
$ rpki-client -vvvf rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/323830343a393061303a363330303a3a2f34302d3430203d3e20323733353634.roa
File: 323830343a393061303a363330303a3a2f34302d3430203d3e20323733353634.roa (raw, json)
Hash identifier: bsWZhJPzqxjMrz/TUhSDN4pMRfp9tw2yX84QqIgGDmc=
Subject key identifier: 85:58:99:CD:D9:0B:5E:80:8F:A8:61:65:D0:FE:B5:53:FE:85:6B:CB
Certificate issuer: /CN=B4E1EA3585A9852E5C12D39221F08AC0DFFC132D
Certificate serial: 7D93B1FC53B066D5FB7D73A6992423A21C5B13D5
Authority key identifier: B4:E1:EA:35:85:A9:85:2E:5C:12:D3:92:21:F0:8A:C0:DF:FC:13:2D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/323830343a393061303a363330303a3a2f34302d3430203d3e20323733353634.roa
Signing time: Wed 30 Sep 2026 22:36:42 +0000
ROA not before: Wed 30 Sep 2026 22:31:42 +0000
ROA not after: Wed 29 Sep 2027 22:36:42 +0000
asID: 273564
IP address blocks: 2804:90a0:6300::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.crl
rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Nov 2026 06:18:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:93:b1:fc:53:b0:66:d5:fb:7d:73:a6:99:24:23:a2:1c:5b:13:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4E1EA3585A9852E5C12D39221F08AC0DFFC132D
Validity
Not Before: Sep 30 22:31:42 2026 GMT
Not After : Sep 29 22:36:42 2027 GMT
Subject: CN=855899CDD90B5E808FA86165D0FEB553FE856BCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:80:2e:62:77:11:9d:99:63:c1:f6:a8:ab:11:
4e:70:10:fe:9b:2d:99:ac:d4:2f:1e:45:50:f6:e4:
d9:e5:74:4d:d4:22:d2:62:83:ca:a2:87:8c:2a:c8:
ff:48:96:82:90:e9:37:01:de:32:cc:36:04:37:1b:
2d:54:4d:6b:51:98:e5:eb:47:5c:08:a1:d3:9e:69:
cc:1e:23:d7:b3:df:be:15:ef:cb:fa:79:ea:8a:89:
aa:89:65:6d:39:27:2c:55:f0:b4:0d:36:0b:56:a3:
86:3e:ec:86:1e:5e:e0:b5:f8:69:7b:7b:ed:48:6e:
1d:cf:2e:7c:34:0d:59:4b:7e:bb:d5:86:d5:10:67:
22:16:45:90:c5:06:db:b2:3b:fe:ea:0e:b2:50:78:
2a:4e:49:67:2b:f8:e9:f6:60:93:2e:54:72:c3:5b:
53:1c:12:8b:6d:48:4b:89:e5:3f:08:ca:cd:4b:6a:
50:bf:4d:38:3f:45:99:47:2c:32:66:e4:b4:32:b9:
95:c3:f9:34:65:4d:57:db:c1:98:ac:b7:64:87:49:
9b:6d:cf:83:5e:47:b9:87:d8:ae:5b:49:17:85:69:
48:c3:87:9d:30:e4:c8:03:fd:23:2e:de:e2:b7:43:
68:2f:de:0f:3d:72:a0:be:f6:a8:42:c3:4f:30:1a:
8d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:58:99:CD:D9:0B:5E:80:8F:A8:61:65:D0:FE:B5:53:FE:85:6B:CB
X509v3 Authority Key Identifier:
keyid:B4:E1:EA:35:85:A9:85:2E:5C:12:D3:92:21:F0:8A:C0:DF:FC:13:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/323830343a393061303a363330303a3a2f34302d3430203d3e20323733353634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:90a0:6300::/40
Signature Algorithm: sha256WithRSAEncryption
c5:de:6d:9f:25:b1:f6:c4:a7:2e:00:87:10:16:df:7b:ed:52:
2c:02:35:db:10:0c:0f:06:3c:a7:89:9a:66:6c:02:2e:46:68:
31:5b:3e:70:59:33:36:07:ef:a8:19:5c:24:6a:a5:ef:b5:37:
71:ca:82:2f:85:95:4d:4f:4e:59:fb:cb:53:a8:fb:be:f7:ad:
2f:28:15:b2:d8:4b:18:2f:52:45:60:94:14:33:52:48:f7:b9:
24:69:ab:29:75:e8:00:f7:8c:f3:e3:e2:6e:15:4f:e1:7f:23:
20:a1:7a:21:56:c6:40:c2:ab:4b:70:93:82:74:9f:2b:bd:e4:
d4:10:38:a0:a2:36:e0:83:b4:06:fd:76:41:0d:c6:e5:8d:41:
94:19:04:f6:21:7f:a6:88:57:3e:f6:65:bb:c0:d4:6e:ca:e2:
a4:4b:03:13:48:c6:83:6a:d3:97:0e:19:23:9a:7d:a6:dc:db:
04:1f:54:0a:dd:18:cf:47:da:1b:ed:18:b8:86:14:e4:f0:74:
8b:82:d4:c8:c7:cc:b6:30:ce:b6:f2:e7:54:3e:a5:6e:74:dd:
52:65:bf:f5:88:61:97:8d:47:ec:1f:c2:2a:a0:f8:b3:02:0b:
fe:88:b6:cf:1c:e1:b3:e7:23:1b:f9:b7:e3:42:93:9a:d6:f3:
c3:d3:1b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:03:14 2026 by rpki-client