
$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3233362e302f32332d3233203d3e203532383731.roa
File: 3230312e3135372e3233362e302f32332d3233203d3e203532383731.roa (raw, json)
Hash identifier: WYSd0XEo5BOYMAzeS/WN+6huRzMokP0LwDsKoJdnfL4=
Subject key identifier: 01:0D:F1:B7:1C:B7:DF:16:1B:CA:5E:2E:38:E7:A1:25:15:97:B9:8D
Certificate issuer: /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial: 599F1AC8AF480FB5556D731A6C865A946BBE8A20
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3233362e302f32332d3233203d3e203532383731.roa
Signing time: Wed 24 Sep 2025 13:33:34 +0000
ROA not before: Wed 24 Sep 2025 13:28:34 +0000
ROA not after: Wed 23 Sep 2026 13:33:34 +0000
asID: 52871
IP address blocks: 201.157.236.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 11:58:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:9f:1a:c8:af:48:0f:b5:55:6d:73:1a:6c:86:5a:94:6b:be:8a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Validity
Not Before: Sep 24 13:28:34 2025 GMT
Not After : Sep 23 13:33:34 2026 GMT
Subject: CN=010DF1B71CB7DF161BCA5E2E38E7A1251597B98D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:1b:ef:2a:e2:75:ce:01:96:cb:0d:32:79:86:
67:34:b4:a3:39:48:f9:d6:7f:f8:b7:95:99:d2:73:
c8:76:19:b7:80:b4:96:7b:bf:93:c6:6d:70:6c:62:
cb:98:a6:7f:bf:2c:39:65:d7:01:9c:b1:83:5b:08:
02:91:f3:24:dc:c7:37:25:37:7a:a9:92:54:ec:df:
51:a5:24:2b:0b:d9:c6:fe:a1:8e:65:bd:d5:9c:2c:
89:1f:5a:50:99:77:97:20:4c:03:9c:dd:a1:54:6c:
ce:bd:bb:5d:69:17:3d:2a:fd:d1:19:82:c5:a2:5b:
50:a3:c6:91:7b:11:67:15:ef:e9:4f:64:5f:d4:0f:
b0:98:94:6d:84:10:d8:5d:3b:e2:e1:fa:ac:78:cf:
3f:95:4e:3a:72:02:2c:80:b4:67:18:01:f6:c1:1d:
f9:e3:5d:1d:06:c8:9f:d1:ae:c4:f1:45:35:0d:09:
9c:60:b5:49:54:c1:3e:bc:d1:c5:80:8f:af:91:0d:
5c:0c:d7:0f:a2:fe:64:e9:6a:69:dc:14:8f:ea:e1:
25:a8:c1:3a:8e:af:37:dc:70:4b:cb:d6:83:8c:a8:
8a:e0:9b:fc:31:cf:0c:f5:59:ea:c5:3b:51:b9:ef:
65:aa:3a:04:03:50:43:9a:c0:03:e0:97:9f:ca:8c:
1e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:0D:F1:B7:1C:B7:DF:16:1B:CA:5E:2E:38:E7:A1:25:15:97:B9:8D
X509v3 Authority Key Identifier:
keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3233362e302f32332d3233203d3e203532383731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.157.236.0/23
Signature Algorithm: sha256WithRSAEncryption
44:bd:4b:3c:88:0a:c4:36:30:19:18:ad:3a:dd:bc:87:b6:8a:
5b:8b:a2:49:66:41:cf:42:99:9b:0c:eb:34:59:67:f8:68:0f:
fe:bf:98:8e:5b:7b:f2:5c:94:f9:5e:94:ff:a8:78:c3:4e:53:
1f:87:4a:3a:75:dd:3c:9c:6c:c2:ab:ce:3d:44:bf:22:f2:3f:
f3:1b:f9:52:68:25:c1:05:ea:b0:d9:05:1b:68:03:79:64:f1:
42:83:d9:77:91:09:b4:50:d4:b8:77:91:fe:60:da:24:1c:02:
15:3f:44:24:c5:7e:7e:71:e2:41:2d:58:30:69:6e:b0:7b:44:
58:f0:69:f0:b3:b5:54:0b:ea:c6:80:9e:4b:0f:94:bf:b2:11:
fc:4f:bc:99:0d:07:8b:0b:da:39:de:a7:9e:b8:f4:9a:b3:7f:
83:19:99:ad:91:24:db:89:a0:32:92:91:d6:e2:2f:81:6b:4e:
5c:51:f2:28:4f:a9:f5:b4:7c:ef:db:d1:9b:08:da:9e:61:b5:
6f:53:89:74:0a:d6:43:e2:f7:ff:ee:73:bc:25:2f:c3:ac:a4:
4c:83:09:6d:15:7b:41:81:eb:fc:20:04:45:c0:63:6b:0e:0e:
a5:34:37:91:f3:84:cf:c6:fb:21:cf:f6:cc:24:eb:4b:bd:a2:
b7:d1:8b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:09:30 2025 by rpki-client