
$ rpki-client -vvf rpki-repo.registro.br/repo/3SfwJX1KYy12VgJYEPNR8dRYJeZg3rkb7VtK6LWXZiQS/0/3230302e3138372e3130362e302f32342d3234203d3e20323730363834.roa
File: 3230302e3138372e3130362e302f32342d3234203d3e20323730363834.roa (raw, json)
Hash identifier: Q+e7IddrKIVUx6fBhjgNa1BgkwEIStlNsmtaiP9S2cM=
Subject key identifier: E1:E9:5B:31:D2:60:C7:0F:4B:11:81:79:9A:64:28:2D:AB:7B:EB:35
Certificate issuer: /CN=597A0EE976AA889BD891E5B5A82635E17925FB5A
Certificate serial: 65B8DEBFA9DA1FA5AF23320398BB3E76E23AEDD2
Authority key identifier: 59:7A:0E:E9:76:AA:88:9B:D8:91:E5:B5:A8:26:35:E1:79:25:FB:5A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/597A0EE976AA889BD891E5B5A82635E17925FB5A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3SfwJX1KYy12VgJYEPNR8dRYJeZg3rkb7VtK6LWXZiQS/0/3230302e3138372e3130362e302f32342d3234203d3e20323730363834.roa
Signing time: Mon 23 Mar 2026 13:01:37 +0000
ROA not before: Mon 23 Mar 2026 12:56:37 +0000
ROA not after: Mon 22 Mar 2027 13:01:37 +0000
asID: 270684
IP address blocks: 200.187.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3SfwJX1KYy12VgJYEPNR8dRYJeZg3rkb7VtK6LWXZiQS/0/597A0EE976AA889BD891E5B5A82635E17925FB5A.crl
rsync://rpki-repo.registro.br/repo/3SfwJX1KYy12VgJYEPNR8dRYJeZg3rkb7VtK6LWXZiQS/0/597A0EE976AA889BD891E5B5A82635E17925FB5A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/597A0EE976AA889BD891E5B5A82635E17925FB5A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 26 Mar 2026 05:54:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:b8:de:bf:a9:da:1f:a5:af:23:32:03:98:bb:3e:76:e2:3a:ed:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597A0EE976AA889BD891E5B5A82635E17925FB5A
Validity
Not Before: Mar 23 12:56:37 2026 GMT
Not After : Mar 22 13:01:37 2027 GMT
Subject: CN=E1E95B31D260C70F4B1181799A64282DAB7BEB35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9a:71:b5:2d:ab:29:dc:79:00:d0:2c:0b:c5:
fd:42:27:b1:8d:f1:14:d0:f5:45:92:87:37:67:7d:
97:ee:b7:b4:6e:7a:37:f3:84:83:32:ab:d0:be:64:
2d:07:23:0f:8b:90:11:ba:94:9c:c1:01:88:02:09:
9c:89:a7:11:11:b8:eb:3c:49:14:0f:65:a6:8d:a8:
c5:02:9d:2d:b8:7c:5d:bf:39:57:f9:05:34:4e:5a:
2e:2d:96:eb:4b:d2:49:63:5b:fb:16:c3:8a:f8:b4:
36:c6:c8:72:95:64:b1:cb:c3:6d:e3:df:b5:3d:14:
ec:09:e6:33:40:5e:74:dc:5d:0d:fc:45:07:73:2c:
58:13:87:0b:13:12:01:34:66:11:76:38:7c:79:22:
1b:36:f4:71:c3:11:da:2d:cc:81:c5:50:66:2a:d8:
c5:3c:c0:65:d6:07:0a:24:81:51:8d:39:49:28:fc:
5a:8e:86:c7:c9:5c:6e:18:57:34:4d:c6:0c:36:9c:
4e:03:01:65:09:19:ea:6d:87:fc:77:af:6f:a0:ea:
38:ab:de:d0:b8:22:d5:91:0b:07:ba:7c:a8:c9:03:
17:7b:d2:90:e6:e9:5d:60:f3:5b:ce:75:40:0d:7c:
92:75:4b:6c:80:2b:ad:b7:63:4d:77:1c:7f:b1:9e:
7b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E9:5B:31:D2:60:C7:0F:4B:11:81:79:9A:64:28:2D:AB:7B:EB:35
X509v3 Authority Key Identifier:
keyid:59:7A:0E:E9:76:AA:88:9B:D8:91:E5:B5:A8:26:35:E1:79:25:FB:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3SfwJX1KYy12VgJYEPNR8dRYJeZg3rkb7VtK6LWXZiQS/0/597A0EE976AA889BD891E5B5A82635E17925FB5A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/597A0EE976AA889BD891E5B5A82635E17925FB5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SfwJX1KYy12VgJYEPNR8dRYJeZg3rkb7VtK6LWXZiQS/0/3230302e3138372e3130362e302f32342d3234203d3e20323730363834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.187.106.0/24
Signature Algorithm: sha256WithRSAEncryption
67:cd:2c:57:ee:01:6b:02:0d:db:e1:e3:92:d3:84:e1:52:78:
7f:88:e0:e9:91:09:14:28:b1:7b:19:9e:b1:c6:24:31:4b:ad:
f3:dd:38:de:01:66:3f:8e:fe:f6:c9:ba:0f:42:e7:fc:55:0f:
12:50:58:9d:fa:0c:a0:1f:df:91:77:5d:88:ff:fa:8c:7c:1b:
38:33:9a:c2:84:26:4d:8b:3d:c3:97:1b:92:76:e8:32:3c:6b:
8d:dd:f5:74:39:0e:02:f5:3f:e1:65:47:ed:13:3e:58:1e:e6:
2e:f5:c1:b6:d7:9a:2e:02:1c:4f:d4:e4:9d:30:e4:d5:34:6a:
43:49:f3:82:33:7e:25:e3:8c:5d:94:1e:35:41:98:19:63:e2:
80:7b:6d:47:49:10:78:f9:b8:be:07:08:2f:e0:2e:e1:36:cb:
d2:8d:ba:84:ed:9f:2f:7c:38:ef:04:d6:8e:56:f1:40:1e:15:
be:03:0c:91:7c:3e:de:04:26:8a:46:c3:7b:6d:b5:b2:c1:4b:
3c:69:08:bb:23:75:ec:dd:bf:9a:c4:ea:3f:ae:58:1b:3e:20:
eb:b3:18:50:c4:62:96:b1:80:42:1a:7e:57:48:ba:54:29:29:
8b:80:65:a9:00:b8:75:f9:71:61:a6:be:b8:cf:b4:34:12:5f:
30:58:2b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:28:39 2026 by rpki-client