
$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3139312e3234302e3135362e302f32332d3233203d3e203238313635.roa
File: 3139312e3234302e3135362e302f32332d3233203d3e203238313635.roa (raw, json)
Hash identifier: M0K/IB+1XhQNn3X9juf/DsKvGBZUB7afuv5+Y6g0Q6s=
Subject key identifier: 01:71:5E:91:C8:11:EA:41:38:2F:37:85:57:A4:86:55:2C:52:12:2E
Certificate issuer: /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial: 34B2EA4028F1AABF0FD8551164338FF5E8E8F438
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3139312e3234302e3135362e302f32332d3233203d3e203238313635.roa
Signing time: Mon 28 Jul 2025 12:31:25 +0000
ROA not before: Mon 28 Jul 2025 12:26:25 +0000
ROA not after: Mon 27 Jul 2026 12:31:25 +0000
asID: 28165
IP address blocks: 191.240.156.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 03:35:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:b2:ea:40:28:f1:aa:bf:0f:d8:55:11:64:33:8f:f5:e8:e8:f4:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Validity
Not Before: Jul 28 12:26:25 2025 GMT
Not After : Jul 27 12:31:25 2026 GMT
Subject: CN=01715E91C811EA41382F378557A486552C52122E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c4:00:1d:66:83:c5:23:3b:c4:d3:98:90:46:
d2:9c:d6:68:10:2e:c9:82:18:de:84:d7:8f:a6:53:
fe:75:a2:49:b4:01:c7:ea:c1:62:ca:08:79:c2:a2:
b8:24:4c:6e:ce:3a:34:f5:89:5e:35:a2:82:43:f3:
ea:dc:d5:e4:f5:c4:30:70:94:f2:86:f4:33:73:73:
c3:fc:83:f1:64:66:0b:bc:68:4f:fb:77:b7:80:d2:
97:de:c7:4d:b7:dd:8f:0d:fb:96:8f:e0:33:a5:f7:
ad:ae:05:d4:1e:58:25:0b:9c:67:21:59:39:96:4c:
f5:51:30:0f:03:a6:c1:3f:02:af:7d:e1:b6:91:1f:
da:23:51:73:7c:96:6f:4c:6c:ad:86:1f:ee:9e:85:
e1:65:bb:95:22:5d:02:4b:09:df:b7:06:b6:ec:87:
6c:47:45:41:09:fc:68:78:01:e8:7d:3a:14:a1:66:
4c:26:68:ee:73:f9:b5:cb:65:5e:ef:98:d1:57:00:
62:11:95:6b:87:74:b2:ef:4d:03:f6:f1:5d:fb:57:
00:54:04:6a:25:64:58:6e:61:15:b3:7d:72:e6:7c:
8e:4f:32:fe:31:9f:54:73:7c:9d:aa:36:5c:bc:3f:
00:d1:b9:d4:05:57:c9:99:b6:7f:cf:5b:87:87:b3:
05:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:71:5E:91:C8:11:EA:41:38:2F:37:85:57:A4:86:55:2C:52:12:2E
X509v3 Authority Key Identifier:
keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3139312e3234302e3135362e302f32332d3233203d3e203238313635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.240.156.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:f2:f2:bb:15:ca:ec:b9:4e:0d:4e:ef:b9:69:7a:45:5b:e5:
e0:df:78:be:d6:55:62:e3:fa:50:8e:30:fc:39:41:d7:cf:8c:
c2:70:15:a9:35:3d:91:92:37:aa:c2:2e:be:b5:4c:43:4b:6c:
