
$ rpki-client -vvvf rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/323830343a393061303a383430303a3a2f34382d3438203d3e20323733353634.roa
File: 323830343a393061303a383430303a3a2f34382d3438203d3e20323733353634.roa (raw, json)
Hash identifier: elSQ32STVjmSXJ0TNKA+pLu9GwK3ol05JDUSlGkJcKA=
Subject key identifier: 32:F4:BB:98:68:B5:76:DA:51:F0:AE:66:0C:EA:59:E2:4E:66:C3:5E
Certificate issuer: /CN=B4E1EA3585A9852E5C12D39221F08AC0DFFC132D
Certificate serial: 14496F3EB2025CBFF42002882223118EF0542B43
Authority key identifier: B4:E1:EA:35:85:A9:85:2E:5C:12:D3:92:21:F0:8A:C0:DF:FC:13:2D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/323830343a393061303a383430303a3a2f34382d3438203d3e20323733353634.roa
Signing time: Sun 18 Oct 2026 12:44:38 +0000
ROA not before: Sun 18 Oct 2026 12:39:38 +0000
ROA not after: Sun 17 Oct 2027 12:44:38 +0000
asID: 273564
IP address blocks: 2804:90a0:8400::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.crl
rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Oct 2026 06:11:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:49:6f:3e:b2:02:5c:bf:f4:20:02:88:22:23:11:8e:f0:54:2b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4E1EA3585A9852E5C12D39221F08AC0DFFC132D
Validity
Not Before: Oct 18 12:39:38 2026 GMT
Not After : Oct 17 12:44:38 2027 GMT
Subject: CN=32F4BB9868B576DA51F0AE660CEA59E24E66C35E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d1:be:cb:e0:a9:e8:3c:01:00:cc:cf:03:f4:
46:f6:13:be:fd:04:73:dd:25:b2:9a:b9:1b:b2:a5:
71:ba:23:54:d3:86:34:85:97:4c:ee:65:a4:12:92:
e0:e1:3c:3a:18:45:d2:8c:74:25:7a:fd:55:21:7a:
97:79:c0:2a:dd:8e:7d:e2:c1:22:ba:d4:1a:2f:ea:
7f:8c:40:0c:7e:74:c0:bd:e5:51:81:c4:60:a5:35:
41:c0:e0:32:6f:ea:3f:20:99:7b:f2:fd:ff:c1:2d:
da:41:c8:e1:e0:1a:f6:11:4e:78:84:71:a9:0f:ab:
5c:b2:b6:5c:3e:b4:b2:f2:83:9e:a2:ff:81:53:d8:
cc:f4:ab:a8:aa:60:7f:a9:4e:b5:8a:f8:c7:d1:90:
8d:b4:01:db:77:65:99:1b:c2:b4:11:04:9c:61:ae:
6e:5c:ad:1a:5f:d3:cf:74:28:46:4d:2c:b9:0b:5f:
57:8d:e7:95:a5:6f:19:83:f7:c2:92:1a:55:75:06:
8b:53:9e:26:74:2e:ea:3d:8d:d1:46:da:2e:3e:00:
ef:8e:dc:a8:e6:8a:df:1d:6e:ea:16:ca:83:66:1d:
f4:62:62:29:7b:5a:29:ec:71:63:5a:95:71:ba:f4:
8a:7b:d0:33:a0:a8:39:de:e0:e0:50:05:9b:ab:f7:
ec:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F4:BB:98:68:B5:76:DA:51:F0:AE:66:0C:EA:59:E2:4E:66:C3:5E
X509v3 Authority Key Identifier:
keyid:B4:E1:EA:35:85:A9:85:2E:5C:12:D3:92:21:F0:8A:C0:DF:FC:13:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/323830343a393061303a383430303a3a2f34382d3438203d3e20323733353634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:90a0:8400::/48
Signature Algorithm: sha256WithRSAEncryption
3d:d2:46:77:05:fe:0a:1b:42:e5:5a:03:2e:8c:19:9c:10:59:
fb:90:c0:63:94:44:7e:9d:c9:1e:d9:b9:dc:9b:04:b6:c0:e4:
9e:fc:e0:08:ff:48:60:08:7f:85:be:56:15:9a:f6:17:56:ba:
ef:25:93:e1:20:21:be:22:ee:6a:3d:a0:ff:0f:42:82:96:0f:
40:da:b4:3d:02:37:a1:6c:4d:42:e6:72:58:21:35:30:9d:e2:
b3:8d:91:ac:90:77:bb:ae:9d:18:1c:c7:a3:50:dd:32:e5:e4:
86:fe:4a:d4:79:a1:70:68:fd:b4:04:94:ee:1a:68:4e:d5:e4:
87:ad:62:ea:d6:bf:37:48:45:18:ef:d6:c3:b2:7b:6c:78:db:
16:42:85:1c:34:a9:8c:6c:53:90:c3:03:7c:7a:77:27:21:53:
1a:24:89:32:97:8d:9f:cc:54:b3:c4:39:41:6f:e6:86:a2:a7:
e0:0c:14:ca:80:b5:6b:00:8f:8c:f4:70:35:1a:d8:40:fb:fc:
38:1b:f2:4a:38:d0:a7:9f:21:dc:48:ce:11:3a:34:ec:63:0c:
74:4d:0e:0a:1c:04:c8:c4:eb:70:44:95:f8:45:00:fe:65:cf:
b9:da:9a:70:99:42:62:0d:1c:09:18:84:07:ba:f2:5c:c6:a0:
05:33:96:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 08:16:41 2026 by rpki-client