
$ rpki-client -vvf rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/3138392e3230312e3233322e302f32312d3332203d3e20323633323532.roa
File: 3138392e3230312e3233322e302f32312d3332203d3e20323633323532.roa (raw, json)
Hash identifier: QBIKuHP6woCwZElqPj6HLW1DfYYJs+nxdPo1YogsPiw=
Subject key identifier: 17:C9:DE:24:BE:A4:A4:9C:74:10:CF:A7:B2:14:22:FB:2F:C8:D5:FA
Certificate issuer: /CN=D4C0F8C23F7F2B786212B9250BB199698F36242F
Certificate serial: 5687D3D1AE569E88D1146AC410545111AAB3B8C5
Authority key identifier: D4:C0:F8:C2:3F:7F:2B:78:62:12:B9:25:0B:B1:99:69:8F:36:24:2F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4C0F8C23F7F2B786212B9250BB199698F36242F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/3138392e3230312e3233322e302f32312d3332203d3e20323633323532.roa
Signing time: Tue 21 Jul 2026 22:01:46 +0000
ROA not before: Tue 21 Jul 2026 21:56:46 +0000
ROA not after: Tue 20 Jul 2027 22:01:46 +0000
asID: 263252
IP address blocks: 189.201.232.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/D4C0F8C23F7F2B786212B9250BB199698F36242F.crl
rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/D4C0F8C23F7F2B786212B9250BB199698F36242F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4C0F8C23F7F2B786212B9250BB199698F36242F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 25 Jul 2026 06:23:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:87:d3:d1:ae:56:9e:88:d1:14:6a:c4:10:54:51:11:aa:b3:b8:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D4C0F8C23F7F2B786212B9250BB199698F36242F
Validity
Not Before: Jul 21 21:56:46 2026 GMT
Not After : Jul 20 22:01:46 2027 GMT
Subject: CN=17C9DE24BEA4A49C7410CFA7B21422FB2FC8D5FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5d:c8:5e:24:73:e7:31:f8:de:21:95:eb:6a:
e2:57:da:dd:c5:69:85:3e:af:4e:15:4e:6f:b7:6d:
de:ab:c8:a3:20:58:e4:ec:14:33:62:e8:3f:07:61:
4b:0b:82:35:6a:3e:fb:8d:01:b2:7c:bf:03:ef:4d:
b6:3f:4b:9b:f6:3b:b4:ca:51:2e:32:b3:61:d9:d5:
96:f3:58:91:4b:aa:7d:bc:23:1e:0a:2c:fb:09:60:
e3:7b:4b:2f:a2:a6:75:02:49:e5:65:89:8f:d1:90:
5e:90:bb:46:b0:53:95:47:52:8d:76:8a:2b:b5:e0:
23:ef:53:20:0d:54:e3:e2:e9:84:d5:68:fe:f4:72:
24:67:de:d1:4d:20:5f:50:be:cd:12:c7:bb:45:36:
2f:75:9f:45:7d:a8:a9:f7:64:32:67:6c:89:58:51:
3f:bc:5b:bf:ae:28:52:b6:c8:86:84:59:7a:3a:ee:
ac:6c:52:3a:22:76:77:b4:59:a0:69:89:c4:92:2a:
c4:b9:d0:73:5e:ba:d0:bf:a6:41:5e:6e:95:69:80:
34:98:15:1d:81:00:35:b1:be:01:5d:07:08:1b:5a:
c5:d0:38:cb:dc:78:f8:06:c8:06:ee:88:03:96:ce:
ab:07:63:3b:59:f8:cb:79:1a:3a:04:c3:bb:87:e5:
ed:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C9:DE:24:BE:A4:A4:9C:74:10:CF:A7:B2:14:22:FB:2F:C8:D5:FA
X509v3 Authority Key Identifier:
keyid:D4:C0:F8:C2:3F:7F:2B:78:62:12:B9:25:0B:B1:99:69:8F:36:24:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/D4C0F8C23F7F2B786212B9250BB199698F36242F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4C0F8C23F7F2B786212B9250BB199698F36242F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/3138392e3230312e3233322e302f32312d3332203d3e20323633323532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.201.232.0/21
Signature Algorithm: sha256WithRSAEncryption
7b:ec:c2:af:b9:b3:eb:4c:5a:a4:ea:c0:8d:86:77:cd:6a:dc:
68:3b:52:17:b1:b8:34:9e:4e:19:bb:93:34:51:91:e1:4e:c3:
1b:1d:fc:b8:45:41:b1:d5:f0:da:0e:ec:2c:50:67:e4:a7:a0:
77:53:29:81:f2:da:e2:4d:39:92:e9:8b:1e:43:9e:5c:b3:d7:
07:29:8b:b8:b5:b5:0d:34:d4:d9:1d:73:dd:f0:9a:be:94:ce:
4b:60:b8:e9:a7:53:53:e0:d0:9e:0a:40:db:4b:3a:8e:a8:1e:
ad:ed:1e:15:a3:be:13:2b:43:6d:7a:fe:25:9d:77:79:ec:86:
96:bd:2e:c6:e7:c6:5c:97:2a:88:36:16:8c:5c:32:90:b6:51:
35:d1:6f:4d:a1:f8:a9:79:9f:f1:46:4f:8d:7c:85:91:6e:71:
01:3a:96:90:fe:bc:e7:d5:d9:c4:51:0b:b0:ce:81:4d:4f:d3:
6c:b0:d3:0d:18:32:f1:ce:7a:37:e1:b2:14:79:5a:d9:ba:f5:
31:0b:31:dc:cd:06:a5:ff:32:a8:53:6f:36:b1:14:7a:2f:8b:
17:72:2a:be:2d:2c:41:f3:b1:67:2f:7c:7d:89:aa:bc:4b:c1:
a1:91:2f:44:2d:1b:9b:6b:e4:2e:c9:7f:71:a1:50:3e:f2:12:
53:71:eb:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:56:19 2026 by rpki-client