
$ rpki-client -vvf rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/3230312e32302e3134342e302f32302d3234203d3e203238363035.roa
File: 3230312e32302e3134342e302f32302d3234203d3e203238363035.roa (raw, json)
Hash identifier: KqT+BA/FalnCCWE7gvnxSoVwpeziLp9T8mC0OsmEFm4=
Subject key identifier: A2:E9:98:98:60:A6:E8:A8:08:56:E3:4F:BD:81:89:DF:D5:C5:91:BF
Certificate issuer: /CN=BA674DA7026D8FE8FB0F8CAE19CCA97E1763ED95
Certificate serial: 6C6557F0A6F017B9ACF3A4FD201EB60EB45A1704
Authority key identifier: BA:67:4D:A7:02:6D:8F:E8:FB:0F:8C:AE:19:CC:A9:7E:17:63:ED:95
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA674DA7026D8FE8FB0F8CAE19CCA97E1763ED95.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/3230312e32302e3134342e302f32302d3234203d3e203238363035.roa
Signing time: Wed 22 Apr 2026 19:41:57 +0000
ROA not before: Wed 22 Apr 2026 19:36:57 +0000
ROA not after: Wed 21 Apr 2027 19:41:57 +0000
asID: 28605
IP address blocks: 201.20.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/BA674DA7026D8FE8FB0F8CAE19CCA97E1763ED95.crl
rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/BA674DA7026D8FE8FB0F8CAE19CCA97E1763ED95.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA674DA7026D8FE8FB0F8CAE19CCA97E1763ED95.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 14 May 2026 07:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:65:57:f0:a6:f0:17:b9:ac:f3:a4:fd:20:1e:b6:0e:b4:5a:17:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA674DA7026D8FE8FB0F8CAE19CCA97E1763ED95
Validity
Not Before: Apr 22 19:36:57 2026 GMT
Not After : Apr 21 19:41:57 2027 GMT
Subject: CN=A2E9989860A6E8A80856E34FBD8189DFD5C591BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:26:38:c3:55:42:1a:a1:42:ca:0d:0f:cd:a4:
ac:b1:b4:e8:7d:13:c6:c0:f4:f2:b8:05:ab:ce:46:
a0:f5:4f:8d:3b:3a:dd:b9:37:a3:2a:ec:70:90:9a:
b5:db:79:22:c9:cc:86:99:a8:f9:7c:c9:14:ff:73:
7a:86:93:f6:be:51:89:78:14:e5:11:05:22:4a:cd:
7f:c3:68:a4:4c:fc:3c:75:e9:c3:e2:53:12:f3:ca:
08:6d:4d:23:10:96:18:e5:f0:10:b6:b5:06:1a:7b:
c1:e1:dd:63:05:af:ba:48:07:fe:98:78:9f:96:50:
18:4e:a6:02:6e:50:89:43:37:b3:c4:76:20:19:88:
b9:eb:cc:2a:23:86:52:cf:1b:5f:ce:01:76:5c:35:
99:ce:21:5e:34:18:65:30:62:e3:f5:ba:b9:e7:2e:
fb:19:a8:4a:2c:ee:0a:e1:ab:8c:7d:a2:54:55:22:
eb:6b:4f:66:7d:cf:6e:f8:86:f0:58:92:af:b6:47:
a2:75:83:04:d9:16:6b:29:42:ac:c4:d7:aa:6f:71:
65:8b:a8:5c:fd:ce:5f:ff:ca:55:6d:4c:97:3e:c0:
c8:fd:ed:15:72:9c:29:93:d4:3e:2f:fc:85:1f:2f:
24:2d:5f:b3:25:67:22:8f:bf:0a:9d:3d:e5:fe:72:
6f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E9:98:98:60:A6:E8:A8:08:56:E3:4F:BD:81:89:DF:D5:C5:91:BF
X509v3 Authority Key Identifier:
keyid:BA:67:4D:A7:02:6D:8F:E8:FB:0F:8C:AE:19:CC:A9:7E:17:63:ED:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/BA674DA7026D8FE8FB0F8CAE19CCA97E1763ED95.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA674DA7026D8FE8FB0F8CAE19CCA97E1763ED95.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/3230312e32302e3134342e302f32302d3234203d3e203238363035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.20.144.0/20
Signature Algorithm: sha256WithRSAEncryption
77:74:32:5c:71:b5:2d:35:8c:34:60:d5:62:01:fc:e0:ea:80:
09:71:f4:97:9f:f2:4c:a2:ec:f6:68:3f:27:6c:97:51:21:8f:
ce:69:cd:aa:eb:79:db:8c:27:e2:7d:e6:f0:d2:8a:0e:e4:2f:
9f:52:db:27:71:6b:82:db:a2:fb:44:b2:4a:1e:16:3d:66:62:
9a:e4:c6:2a:cc:e3:4a:3a:33:2a:be:8a:d4:33:fc:27:24:8a:
09:1b:80:25:87:b9:46:33:2c:d4:3b:f9:16:a4:19:1a:30:ed:
a8:3f:e4:8f:1c:dc:f9:25:38:4b:f5:63:a1:6a:ab:25:21:85:
87:52:2e:e5:5e:74:50:c0:09:5f:cd:75:e3:03:24:6a:8b:4e:
da:0f:be:cb:21:b0:51:b7:83:7d:34:6c:84:2c:2e:c1:c9:d0:
b2:9a:14:8f:4f:82:f7:0e:99:45:86:42:48:7d:40:ea:5a:de:
d9:51:e9:23:5a:5a:0e:38:96:be:1d:21:23:9b:79:49:80:6f:
2d:4f:55:12:df:07:88:26:8f:76:0b:33:2a:9a:cc:b6:45:f8:
cf:85:05:7a:64:29:ce:fc:bd:b4:85:92:c4:8d:54:17:3b:04:
06:7a:51:65:cb:04:ef:b9:03:39:3c:e7:3a:90:de:c0:72:df:
0d:e9:fd:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:54:56 2026 by rpki-client