C17828D8C8E9341BF055481B108A
Certificate serial: 15210A70CB91AFFD2C2E649EA627CA9C7F6BB7F3
Authority key identifier: D8:D8:31:0B:F1:61:C1:78:28:D8:C8:E9:34:1B:F0:55:48:1B:10:8A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8D8310BF161C17828D8C8E9341BF055481B108A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HEPmq54S7VB9RCN8cETasmrFeGDWnpnpQAnYAM3wDH6B/0/323830343a393835343a3a2f33322d313238203d3e20323735363831.roa
Signing time: Tue 21 Jul 2026 17:50:30 +0000
ROA not before: Tue 21 Jul 2026 17:45:30 +0000
ROA not after: Tue 20 Jul 2027 17:50:30 +0000
asID: 275681
IP address blocks: 2804:9854::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HEPmq54S7VB9RCN8cETasmrFeGDWnpnpQAnYAM3wDH6B/0/D8D8310BF161C17828D8C8E9341BF055481B108A.crl
rsync://rpki-repo.registro.br/repo/HEPmq54S7VB9RCN8cETasmrFeGDWnpnpQAnYAM3wDH6B/0/D8D8310BF161C17828D8C8E9341BF055481B108A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8D8310BF161C17828D8C8E9341BF055481B108A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 25 Jul 2026 19:26:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:21:0a:70:cb:91:af:fd:2c:2e:64:9e:a6:27:ca:9c:7f:6b:b7:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8D8310BF161C17828D8C8E9341BF055481B108A
Validity
Not Before: Jul 21 17:45:30 2026 GMT
Not After : Jul 20 17:50:30 2027 GMT
Subject: CN=4720D575ECD9D56B6C3A9BFB0C16EF215AD77032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b7:28:53:c6:c1:70:91:e6:96:69:4d:dc:3a:
c4:13:1e:71:68:fa:a0:eb:83:67:0e:56:d1:ae:06:
20:a9:74:c4:24:3d:ce:fd:e5:da:ea:18:8a:20:ac:
a1:3d:6e:2e:6c:8a:43:86:df:b7:46:9e:39:a6:7e:
80:11:32:bf:f0:22:22:ac:31:3b:0c:9b:0c:38:fc:
19:a0:53:f1:55:7d:2e:5c:02:95:2d:fa:71:c1:5f:
77:8c:3e:42:e1:ff:09:7a:e5:43:a6:a0:33:8d:a9:
5a:61:6e:5b:86:23:ed:c5:da:e3:49:9f:fb:ca:9c:
a8:28:38:bc:cf:dd:c5:bb:05:bb:f0:fc:77:e3:74:
35:68:75:f3:d8:09:97:aa:be:fb:c6:28:4c:29:58:
37:27:72:c8:99:43:79:27:18:74:48:b5:eb:32:d6:
cd:e0:9a:b0:a7:f1:c5:07:9a:c3:b8:81:28:11:db:
93:f7:74:d9:80:93:c8:d7:b3:87:33:82:30:ac:a6:
98:70:f5:24:77:59:f7:21:e6:84:ac:a2:b7:ab:0f:
bf:65:3a:81:fc:5e:cf:1b:67:fd:c4:f2:90:d0:3d:
d8:b1:1e:39:b2:dd:57:2c:60:2c:ad:34:01:07:c6:
13:f5:61:38:fe:f4:0f:81:6b:a6:0a:be:e7:a6:5a:
da:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:20:D5:75:EC:D9:D5:6B:6C:3A:9B:FB:0C:16:EF:21:5A:D7:70:32
X509v3 Authority Key Identifier:
keyid:D8:D8:31:0B:F1:61:C1:78:28:D8:C8:E9:34:1B:F0:55:48:1B:10:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HEPmq54S7VB9RCN8cETasmrFeGDWnpnpQAnYAM3wDH6B/0/D8D8310BF161C17828D8C8E9341BF055481B108A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8D8310BF161C17828D8C8E9341BF055481B108A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEPmq54S7VB9RCN8cETasmrFeGDWnpnpQAnYAM3wDH6B/0/323830343a393835343a3a2f33322d313238203d3e20323735363831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:9854::/32
Signature Algorithm: sha256WithRSAEncryption
14:3f:98:2f:74:44:c2:30:19:8b:62:2f:d8:3d:24:61:8b:79:
41:06:53:fb:d8:db:5d:b5:0d:e0:fe:da:57:36:51:18:ee:89:
c2:74:2f:88:8b:46:a3:6d:7c:70:81:43:80:10:dd:84:7b:16:
fd:f8:c7:43:0d:df:d9:44:21:4a:28:ab:35:f3:90:5f:9a:08:
af:af:4b:4b:84:02:b5:70:71:6a:02:d4:f0:3b:1c:30:16:d2:
b9:74:d8:92:52:77:47:66:b2:3b:37:e9:ce:3d:42:f6:04:64:
60:e7:82:f2:21:72:33:bd:7a:0a:67:d2:43:43:fe:91:45:d7:
d4:34:0a:14:00:fc:0a:d9:c6:49:b5:34:5e:b5:aa:d5:e5:e8:
cc:5c:03:18:9f:53:7e:9f:c7:ad:0b:66:08:2c:ac:4e:ad:51:
4a:f5:7d:9a:54:5d:ac:4b:d1:57:12:d4:8e:b5:21:f0:86:46:
02:fd:79:ff:bc:34:c2:93:42:05:61:9e:90:a0:f2:70:d3:c5:
58:e9:cd:74:50:d9:a2:70:ec:d9:a8:9b:24:e1:ad:cd:aa:11:
98:d8:5e:3c:18:44:d7:b0:c4:74:17:5c:48:49:fc:d8:90:aa:
a8:be:01:21:fb:e7:7e:c5:0b:c9:4b:e8:88:d8:c2:6c:10:05:
5b:92:c9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:08:49 2026 by rpki-client