
$ rpki-client -vvvf rpki-repo.registro.br/repo/CbVCddEgXVq9phfsbPE9ajQ9qRuwJBsf9KWVTcnf6VAS/0/3136382e3230352e3132382e302f32322d3332203d3e20323635333635.roa
File: 3136382e3230352e3132382e302f32322d3332203d3e20323635333635.roa (raw, json)
Hash identifier: bT6/DvZFW1irdmBQN6feUZiXyGCX3uDf/5QkR1dn0t8=
Subject key identifier: 2D:38:B9:DD:F9:92:B9:A3:12:33:50:53:7C:5B:7D:BE:D5:D4:5D:4D
Certificate issuer: /CN=966DD797B84E59CAE6227ED4FB1D4D52011EBA29
Certificate serial: 53AB02FB0F1640A67E0D84A129603897B85678FF
Authority key identifier: 96:6D:D7:97:B8:4E:59:CA:E6:22:7E:D4:FB:1D:4D:52:01:1E:BA:29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/966DD797B84E59CAE6227ED4FB1D4D52011EBA29.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CbVCddEgXVq9phfsbPE9ajQ9qRuwJBsf9KWVTcnf6VAS/0/3136382e3230352e3132382e302f32322d3332203d3e20323635333635.roa
Signing time: Tue 25 Aug 2026 22:57:01 +0000
ROA not before: Tue 25 Aug 2026 22:52:01 +0000
ROA not after: Tue 24 Aug 2027 22:57:01 +0000
asID: 265365
IP address blocks: 168.205.128.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CbVCddEgXVq9phfsbPE9ajQ9qRuwJBsf9KWVTcnf6VAS/0/966DD797B84E59CAE6227ED4FB1D4D52011EBA29.crl
rsync://rpki-repo.registro.br/repo/CbVCddEgXVq9phfsbPE9ajQ9qRuwJBsf9KWVTcnf6VAS/0/966DD797B84E59CAE6227ED4FB1D4D52011EBA29.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/966DD797B84E59CAE6227ED4FB1D4D52011EBA29.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Oct 2026 10:35:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:ab:02:fb:0f:16:40:a6:7e:0d:84:a1:29:60:38:97:b8:56:78:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=966DD797B84E59CAE6227ED4FB1D4D52011EBA29
Validity
Not Before: Aug 25 22:52:01 2026 GMT
Not After : Aug 24 22:57:01 2027 GMT
Subject: CN=2D38B9DDF992B9A3123350537C5B7DBED5D45D4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:60:3e:a2:2b:6a:1e:bd:4c:3b:0c:59:89:9a:
e0:ac:c5:b7:31:42:04:6d:16:d9:1f:d6:14:75:bf:
75:9f:d8:4f:c4:90:56:14:5c:b0:df:24:bf:38:eb:
0c:5c:08:7d:d0:f3:bc:ea:36:e6:54:df:e5:4a:52:
e5:9f:bf:a8:fc:37:3a:2c:6e:37:a2:f7:b0:75:b8:
fc:bd:33:60:36:f2:c6:fd:e2:d6:30:6b:b1:24:da:
a5:28:f6:04:c4:9c:76:e6:8a:86:6a:5b:ca:e2:e5:
ec:9c:ff:63:73:78:f6:9a:c5:93:68:11:f8:bf:03:
56:dd:02:fd:0b:32:bd:38:5c:ec:27:1b:4a:5f:e0:
03:f6:f3:02:6d:1e:17:99:38:b9:06:4a:94:8b:08:
d3:b1:81:71:11:c0:f2:50:a6:dc:39:6a:f4:39:fb:
f3:77:5a:ca:1e:d7:f2:aa:eb:56:c8:ef:cc:5a:f6:
89:07:4d:15:c1:f7:75:4b:3c:47:a1:8f:ae:78:4e:
d9:21:49:df:b9:c3:5c:ff:78:4e:76:d1:3e:c3:5e:
f3:7b:5e:a7:ce:3b:58:05:41:6f:d1:7c:65:f4:8e:
12:df:21:1d:e8:82:0e:88:f3:4a:d9:01:31:08:c2:
18:4e:07:c3:f1:31:8a:b6:6f:cb:58:82:ec:9e:6f:
4f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:38:B9:DD:F9:92:B9:A3:12:33:50:53:7C:5B:7D:BE:D5:D4:5D:4D
X509v3 Authority Key Identifier:
keyid:96:6D:D7:97:B8:4E:59:CA:E6:22:7E:D4:FB:1D:4D:52:01:1E:BA:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CbVCddEgXVq9phfsbPE9ajQ9qRuwJBsf9KWVTcnf6VAS/0/966DD797B84E59CAE6227ED4FB1D4D52011EBA29.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/966DD797B84E59CAE6227ED4FB1D4D52011EBA29.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CbVCddEgXVq9phfsbPE9ajQ9qRuwJBsf9KWVTcnf6VAS/0/3136382e3230352e3132382e302f32322d3332203d3e20323635333635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.205.128.0/22
Signature Algorithm: sha256WithRSAEncryption
43:0e:26:85:27:4c:f8:77:62:9f:af:10:ed:bf:71:31:83:2e:
34:f2:6e:e8:f1:b5:17:43:3a:44:b4:1e:bd:6b:4e:32:8e:e1:
96:a7:c0:7c:4d:86:17:b5:67:c3:62:e7:09:0c:5a:23:40:49:
28:c1:6f:be:01:c8:77:3f:64:61:cb:13:61:6a:6e:32:0f:5a:
f6:43:34:db:af:d3:1a:5e:11:78:d1:ad:84:e8:a3:b9:f2:11:
72:51:04:4e:7c:09:d5:a9:92:5e:bd:4a:e6:fa:32:c3:27:7f:
b4:16:38:4b:ac:58:6e:f1:92:c8:05:a1:d2:bf:ff:a4:52:92:
c3:33:74:c0:54:b6:e9:f2:dc:d3:f7:eb:9b:87:2c:19:18:7b:
2d:37:80:07:ef:27:1d:6e:2e:99:15:26:95:b8:f1:65:20:93:
3b:5c:fa:7e:44:c0:9a:b5:33:16:72:04:30:0c:60:60:1c:cc:
c0:00:d2:8f:65:c0:3b:79:c2:21:da:54:12:03:3e:50:6e:e1:
8a:9b:ea:75:9c:83:34:e5:d8:49:b4:f3:2d:5d:5f:c2:3c:fb:
fe:c6:12:01:6f:76:88:71:25:60:65:04:18:70:4d:1f:03:48:
a5:b7:30:a4:88:97:d5:63:ba:13:dc:44:cb:56:b7:18:0b:06:
32:09:83:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 16:16:31 2026 by rpki-client