
$ rpki-client -vvvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38382e302f32312d3231203d3e203232373036.roa
File: 3230302e3135322e38382e302f32312d3231203d3e203232373036.roa (raw, json)
Hash identifier: MbwTO8uf1IcPx7NB7L4tm+qqym84HZ4EqxqViplPr/w=
Subject key identifier: FA:B3:AF:D3:6A:9D:BC:BA:3E:8F:36:9E:E4:15:38:33:1B:C2:61:EC
Certificate issuer: /CN=D1F5C9A11A2575A29CEC01F3361C418408534072
Certificate serial: 7410C83ADD554089CD809948AC9ABFA7947C7352
Authority key identifier: D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38382e302f32312d3231203d3e203232373036.roa
Signing time: Fri 23 Oct 2026 14:01:16 +0000
ROA not before: Fri 23 Oct 2026 13:56:16 +0000
ROA not after: Fri 22 Oct 2027 14:01:16 +0000
asID: 22706
IP address blocks: 200.152.88.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.crl
rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Oct 2026 02:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:10:c8:3a:dd:55:40:89:cd:80:99:48:ac:9a:bf:a7:94:7c:73:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1F5C9A11A2575A29CEC01F3361C418408534072
Validity
Not Before: Oct 23 13:56:16 2026 GMT
Not After : Oct 22 14:01:16 2027 GMT
Subject: CN=FAB3AFD36A9DBCBA3E8F369EE41538331BC261EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:30:59:77:e7:82:f0:90:51:70:31:41:f9:1b:
7e:95:08:71:45:7b:ba:ab:ca:2b:e5:cc:68:16:e1:
b9:4d:e4:ba:84:b5:9c:ba:12:fd:05:e1:d1:7b:be:
59:67:3e:ff:3a:81:f6:a1:f0:1d:b4:22:e0:29:38:
0a:36:7a:9d:0c:be:f7:77:27:0f:26:87:55:3a:4d:
f3:5e:b4:bb:7d:62:9a:1d:25:2f:74:0b:11:68:38:
64:23:85:59:da:1e:e0:8d:7e:e2:16:0c:1e:2f:1a:
01:f4:c3:98:0b:fa:07:84:dd:7e:db:98:89:8f:34:
2a:77:4b:75:66:d4:ba:1a:78:84:e7:5b:e7:c7:05:
b7:72:88:7d:56:be:54:02:d2:3b:0a:e4:e7:cb:ae:
a8:89:1a:61:90:3e:85:99:c6:72:08:7a:58:5a:d5:
3e:47:51:80:d6:29:85:ea:9b:18:a3:13:6a:10:25:
58:9a:ed:71:d5:ae:b4:ae:36:aa:77:5a:33:79:80:
76:b0:65:82:8a:ba:89:ee:0e:78:26:90:4e:e7:16:
fa:fd:61:a0:82:9b:df:36:a4:60:1f:6b:10:e3:ee:
4f:00:e8:c2:86:c7:1b:b6:a2:97:d3:46:53:c2:61:
96:a5:bf:b2:3a:36:ea:f9:48:b5:28:57:bc:aa:8b:
2d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B3:AF:D3:6A:9D:BC:BA:3E:8F:36:9E:E4:15:38:33:1B:C2:61:EC
X509v3 Authority Key Identifier:
keyid:D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38382e302f32312d3231203d3e203232373036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.152.88.0/21
Signature Algorithm: sha256WithRSAEncryption
16:ab:35:19:3d:58:6b:87:fc:1c:aa:e5:b1:16:90:23:cd:f2:
ea:5d:cd:40:c0:08:5f:3c:67:b0:03:9f:90:4f:6b:b6:e2:18:
34:20:18:f9:d0:40:22:9c:11:52:ad:41:db:37:86:bc:3d:45:
75:a1:0a:d5:f7:fe:69:e1:8b:16:ee:ad:e2:78:df:63:db:40:
76:d6:6a:e2:bc:f8:ad:8a:cd:17:7a:2b:b2:20:52:f3:86:ca:
f5:e8:af:27:87:07:da:ef:61:60:ef:0b:2a:14:fc:74:a9:60:
0f:58:2d:69:f6:57:35:4d:fb:38:6c:99:fb:8b:7c:ba:a3:51:
bd:1d:8d:31:ee:4f:63:6f:6e:e4:6e:5d:8b:3b:87:9e:b2:97:
42:a2:eb:16:cc:6c:92:df:d2:bb:c1:40:e7:9b:16:c6:e6:10:
9f:23:67:17:fd:b6:dc:2a:a1:ae:72:8f:70:5b:94:e6:ef:a1:
28:ca:22:ab:6a:95:8c:97:6f:b5:53:e5:97:0a:35:b8:15:bf:
84:3d:bd:97:88:c4:f1:30:d1:7f:6b:04:4d:53:97:ac:99:3e:
38:36:0b:5c:37:d2:0d:cf:6d:a7:76:16:16:3e:53:7c:8f:44:
ae:80:41:7d:70:aa:78:73:d4:aa:d1:32:04:d7:9e:31:e7:8f:
43:a7:8c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 13:41:37 2026 by rpki-client