
$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3139312e3234302e3134382e302f32342d3234203d3e20323733343930.roa
File: 3139312e3234302e3134382e302f32342d3234203d3e20323733343930.roa (raw, json)
Hash identifier: nwBahSdRC1oPgiaO2uFKS//DCKSWVmuotLv9IJqvGzw=
Subject key identifier: 5C:94:73:C8:8B:77:47:51:99:59:49:C8:1A:FC:61:47:07:A5:98:2A
Certificate issuer: /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial: 628F60CAC2FBDF2593421EDD8A052EBB4AF04A90
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3139312e3234302e3134382e302f32342d3234203d3e20323733343930.roa
Signing time: Fri 20 Feb 2026 12:32:52 +0000
ROA not before: Fri 20 Feb 2026 12:27:52 +0000
ROA not after: Fri 19 Feb 2027 12:32:52 +0000
asID: 273490
IP address blocks: 191.240.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 09:07:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:8f:60:ca:c2:fb:df:25:93:42:1e:dd:8a:05:2e:bb:4a:f0:4a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Validity
Not Before: Feb 20 12:27:52 2026 GMT
Not After : Feb 19 12:32:52 2027 GMT
Subject: CN=5C9473C88B774751995949C81AFC614707A5982A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:13:57:00:0a:13:7e:68:98:38:b8:6e:cf:72:
a8:1e:7b:fc:62:85:6f:5c:00:e0:23:5d:b9:b7:31:
3a:7b:13:86:d4:58:52:31:6a:1f:de:da:63:ee:71:
63:53:4d:af:50:64:84:bd:19:ea:6b:49:ff:6f:ca:
61:18:bb:f8:6d:6b:23:88:b3:ec:dc:e9:eb:4e:8f:
e3:3f:e2:7e:e4:5d:12:01:30:f0:1a:50:37:df:1d:
00:74:b7:cb:61:17:fe:2f:e7:a0:da:5d:bb:6f:5b:
31:02:ba:3d:94:57:41:a2:34:ee:c1:eb:87:bf:62:
3b:ec:91:59:72:72:f8:bb:ce:f1:47:c7:ff:ad:38:
d0:81:1b:79:b4:a9:60:26:88:4e:c0:9d:31:da:19:
f7:61:60:fb:ba:2c:44:de:1f:bc:ef:27:4d:34:93:
33:fe:5b:af:d5:3c:02:71:05:0f:72:0e:11:ab:86:
19:76:74:36:85:d4:36:65:cc:7d:b3:b2:69:d6:28:
43:9f:8b:b5:30:d0:3f:e5:47:60:44:cc:1a:27:fd:
d1:ee:e8:ba:88:81:b9:c3:ee:f4:3b:d1:b7:8d:61:
f6:30:5e:75:81:12:9d:f3:6b:2e:2f:74:cf:fd:3b:
8c:1f:66:a0:2f:aa:b9:1e:91:1d:59:ef:0a:5b:e3:
9f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:94:73:C8:8B:77:47:51:99:59:49:C8:1A:FC:61:47:07:A5:98:2A
X509v3 Authority Key Identifier:
keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3139312e3234302e3134382e302f32342d3234203d3e20323733343930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.240.148.0/24
Signature Algorithm: sha256WithRSAEncryption
70:66:c2:eb:d4:85:ab:40:c0:0d:09:47:cf:35:eb:d8:2e:15:
3c:39:73:8d:b5:db:c7:37:09:d2:c0:0c:01:23:80:cc:f3:1a:
5d:b9:29:66:ed:77:14:8a:28:9e:39:04:87:db:55:31:d8:d4:
26:bb:b1:a9:2b:42:7e:63:03:37:92:d8:5b:0b:b3:b0:a9:5b:
0d:fa:ab:31:13:1e:10:bf:1b:a4:8f:91:50:88:dd:88:de:0d:
81:62:1d:ce:0e:c2:ed:fc:f9:cf:b2:5c:52:0f:0d:85:04:99:
3e:03:02:51:80:46:0a:46:a4:3f:35:f6:1d:c3:97:99:3a:61:
c3:ae:2c:56:42:c6:06:6f:ce:d2:af:ad:41:fc:b5:38:13:72:
12:95:20:90:0f:82:ee:96:e2:d9:91:68:36:3b:10:05:49:14:
1a:a6:ea:6f:00:1d:01:bf:62:02:82:0f:a4:17:0f:9e:bb:b5:
a2:ff:2d:54:fb:c2:0b:77:6b:5e:b0:ac:3c:f6:3b:ea:5c:7e:
29:0a:17:67:a1:1e:36:c1:95:5c:fc:04:02:3d:fe:e4:00:c9:
bb:88:05:d0:7e:6e:76:f4:9a:2a:3f:fd:c6:38:d1:44:be:05:
cb:09:eb:1b:05:27:78:26:0d:b3:d5:67:1f:51:60:3a:bb:58:
ce:ba:ea:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:03:56 2026 by rpki-client