
$ rpki-client -vvf rpki-repo.registro.br/repo/HirWxfy9dche4bZCpxKKbeQWEVZQWvHCtrCX1RRuC8eW/0/323830343a326234343a333430303a3a2f34382d3438203d3e20323635313434.roa
File: 323830343a326234343a333430303a3a2f34382d3438203d3e20323635313434.roa (raw, json)
Hash identifier: 2zbN7F8p/DUphylMsAwb6uVRLQyzBnRkGJqGdWXJagQ=
Subject key identifier: 65:39:65:B3:1F:2F:F2:18:B2:C8:95:92:11:29:A8:19:DD:A5:93:2C
Certificate issuer: /CN=AF01A19C9F193FDBA7A5A04D26153A8EF57917A0
Certificate serial: 58ECD704651D975D0425175E814ECC5015A8D9BE
Authority key identifier: AF:01:A1:9C:9F:19:3F:DB:A7:A5:A0:4D:26:15:3A:8E:F5:79:17:A0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF01A19C9F193FDBA7A5A04D26153A8EF57917A0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HirWxfy9dche4bZCpxKKbeQWEVZQWvHCtrCX1RRuC8eW/0/323830343a326234343a333430303a3a2f34382d3438203d3e20323635313434.roa
Signing time: Wed 11 Mar 2026 18:36:58 +0000
ROA not before: Wed 11 Mar 2026 18:31:58 +0000
ROA not after: Wed 10 Mar 2027 18:36:58 +0000
asID: 265144
IP address blocks: 2804:2b44:3400::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HirWxfy9dche4bZCpxKKbeQWEVZQWvHCtrCX1RRuC8eW/0/AF01A19C9F193FDBA7A5A04D26153A8EF57917A0.crl
rsync://rpki-repo.registro.br/repo/HirWxfy9dche4bZCpxKKbeQWEVZQWvHCtrCX1RRuC8eW/0/AF01A19C9F193FDBA7A5A04D26153A8EF57917A0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF01A19C9F193FDBA7A5A04D26153A8EF57917A0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 05:35:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:ec:d7:04:65:1d:97:5d:04:25:17:5e:81:4e:cc:50:15:a8:d9:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF01A19C9F193FDBA7A5A04D26153A8EF57917A0
Validity
Not Before: Mar 11 18:31:58 2026 GMT
Not After : Mar 10 18:36:58 2027 GMT
Subject: CN=653965B31F2FF218B2C895921129A819DDA5932C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:62:2a:21:3a:07:bb:48:81:7a:79:f9:d7:ae:
fc:c8:4b:e9:c4:a4:ab:36:f1:6e:65:eb:86:b3:bc:
01:3d:bb:8b:e9:3b:1e:ba:72:30:64:a6:18:fe:0d:
e1:0d:e8:87:25:dd:2b:59:93:a6:07:a8:3f:e5:bd:
52:44:cb:45:97:f7:bb:18:7c:1c:51:12:3b:fd:e0:
82:83:00:24:70:fe:55:2c:7d:1f:89:25:cb:f1:34:
63:60:14:e1:b4:cd:8b:b8:57:1b:b2:9d:cc:16:d0:
70:07:c6:e6:cd:1c:59:6c:a4:42:ea:d7:af:7c:cb:
79:b2:14:cc:39:6b:d0:84:3e:98:b8:cf:67:97:e5:
d7:d0:fa:59:38:7d:23:8a:ef:00:63:42:4d:bc:9f:
2f:bd:66:24:30:43:14:9d:a3:9e:cc:59:52:22:23:
13:d2:b7:30:6b:b4:4d:76:29:ea:63:36:d2:7b:62:
46:30:4f:61:a7:b3:57:1e:10:6d:26:40:76:30:d4:
c0:55:42:84:21:13:2d:f0:d3:9a:48:07:57:ed:3e:
3e:de:0f:05:d1:f8:dc:09:d2:9b:0d:3f:cd:03:97:
2d:85:c0:47:66:ad:88:29:39:f5:7d:cf:18:b2:08:
1f:43:10:39:bf:1b:1b:f6:5f:14:97:d0:51:70:20:
8a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:39:65:B3:1F:2F:F2:18:B2:C8:95:92:11:29:A8:19:DD:A5:93:2C
X509v3 Authority Key Identifier:
keyid:AF:01:A1:9C:9F:19:3F:DB:A7:A5:A0:4D:26:15:3A:8E:F5:79:17:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HirWxfy9dche4bZCpxKKbeQWEVZQWvHCtrCX1RRuC8eW/0/AF01A19C9F193FDBA7A5A04D26153A8EF57917A0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF01A19C9F193FDBA7A5A04D26153A8EF57917A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HirWxfy9dche4bZCpxKKbeQWEVZQWvHCtrCX1RRuC8eW/0/323830343a326234343a333430303a3a2f34382d3438203d3e20323635313434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2b44:3400::/48
Signature Algorithm: sha256WithRSAEncryption
95:0b:f9:35:72:aa:d5:b8:98:44:e4:12:e8:aa:40:b9:92:a0:
1e:23:f9:81:6c:83:d0:d9:5b:74:42:af:80:d2:1f:8b:90:05:
5b:ab:4d:19:21:a2:51:ab:a6:5d:33:c9:1f:05:1d:44:fb:53:
eb:f1:64:8e:be:b7:56:9b:26:29:ca:ef:e5:9a:c0:29:5f:b1:
50:bb:d8:5e:49:25:8b:62:5f:fc:3b:44:a7:c2:36:69:df:80:
31:59:e6:e4:5e:ec:5e:3f:76:c5:9d:6a:7f:f5:46:a6:d1:47:
4b:8f:f1:d2:2f:95:d5:ce:87:e5:c0:9a:5d:8e:2d:0e:30:ed:
f3:36:c6:b2:55:96:28:55:c9:f8:aa:99:f5:73:63:5c:82:50:
44:30:66:3a:cb:1d:2d:a0:25:80:1a:6f:a4:23:96:25:2f:1e:
ba:8f:ab:4c:3a:9d:68:f6:16:14:15:0f:49:2b:38:da:ac:12:
56:ec:d8:4a:cd:38:ba:4a:6b:0c:ae:c4:dc:83:df:fe:c1:b2:
d3:4d:8b:47:95:7c:2b:aa:c2:44:88:af:5b:dd:e7:a2:2a:fd:
af:e4:86:76:73:64:f1:53:b4:69:4a:b2:c0:c6:fc:85:2f:38:
86:c0:ac:e5:63:8a:07:6b:ae:be:82:69:39:57:24:f1:20:55:
88:3a:3c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:57:25 2026 by rpki-client