
$ rpki-client -vvf rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/323830343a363532633a633030303a3a2f33342d3334203d3e20323639343733.roa
File: 323830343a363532633a633030303a3a2f33342d3334203d3e20323639343733.roa (raw, json)
Hash identifier: Rvo51TuPLd1M8Qn3gxgvH5b8+pcMostBoJ2Bw5X49aQ=
Subject key identifier: 73:AC:8F:3F:B9:50:62:2E:D7:15:E2:01:27:F2:B5:7A:8F:40:55:04
Certificate issuer: /CN=BAA91B8729924B4E8155B81952688BEC004DD0B7
Certificate serial: 388A054BCB26052065C45AF5AFE913EAEEE03F71
Authority key identifier: BA:A9:1B:87:29:92:4B:4E:81:55:B8:19:52:68:8B:EC:00:4D:D0:B7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/323830343a363532633a633030303a3a2f33342d3334203d3e20323639343733.roa
Signing time: Mon 16 Mar 2026 22:03:04 +0000
ROA not before: Mon 16 Mar 2026 21:58:04 +0000
ROA not after: Mon 15 Mar 2027 22:03:04 +0000
asID: 269473
IP address blocks: 2804:652c:c000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.crl
rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 23:11:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:8a:05:4b:cb:26:05:20:65:c4:5a:f5:af:e9:13:ea:ee:e0:3f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BAA91B8729924B4E8155B81952688BEC004DD0B7
Validity
Not Before: Mar 16 21:58:04 2026 GMT
Not After : Mar 15 22:03:04 2027 GMT
Subject: CN=73AC8F3FB950622ED715E20127F2B57A8F405504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7e:36:a7:33:9b:bc:ca:bf:8e:ac:3f:45:9b:
a1:a2:ed:38:2d:06:c5:a2:18:4d:7f:82:91:d5:41:
da:d7:d3:01:10:39:9e:43:11:ff:22:97:74:94:d9:
1b:e4:40:9b:ef:c1:5b:40:90:2a:e6:85:14:df:8b:
5c:24:04:0d:b9:8a:3b:41:b6:cf:41:e0:16:6a:be:
3e:73:15:77:57:94:04:fa:c0:70:ef:97:6e:f9:bd:
1c:a6:6d:17:6a:f3:82:30:a8:2b:76:fb:11:f0:e1:
32:22:21:87:bf:3a:b5:b2:ff:e5:a7:11:f4:c5:0b:
31:10:19:4f:8b:36:b3:78:24:d7:82:ce:6e:d5:bf:
39:43:fa:4e:a9:3f:a0:41:ae:8e:3a:a8:df:b9:3b:
e1:87:ce:d9:ea:e7:20:63:4d:c9:3c:45:9a:af:28:
5b:ee:66:5d:91:95:dd:9d:2c:8e:c0:a4:35:67:a7:
e0:a6:65:19:1b:0f:59:d6:28:62:c9:25:96:c4:51:
5d:f7:bc:5b:82:49:ed:3b:32:c2:7e:73:ec:7b:f9:
ab:11:9f:2f:ca:bb:4a:8e:be:50:7d:ab:09:b0:2f:
ee:d3:31:ff:f5:07:ff:cd:6d:ac:9f:69:0b:4f:af:
16:cf:41:a5:c6:a4:bc:91:87:17:aa:f5:2c:be:40:
cb:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:AC:8F:3F:B9:50:62:2E:D7:15:E2:01:27:F2:B5:7A:8F:40:55:04
X509v3 Authority Key Identifier:
keyid:BA:A9:1B:87:29:92:4B:4E:81:55:B8:19:52:68:8B:EC:00:4D:D0:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/323830343a363532633a633030303a3a2f33342d3334203d3e20323639343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:652c:c000::/34
Signature Algorithm: sha256WithRSAEncryption
53:0b:f4:f7:fd:81:d8:58:6f:22:a8:e2:5b:b5:b4:e3:bd:bf:
38:ca:81:81:a2:c0:db:8e:a1:75:94:77:c9:c3:a0:8a:bf:e7:
78:09:e6:da:28:f2:9d:1e:de:e6:d1:be:32:ff:aa:e3:67:d3:
9e:79:0d:58:3b:6b:ed:56:cc:53:8b:13:5f:78:d6:b4:e6:54:
80:e9:79:1c:d8:b6:ad:e0:b6:1e:62:0c:02:85:27:e9:aa:e4:
33:87:a1:48:df:71:ff:63:8f:b8:4d:27:1e:cf:f6:3a:4e:81:
7b:b6:a1:94:61:05:71:43:60:97:9e:e6:67:65:52:f7:aa:f2:
c7:cd:4f:2d:88:9b:a2:0f:13:05:fc:7a:d8:b3:9e:dd:0d:5c:
73:2b:f6:b9:18:c3:0e:f9:f5:e6:d6:d5:9e:42:b6:e9:1b:1f:
67:a4:64:f9:62:d5:81:1f:80:27:cc:97:ec:a5:4e:a5:8f:74:
14:91:f7:4e:6f:dc:5b:85:d0:a7:3b:7f:f3:9e:c2:30:a1:31:
f2:15:15:7c:7b:88:7f:cc:5f:72:e1:05:68:03:0e:bb:39:24:
89:02:96:88:7c:6c:87:a9:c8:0c:de:25:df:e1:69:c6:2e:62:
81:e8:01:e4:db:7a:e9:7c:a9:77:78:c3:5f:bb:9a:37:69:41:
f6:2f:f3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:31:29 2026 by rpki-client