
$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3139302e3234302e302f32342d3234203d3e20323632333933.roa
File: 3137372e3139302e3234302e302f32342d3234203d3e20323632333933.roa (raw, json)
Hash identifier: 1C15ArpsghCWqRjUwKygT9aup/yy6Tzw/oBory9Scrs=
Subject key identifier: 86:B5:C1:23:7D:43:0B:81:F9:E9:0E:B7:79:27:89:06:F2:B7:A5:B9
Certificate issuer: /CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
Certificate serial: 244556FBA0E7F71366B97467CC6A7DF267C4F5BE
Authority key identifier: C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3139302e3234302e302f32342d3234203d3e20323632333933.roa
Signing time: Wed 24 Sep 2025 15:27:11 +0000
ROA not before: Wed 24 Sep 2025 15:22:11 +0000
ROA not after: Wed 23 Sep 2026 15:27:11 +0000
asID: 262393
IP address blocks: 177.190.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl
rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 21 Oct 2025 18:45:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:45:56:fb:a0:e7:f7:13:66:b9:74:67:cc:6a:7d:f2:67:c4:f5:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
Validity
Not Before: Sep 24 15:22:11 2025 GMT
Not After : Sep 23 15:27:11 2026 GMT
Subject: CN=86B5C1237D430B81F9E90EB779278906F2B7A5B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2a:ce:18:71:14:72:e6:c6:3e:fa:78:d3:01:
d6:73:56:33:56:be:f4:4f:43:2e:9c:6b:e5:f7:75:
00:65:23:92:02:2d:81:c2:ac:72:24:69:2b:4e:d8:
b5:b3:9a:8d:a0:bc:38:03:09:03:e0:4b:fd:38:28:
1e:d6:5d:4c:b3:85:2f:0b:d4:a6:ff:20:6f:5a:14:
61:2c:1e:c3:cc:a2:bc:ec:76:f2:fe:c6:a1:d2:91:
27:f8:f5:5c:49:4a:6d:9f:74:d5:a6:1e:f0:14:dd:
08:e1:84:e1:a9:e0:a8:9a:53:84:4a:1c:fa:12:69:
83:43:ce:21:07:c1:e0:2b:53:c4:79:0b:31:f7:8c:
a8:94:fc:23:21:21:24:a1:51:9d:76:22:c5:59:bf:
05:b5:37:07:44:42:4d:35:01:3c:4f:40:37:da:f4:
02:fd:c9:7f:ae:6a:af:a0:e2:3b:1c:43:a2:9a:ca:
88:68:c0:e2:0c:ff:d0:62:9e:64:14:c9:53:5d:71:
9b:c2:72:40:d2:9a:7e:a0:53:d2:a5:86:43:3e:b8:
3b:16:f8:19:cd:4d:7e:1a:2a:e6:7c:ac:0c:9b:be:
2a:64:de:f0:d4:00:7c:2d:42:88:b7:d0:d7:5f:e0:
ca:1d:05:b3:fc:80:d9:59:c1:dd:8b:3e:83:27:e7:
2b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B5:C1:23:7D:43:0B:81:F9:E9:0E:B7:79:27:89:06:F2:B7:A5:B9
X509v3 Authority Key Identifier:
keyid:C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3139302e3234302e302f32342d3234203d3e20323632333933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.190.240.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:86:56:3d:c0:1a:90:56:9d:b8:5c:56:00:b0:79:b1:5e:43:
89:f5:25:45:32:97:e0:ed:eb:15:3c:1b:a7:7f:07:12:94:e4:
af:3f:ba:2b:66:2e:3c:35:a7:98:65:13:4c:8f:a6:d0:f2:56:
72:b9:10:34:1e:4f:38:31:66:d1:45:9e:00:a6:70:ab:93:0a:
32:2e:6c:5d:e2:51:b3:d2:41:92:32:53:7c:c1:a5:3e:89:f0:
9b:05:9c:2a:74:54:f7:59:5c:5b:1a:d0:0a:46:ca:a4:98:8e:
31:79:f7:d7:ff:c0:e6:e9:82:f0:20:e5:cc:1f:61:50:a9:9d:
88:aa:91:67:a0:b6:b1:57:b2:52:96:8d:7b:80:c2:a0:0a:97:
84:ad:a0:40:4a:80:45:40:e4:a7:54:86:ed:ce:aa:63:71:aa:
d6:ea:09:a5:2e:dc:cf:4a:02:ff:85:c1:1d:c0:89:f1:83:ff:
ff:4f:c8:a3:58:b3:e3:7b:a4:d9:ae:bc:4e:8f:64:24:a3:7a:
74:e9:78:2e:4b:a8:c8:24:71:46:e2:ae:58:d7:ec:d6:f7:b2:
27:39:05:81:63:99:d0:1e:2b:e9:5c:ae:ef:af:30:ea:66:3e:
a5:b5:86:e2:f0:54:37:a4:24:44:20:a7:9d:5f:49:5d:1b:bc:
25:27:74:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:11:42 2025 by rpki-client