
$ rpki-client -vvf rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/323830343a323538303a343030303a3a2f33352d3335203d3e20323634323834.roa
File: 323830343a323538303a343030303a3a2f33352d3335203d3e20323634323834.roa (raw, json)
Hash identifier: GiGWz4RAlG8gn91IwKmcLguCPe7y1LUADUcrHqT2oA8=
Subject key identifier: 75:40:2D:16:8C:44:EF:B4:EE:BE:D3:36:F2:C0:17:27:CD:A1:64:77
Certificate issuer: /CN=D3674BC62244757D82BD45C85C9511AD511807E1
Certificate serial: 150C4CDDEFC6C29633C86A27ACC7D4715E1AEC55
Authority key identifier: D3:67:4B:C6:22:44:75:7D:82:BD:45:C8:5C:95:11:AD:51:18:07:E1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3674BC62244757D82BD45C85C9511AD511807E1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/323830343a323538303a343030303a3a2f33352d3335203d3e20323634323834.roa
Signing time: Mon 02 Mar 2026 22:48:00 +0000
ROA not before: Mon 02 Mar 2026 22:43:00 +0000
ROA not after: Mon 01 Mar 2027 22:48:00 +0000
asID: 264284
IP address blocks: 2804:2580:4000::/35 maxlen: 35
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/D3674BC62244757D82BD45C85C9511AD511807E1.crl
rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/D3674BC62244757D82BD45C85C9511AD511807E1.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3674BC62244757D82BD45C85C9511AD511807E1.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 15:29:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:0c:4c:dd:ef:c6:c2:96:33:c8:6a:27:ac:c7:d4:71:5e:1a:ec:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D3674BC62244757D82BD45C85C9511AD511807E1
Validity
Not Before: Mar 2 22:43:00 2026 GMT
Not After : Mar 1 22:48:00 2027 GMT
Subject: CN=75402D168C44EFB4EEBED336F2C01727CDA16477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:67:85:f5:21:1f:d7:eb:38:97:8d:f9:93:e6:
b1:50:bc:55:9a:ac:bc:3f:98:ad:d1:2c:5d:39:d1:
d5:75:af:74:af:e1:45:7e:f1:e7:78:f4:b3:5d:b8:
ca:f5:36:d9:01:45:1f:d5:6b:2d:02:be:9d:77:aa:
86:4c:70:44:dd:f8:c6:61:f6:1b:65:b8:c8:ff:d4:
0c:1c:f1:aa:e9:79:0f:05:1a:3e:49:c2:1e:10:0e:
6f:74:fe:24:71:f4:ef:e4:25:26:7b:42:e8:15:7c:
95:1d:fc:23:bd:c9:2f:69:93:c2:cf:2b:82:75:db:
04:b0:35:04:c9:3a:f0:d2:e9:4b:80:36:44:48:0f:
89:8f:4c:a4:54:9b:dd:31:53:e5:30:78:ba:32:74:
99:3e:72:0c:c4:04:a7:7e:fe:62:36:aa:3b:a2:17:
b2:52:89:68:7a:40:ac:52:fd:7a:1f:0f:5e:8b:f8:
50:90:9c:e0:d8:8e:57:a3:bf:40:14:55:44:c4:af:
8a:26:02:d3:12:4d:32:ee:5b:d7:63:41:34:43:67:
14:1e:66:6d:03:e0:10:20:16:c1:59:1a:c3:f9:67:
9e:3b:cb:fa:0e:3a:fe:8b:e0:c4:87:9b:6a:3e:ef:
2c:f4:5a:a2:a9:fa:0a:26:37:5b:9b:75:21:f8:79:
73:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:40:2D:16:8C:44:EF:B4:EE:BE:D3:36:F2:C0:17:27:CD:A1:64:77
X509v3 Authority Key Identifier:
keyid:D3:67:4B:C6:22:44:75:7D:82:BD:45:C8:5C:95:11:AD:51:18:07:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/D3674BC62244757D82BD45C85C9511AD511807E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3674BC62244757D82BD45C85C9511AD511807E1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/323830343a323538303a343030303a3a2f33352d3335203d3e20323634323834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2580:4000::/35
Signature Algorithm: sha256WithRSAEncryption
10:da:49:e8:14:41:63:b2:44:52:56:e3:bf:02:5c:bc:b4:58:
89:4e:9c:7f:fb:8f:7a:e8:dc:a6:7e:cd:64:7c:f5:18:44:15:
76:ea:ae:f7:bf:b6:93:fa:aa:03:48:b5:d9:dd:7b:06:f8:6f:
cd:5a:c0:f8:e6:00:e3:a5:4a:f7:38:a4:05:d0:0b:33:fe:1d:
9c:9f:e8:a6:69:e4:88:ce:b6:eb:6a:94:e1:45:10:1f:7c:ec:
b5:ca:40:dc:d6:d6:7c:42:12:6f:6c:a5:54:5b:c1:9d:9a:67:
a9:e4:36:83:af:4e:93:82:95:11:1f:82:25:17:b2:20:a2:42:
2e:a7:d1:d6:6f:f0:5d:1a:ee:0e:9b:66:a4:bd:6a:51:8c:a1:
eb:f9:fd:2c:e8:7c:10:12:22:97:bb:87:cf:eb:1b:cb:70:c1:
13:12:b7:75:0c:65:27:d6:ba:8f:4e:a3:fd:5c:89:18:76:e9:
66:9b:ba:32:1d:45:d8:cb:a1:8f:e5:81:27:12:e5:da:cb:04:
f3:b2:97:0a:c3:80:01:b8:3f:00:e9:8e:f7:64:78:aa:a4:ee:
31:d2:a6:b9:41:f4:e6:25:2d:3f:0f:b6:47:c5:f2:22:8a:7e:
0a:a1:b5:f4:fd:0c:22:4f:48:20:c5:07:24:07:f4:70:d6:d5:
4f:a2:89:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:29:38 2026 by rpki-client