
$ rpki-client -vvvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3137302e3234362e39362e302f32322d3234203d3e203532373231.roa
File: 3137302e3234362e39362e302f32322d3234203d3e203532373231.roa (raw, json)
Hash identifier: Kmw/4UgH0to/yoTUx15jVSTYdjtBS1S5SnDtQDDg7w8=
Subject key identifier: 27:80:49:A2:D9:C6:E7:74:D4:1C:83:41:B6:0D:26:6A:2D:55:E6:49
Certificate issuer: /CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998
Certificate serial: 088AF882113B8953CDC120E6AC2CFFF2220FCE4F
Authority key identifier: CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3137302e3234362e39362e302f32322d3234203d3e203532373231.roa
Signing time: Tue 20 Oct 2026 15:58:22 +0000
ROA not before: Tue 20 Oct 2026 15:53:22 +0000
ROA not after: Tue 19 Oct 2027 15:58:22 +0000
asID: 52721
IP address blocks: 170.246.96.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.crl
rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Nov 2026 11:11:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:8a:f8:82:11:3b:89:53:cd:c1:20:e6:ac:2c:ff:f2:22:0f:ce:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998
Validity
Not Before: Oct 20 15:53:22 2026 GMT
Not After : Oct 19 15:58:22 2027 GMT
Subject: CN=278049A2D9C6E774D41C8341B60D266A2D55E649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0b:48:6b:df:29:31:40:f8:d9:1d:9e:6c:c5:
c8:fc:89:d3:4a:25:2e:aa:10:fd:12:7f:ef:9a:c4:
0f:b6:9d:d1:8e:ee:fd:15:8c:0a:fe:c9:db:1c:38:
5e:c5:ee:72:e4:a9:ab:32:fd:63:f8:4c:14:a1:1e:
ac:2d:28:61:ea:8c:5e:bf:d0:e2:a1:c3:68:3e:b4:
94:80:ab:f5:26:7a:bf:20:2f:ba:33:d7:74:90:86:
34:47:78:fd:f5:90:e1:e9:4b:14:54:c9:b6:d9:b1:
35:35:3f:aa:cf:99:5a:62:c8:15:48:89:a1:50:e6:
cc:57:1f:88:76:84:02:6e:62:4c:c5:87:fa:95:48:
13:53:e7:36:ba:62:2b:4e:49:fe:ce:96:5d:e6:c5:
53:af:2e:4f:82:79:23:4c:97:ec:10:d4:40:27:2b:
e8:a9:3f:de:63:b5:db:a2:71:77:21:cf:26:37:b1:
2b:a3:0b:51:55:d6:cb:d9:76:ca:ff:23:2f:eb:af:
bb:ef:fd:ba:e3:08:68:a1:1d:b7:ca:78:4f:e3:bc:
ac:01:02:c6:8c:8f:c4:6d:35:77:ad:85:4e:74:3a:
14:b4:aa:bd:a7:3a:6f:ba:1c:69:06:e2:78:8f:d0:
a9:bb:70:c9:e6:4a:dc:d1:a6:87:d9:ab:43:5a:65:
32:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:80:49:A2:D9:C6:E7:74:D4:1C:83:41:B6:0D:26:6A:2D:55:E6:49
X509v3 Authority Key Identifier:
keyid:CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3137302e3234362e39362e302f32322d3234203d3e203532373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.246.96.0/22
Signature Algorithm: sha256WithRSAEncryption
38:dc:35:d0:2e:5c:19:85:5d:5d:81:9d:18:e6:19:75:92:eb:
94:d3:d0:71:68:9e:d5:2e:06:e4:24:7a:69:32:e1:a7:56:a3:
e4:66:b4:a7:7d:24:15:30:6b:28:9f:3f:16:99:a6:21:05:e5:
65:5f:61:53:09:a5:9d:9d:0b:eb:05:ce:c4:40:aa:86:31:f8:
23:ad:98:ab:70:a3:dc:23:5a:27:c9:13:6f:24:58:e7:c9:ca:
90:b4:24:40:3a:5f:c5:bc:d5:b3:23:33:17:51:be:b8:81:13:
82:85:fa:b8:a3:31:02:b2:5b:1e:e7:6a:ba:31:e6:1c:65:eb:
29:ba:82:b0:c7:08:6d:21:61:43:f5:db:d7:1f:61:d1:d2:12:
23:00:84:95:cb:52:0d:07:e6:11:34:c8:01:2a:c0:fc:ac:ef:
99:0d:e8:ed:69:a9:85:be:a2:20:d8:e0:1a:17:41:08:8a:6c:
b0:8f:0c:bf:41:96:db:45:e8:ce:a9:03:e3:c1:39:4c:5d:8e:
e9:0d:d0:f0:c9:77:fd:e1:fa:34:f6:b5:3f:b3:3d:53:ad:f8:
41:c0:ab:1f:68:6c:59:ce:76:e1:ca:c3:06:68:09:b6:b9:ce:
97:15:53:e3:e5:53:9c:2a:ab:94:19:48:e8:f9:39:3e:07:c0:
fb:4c:94:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:04:41 2026 by rpki-client