
$ rpki-client -vvf rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/3139302e3137312e37322e302f32322d3234203d3e20323731323338.roa
File: 3139302e3137312e37322e302f32322d3234203d3e20323731323338.roa (raw, json)
Hash identifier: I9G3ex2XveORcAEqGBwplD5mNPbZvqU6abd1zjBCLKY=
Subject key identifier: C9:D4:0C:25:84:14:7A:C6:54:F2:4F:27:B2:30:F7:CE:ED:F5:E4:30
Certificate issuer: /CN=488D61367F4C42E03AE5C5AE8BE0076E4961BE71
Certificate serial: 3C109BBEDC119704859D295B714B5F06FA650E80
Authority key identifier: 48:8D:61:36:7F:4C:42:E0:3A:E5:C5:AE:8B:E0:07:6E:49:61:BE:71
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/3139302e3137312e37322e302f32322d3234203d3e20323731323338.roa
Signing time: Wed 09 Jul 2025 22:40:32 +0000
ROA not before: Wed 09 Jul 2025 22:35:32 +0000
ROA not after: Wed 08 Jul 2026 22:40:32 +0000
asID: 271238
IP address blocks: 190.171.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.crl
rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 03:07:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:10:9b:be:dc:11:97:04:85:9d:29:5b:71:4b:5f:06:fa:65:0e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=488D61367F4C42E03AE5C5AE8BE0076E4961BE71
Validity
Not Before: Jul 9 22:35:32 2025 GMT
Not After : Jul 8 22:40:32 2026 GMT
Subject: CN=C9D40C2584147AC654F24F27B230F7CEEDF5E430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8b:ef:db:06:3e:b5:45:2c:01:18:6a:06:dc:
49:82:2c:bf:d0:e8:f8:f9:b4:a7:93:7d:fa:7f:af:
bf:71:c7:4a:a7:87:f1:8c:53:20:e7:3a:25:b1:60:
92:12:53:c5:7d:71:de:4d:31:a2:aa:4b:57:33:fb:
23:c5:c9:60:43:56:3c:b6:cb:f4:55:fc:76:d9:77:
f8:ce:5e:5c:bb:de:cb:cd:84:f3:a9:01:d1:b6:e7:
e2:ed:f4:07:a2:12:b4:f1:76:4f:d8:18:35:7e:ed:
87:fa:bd:5d:69:2b:cc:b6:f7:1a:bf:cf:1b:c4:30:
94:d1:9c:d3:fc:49:9b:e5:3b:97:72:6a:f3:d4:0c:
a9:2e:8a:be:aa:29:cc:61:25:33:b6:be:a4:a7:b9:
07:70:2c:c8:bc:1a:c2:d1:0a:ff:6e:cd:d5:40:0b:
ec:f4:ba:40:93:79:ba:45:f8:01:30:bc:1d:e9:83:
6b:39:2b:99:df:06:82:e0:ac:a6:ff:c8:3f:4f:05:
96:d7:be:16:e0:09:19:1c:59:86:96:5f:f8:5c:ce:
69:2a:41:1a:c6:21:d2:56:0a:ef:fa:9b:56:bf:52:
73:5a:47:6b:ce:a8:cd:26:81:d6:d6:73:f2:6f:79:
e5:4a:e6:dc:89:34:bc:cb:5f:32:46:98:56:43:71:
4c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D4:0C:25:84:14:7A:C6:54:F2:4F:27:B2:30:F7:CE:ED:F5:E4:30
X509v3 Authority Key Identifier:
keyid:48:8D:61:36:7F:4C:42:E0:3A:E5:C5:AE:8B:E0:07:6E:49:61:BE:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/3139302e3137312e37322e302f32322d3234203d3e20323731323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.171.72.0/22
Signature Algorithm: sha256WithRSAEncryption
89:af:84:3a:e3:f3:46:7d:92:e4:8e:55:8b:99:21:b6:31:d5:
51:f9:79:7a:0d:df:b1:da:42:1c:4c:27:39:63:97:e7:f2:31:
05:bb:7f:9c:45:10:7b:99:04:b3:db:31:5b:df:7b:ba:64:34:
68:63:38:57:e0:b4:db:eb:c5:44:42:5d:fb:4c:53:6d:9b:f3:
b3:e9:85:98:27:d0:98:24:50:44:9f:72:4e:9b:7d:9b:d0:4f:
fb:ba:c7:64:5b:e5:72:fe:4c:3d:14:ee:8e:ba:fa:3d:bc:2f:
ba:8f:9e:0d:89:ed:d9:53:9b:92:06:a9:54:c0:96:f3:06:e2:
e1:e2:1e:a5:ff:73:87:8b:c2:4d:ea:57:8c:4f:b4:cc:6c:ff:
63:ec:4d:90:36:e8:9d:38:59:64:44:d7:64:82:c9:84:65:25:
97:fd:13:77:1c:6e:47:a9:15:13:5d:d1:84:ec:bc:81:8e:ac:
41:8a:74:70:24:a7:9a:de:0e:93:66:f7:55:88:f4:5a:64:ce:
a5:61:8f:df:ec:fb:77:6a:7f:fc:3f:17:a2:68:92:9f:4d:a1:
73:68:d5:30:a7:4e:21:91:59:29:e6:0a:b6:c5:03:35:c5:37:
68:ae:ca:23:79:30:1c:1a:07:86:be:d9:61:49:41:06:eb:70:
08:1f:07:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:27:43 2025 by rpki-client