
$ rpki-client -vvf rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/1/3134332e3133372e3232302e302f32332d3233203d3e20323634303437.roa
File: 3134332e3133372e3232302e302f32332d3233203d3e20323634303437.roa (raw, json)
Hash identifier: 8f98bIG4sLA38OhWisHXAiX62rxjFuxQX5jZLrCbjaA=
Subject key identifier: BD:C7:FB:FB:E8:D7:82:4A:99:E2:A0:C0:3C:65:D5:DB:95:F4:79:D7
Certificate issuer: /CN=A659218A22E64B9AA4A437C941E20690CB9F5BFC
Certificate serial: 35F6019CFCFE4E98370691555C272109CB97ED1F
Authority key identifier: A6:59:21:8A:22:E6:4B:9A:A4:A4:37:C9:41:E2:06:90:CB:9F:5B:FC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A659218A22E64B9AA4A437C941E20690CB9F5BFC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/1/3134332e3133372e3232302e302f32332d3233203d3e20323634303437.roa
Signing time: Tue 02 Sep 2025 13:27:37 +0000
ROA not before: Tue 02 Sep 2025 13:22:37 +0000
ROA not after: Tue 01 Sep 2026 13:27:37 +0000
asID: 264047
IP address blocks: 143.137.220.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/1/A659218A22E64B9AA4A437C941E20690CB9F5BFC.crl
rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/1/A659218A22E64B9AA4A437C941E20690CB9F5BFC.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A659218A22E64B9AA4A437C941E20690CB9F5BFC.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 21:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:f6:01:9c:fc:fe:4e:98:37:06:91:55:5c:27:21:09:cb:97:ed:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A659218A22E64B9AA4A437C941E20690CB9F5BFC
Validity
Not Before: Sep 2 13:22:37 2025 GMT
Not After : Sep 1 13:27:37 2026 GMT
Subject: CN=BDC7FBFBE8D7824A99E2A0C03C65D5DB95F479D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e2:f0:ab:60:8f:17:6f:dc:7e:75:d3:ab:0b:
cf:cb:19:59:37:d6:4d:02:3b:70:3d:da:84:99:33:
14:bf:70:55:f4:b3:03:5f:47:a2:81:71:90:73:f6:
c5:36:63:8d:a8:1d:15:77:5e:32:46:7a:08:b5:a2:
f1:e8:4a:25:6c:67:e1:ea:78:26:53:5c:97:b4:2e:
95:b3:eb:7b:6a:ef:89:e6:2c:e6:79:9b:d9:2a:09:
7e:88:be:81:c0:38:8b:27:c2:01:4e:ce:bd:9a:b7:
db:a5:5f:09:c7:1e:c5:ce:74:eb:53:46:45:76:93:
cc:cb:f6:d7:50:e9:8e:2b:5e:d8:a8:e1:f8:bf:1a:
88:85:c9:8a:e6:78:a0:02:d7:7f:ee:6e:9c:52:25:
39:cb:de:66:52:e3:76:0e:91:c2:2d:43:d4:96:a1:
0a:c9:d5:86:52:7e:84:c5:f7:61:b7:70:de:3a:72:
a9:db:a7:48:43:12:04:f8:bd:99:ca:2d:b3:8e:77:
ed:45:48:17:7d:13:ac:7e:96:38:01:a0:e4:e3:d0:
9b:9f:76:4f:13:71:a6:8c:35:24:bd:64:f2:40:0a:
b3:5d:e8:a4:de:a7:1c:29:85:7f:82:3d:ec:b3:1f:
5c:cb:65:de:df:33:39:75:38:76:bb:ce:b4:ed:13:
ca:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C7:FB:FB:E8:D7:82:4A:99:E2:A0:C0:3C:65:D5:DB:95:F4:79:D7
X509v3 Authority Key Identifier:
keyid:A6:59:21:8A:22:E6:4B:9A:A4:A4:37:C9:41:E2:06:90:CB:9F:5B:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/1/A659218A22E64B9AA4A437C941E20690CB9F5BFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A659218A22E64B9AA4A437C941E20690CB9F5BFC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/1/3134332e3133372e3232302e302f32332d3233203d3e20323634303437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.137.220.0/23
Signature Algorithm: sha256WithRSAEncryption
06:7f:d5:22:74:8c:ac:a5:aa:79:4b:8d:16:2d:17:d6:a6:95:
b9:07:e4:12:6b:a2:ee:c0:e0:25:b9:11:67:f7:f2:92:5b:22:
dc:62:38:da:42:88:04:b1:8f:a4:9a:11:f0:5a:18:56:d6:10:
86:c4:95:34:e6:5b:6a:42:91:28:3b:d2:d7:e5:22:f6:0c:69:
f7:48:cd:5d:15:2d:56:1e:e4:60:f1:2b:82:69:5a:44:0d:5d:
a6:68:6a:06:d0:0f:0c:7b:ab:83:33:44:36:c0:f1:49:c1:9a:
0f:ef:0a:24:13:ff:98:2e:88:ed:4f:a4:b8:83:d7:b4:4b:e2:
77:5c:c7:0e:31:2a:92:bf:93:ae:90:31:ff:8b:47:f1:6c:5f:
70:e3:36:14:8f:98:b5:30:fa:87:8e:75:ff:9c:17:91:64:3c:
5e:17:ca:06:e7:d3:69:2c:d1:db:90:1b:b9:78:8c:4a:ba:df:
ea:72:b3:c0:f5:34:ef:ce:e8:6d:b6:bd:82:09:ba:7a:d7:a2:
95:9c:d4:65:e4:4a:f6:1f:1c:e7:06:cf:92:99:d8:c7:a5:47:
3f:3c:6f:c6:4d:d9:91:cb:0b:37:ca:6d:d4:72:a5:e2:7f:e8:
16:8a:28:01:f4:2e:1f:a7:0a:c8:17:21:03:af:be:d7:0a:15:
d5:06:ac:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:37:19 2025 by rpki-client