
$ rpki-client -vvvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e39332e302f32342d3234203d3e203232373036.roa
File: 3230302e3135322e39332e302f32342d3234203d3e203232373036.roa (raw, json)
Hash identifier: ngZN2uBHfoRXEClz3qzGN1gcFvofRA6HLdOZ2OqM8Ko=
Subject key identifier: 85:8B:6E:63:D3:4E:62:B5:69:DC:48:13:9F:5F:FA:34:8D:AC:A8:A7
Certificate issuer: /CN=D1F5C9A11A2575A29CEC01F3361C418408534072
Certificate serial: 4A00745635C6312F3373D32D7B782BA13FEFBD1D
Authority key identifier: D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e39332e302f32342d3234203d3e203232373036.roa
Signing time: Fri 23 Oct 2026 14:01:23 +0000
ROA not before: Fri 23 Oct 2026 13:56:23 +0000
ROA not after: Fri 22 Oct 2027 14:01:23 +0000
asID: 22706
IP address blocks: 200.152.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.crl
rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 30 Oct 2026 15:28:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:00:74:56:35:c6:31:2f:33:73:d3:2d:7b:78:2b:a1:3f:ef:bd:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1F5C9A11A2575A29CEC01F3361C418408534072
Validity
Not Before: Oct 23 13:56:23 2026 GMT
Not After : Oct 22 14:01:23 2027 GMT
Subject: CN=858B6E63D34E62B569DC48139F5FFA348DACA8A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6c:da:d5:c7:f0:fb:39:7e:b0:f9:66:fd:28:
15:09:bd:a9:ad:06:83:0c:bd:47:f4:13:c1:83:1d:
db:4e:ba:69:f5:f2:1d:ff:a4:71:ab:8e:0b:ff:12:
03:79:68:c6:7f:cb:3f:3b:ef:89:89:76:c5:30:3b:
a5:d3:04:c3:67:4e:1f:ad:b4:de:a5:af:71:cc:cf:
af:ce:4b:38:d2:15:b8:34:1c:6b:2d:c0:44:92:f1:
22:49:95:99:8e:3e:7f:da:49:0d:e6:84:68:b8:bb:
e1:9d:2f:68:e2:91:8f:cd:bd:a7:72:35:cf:61:22:
b7:41:97:56:0f:b3:cb:7c:c4:6c:9b:64:25:01:b5:
d7:c7:6b:55:8b:0c:00:67:7e:d6:a0:6c:5c:c6:87:
7a:22:f8:e3:c8:9d:9d:4d:32:f2:a2:f8:96:f6:1f:
36:38:b0:29:89:f6:22:da:1b:f7:55:58:67:43:b8:
20:0c:dc:31:20:2a:4c:6d:bf:a7:d5:9a:ad:61:ec:
85:79:29:72:23:01:d6:86:75:9a:17:17:52:9c:3f:
d7:f7:67:a5:28:33:90:3c:49:a4:76:39:ed:ed:a3:
18:fe:59:0a:af:8b:df:cf:a4:22:b3:ef:b8:23:ef:
0c:23:42:97:cd:ce:c2:6e:6e:56:ca:b1:fa:8f:5c:
31:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:8B:6E:63:D3:4E:62:B5:69:DC:48:13:9F:5F:FA:34:8D:AC:A8:A7
X509v3 Authority Key Identifier:
keyid:D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e39332e302f32342d3234203d3e203232373036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.152.93.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:88:73:32:c0:68:b0:23:13:66:c3:10:06:73:c6:fc:a1:a1:
ca:d3:1f:1d:72:11:d8:10:2f:3b:ca:e3:79:b3:5a:b1:7b:e3:
ec:6b:c9:39:ac:51:0e:1c:b3:99:50:47:d0:69:21:79:25:cb:
b1:ac:17:00:88:d9:d0:42:17:27:af:8d:35:8d:ff:50:64:66:
42:4a:9e:fc:ea:d3:f6:3e:d6:37:9f:09:77:a3:c3:09:45:17:
de:8c:fe:10:5c:11:a1:2a:de:b2:cf:89:95:a5:22:75:d5:3f:
b7:47:68:16:21:de:51:d8:10:60:33:f7:d4:71:72:9e:a8:0a:
e6:07:20:8b:92:4a:c5:dd:ef:2d:c8:03:5b:0a:11:01:ad:26:
15:55:af:ba:ea:93:aa:d7:a2:54:21:ea:0a:0d:c0:04:aa:76:
dc:e1:3e:bd:88:74:a4:6a:c6:23:d6:d9:c4:04:0f:ce:fd:e8:
a4:01:e2:71:cf:53:5f:06:7a:68:f7:b8:a6:c7:cb:87:6c:28:
ca:b7:e5:87:59:4a:7f:98:d1:1f:12:c4:47:22:34:17:77:c3:
09:33:77:d2:1a:6b:c6:db:7e:f5:77:0c:46:8b:cd:d6:04:b5:
93:63:6b:12:e9:f3:d3:58:5c:77:13:0b:4f:64:3b:c3:54:16:
34:e1:7e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 21:41:51 2026 by rpki-client