
$ rpki-client -vvvf rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/323830343a343166383a663331303a3a2f34342d3434203d3e20323637343639.roa
File: 323830343a343166383a663331303a3a2f34342d3434203d3e20323637343639.roa (raw, json)
Hash identifier: QiCzA/oRk+5w9Cv/Jv5W9yav43AHaskqDS7hRKVCcis=
Subject key identifier: 9E:B7:29:FF:A6:62:2D:3D:54:D8:E5:A7:10:73:4E:E4:3F:F1:7F:25
Certificate issuer: /CN=FAA66A1B59B1FF832D30110F8B4A72F4F10B7139
Certificate serial: 70D7ADFD85AACF1798469657EBA8710467A4559F
Authority key identifier: FA:A6:6A:1B:59:B1:FF:83:2D:30:11:0F:8B:4A:72:F4:F1:0B:71:39
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.cer
Subject info access: rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/323830343a343166383a663331303a3a2f34342d3434203d3e20323637343639.roa
Signing time: Wed 07 Oct 2026 01:36:43 +0000
ROA not before: Wed 07 Oct 2026 01:31:43 +0000
ROA not after: Wed 06 Oct 2027 01:36:43 +0000
asID: 267469
IP address blocks: 2804:41f8:f310::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.crl
rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 30 Oct 2026 20:54:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:d7:ad:fd:85:aa:cf:17:98:46:96:57:eb:a8:71:04:67:a4:55:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FAA66A1B59B1FF832D30110F8B4A72F4F10B7139
Validity
Not Before: Oct 7 01:31:43 2026 GMT
Not After : Oct 6 01:36:43 2027 GMT
Subject: CN=9EB729FFA6622D3D54D8E5A710734EE43FF17F25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:28:13:0c:b8:67:39:2f:16:60:8a:e5:bf:d4:
9d:ac:20:f6:80:82:0c:e1:5c:30:01:b1:46:52:57:
a0:24:7b:ef:56:71:63:24:9a:16:0d:0e:73:2c:a3:
96:a6:0e:99:be:fd:27:18:98:be:a9:3c:ce:5e:8e:
6a:da:f3:30:1f:59:48:f2:c6:a3:36:aa:96:4d:b0:
37:aa:2f:be:6c:67:00:34:5a:a5:59:93:9b:a2:7b:
e4:d1:04:da:9c:61:14:c9:7e:81:90:0c:e8:38:f5:
be:62:6e:92:a5:ca:8b:89:63:9b:de:c6:27:30:8f:
f9:2b:92:f2:69:fa:b6:7d:84:a6:4a:74:fa:29:f0:
93:9f:3b:d7:75:94:02:d1:82:f8:ae:b6:22:db:d5:
75:5e:7e:3e:28:d6:8c:5c:e2:36:31:8d:27:b8:e0:
d3:1d:0c:32:cb:05:67:b0:0e:c4:26:c6:51:a5:e0:
52:0b:5e:fa:73:1a:81:c9:db:e3:97:f5:17:28:ba:
99:2c:c8:c4:34:04:42:1e:74:68:79:a0:91:d1:35:
fd:5c:21:ff:68:5a:00:bd:6b:1f:54:2c:d2:ca:5f:
b2:39:56:c9:21:ff:a5:18:25:94:9b:fa:7e:cc:1d:
8a:df:18:29:72:8f:50:40:7e:00:af:fa:ef:49:f3:
35:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B7:29:FF:A6:62:2D:3D:54:D8:E5:A7:10:73:4E:E4:3F:F1:7F:25
X509v3 Authority Key Identifier:
keyid:FA:A6:6A:1B:59:B1:FF:83:2D:30:11:0F:8B:4A:72:F4:F1:0B:71:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/323830343a343166383a663331303a3a2f34342d3434203d3e20323637343639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:41f8:f310::/44
Signature Algorithm: sha256WithRSAEncryption
54:ac:7a:33:be:af:c3:0c:17:d9:67:c7:fc:91:38:a3:08:27:
c1:2b:d6:af:62:fd:27:3f:da:ff:59:81:13:ae:1e:fe:89:2b:
f8:6e:9f:03:39:d0:0c:83:e8:7c:01:21:71:81:43:88:24:f6:
b2:f7:7a:7e:7b:03:05:28:c4:77:a1:e0:7f:ca:b3:04:21:a4:
b3:db:8e:cb:47:b5:76:31:ee:79:38:0f:a5:18:bb:c2:10:e3:
a2:b3:87:9d:54:a0:69:0c:77:98:f6:d2:10:7d:25:d0:03:f7:
3a:7e:3d:2c:45:21:24:77:0d:9f:6d:72:8d:95:95:9d:45:19:
aa:27:a4:68:ed:94:a0:e9:0e:c2:d7:de:cd:00:c3:61:77:ef:
fd:b2:3f:22:31:de:49:2d:f8:bf:60:71:15:2a:57:aa:3f:37:
83:b2:a5:e8:06:5c:aa:4c:d7:9f:17:8f:a5:d8:fd:27:65:64:
05:66:a2:11:ed:9b:89:23:94:bd:0b:24:e9:d6:6f:5d:e3:0a:
50:9f:94:b7:55:35:4a:93:c1:aa:c2:76:36:05:e7:f0:9e:3b:
f6:06:b3:db:1a:ac:26:60:d4:57:c9:73:7e:01:ab:b1:ec:cf:
4d:73:8c:f2:8b:45:86:e1:47:e6:7a:ed:db:40:be:fd:ce:75:
96:e9:e0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 13:10:35 2026 by rpki-client