
$ rpki-client -vvvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e39312e302f32342d3234203d3e203232373036.roa
File: 3230302e3135322e39312e302f32342d3234203d3e203232373036.roa (raw, json)
Hash identifier: 9NODfY+gFvbDnNh9wV9FMvMsKJf0vHTu6coG1/BzkD0=
Subject key identifier: 42:6A:88:CD:AE:FD:A5:10:95:D1:FC:65:FE:6D:90:49:62:8C:B0:88
Certificate issuer: /CN=D1F5C9A11A2575A29CEC01F3361C418408534072
Certificate serial: 2E1D3A752304ADCF1004FD84429FB4BDDB98531F
Authority key identifier: D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e39312e302f32342d3234203d3e203232373036.roa
Signing time: Fri 23 Oct 2026 14:01:21 +0000
ROA not before: Fri 23 Oct 2026 13:56:21 +0000
ROA not after: Fri 22 Oct 2027 14:01:21 +0000
asID: 22706
IP address blocks: 200.152.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.crl
rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Oct 2026 02:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:1d:3a:75:23:04:ad:cf:10:04:fd:84:42:9f:b4:bd:db:98:53:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1F5C9A11A2575A29CEC01F3361C418408534072
Validity
Not Before: Oct 23 13:56:21 2026 GMT
Not After : Oct 22 14:01:21 2027 GMT
Subject: CN=426A88CDAEFDA51095D1FC65FE6D9049628CB088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4c:19:69:5a:5a:b3:1f:85:4b:1a:c0:4b:e8:
1b:8c:eb:1c:8e:02:ab:7e:90:2e:a0:b2:28:e3:00:
90:8d:e7:ee:f2:83:71:9b:e2:66:f8:e3:00:74:5d:
70:7f:94:a0:7e:75:00:1c:c0:da:ae:b8:93:10:c4:
b2:bb:95:69:a7:19:f8:54:72:15:21:8d:32:c5:c4:
a0:16:6a:f1:9a:07:ca:db:fb:6e:07:d4:1c:dc:bc:
f0:82:cc:03:49:a0:7a:f4:f4:bd:19:c5:03:b2:bb:
3a:74:59:7a:7a:dc:4a:b0:f8:ec:39:86:6a:e2:68:
99:bc:3c:19:af:12:72:fc:e0:ca:2c:e3:f4:f4:43:
b9:36:d6:87:f9:18:17:85:98:20:3f:3a:41:47:e1:
19:ec:0c:7d:d5:fd:9f:41:90:f7:45:4a:91:18:2c:
e4:57:a8:e5:66:34:21:7e:8a:d6:80:13:50:7f:5a:
b7:68:cb:5a:8f:fd:70:15:fc:36:b3:d3:db:86:1a:
26:eb:89:79:d9:30:86:b0:66:45:f9:df:fa:c6:1c:
da:ff:4e:01:35:35:22:c5:3f:9b:c5:07:71:34:32:
2b:94:76:59:5e:bf:30:7d:07:ce:56:08:1e:a4:f0:
3e:f3:09:76:53:72:26:5d:df:59:c9:ff:5c:93:74:
25:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:6A:88:CD:AE:FD:A5:10:95:D1:FC:65:FE:6D:90:49:62:8C:B0:88
X509v3 Authority Key Identifier:
keyid:D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e39312e302f32342d3234203d3e203232373036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.152.91.0/24
Signature Algorithm: sha256WithRSAEncryption
04:02:5a:1b:0b:7d:9f:a5:40:c1:8f:37:99:2a:a4:43:02:77:
aa:6d:90:98:72:8a:64:06:ae:7d:0b:db:86:f9:9d:e7:b8:cf:
8c:c7:c2:2b:10:80:4e:fa:36:f2:7a:b3:d2:24:5c:22:c4:31:
cf:74:1e:df:aa:2d:42:cc:90:12:ef:d3:d3:22:9d:63:f7:60:
61:ec:55:6e:06:db:1b:44:4e:6c:7f:e6:20:41:0a:66:23:57:
fe:1e:6a:bc:c2:04:0d:6f:0f:2c:62:f8:d2:8f:87:8f:06:8a:
93:f0:ca:08:d8:5f:7c:e3:33:6b:2e:4e:b2:49:dc:95:c2:a2:
ad:9c:7d:f7:72:bd:52:56:fb:c6:1c:f7:65:2f:20:8d:83:ad:
02:18:72:f7:ef:b2:85:47:9b:2b:91:47:7e:29:0a:8f:61:b7:
29:81:82:26:2a:40:dc:bd:9e:f3:ef:cc:96:8c:87:a0:8b:ab:
27:b6:73:47:e6:b9:6e:d6:03:87:6d:91:16:28:d7:cd:1e:1a:
65:4a:2c:05:3e:94:d0:ed:01:48:63:af:a4:83:1d:ee:43:30:
56:44:b9:fb:97:ab:bd:6c:3a:7c:b4:74:f1:4c:41:1e:88:22:
00:84:ca:f8:e8:fb:b4:6a:6f:02:4f:ba:66:94:b8:26:f1:f2:
70:7c:8b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:20:14 2026 by rpki-client