
$ rpki-client -vvvf rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/3138362e3235302e3232302e302f32322d3235203d3e20323633353535.roa
File: 3138362e3235302e3232302e302f32322d3235203d3e20323633353535.roa (raw, json)
Hash identifier: g4b+BhTOimT4VKl+EsWbHFR7J6Ou3wk0606t5aHYVHQ=
Subject key identifier: EB:3F:FA:2E:2D:7E:73:07:B0:84:6D:3C:6F:44:5C:4A:D6:E7:F6:19
Certificate issuer: /CN=2028B4F00526FFD4A6479245C26F87EECD0F5352
Certificate serial: 1EF5FFCC2E7ADA4045B139A152524814AF51D7A0
Authority key identifier: 20:28:B4:F0:05:26:FF:D4:A6:47:92:45:C2:6F:87:EE:CD:0F:53:52
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2028B4F00526FFD4A6479245C26F87EECD0F5352.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/3138362e3235302e3232302e302f32322d3235203d3e20323633353535.roa
Signing time: Wed 02 Sep 2026 15:06:07 +0000
ROA not before: Wed 02 Sep 2026 15:01:07 +0000
ROA not after: Wed 01 Sep 2027 15:06:07 +0000
asID: 263555
IP address blocks: 186.250.220.0/22 maxlen: 25
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/2028B4F00526FFD4A6479245C26F87EECD0F5352.crl
rsync://rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/2028B4F00526FFD4A6479245C26F87EECD0F5352.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2028B4F00526FFD4A6479245C26F87EECD0F5352.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Oct 2026 16:10:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:f5:ff:cc:2e:7a:da:40:45:b1:39:a1:52:52:48:14:af:51:d7:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2028B4F00526FFD4A6479245C26F87EECD0F5352
Validity
Not Before: Sep 2 15:01:07 2026 GMT
Not After : Sep 1 15:06:07 2027 GMT
Subject: CN=EB3FFA2E2D7E7307B0846D3C6F445C4AD6E7F619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:11:a4:04:39:f0:75:6c:90:28:1f:42:0f:19:
1f:9e:37:9c:5b:52:93:38:96:71:b6:71:87:96:a4:
7c:35:32:97:dd:b6:a2:6d:22:87:ad:ba:fb:7c:18:
cb:ee:ca:3f:3d:e9:48:14:69:c3:e6:89:f4:96:2c:
12:27:5d:5d:32:d8:00:ef:ac:d8:8e:0e:f7:10:fd:
3c:1e:da:ac:80:a9:3c:42:e1:ce:15:8e:7e:f0:2a:
7c:a3:64:19:3d:65:e4:77:6a:d3:b4:ef:37:7d:14:
2c:46:df:34:06:b7:34:0a:7b:45:53:4d:23:ea:83:
ae:3c:60:5f:9c:b3:aa:aa:fd:d5:c0:57:aa:22:cf:
78:5d:0f:e0:b3:3e:b3:68:89:e2:8b:09:ec:45:70:
75:37:9d:38:12:3c:dc:0d:75:dd:9a:f5:2d:3f:ca:
cf:d4:1f:b9:8d:31:77:76:1c:32:17:2f:b8:d2:65:
22:cc:cc:49:82:00:e3:47:5c:c1:d3:06:b7:f7:9b:
d5:76:62:ac:ab:41:99:56:c9:be:16:78:19:d0:5a:
02:28:57:f6:2e:48:e1:4f:6b:df:8f:75:91:14:29:
92:21:1a:69:33:53:7c:91:e1:3d:1f:e9:0f:e2:78:
ef:54:f4:a2:57:f3:05:22:12:f9:0a:a9:a7:7e:b9:
ff:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:3F:FA:2E:2D:7E:73:07:B0:84:6D:3C:6F:44:5C:4A:D6:E7:F6:19
X509v3 Authority Key Identifier:
keyid:20:28:B4:F0:05:26:FF:D4:A6:47:92:45:C2:6F:87:EE:CD:0F:53:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/2028B4F00526FFD4A6479245C26F87EECD0F5352.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2028B4F00526FFD4A6479245C26F87EECD0F5352.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/3138362e3235302e3232302e302f32322d3235203d3e20323633353535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.250.220.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:81:fe:d6:69:09:0b:63:ab:b0:ef:27:63:b6:1a:11:98:b4:
99:1b:d3:21:3f:b1:89:6e:6f:61:60:b2:8b:8e:79:0a:fb:43:
b1:75:61:e3:71:c5:09:64:39:8d:7d:8f:63:3f:04:50:9a:ab:
17:5f:b2:eb:1a:35:ef:4e:f9:ce:2d:7b:c3:fe:a3:3c:86:54:
6e:73:7f:0c:8f:5f:d5:ae:ee:8f:0f:78:c6:e8:68:61:c8:33:
04:b0:0c:77:f6:5b:8f:76:66:59:e4:c4:cc:c3:22:c6:c4:a0:
bb:d4:57:c6:9f:32:da:df:15:51:40:57:9c:cd:29:24:ad:48:
88:05:e2:59:c1:fe:1d:7d:62:6a:a7:54:97:f9:96:a3:7d:0d:
36:56:ab:3d:ad:01:f0:50:d6:c9:fb:81:01:b2:38:55:5f:46:
5f:0d:35:82:c6:54:59:56:af:18:b1:ad:07:75:85:5c:b1:d4:
21:c2:ac:2e:b6:5a:9c:34:7b:85:a9:54:b2:8c:b9:73:a2:7b:
03:3f:6a:65:7f:d5:9e:e3:5b:2b:00:0f:bb:08:8d:f5:9c:57:
79:c7:8a:9e:e9:55:21:32:ab:99:ee:79:e2:72:67:bd:b6:65:
1c:23:50:30:cb:9c:aa:e8:f3:ab:f4:b2:e3:90:4e:a3:55:d1:
1c:77:72:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:33:51 2026 by rpki-client