
$ rpki-client -vvvf rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3137372e39312e3137362e302f32302d3234203d3e203238333036.roa
File: 3137372e39312e3137362e302f32302d3234203d3e203238333036.roa (raw, json)
Hash identifier: OjR8Fjdj4CB1u12CYILF2Z1v0vcRWPrMb7ycq482jYA=
Subject key identifier: CC:B2:9A:2D:E3:6C:C1:9E:34:26:6B:8F:3B:C4:B2:00:45:2D:A6:AD
Certificate issuer: /CN=BDC352CC4ECCE325FD37ECE783E4C5420B23C503
Certificate serial: 3BE092ECB7EBC69FB31E4A262A3383AC135DB89C
Authority key identifier: BD:C3:52:CC:4E:CC:E3:25:FD:37:EC:E7:83:E4:C5:42:0B:23:C5:03
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3137372e39312e3137362e302f32302d3234203d3e203238333036.roa
Signing time: Mon 26 Oct 2026 13:33:26 +0000
ROA not before: Mon 26 Oct 2026 13:28:26 +0000
ROA not after: Mon 25 Oct 2027 13:33:26 +0000
asID: 28306
IP address blocks: 177.91.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.crl
rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Nov 2026 11:42:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:e0:92:ec:b7:eb:c6:9f:b3:1e:4a:26:2a:33:83:ac:13:5d:b8:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDC352CC4ECCE325FD37ECE783E4C5420B23C503
Validity
Not Before: Oct 26 13:28:26 2026 GMT
Not After : Oct 25 13:33:26 2027 GMT
Subject: CN=CCB29A2DE36CC19E34266B8F3BC4B200452DA6AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:97:3d:d9:b8:f0:7b:6e:29:e4:7c:f1:a2:c7:
8c:76:4f:b5:fa:fc:44:94:eb:d2:28:2c:bd:6c:01:
87:40:94:f9:a7:d0:76:b2:76:79:bf:64:cf:be:f7:
6a:53:81:ac:a7:6d:9f:e5:33:1c:2b:cb:2f:35:ea:
02:eb:86:63:68:21:5c:7a:14:a0:0f:21:ca:bd:88:
28:a9:d7:ca:60:c1:8e:c8:62:f0:d2:48:97:7b:ae:
53:3d:f2:8c:07:71:6a:07:1e:0c:85:6b:1e:99:25:
00:23:e4:fa:9b:61:6b:d9:b3:e0:62:75:4a:3f:5e:
d3:49:79:f8:0e:b9:bb:e3:51:58:ab:ad:5f:9e:8a:
1d:50:ff:f9:fb:03:01:42:bb:2b:99:af:c7:32:8f:
80:a3:cb:72:26:86:f4:bf:ef:c6:61:0c:bc:0f:32:
a4:e7:81:1e:61:0f:cb:7d:5b:09:c5:4a:d9:02:c2:
95:14:d9:ab:09:a0:8e:68:ff:bf:f8:f0:e7:37:62:
d9:6a:7a:00:69:90:09:cc:e8:e1:0d:7f:a6:c0:f4:
3b:0a:46:9c:a9:e3:38:fe:f3:b5:3d:d7:fb:b2:5c:
4c:bf:5f:c9:1d:73:6b:c6:01:03:d7:1e:31:01:98:
3a:4a:57:0d:56:d3:a0:e8:42:a1:a4:b2:6a:f5:2e:
a6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B2:9A:2D:E3:6C:C1:9E:34:26:6B:8F:3B:C4:B2:00:45:2D:A6:AD
X509v3 Authority Key Identifier:
keyid:BD:C3:52:CC:4E:CC:E3:25:FD:37:EC:E7:83:E4:C5:42:0B:23:C5:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3137372e39312e3137362e302f32302d3234203d3e203238333036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.91.176.0/20
Signature Algorithm: sha256WithRSAEncryption
1b:26:4f:ca:7a:25:3f:94:67:6b:50:07:fc:6b:ff:53:7d:55:
23:b0:f1:68:9d:a7:ed:64:36:e5:ce:c3:f8:76:ea:d6:ed:4c:
44:6f:12:2e:a4:f2:85:f2:15:ed:9b:be:00:c2:2f:e6:98:7c:
c9:02:2d:e9:68:a0:83:74:ef:09:2b:06:f2:91:81:9d:ff:ef:
86:d6:1e:f9:e5:e1:c1:8a:3d:ee:6e:7f:a9:71:87:48:f7:6d:
52:58:36:bd:64:87:5f:f9:45:62:a0:e4:5c:1a:07:c0:6f:79:
98:22:8c:4d:f2:62:de:c4:71:56:27:c2:db:5f:94:45:81:8f:
1e:94:32:04:12:f0:53:ba:3e:a9:22:a0:f3:6c:47:16:e0:ff:
90:18:b8:7e:23:64:5f:6e:1f:40:21:a9:df:04:c3:9d:04:b2:
08:62:c9:a6:79:c0:c4:7d:35:dd:38:a3:79:35:30:cb:94:ac:
c7:6b:fe:d4:2c:bf:34:0e:5a:04:e9:c6:77:a3:11:0e:1a:64:
4f:1c:12:39:a8:13:df:e5:a2:42:bb:0e:df:75:a1:fd:ac:17:
6a:b4:1b:99:1c:3e:4b:79:ee:98:48:24:9c:0b:ba:8b:8a:63:
c6:7e:db:e0:66:57:5f:e9:f8:cc:f2:b3:c2:c5:e7:31:2e:e4:
a3:dc:c1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 14:22:57 2026 by rpki-client