
$ rpki-client -vvvf rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3138362e3230392e33322e302f32302d3234203d3e203533313538.roa
File: 3138362e3230392e33322e302f32302d3234203d3e203533313538.roa (raw, json)
Hash identifier: EI/jZJKs9MwVcIJiqMb/v/hdEaqR4OTb0tVWuqjlBIk=
Subject key identifier: 40:5C:FB:B0:07:F6:A2:B1:0A:96:07:3F:48:E9:D1:8E:C7:B5:77:84
Certificate issuer: /CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717
Certificate serial: 097825C2B1D78B364BCA72AD0B963E00352C9148
Authority key identifier: 3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer
Subject info access: rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3138362e3230392e33322e302f32302d3234203d3e203533313538.roa
Signing time: Fri 23 Oct 2026 15:25:08 +0000
ROA not before: Fri 23 Oct 2026 15:20:08 +0000
ROA not after: Fri 22 Oct 2027 15:25:08 +0000
asID: 53158
IP address blocks: 186.209.32.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl
rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Oct 2026 07:35:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:78:25:c2:b1:d7:8b:36:4b:ca:72:ad:0b:96:3e:00:35:2c:91:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717
Validity
Not Before: Oct 23 15:20:08 2026 GMT
Not After : Oct 22 15:25:08 2027 GMT
Subject: CN=405CFBB007F6A2B10A96073F48E9D18EC7B57784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:33:04:c9:0c:19:31:bb:b7:c3:52:f5:03:d3:
d7:bc:78:6d:59:a7:68:06:a8:3f:11:cf:08:7c:a9:
ab:bd:b9:93:1c:09:55:14:b7:9e:18:1b:f8:85:90:
8d:2a:03:f6:7e:4f:a8:69:70:22:7d:86:a4:f2:91:
61:c7:4a:44:56:96:1f:98:25:a5:4c:aa:54:08:52:
97:f4:18:07:34:08:cc:dc:9f:ed:10:a1:f7:68:18:
0d:ce:03:b0:4e:f7:d1:f1:1e:ee:35:9d:bd:6f:c3:
22:7f:d4:f8:12:3c:8f:ff:24:f8:2d:74:61:a3:f2:
e2:b5:98:d9:7e:f2:46:03:fb:2e:94:3b:08:53:72:
53:43:14:8a:9d:67:3c:f3:c7:04:02:0c:a2:e0:6d:
8f:d5:0b:a7:23:21:21:24:d3:10:25:38:46:37:07:
c2:eb:ac:f4:ea:3c:17:24:75:d3:75:13:dd:05:22:
ea:c7:4f:1a:5f:71:3f:a5:4e:da:1b:01:b5:74:02:
00:3f:3a:de:27:21:cf:c2:f1:0b:b4:aa:15:56:d1:
46:e9:f5:f4:22:82:37:40:35:b9:56:86:aa:ae:08:
6f:ea:6d:4d:fc:ef:55:ad:16:6a:4e:7f:6c:66:db:
fc:6c:14:81:2b:a4:58:d9:ad:6b:7f:2c:ab:2c:0b:
13:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:5C:FB:B0:07:F6:A2:B1:0A:96:07:3F:48:E9:D1:8E:C7:B5:77:84
X509v3 Authority Key Identifier:
keyid:3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3138362e3230392e33322e302f32302d3234203d3e203533313538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.209.32.0/20
Signature Algorithm: sha256WithRSAEncryption
15:c0:33:2c:d2:f8:a1:69:51:ce:4a:93:21:e4:21:32:d8:8e:
40:40:a4:08:60:7e:04:27:29:95:e2:7b:8f:1e:09:b4:9f:70:
7c:fb:21:9e:e6:9b:f4:a9:a3:92:aa:d5:86:a9:96:56:6c:4a:
78:b8:33:e3:db:18:0a:1c:ac:10:7b:1a:78:83:81:b7:42:de:
c0:93:95:03:65:42:ce:d5:f8:b7:d4:97:80:82:d1:71:45:4d:
7c:ad:84:2d:c9:34:b3:33:ec:7a:ad:40:b2:47:a2:a4:61:a8:
af:ad:f1:60:ea:28:53:07:92:97:71:29:a8:69:af:98:ba:ca:
81:91:7e:6e:02:a1:4c:a0:72:59:b1:4d:5b:96:ed:4f:ef:27:
44:79:3f:2a:e8:02:90:bb:f3:06:f1:fb:bc:7d:b9:b8:89:d9:
aa:97:c2:4b:0c:39:de:d8:b9:16:c5:3c:36:eb:a7:9c:37:37:
f8:9c:94:18:18:f1:8e:d4:e5:64:20:5f:51:51:a4:37:93:5c:
24:b4:fa:61:1f:2f:2a:c0:02:4e:4d:92:f2:b9:d5:a2:11:7f:
90:73:5f:9a:24:c4:45:e4:49:b0:09:35:fa:55:29:98:48:a5:
d1:3d:d5:89:9f:df:3b:10:63:25:0a:82:7b:df:e2:c2:0d:3e:
25:d2:ff:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 15:12:12 2026 by rpki-client