
$ rpki-client -vvvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38382e302f32342d3234203d3e203232373036.roa
File: 3230302e3135322e38382e302f32342d3234203d3e203232373036.roa (raw, json)
Hash identifier: lhZFP1qYBllLX7FkrKGKs5keGXYk2pmDygDaB1qr8Lk=
Subject key identifier: FE:56:D3:86:DC:08:F5:8C:B6:4E:40:37:95:79:F5:1C:CA:77:20:15
Certificate issuer: /CN=D1F5C9A11A2575A29CEC01F3361C418408534072
Certificate serial: 228EB4B268DBAC25232915647EDB32BC0A6651AE
Authority key identifier: D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38382e302f32342d3234203d3e203232373036.roa
Signing time: Fri 23 Oct 2026 14:01:21 +0000
ROA not before: Fri 23 Oct 2026 13:56:21 +0000
ROA not after: Fri 22 Oct 2027 14:01:21 +0000
asID: 22706
IP address blocks: 200.152.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.crl
rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Nov 2026 03:36:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:8e:b4:b2:68:db:ac:25:23:29:15:64:7e:db:32:bc:0a:66:51:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1F5C9A11A2575A29CEC01F3361C418408534072
Validity
Not Before: Oct 23 13:56:21 2026 GMT
Not After : Oct 22 14:01:21 2027 GMT
Subject: CN=FE56D386DC08F58CB64E40379579F51CCA772015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c0:ee:67:77:69:e0:bb:0a:6e:a4:ea:b8:e7:
f9:bf:b6:8b:9b:ab:0b:60:f7:dc:d9:69:fb:d7:f6:
09:50:1f:a1:e5:b7:d7:c9:3d:d1:1c:0f:63:52:ff:
82:3d:c6:ce:14:d9:17:91:a1:b6:6f:57:fc:ce:1b:
f1:6f:82:85:e9:54:87:e1:b8:88:46:ff:56:73:85:
71:c2:b2:79:9f:1b:33:8f:29:8e:75:b0:d6:e0:b2:
7d:7e:da:1c:93:d8:2a:00:2b:89:56:09:6a:c3:d5:
04:16:7e:f7:ea:56:ea:bb:8d:30:80:1f:3d:ee:f6:
07:0b:d0:4a:2c:7a:43:da:3e:bb:55:5d:63:39:57:
59:76:4a:c4:6c:bf:65:05:8b:00:25:1d:45:68:8a:
c0:93:23:37:11:58:e1:43:6e:71:09:8a:c7:b9:1a:
52:2e:69:ce:dd:a0:ce:cb:22:1e:ca:5a:2e:b6:db:
9d:6e:50:55:d5:d6:fd:fe:ab:fa:1d:57:47:c5:88:
23:79:6b:cd:16:68:fe:b8:b0:56:a5:50:71:a9:d9:
02:90:20:c4:48:b0:b5:c1:88:45:c7:1d:b4:85:ae:
d3:cb:80:ed:99:73:4c:f8:8e:11:4c:b7:e0:10:fb:
ae:76:2d:15:29:ca:ba:d3:48:16:33:aa:ee:8c:81:
0f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:56:D3:86:DC:08:F5:8C:B6:4E:40:37:95:79:F5:1C:CA:77:20:15
X509v3 Authority Key Identifier:
keyid:D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38382e302f32342d3234203d3e203232373036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.152.88.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:c4:11:3d:9a:46:dc:b8:0c:0a:0e:ad:e6:84:b8:fd:99:1d:
23:3d:61:14:fc:b2:f2:e9:71:6c:1c:b9:c0:66:f0:53:a5:06:
bc:ce:46:9d:54:98:7b:a7:2e:1d:3e:a0:14:3c:da:8b:66:d8:
eb:63:3f:d6:30:b7:7b:65:8b:46:06:58:3a:7b:bf:7f:9b:02:
43:b5:2e:84:de:aa:6d:eb:b8:c1:50:d4:21:30:a9:15:aa:21:
7a:22:a6:d2:64:72:7b:15:f1:92:d9:e1:a0:eb:4e:c1:3f:cc:
1a:b6:42:a5:a4:1f:33:f4:4c:ca:b0:2b:19:d4:02:ab:99:74:
27:78:04:c2:f2:e6:44:da:63:39:3a:8e:00:9e:53:19:6f:eb:
4e:77:67:28:eb:ef:4c:00:9d:cf:4e:84:2b:38:7d:21:e8:8e:
78:02:fb:1e:ea:8a:0f:d7:07:c6:9a:ae:51:c6:f4:5d:6a:f5:
7d:29:41:01:2c:41:b5:be:fd:c6:d2:4a:32:6c:73:fb:45:ee:
9d:1d:a6:f7:bb:91:76:bd:76:08:ea:e3:d8:c8:fe:32:36:b9:
23:a5:8c:a7:0d:57:c1:5a:9e:e4:1b:b3:3b:be:f9:7d:fd:1a:
1b:88:6d:5b:dc:9d:64:18:e4:f7:10:f2:d3:7d:ac:a2:27:64:
ee:dd:4b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 05:26:30 2026 by rpki-client