
$ rpki-client -vvvf rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/3137372e3132382e39362e302f32312d3234203d3e20323632373639.roa
File: 3137372e3132382e39362e302f32312d3234203d3e20323632373639.roa (raw, json)
Hash identifier: lwTjJXvKo18IGcSC0IUNwfZTWY2NJCVYpe2oq7QHPKE=
Subject key identifier: 86:9F:BD:4C:44:70:7F:DF:68:33:29:B4:47:3B:FC:26:C0:4C:EA:49
Certificate issuer: /CN=B0485678AE7155C65290067DA6041EB0A1652E4E
Certificate serial: 38228B2570B7A48E1F1DEB0CAD1965265C9C6366
Authority key identifier: B0:48:56:78:AE:71:55:C6:52:90:06:7D:A6:04:1E:B0:A1:65:2E:4E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0485678AE7155C65290067DA6041EB0A1652E4E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/3137372e3132382e39362e302f32312d3234203d3e20323632373639.roa
Signing time: Fri 23 Oct 2026 16:53:25 +0000
ROA not before: Fri 23 Oct 2026 16:48:25 +0000
ROA not after: Fri 22 Oct 2027 16:53:25 +0000
asID: 262769
IP address blocks: 177.128.96.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/B0485678AE7155C65290067DA6041EB0A1652E4E.crl
rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/B0485678AE7155C65290067DA6041EB0A1652E4E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0485678AE7155C65290067DA6041EB0A1652E4E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Oct 2026 05:19:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:22:8b:25:70:b7:a4:8e:1f:1d:eb:0c:ad:19:65:26:5c:9c:63:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B0485678AE7155C65290067DA6041EB0A1652E4E
Validity
Not Before: Oct 23 16:48:25 2026 GMT
Not After : Oct 22 16:53:25 2027 GMT
Subject: CN=869FBD4C44707FDF683329B4473BFC26C04CEA49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6a:5d:46:05:04:a4:d7:ba:a0:0f:ad:7a:f4:
e3:67:95:e0:ee:48:67:7e:98:c4:48:b5:b8:11:da:
92:f1:b4:4a:af:6a:5c:1c:89:62:70:d6:c4:40:64:
5d:56:98:2d:52:62:94:4d:20:f2:36:7a:bc:7e:4b:
f5:49:36:93:e5:ad:78:61:55:70:b9:bf:d5:9f:df:
5e:3b:b4:93:6b:7d:c4:80:1a:a5:ba:70:2d:eb:fa:
80:6b:01:54:1e:77:8f:4f:a5:58:6f:76:3f:14:72:
8e:89:a2:39:5f:4f:00:c4:85:1f:da:4e:f6:53:86:
6b:fe:3b:bd:d3:f0:70:3d:cc:b3:4d:49:cf:7c:fc:
7a:7a:b4:55:8e:cb:ca:a9:fb:b5:87:cb:0e:82:2a:
33:25:bb:fe:23:69:59:36:96:f2:09:7d:dc:b0:e8:
0d:74:e0:1a:47:d8:5a:ce:37:09:b4:41:23:82:5f:
e8:ed:90:8d:5d:a7:92:30:dc:ea:fa:af:9c:3d:bc:
b2:43:85:08:7e:df:8c:ec:3e:ac:08:a3:41:7c:79:
26:d2:56:64:64:dd:e1:2d:22:37:2d:0a:7a:a3:1a:
5c:a2:86:bb:42:b0:97:db:cb:51:0a:62:1e:85:d1:
9c:e9:a9:21:89:59:ed:77:a6:b5:1f:6b:f6:42:44:
92:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:9F:BD:4C:44:70:7F:DF:68:33:29:B4:47:3B:FC:26:C0:4C:EA:49
X509v3 Authority Key Identifier:
keyid:B0:48:56:78:AE:71:55:C6:52:90:06:7D:A6:04:1E:B0:A1:65:2E:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/B0485678AE7155C65290067DA6041EB0A1652E4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0485678AE7155C65290067DA6041EB0A1652E4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/3137372e3132382e39362e302f32312d3234203d3e20323632373639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.128.96.0/21
Signature Algorithm: sha256WithRSAEncryption
91:91:b2:20:7f:b5:17:46:84:2d:c0:24:1e:bb:55:24:05:2b:
95:7e:d0:87:02:5b:59:a2:07:d2:17:7c:08:6c:54:2c:02:27:
9c:42:a6:2d:da:19:1e:9d:89:82:62:a6:e6:7b:e5:69:cb:23:
b6:da:25:69:a2:f3:dd:b9:52:1b:24:7a:3c:61:80:62:3c:c1:
ab:fb:41:f8:b3:2d:b8:24:19:5c:a9:9c:d2:58:a3:c6:3b:37:
44:1d:39:85:16:21:29:be:1a:00:27:c9:0c:bf:3f:8d:f3:af:
5d:4f:90:3b:58:26:c2:09:4f:80:f5:90:a8:7b:7d:08:dd:45:
82:f6:a3:58:f7:d2:bc:af:f9:05:7b:ee:9c:02:99:3d:5d:b2:
bf:4a:af:66:0a:8a:5d:46:df:f7:41:31:f6:af:21:75:19:d7:
e9:b5:6f:12:82:02:aa:d0:a0:e6:12:07:7c:26:60:e1:4a:ef:
ab:b4:c0:54:d9:65:66:7f:cf:91:a0:97:05:01:e1:5b:21:1d:
42:b4:1d:dd:d5:04:89:11:26:aa:cc:d6:46:21:d3:49:f0:18:
2f:65:51:2d:0b:9f:fe:f3:fd:e6:5c:a0:18:11:55:16:81:c7:
62:15:5f:9e:00:1d:63:f7:3b:07:2a:5f:67:7f:8e:cb:b9:a1:
ff:5a:90:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:51:48 2026 by rpki-client