
$ rpki-client -vvf rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/3139312e33372e36382e302f32322d3232203d3e20323633333535.roa
File: 3139312e33372e36382e302f32322d3232203d3e20323633333535.roa (raw, json)
Hash identifier: HfCOfoln6qcNVvudjZQn1kqOG612UiUHfntBR9tAmwQ=
Subject key identifier: 5A:23:C4:B5:50:54:C0:AC:6C:9E:94:29:AB:E8:6B:37:E1:9C:8A:7E
Certificate issuer: /CN=2A6676986C812A17B00635484B147B51B75ADD4B
Certificate serial: 525EE860D64724495126FAAE6CBCEE5D9381FCFA
Authority key identifier: 2A:66:76:98:6C:81:2A:17:B0:06:35:48:4B:14:7B:51:B7:5A:DD:4B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6676986C812A17B00635484B147B51B75ADD4B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/3139312e33372e36382e302f32322d3232203d3e20323633333535.roa
Signing time: Tue 23 Sep 2025 18:08:07 +0000
ROA not before: Tue 23 Sep 2025 18:03:07 +0000
ROA not after: Tue 22 Sep 2026 18:08:07 +0000
asID: 263355
IP address blocks: 191.37.68.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.crl
rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6676986C812A17B00635484B147B51B75ADD4B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 23:36:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:5e:e8:60:d6:47:24:49:51:26:fa:ae:6c:bc:ee:5d:93:81:fc:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A6676986C812A17B00635484B147B51B75ADD4B
Validity
Not Before: Sep 23 18:03:07 2025 GMT
Not After : Sep 22 18:08:07 2026 GMT
Subject: CN=5A23C4B55054C0AC6C9E9429ABE86B37E19C8A7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cd:d3:b6:39:0c:ef:97:9a:62:69:a0:9a:97:
52:c1:58:24:bc:8a:0b:a8:2e:ad:b8:8b:a3:ba:14:
38:b7:39:0e:10:52:b8:05:ee:d0:77:da:92:f1:ab:
e4:bb:a1:23:e1:6f:63:3b:8d:32:78:d1:57:e0:3e:
dd:b4:c4:82:60:8f:e1:db:1d:2a:a2:67:ae:17:47:
f5:c6:e7:61:e3:29:d6:01:32:0c:f8:06:c1:a8:8d:
98:bf:91:71:8c:9e:29:60:38:ec:bd:f5:ee:e0:1e:
f2:4e:4c:67:14:2c:b5:f7:b7:e6:47:42:d4:bd:83:
8c:54:13:d3:19:90:d4:41:c5:6c:ba:7d:1a:d3:ae:
8e:5b:c7:3c:94:82:f0:85:e3:a3:f9:36:b4:75:92:
1c:9b:e9:1e:10:10:c2:f8:35:59:4b:1e:44:bf:cb:
dc:2f:30:2b:a5:7e:ee:09:23:a4:79:11:70:a0:08:
fc:45:e1:68:31:b4:2f:44:42:be:1d:41:38:d6:03:
2e:43:c1:47:fb:45:2d:6e:0e:64:be:39:b6:3a:a2:
a9:9d:68:1b:36:cf:31:35:f4:d2:bc:c4:f9:ae:3a:
a9:65:e4:49:36:8b:80:d0:ff:d6:7e:2a:98:5e:20:
5d:a9:52:b2:f5:9c:fa:27:79:16:3a:f2:41:76:87:
c3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:23:C4:B5:50:54:C0:AC:6C:9E:94:29:AB:E8:6B:37:E1:9C:8A:7E
X509v3 Authority Key Identifier:
keyid:2A:66:76:98:6C:81:2A:17:B0:06:35:48:4B:14:7B:51:B7:5A:DD:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6676986C812A17B00635484B147B51B75ADD4B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/3139312e33372e36382e302f32322d3232203d3e20323633333535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.37.68.0/22
Signature Algorithm: sha256WithRSAEncryption
15:ec:05:15:a0:ab:34:31:08:e8:bb:22:ad:bf:f2:19:a0:ae:
40:1f:80:d6:73:9a:2a:12:14:c8:15:8b:75:5e:a1:77:db:7d:
16:42:e8:8c:39:e7:ef:93:5d:ce:0b:46:0e:7a:c7:4d:89:dd:
70:89:23:09:c5:31:81:0f:f6:47:ea:f5:7f:84:7c:56:30:67:
65:a7:17:ce:63:aa:76:b5:20:0e:d0:3a:c5:32:e0:f4:52:f9:
9d:09:18:83:08:a7:52:da:28:d4:55:de:d5:ac:27:c9:39:44:
d9:96:52:ea:ec:4f:39:95:98:81:0d:ae:35:5e:38:3d:fd:15:
b1:e7:2a:bd:8f:7b:9c:5f:a7:22:c3:b8:fb:68:ad:1e:df:ea:
5e:c9:3d:0b:61:60:97:9e:c3:df:94:40:8b:e3:9d:03:e1:f1:
28:39:75:ac:03:db:cf:e0:f5:a3:56:23:5e:a0:1f:4f:19:16:
c4:4d:1a:93:06:45:21:f1:f9:19:11:ac:dd:2f:00:a7:00:28:
84:cb:cd:d4:92:d6:22:c8:f8:e7:5a:6a:77:76:79:d4:ad:d0:
25:58:4a:72:9b:f1:4d:67:94:80:25:32:08:b3:f2:3e:47:19:
58:20:60:10:38:9a:a5:b1:e0:fa:c5:97:8a:ba:90:c0:7c:0d:
ee:e7:7d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:17:24 2025 by rpki-client