
$ rpki-client -vvf rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/3137302e3233332e33382e302f32332d3233203d3e20323635313831.roa
File: 3137302e3233332e33382e302f32332d3233203d3e20323635313831.roa (raw, json)
Hash identifier: Gov3h4ItaUgb2uGH+/KfQpBH2PCZ7C585Zwgc3IMlMo=
Subject key identifier: 9E:91:22:4D:05:27:87:DF:DF:3C:01:9E:F9:E4:87:19:2F:1C:B7:E8
Certificate issuer: /CN=D15CFF6FAC8944C245C77298AB15D18C406D4FDC
Certificate serial: 2007192EC4B7948F05860CE57E17444CECE148F1
Authority key identifier: D1:5C:FF:6F:AC:89:44:C2:45:C7:72:98:AB:15:D1:8C:40:6D:4F:DC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D15CFF6FAC8944C245C77298AB15D18C406D4FDC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/3137302e3233332e33382e302f32332d3233203d3e20323635313831.roa
Signing time: Mon 16 Mar 2026 19:07:57 +0000
ROA not before: Mon 16 Mar 2026 19:02:57 +0000
ROA not after: Mon 15 Mar 2027 19:07:57 +0000
asID: 265181
IP address blocks: 170.233.38.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/D15CFF6FAC8944C245C77298AB15D18C406D4FDC.crl
rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/D15CFF6FAC8944C245C77298AB15D18C406D4FDC.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D15CFF6FAC8944C245C77298AB15D18C406D4FDC.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 22:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:07:19:2e:c4:b7:94:8f:05:86:0c:e5:7e:17:44:4c:ec:e1:48:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D15CFF6FAC8944C245C77298AB15D18C406D4FDC
Validity
Not Before: Mar 16 19:02:57 2026 GMT
Not After : Mar 15 19:07:57 2027 GMT
Subject: CN=9E91224D052787DFDF3C019EF9E487192F1CB7E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5f:2b:f1:d3:ea:d6:0b:81:20:35:12:87:67:
c6:27:10:d8:57:8e:31:f6:a0:eb:e3:34:19:f0:24:
87:55:ad:d2:4b:8c:42:34:f7:15:5d:66:33:38:20:
3b:25:74:6d:19:6c:a8:fe:22:6d:04:4e:9f:9a:4b:
b7:17:e5:a8:5e:52:af:b5:9a:d2:92:40:f6:7a:63:
18:1a:cd:a8:26:ee:0b:a7:fb:96:95:05:45:29:46:
34:6c:45:47:12:7e:09:f7:eb:34:94:93:f9:da:23:
b9:76:26:d4:da:61:e8:17:22:f2:e4:cf:1f:91:6d:
95:af:6e:81:eb:f8:de:8e:ee:30:c4:d8:e2:27:78:
db:5a:aa:6f:41:9e:7e:a0:7f:73:48:0d:b1:17:bb:
72:10:fa:4a:df:30:04:39:28:85:2c:be:23:ef:6a:
26:0e:88:01:04:3a:d9:94:28:f9:41:79:81:f9:99:
98:f3:e5:c4:01:b8:b6:60:6b:80:f0:e3:f2:85:df:
cc:fa:44:b1:15:b4:dd:85:5e:aa:a6:1c:27:7d:27:
45:3a:04:13:06:03:8b:9e:b4:e4:12:5d:9b:19:78:
c4:47:be:55:30:d4:51:79:91:6c:d2:05:50:76:5f:
95:69:72:8d:e4:37:be:48:74:4a:29:c4:7b:e9:16:
c0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:91:22:4D:05:27:87:DF:DF:3C:01:9E:F9:E4:87:19:2F:1C:B7:E8
X509v3 Authority Key Identifier:
keyid:D1:5C:FF:6F:AC:89:44:C2:45:C7:72:98:AB:15:D1:8C:40:6D:4F:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/D15CFF6FAC8944C245C77298AB15D18C406D4FDC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D15CFF6FAC8944C245C77298AB15D18C406D4FDC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/3137302e3233332e33382e302f32332d3233203d3e20323635313831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.233.38.0/23
Signature Algorithm: sha256WithRSAEncryption
bd:ac:e8:95:4c:18:d0:4c:63:52:68:3b:b8:57:55:28:3b:f4:
8a:ff:5b:09:d1:2e:08:de:d5:dd:63:be:aa:93:6b:f7:59:0a:
64:6d:43:cf:47:76:0f:37:34:bd:50:48:0e:33:72:4c:31:2b:
c6:11:e1:2b:d6:9d:dc:9c:71:09:4b:4b:c2:7e:be:ce:4d:6b:
da:ad:82:5d:6e:f7:67:fe:22:b3:f7:79:eb:e1:46:d9:b5:b7:
d5:ee:46:33:12:51:5d:cd:59:0e:50:15:cf:9e:89:00:00:4c:
0b:cc:c6:26:83:c2:36:4b:f9:46:32:17:4d:14:3a:33:04:ab:
cf:1e:2a:5c:a8:dd:10:d8:4c:ed:1f:07:82:95:24:0b:17:8a:
d6:00:ce:48:07:6e:40:9c:d5:06:a8:58:e5:73:6a:17:7f:d8:
7e:ac:24:85:17:33:d6:47:ae:f1:95:a6:7a:50:ca:02:d2:c4:
94:6c:74:60:0d:74:84:26:4e:a1:24:b7:9a:57:e0:3a:50:79:
0a:83:99:4a:2e:68:ca:af:7c:d4:02:25:5f:8e:ac:3a:77:58:
48:e6:23:dd:11:62:59:5c:cc:73:2d:8c:bb:54:e2:d1:02:f3:
a2:aa:57:fb:79:63:e6:7d:77:48:16:60:b5:c4:ba:e9:fd:6f:
b7:a5:d2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:58:34 2026 by rpki-client