93:a3:4a:a6:be:f9:a1:05:15:e9:3a:17:1c:78:76:ce:d6:2c:
c2:78:e4:09:2c:49:ea:32:24:92:a2:ab:2a:da:e4:e9:60:cd:
9d:01:61:f7:fc:14:21:58:9c:4b:20:49:60:80:fe:14:1d:d6:
60:32:3a:02:f9:67:24:84:23:1d:d6:3d:b3:02:6e:62:31:72:
9e:e1:da:54:02:fe:2f:bd:e8:1d:bf:8d:1c:50:09:e2:5d:09:
6d:c9:62:1f:d2:b9:4d:84:45:17:4f:4d:c5:99:0e:cc:4c:24:
8d:78:8d:40:52:91:bf:cb:d6:40:b0:43:23:6a:dc:29:a0:38:
3d:5e:09:de:e5:f6:ce:41:f4:c7:7a:3d:11:9b:0e:d5:27:60:
df:28:f1:f3:c0:43:5f:eb:c2:fb:ea:f5:a2:ba:d9:55:e1:bc:
e9:ab:a0:24:d5:f5:c8:1a:26:f0:6f:df:06:8a:59:04:17:24:
61:84:34:59:42:90:f8:ac:8e:7e:41:06:59:45:50:54:1e:ad:
e3:0c:c3:fc
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNLLqQCjxqr8P2FURZDOP9ejo9DgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTE2MDFBOUVGNUUwREE1RDBDMTUyRUNCN0ZFMjNDODc1
NUNCQzIwNzAeFw0yNTA3MjgxMjI2MjVaFw0yNjA3MjcxMjMxMjVaMDMxMTAvBgNV
BAMTKDAxNzE1RTkxQzgxMUVBNDEzODJGMzc4NTU3QTQ4NjU1MkM1MjEyMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5xAAdZoPFIzvE05iQRtKc1mgQ
LsmCGN6E14+mU/51okm0AcfqwWLKCHnCorgkTG7OOjT1iV41ooJD8+rc1eT1xDBw
lPKG9DNzc8P8g/FkZgu8aE/7d7eA0pfex0233Y8N+5aP4DOl962uBdQeWCULnGch
WTmWTPVRMA8DpsE/Aq994baRH9ojUXN8lm9MbK2GH+6eheFlu5UiXQJLCd+3Brbs
h2xHRUEJ/Gh4Aeh9OhShZkwmaO5z+bXLZV7vmNFXAGIRlWuHdLLvTQP28V37VwBU
BGolZFhuYRWzfXLmfI5PMv4xn1RzfJ2qNly8PwDRudQFV8mZtn/PW4eHswUDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUAXFekcgR6kE4LzeFV6SGVSxSEi4wHwYDVR0j
BBgwFoAUkWAanvXg2l0MFS7Lf+I8h1XLwgcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXBQcFhSUmN1RzlRMW1YcXh6UXhIS28zdXA4V1V0M3Q0VjRFbXl4dERu
SmovMC85MTYwMUE5RUY1RTBEQTVEMEMxNTJFQ0I3RkUyM0M4NzU1Q0JDMjA3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxNjAxQTlFRjVFMERBNUQw
QzE1MkVDQjdGRTIzQzg3NTVDQkMyMDcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FwUHBYUlJjdUc5UTFtWHF4elF4SEtvM3VwOFdVdDN0NFY0RW15eHREbkpqLzAv
MzEzOTMxMmUzMjM0MzAyZTMxMzUzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzgzMTM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG/8JwwDQYJKoZIhvcNAQELBQADggEBAGzy8rsV
yuy5Tg1O77lpekVb5eDfeL7WVWLj+lCOMPw5QdfPjMJwFak1PZGSN6rCLr61TENL
bJOjSqa++aEFFek6Fxx4ds7WLMJ45AksSeoyJJKiqyra5OlgzZ0BYff8FCFYnEsg
SWCA/hQd1mAyOgL5ZySEIx3WPbMCbmIxcp7h2lQC/i+96B2/jRxQCeJdCW3JYh/S
uU2ERRdPTcWZDsxMJI14jUBSkb/L1kCwQyNq3CmgOD1eCd7l9s5B9Md6PRGbDtUn
YN8o8fPAQ1/rwvvq9aK62VXhvOmroCTV9cgaJvBv3waKWQQXJGGENFlCkPisjn5B
BllFUFQereMMw/w=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:53:59 2025 by rpki-client