
$ rpki-client -vvvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38392e302f32342d3234203d3e203232373036.roa
File: 3230302e3135322e38392e302f32342d3234203d3e203232373036.roa (raw, json)
Hash identifier: M1spox+/hAS/2aoYzs37TgZSi58Fnu/WnXTxrC9fm9Y=
Subject key identifier: A5:54:09:07:9E:CE:FB:40:64:DB:7C:D9:9B:96:76:D7:A9:15:3C:A3
Certificate issuer: /CN=D1F5C9A11A2575A29CEC01F3361C418408534072
Certificate serial: 096BE7572383F176C123A876035B84385B57BD76
Authority key identifier: D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38392e302f32342d3234203d3e203232373036.roa
Signing time: Fri 23 Oct 2026 14:01:18 +0000
ROA not before: Fri 23 Oct 2026 13:56:18 +0000
ROA not after: Fri 22 Oct 2027 14:01:18 +0000
asID: 22706
IP address blocks: 200.152.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.crl
rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 31 Oct 2026 10:48:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:6b:e7:57:23:83:f1:76:c1:23:a8:76:03:5b:84:38:5b:57:bd:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1F5C9A11A2575A29CEC01F3361C418408534072
Validity
Not Before: Oct 23 13:56:18 2026 GMT
Not After : Oct 22 14:01:18 2027 GMT
Subject: CN=A55409079ECEFB4064DB7CD99B9676D7A9153CA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ab:c2:d0:ed:91:95:b1:6c:d3:6b:96:10:cd:
c6:29:68:4f:1e:b3:07:06:7d:00:cb:17:8e:f5:f6:
9e:6a:5c:c0:ef:0d:a9:7f:8a:19:ce:77:a6:49:50:
18:b9:d1:9c:4e:f0:81:f4:d1:5a:76:76:57:fb:5d:
86:15:aa:97:e7:64:d9:8a:f3:03:92:a0:65:70:6d:
f0:06:c1:81:5e:d9:ef:ce:d5:49:34:11:f2:a7:0c:
0b:7f:6b:9c:1c:64:e7:59:05:fb:cd:df:31:71:6c:
09:1d:d3:43:39:9c:5b:00:61:44:53:f6:c1:34:9c:
8e:b7:b8:b4:0e:d2:8e:d0:dd:bc:e0:62:de:e6:5a:
39:0e:70:9e:ed:e9:bf:49:3c:8f:44:46:18:c5:d6:
1c:71:45:5c:15:9e:2c:08:77:b3:d9:a8:f7:91:3e:
e2:5c:6e:1a:3a:5a:d1:d4:e3:bd:3f:3d:db:52:fd:
3b:6f:1e:12:16:37:99:c7:34:bc:20:41:1f:9f:28:
fd:1e:45:4f:ae:7d:0a:82:f8:f7:f7:c6:0a:80:08:
78:9e:5d:e8:60:db:ad:06:2d:cd:63:6f:49:67:29:
7d:5e:b4:57:58:a4:3a:9e:ef:1c:47:fe:7b:ec:3f:
ff:8a:7e:f5:9c:ec:97:98:a1:4b:92:fa:ff:c8:17:
d7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:54:09:07:9E:CE:FB:40:64:DB:7C:D9:9B:96:76:D7:A9:15:3C:A3
X509v3 Authority Key Identifier:
keyid:D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38392e302f32342d3234203d3e203232373036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.152.89.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:e0:07:49:ad:13:e3:bf:0e:42:00:bb:8f:4a:cf:2c:ba:97:
f2:c1:ff:37:90:75:5d:37:78:3f:c8:b9:6f:2f:2a:e6:fc:d1:
e9:5e:61:2d:08:8a:6b:e2:11:df:da:3c:ce:33:42:37:b1:36:
58:95:37:06:0d:6f:91:8a:61:2b:ad:1f:0b:2d:3b:ae:e1:86:
1a:61:06:36:95:64:54:54:d8:73:30:db:04:cb:55:71:00:a7:
34:c4:3f:bf:42:0e:f4:fd:4d:af:18:4d:5e:83:0e:6c:a8:1f:
ff:6c:42:ae:40:00:5d:51:87:40:aa:31:3d:16:f5:c6:2a:16:
1d:1b:81:55:e5:f4:48:13:89:4c:2e:91:20:53:64:0a:ac:ae:
76:95:4c:b7:cb:74:2c:2c:db:5c:f5:65:aa:94:6a:71:16:4e:
73:01:58:71:59:1b:8f:66:ee:a9:42:fc:14:d4:96:45:67:d3:
9c:bd:71:b9:10:0a:9c:05:61:f6:79:f9:60:42:75:b0:a0:3e:
4e:e3:d0:8d:bd:64:29:63:fa:a1:a6:1a:a5:5a:42:e4:9d:b3:
12:3d:d3:2c:3d:59:c6:46:f7:cd:b8:94:ef:3f:72:42:9c:af:
88:3b:b5:66:6d:ba:c6:6c:c7:8f:76:9c:04:63:b4:dd:f7:73:
8d:cc:8e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 10:11:26 2026 by rpki-client