
$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3133312e3235352e3130302e302f32332d3233203d3e203238313635.roa
File: 3133312e3235352e3130302e302f32332d3233203d3e203238313635.roa (raw, json)
Hash identifier: Pw1E3FC3bacvCLnAdzFKR/TN/erVAlC5ogzXQktmmHg=
Subject key identifier: AD:AD:8C:20:12:4D:D2:8C:02:1F:0F:C7:BE:C4:FC:D6:7D:64:5B:B7
Certificate issuer: /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial: 4A5DFA0AC3EAD3E1F34D0BD8EFD8E6C3B4A36FFD
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3133312e3235352e3130302e302f32332d3233203d3e203238313635.roa
Signing time: Mon 28 Jul 2025 12:31:23 +0000
ROA not before: Mon 28 Jul 2025 12:26:23 +0000
ROA not after: Mon 27 Jul 2026 12:31:23 +0000
asID: 28165
IP address blocks: 131.255.100.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 03:35:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:5d:fa:0a:c3:ea:d3:e1:f3:4d:0b:d8:ef:d8:e6:c3:b4:a3:6f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Validity
Not Before: Jul 28 12:26:23 2025 GMT
Not After : Jul 27 12:31:23 2026 GMT
Subject: CN=ADAD8C20124DD28C021F0FC7BEC4FCD67D645BB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:61:94:8e:b1:a1:b8:6b:98:96:15:ed:43:fc:
68:03:00:ce:49:af:18:09:31:34:62:f0:c7:d4:07:
e2:92:e7:56:45:0c:5a:56:33:35:50:a5:d9:b9:d0:
69:d7:2d:a2:5d:ea:4a:0d:3f:4b:56:e4:2e:47:27:
26:92:f6:81:3a:01:70:35:2b:64:0c:0a:4c:0b:d1:
00:37:77:07:b3:66:20:71:e9:7d:57:6b:74:4f:77:
4d:8a:d9:3c:60:6c:30:d8:4a:9f:e2:10:a6:46:a6:
49:1d:d1:83:57:5a:de:ab:3a:dd:d1:50:27:e7:bf:
6f:cb:df:b3:72:6f:de:ea:34:05:cd:07:46:ac:6c:
75:f6:8d:1f:1c:ee:b8:7f:85:ee:9e:4d:53:c7:20:
d2:9e:5a:aa:ee:3b:52:50:d9:fc:c7:8a:9f:57:d0:
ae:f3:3d:b6:09:f4:27:b1:f4:de:56:f0:3c:20:e0:
eb:7c:4d:c8:68:f7:c9:24:fb:3f:4c:f0:89:1c:fa:
36:d0:8f:34:35:28:65:bd:d8:d9:35:8f:30:8e:8b:
81:fa:8d:7f:32:55:51:d2:fd:bb:d1:f5:44:63:75:
3a:31:82:2f:92:12:0b:af:5a:99:19:13:89:f1:2a:
11:68:0f:c0:3e:fa:b2:a5:29:67:0f:3b:13:c4:fd:
33:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:AD:8C:20:12:4D:D2:8C:02:1F:0F:C7:BE:C4:FC:D6:7D:64:5B:B7
X509v3 Authority Key Identifier:
keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3133312e3235352e3130302e302f32332d3233203d3e203238313635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.255.100.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:4a:0f:e7:d9:f8:d4:40:80:c2:9d:e5:35:92:2f:42:df:3b:
02:d2:67:b9:ce:6d:43:79:11:6b:a4:33:5e:5c:f6:ea:ac:d2:
69:b1:54:14:cc:41:bc:a6:88:51:26:01:f2:a3:9c:bf:4a:f5:
80:e5:2c:4e:c5:d4:c5:6e:b4:31:5f:89:3a:f5:60:48:f6:9d:
37:58:ac:00:18:10:74:73:5c:b7:5b:03:1e:df:6c:56:4e:6c:
54:6d:03:7b:c6:e0:15:49:2d:16:ea:12:75:1e:9a:a8:98:64:
da:f7:ed:fa:28:60:0a:64:f5:86:98:b3:d8:dd:5a:26:9b:e3:
48:0a:b5:b3:1b:61:7c:10:0b:0e:f7:34:e4:36:46:6c:21:39:
c6:a4:4c:94:bb:6d:f2:8c:9f:da:d2:2c:03:f9:16:a4:9a:7e:
0d:79:7e:ab:88:a9:ea:c6:90:cf:53:df:21:04:a0:ac:42:6b:
01:2d:6b:37:1c:85:cc:cd:cc:a1:17:2b:ed:5b:d5:24:cd:77:
bd:c7:00:31:80:3d:31:05:67:c7:9e:03:59:0b:13:9c:e7:95:
85:cf:00:ff:e6:ae:ed:53:c4:4e:b2:89:3e:91:42:4b:05:ce:
84:1f:8b:24:61:8b:3c:05:62:c0:dd:fe:b2:f3:dd:25:30:bc:
7f:f6:04:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:53:22 2025 by rpki-client