
$ rpki-client -vvvf rpki-repo.registro.br/repo/HSx7kSuahbd1eify7NGzCugL2KYEBwHRQVD3Wumyjeyu/0/323830343a346262633a3a2f33322d3335203d3e203238333333.roa
File: 323830343a346262633a3a2f33322d3335203d3e203238333333.roa (raw, json)
Hash identifier: JyLXRRK3J+KFbVyRX2/Sf5U1Y7fBlIzHkhbruLxvAiY=
Subject key identifier: A3:43:D6:FE:D6:8B:9D:59:31:CE:F9:B7:61:59:2A:5A:EB:CA:76:F2
Certificate issuer: /CN=7AF31C58876A4990CD52AA68B5226133D9FF64C5
Certificate serial: 0DE1C901C73FAD5C0EB4A7BD3F132F48FB324DBA
Authority key identifier: 7A:F3:1C:58:87:6A:49:90:CD:52:AA:68:B5:22:61:33:D9:FF:64:C5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AF31C58876A4990CD52AA68B5226133D9FF64C5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HSx7kSuahbd1eify7NGzCugL2KYEBwHRQVD3Wumyjeyu/0/323830343a346262633a3a2f33322d3335203d3e203238333333.roa
Signing time: Mon 28 Sep 2026 16:53:11 +0000
ROA not before: Mon 28 Sep 2026 16:48:11 +0000
ROA not after: Mon 27 Sep 2027 16:53:11 +0000
asID: 28333
IP address blocks: 2804:4bbc::/32 maxlen: 35
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HSx7kSuahbd1eify7NGzCugL2KYEBwHRQVD3Wumyjeyu/0/7AF31C58876A4990CD52AA68B5226133D9FF64C5.crl
rsync://rpki-repo.registro.br/repo/HSx7kSuahbd1eify7NGzCugL2KYEBwHRQVD3Wumyjeyu/0/7AF31C58876A4990CD52AA68B5226133D9FF64C5.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AF31C58876A4990CD52AA68B5226133D9FF64C5.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 12 Oct 2026 03:34:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:e1:c9:01:c7:3f:ad:5c:0e:b4:a7:bd:3f:13:2f:48:fb:32:4d:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7AF31C58876A4990CD52AA68B5226133D9FF64C5
Validity
Not Before: Sep 28 16:48:11 2026 GMT
Not After : Sep 27 16:53:11 2027 GMT
Subject: CN=A343D6FED68B9D5931CEF9B761592A5AEBCA76F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c9:6a:e0:38:f1:1f:f5:6a:41:9e:92:94:8c:
0f:ea:63:a9:a2:ce:1c:db:58:92:a0:0d:2c:9a:b8:
c5:70:e6:50:3e:4c:e2:30:e7:d0:22:e0:32:b9:8d:
76:79:4b:89:35:91:c8:bb:08:7c:eb:85:82:33:b7:
6d:85:99:97:0e:79:28:8f:46:10:cc:32:6f:fd:e4:
76:37:a1:65:be:e4:39:c0:01:1d:c4:06:a8:33:da:
74:92:07:f3:59:c8:32:06:a6:e4:04:46:ef:90:a4:
8c:a7:a9:ef:46:00:38:9c:63:87:40:99:cd:71:8f:
58:bf:ab:cb:5e:af:5b:a8:33:b2:0f:8a:06:8e:ee:
b9:8f:6e:40:a9:cf:72:d7:ab:9c:5b:9e:3e:d4:14:
a5:b4:72:bb:b2:17:48:94:9f:d0:04:79:f5:b6:98:
ac:a9:69:03:00:67:f4:87:5b:78:13:e2:6a:8d:fb:
74:3a:e1:56:6d:e0:6e:48:d3:85:4e:73:58:15:09:
c4:54:75:7a:c7:df:ef:3b:f4:cc:0e:0e:fa:e1:ad:
73:04:1c:64:8f:11:c8:d3:a4:65:e2:f1:7f:ae:0a:
55:fb:19:3b:32:c1:f7:f2:2c:08:96:c8:b2:52:28:
63:28:11:ec:1c:17:13:f3:b1:4a:7c:ca:ba:0b:4f:
b0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:43:D6:FE:D6:8B:9D:59:31:CE:F9:B7:61:59:2A:5A:EB:CA:76:F2
X509v3 Authority Key Identifier:
keyid:7A:F3:1C:58:87:6A:49:90:CD:52:AA:68:B5:22:61:33:D9:FF:64:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HSx7kSuahbd1eify7NGzCugL2KYEBwHRQVD3Wumyjeyu/0/7AF31C58876A4990CD52AA68B5226133D9FF64C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AF31C58876A4990CD52AA68B5226133D9FF64C5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HSx7kSuahbd1eify7NGzCugL2KYEBwHRQVD3Wumyjeyu/0/323830343a346262633a3a2f33322d3335203d3e203238333333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4bbc::/32
Signature Algorithm: sha256WithRSAEncryption
38:9d:33:58:44:ba:ca:19:e4:f1:86:9c:fa:9d:cf:b9:ae:cf:
af:c4:cc:ce:53:c6:fd:9e:3f:a7:87:42:3e:b2:c2:c8:96:e4:
d8:e3:9a:c6:b7:7e:2b:0c:29:e4:63:a4:10:33:d5:c8:0e:cd:
d3:14:29:d2:83:e5:f9:14:62:bd:13:6c:2c:0f:b6:34:52:e1:
ef:ea:d8:38:1f:2f:d7:69:59:01:bd:72:63:cf:11:33:73:7c:
ba:1f:7b:f9:15:a7:09:f2:f1:5a:03:0a:96:d4:fd:f3:76:bf:
cc:e9:29:a6:1c:17:98:59:a4:0b:f6:fc:40:63:cf:3c:fd:e3:
b3:7b:ab:8a:99:02:9a:17:ef:f6:9c:52:60:97:87:f0:c9:7e:
fd:9f:b2:d5:f7:7e:47:d8:fa:64:e7:6b:36:49:bf:96:83:d0:
70:f5:0f:ec:df:0c:ab:1b:56:1b:7c:d0:8e:74:64:a0:79:ea:
8b:b8:f8:06:76:a9:8f:30:62:ec:8c:11:bc:86:42:b5:44:a5:
02:65:fd:8d:b2:a6:71:77:83:89:11:0c:bd:c5:80:89:7b:68:
44:a1:c3:00:ed:4b:79:73:86:53:70:51:25:81:33:57:5c:4c:
58:8d:78:3f:f5:53:2d:3c:c4:03:b6:b0:de:e8:a9:d9:ea:d6:
55:fb:e9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:49:25 2026 by rpki-client