
$ rpki-client -vvvf rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/3138392e35302e35322e302f32332d3233203d3e20323730393035.roa
File: 3138392e35302e35322e302f32332d3233203d3e20323730393035.roa (raw, json)
Hash identifier: XQm1WPzr9hjOtgmiCXkf3CFl68f2hqdLZ9H88XcRfJM=
Subject key identifier: 63:CB:8D:5F:50:00:42:2D:C7:E3:38:B0:7D:38:03:ED:14:4A:9F:BC
Certificate issuer: /CN=68DD457AFD87757729E657881786601BF56ED45F
Certificate serial: 422F1A51B14C3C60E429E71387066EDD53E2FD65
Authority key identifier: 68:DD:45:7A:FD:87:75:77:29:E6:57:88:17:86:60:1B:F5:6E:D4:5F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/3138392e35302e35322e302f32332d3233203d3e20323730393035.roa
Signing time: Wed 02 Sep 2026 16:55:23 +0000
ROA not before: Wed 02 Sep 2026 16:50:23 +0000
ROA not after: Wed 01 Sep 2027 16:55:23 +0000
asID: 270905
IP address blocks: 189.50.52.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.crl
rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 31 Oct 2026 10:32:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:2f:1a:51:b1:4c:3c:60:e4:29:e7:13:87:06:6e:dd:53:e2:fd:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68DD457AFD87757729E657881786601BF56ED45F
Validity
Not Before: Sep 2 16:50:23 2026 GMT
Not After : Sep 1 16:55:23 2027 GMT
Subject: CN=63CB8D5F5000422DC7E338B07D3803ED144A9FBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:96:12:74:6b:e9:96:f9:b3:6b:cb:be:bf:51:
85:eb:f3:c8:cf:7d:ec:18:5a:ad:74:df:65:02:43:
eb:db:6f:f7:30:ce:6c:be:ef:a6:95:df:45:98:8c:
8e:9b:60:47:04:1a:1c:7f:85:5e:bd:f7:11:de:9c:
a4:03:56:9b:8b:dc:31:11:d1:cd:1e:63:bb:9c:38:
14:8d:af:bc:5f:eb:37:0b:69:21:f7:1a:a8:f2:92:
20:73:1e:01:02:df:eb:ea:26:81:ad:e7:6a:9f:ef:
3c:6d:3b:47:0d:63:81:dd:62:20:ce:e7:8e:3d:07:
5f:bb:a1:0d:24:bb:d9:b7:4c:08:e1:20:91:f7:b6:
34:8c:7b:c6:2a:b1:89:43:2e:87:99:ed:93:d8:27:
d8:be:6a:d3:b7:ee:dc:af:ae:6a:be:9d:8d:d8:a6:
e2:f9:39:af:71:ee:dc:01:1d:19:cf:36:6f:54:42:
04:92:37:c3:e6:cf:d6:81:74:e7:77:bd:d1:a9:fd:
af:68:ce:43:fa:54:8d:7f:6d:8c:1e:24:da:f5:16:
8c:cd:7f:2e:9f:59:ba:29:7b:0b:fb:e8:ff:66:9e:
7d:84:40:e0:b9:84:49:bd:aa:c8:b0:a2:c5:b7:74:
b3:b3:8f:d9:5c:b6:12:fc:63:07:91:a8:52:24:7a:
ce:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:CB:8D:5F:50:00:42:2D:C7:E3:38:B0:7D:38:03:ED:14:4A:9F:BC
X509v3 Authority Key Identifier:
keyid:68:DD:45:7A:FD:87:75:77:29:E6:57:88:17:86:60:1B:F5:6E:D4:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/3138392e35302e35322e302f32332d3233203d3e20323730393035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.50.52.0/23
Signature Algorithm: sha256WithRSAEncryption
69:ed:e2:e5:79:15:6e:1f:96:81:ee:64:c4:d9:9f:21:d3:07:
99:bf:88:13:b6:04:be:39:2a:5c:15:3b:89:b8:8f:bc:c6:8a:
d4:4b:fe:6d:98:ba:03:42:c8:05:2b:50:b8:29:76:75:a8:ea:
bc:4a:16:2f:63:4a:f6:36:96:76:db:2f:37:b8:3d:97:6c:8c:
2d:26:7c:46:65:77:ef:4c:a5:61:5c:df:4e:37:f3:a9:06:ab:
1e:f7:e2:67:3c:c5:e8:20:4d:7d:6d:ef:fb:38:c4:89:55:1d:
2e:b7:e1:ca:02:b2:dc:d5:bc:ff:c2:bc:9b:8b:a3:dc:c7:58:
74:17:a8:be:2f:0d:cb:c1:90:bf:af:31:19:14:10:66:a8:40:
87:70:8e:c8:fb:72:24:5e:5a:3c:ac:f8:fa:e3:3a:18:c6:04:
24:0d:61:43:dd:4e:d5:ab:21:75:1e:82:03:45:9d:8b:a6:cd:
ae:f8:b6:01:bf:dd:ad:4a:2a:3e:c3:06:3e:87:b7:6f:a1:47:
67:c3:3e:fa:3b:fc:28:3c:d6:de:5b:34:a0:66:59:49:aa:a3:
91:62:61:25:91:27:03:3d:9a:cb:a3:91:ed:35:df:9c:10:10:
ec:58:8d:2c:b6:84:b7:fc:96:0c:e0:9f:5f:72:6c:d5:be:60:
e7:c6:84:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 14:14:51 2026 by rpki-client