
$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3230302e3232392e3232382e302f32322d3232203d3e203238313635.roa
File: 3230302e3232392e3232382e302f32322d3232203d3e203238313635.roa (raw, json)
Hash identifier: H9wslvjZ+o/Y3eVWNiw2UQ4NCLmaYeTcbq3PYLVxrqk=
Subject key identifier: 25:B4:F2:78:B6:B5:DC:DB:62:17:85:22:AC:33:4A:F6:B7:3E:04:7B
Certificate issuer: /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial: 6B5E625B58FACF3A11599A0C116387DF7D1EBA16
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3230302e3232392e3232382e302f32322d3232203d3e203238313635.roa
Signing time: Mon 28 Jul 2025 12:31:36 +0000
ROA not before: Mon 28 Jul 2025 12:26:36 +0000
ROA not after: Mon 27 Jul 2026 12:31:36 +0000
asID: 28165
IP address blocks: 200.229.228.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 03:35:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:5e:62:5b:58:fa:cf:3a:11:59:9a:0c:11:63:87:df:7d:1e:ba:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Validity
Not Before: Jul 28 12:26:36 2025 GMT
Not After : Jul 27 12:31:36 2026 GMT
Subject: CN=25B4F278B6B5DCDB62178522AC334AF6B73E047B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ce:fa:22:56:00:78:2f:45:67:3e:72:f4:5a:
10:89:02:99:4d:85:42:9f:78:b0:c0:db:b8:3b:c4:
3e:e8:ee:7f:2c:13:60:61:34:b3:2f:dc:60:e8:23:
e4:87:17:3e:e2:0b:f4:33:8c:93:6a:6c:de:ee:18:
57:4d:5b:41:90:95:36:2c:c2:41:aa:b7:c3:bb:9e:
75:c0:01:82:1b:f6:ee:bf:78:38:71:6c:6b:45:ee:
b6:57:47:9b:f0:28:9e:1c:57:db:2e:68:62:5c:7d:
22:a4:cf:de:3b:e5:fc:f5:9d:41:00:c4:84:d7:54:
b9:9e:f9:30:fd:5f:09:37:12:b5:e6:e9:78:38:3b:
74:a2:5c:4d:65:10:ab:e9:56:c7:d9:e6:ce:40:88:
74:0a:b2:e0:68:a0:6a:0c:50:04:9e:02:f3:e1:47:
db:76:0b:d9:4a:a9:73:8f:e4:b6:ae:16:bc:79:31:
02:d5:50:94:4e:c3:14:b2:cd:77:05:54:c5:99:66:
72:90:78:cb:ba:11:85:9e:04:05:94:c3:c3:83:c3:
fb:e6:81:c3:f7:91:f3:aa:66:5b:1b:dc:e3:37:c8:
e2:18:06:43:4c:af:b5:0a:5d:ea:38:c5:c5:ed:e6:
2d:ae:e2:73:94:a9:73:26:01:15:80:e7:6c:40:2a:
f7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B4:F2:78:B6:B5:DC:DB:62:17:85:22:AC:33:4A:F6:B7:3E:04:7B
X509v3 Authority Key Identifier:
keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3230302e3232392e3232382e302f32322d3232203d3e203238313635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.229.228.0/22
Signature Algorithm: sha256WithRSAEncryption
92:07:76:c0:97:7c:41:27:28:84:21:ab:39:ac:bd:ee:cf:80:
dc:ee:fa:85:cb:1e:0c:89:2e:ca:96:c7:3c:06:8c:09:a5:9f:
71:61:92:48:a1:66:bb:0d:45:10:95:d4:4b:72:d9:75:96:42:
c2:3a:e8:7a:ad:1b:28:83:3f:d9:89:9a:3c:c6:48:a4:84:3f:
59:96:66:c7:0a:75:c5:8e:57:30:98:de:f3:90:06:b6:24:9f:
43:ca:08:34:d3:bf:43:97:6c:dd:e9:f9:20:da:ce:ca:9b:10:
5c:20:83:75:88:ef:f4:9c:fe:56:85:23:dc:6d:18:f4:a9:c3:
d3:f0:83:bf:36:cb:64:95:4b:30:84:94:d0:df:03:60:d6:89:
8e:0f:31:0c:db:a6:24:9e:91:ff:e5:60:c6:cf:b7:12:fa:18:
fc:45:ce:86:d3:65:ef:24:6f:38:55:0d:bf:a4:b5:9c:00:ca:
2c:8f:60:39:dc:97:71:64:22:69:6e:5e:12:1a:ee:c3:46:ab:
c4:79:a6:f6:56:21:30:4e:9d:0b:9b:98:6e:e0:72:f2:1e:33:
b6:f7:69:75:4a:21:9a:96:c7:db:34:48:8f:33:d1:50:24:54:
23:bb:06:6c:a6:12:52:a3:29:a9:74:89:aa:12:50:b3:e0:c0:
bd:80:c0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:05:17 2025 by rpki-client