
$ rpki-client -vvf rpki-repo.registro.br/repo/HirWxfy9dche4bZCpxKKbeQWEVZQWvHCtrCX1RRuC8eW/0/323830343a326234343a333436343a3a2f34382d3438203d3e20323635313434.roa
File: 323830343a326234343a333436343a3a2f34382d3438203d3e20323635313434.roa (raw, json)
Hash identifier: f88PbFzu1zwxJzJdV3Lc7MBjD/Wd2Ch2VD8WTXze3XA=
Subject key identifier: DF:2A:C1:B0:E3:67:6E:87:3B:A2:E1:20:35:81:91:0C:89:E7:00:F2
Certificate issuer: /CN=AF01A19C9F193FDBA7A5A04D26153A8EF57917A0
Certificate serial: 11898E6EA049A55183889B45739EEA07D7CE91AF
Authority key identifier: AF:01:A1:9C:9F:19:3F:DB:A7:A5:A0:4D:26:15:3A:8E:F5:79:17:A0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF01A19C9F193FDBA7A5A04D26153A8EF57917A0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HirWxfy9dche4bZCpxKKbeQWEVZQWvHCtrCX1RRuC8eW/0/323830343a326234343a333436343a3a2f34382d3438203d3e20323635313434.roa
Signing time: Wed 11 Mar 2026 18:52:07 +0000
ROA not before: Wed 11 Mar 2026 18:47:07 +0000
ROA not after: Wed 10 Mar 2027 18:52:07 +0000
asID: 265144
IP address blocks: 2804:2b44:3464::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HirWxfy9dche4bZCpxKKbeQWEVZQWvHCtrCX1RRuC8eW/0/AF01A19C9F193FDBA7A5A04D26153A8EF57917A0.crl
rsync://rpki-repo.registro.br/repo/HirWxfy9dche4bZCpxKKbeQWEVZQWvHCtrCX1RRuC8eW/0/AF01A19C9F193FDBA7A5A04D26153A8EF57917A0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF01A19C9F193FDBA7A5A04D26153A8EF57917A0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 05:35:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:89:8e:6e:a0:49:a5:51:83:88:9b:45:73:9e:ea:07:d7:ce:91:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF01A19C9F193FDBA7A5A04D26153A8EF57917A0
Validity
Not Before: Mar 11 18:47:07 2026 GMT
Not After : Mar 10 18:52:07 2027 GMT
Subject: CN=DF2AC1B0E3676E873BA2E1203581910C89E700F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ad:69:40:6b:d6:71:07:67:9d:ad:a1:6d:2a:
fd:c3:ea:da:03:62:9b:99:b1:4e:90:cf:aa:87:0c:
88:a5:de:7a:1e:a0:c7:47:3b:b1:c4:71:e3:e4:eb:
b8:57:48:cf:b8:3a:c6:83:cc:98:6b:3b:91:17:a0:
58:88:26:1a:30:25:13:89:e1:a1:b1:6f:3f:24:09:
05:57:4d:97:a1:e3:13:4e:84:1a:e5:c5:29:60:c4:
0b:ed:70:44:59:4b:47:9c:0b:d4:61:76:1f:80:05:
d8:87:bd:c2:c8:1a:c4:ee:08:b1:fb:55:f2:70:e5:
20:1c:9d:b5:a2:7d:5c:e3:80:c2:bf:fe:e8:dd:95:
46:0a:db:f5:15:ab:7a:bf:ba:87:88:6e:41:05:97:
31:65:1b:43:4f:a9:67:d5:c4:69:8c:c1:b7:dc:89:
18:25:45:a8:65:52:33:e7:b6:d2:0e:86:62:2f:96:
9d:30:e0:85:0e:b4:16:e8:d9:9f:23:7c:e8:13:77:
a9:dc:eb:48:ba:3b:1a:23:7c:d9:f0:ed:12:1d:48:
0b:3f:dc:f1:45:b1:77:1b:92:45:f7:2d:33:2e:7b:
68:d9:f7:ae:59:0b:50:8e:94:6c:6e:ef:d2:bf:b4:
18:12:90:33:4f:63:36:6e:26:66:81:74:78:ee:d8:
5a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:2A:C1:B0:E3:67:6E:87:3B:A2:E1:20:35:81:91:0C:89:E7:00:F2
X509v3 Authority Key Identifier:
keyid:AF:01:A1:9C:9F:19:3F:DB:A7:A5:A0:4D:26:15:3A:8E:F5:79:17:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HirWxfy9dche4bZCpxKKbeQWEVZQWvHCtrCX1RRuC8eW/0/AF01A19C9F193FDBA7A5A04D26153A8EF57917A0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF01A19C9F193FDBA7A5A04D26153A8EF57917A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HirWxfy9dche4bZCpxKKbeQWEVZQWvHCtrCX1RRuC8eW/0/323830343a326234343a333436343a3a2f34382d3438203d3e20323635313434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2b44:3464::/48
Signature Algorithm: sha256WithRSAEncryption
1d:a4:6c:76:76:e8:01:92:82:df:c0:8c:f4:cc:25:0c:03:26:
94:2d:e4:bf:ed:2f:5f:23:13:4a:94:dd:5c:de:8b:45:9a:e0:
03:86:d3:43:f9:89:b7:23:84:70:a3:b5:95:1b:79:f9:a9:dd:
08:49:30:ce:92:2b:6e:6f:2f:42:15:39:1a:70:36:20:a4:1b:
05:29:c5:d7:4d:2e:eb:b1:a3:5f:84:6b:fb:3e:e6:97:9e:df:
58:71:58:34:d4:5a:be:9b:a4:b7:ec:5f:2c:c6:c6:d0:a6:41:
05:17:00:a2:72:e0:70:80:b3:67:28:71:00:5a:f6:f4:c7:92:
9c:69:1b:0f:e2:44:ca:62:07:4e:67:48:38:2d:41:94:48:8b:
fd:9b:c5:86:aa:67:80:d7:9e:f5:cd:4b:fd:0d:c6:8c:b7:f0:
26:2c:0b:d4:45:3d:18:8c:15:36:dd:73:e1:48:67:f2:3d:17:
fc:62:a0:10:0a:bb:59:2a:39:72:79:fb:9c:26:a0:a2:d1:b3:
f2:84:d7:86:51:1b:f1:6c:de:9c:42:04:8e:c7:4d:4b:87:9b:
01:a7:74:b8:9c:89:de:67:f8:e6:06:d9:a0:34:6a:fd:4f:d6:
9f:ee:ef:f4:13:99:6f:76:f3:37:35:0e:6c:93:08:46:b0:11:
f2:a0:f1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:57:37 2026 by rpki-client