
$ rpki-client -vvvf rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/3138392e35302e35342e302f32342d3234203d3e20323730393035.roa
File: 3138392e35302e35342e302f32342d3234203d3e20323730393035.roa (raw, json)
Hash identifier: Egiu2rEVXItPUU3Hn5aYpEvGpzVkwfyKSnxcVMSW83w=
Subject key identifier: D9:AE:41:90:DF:04:4E:D0:F4:2D:15:57:57:A4:AD:85:75:A3:97:7A
Certificate issuer: /CN=68DD457AFD87757729E657881786601BF56ED45F
Certificate serial: 59C8D38369118C3D92C64BCCBC541E529D84D38E
Authority key identifier: 68:DD:45:7A:FD:87:75:77:29:E6:57:88:17:86:60:1B:F5:6E:D4:5F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/3138392e35302e35342e302f32342d3234203d3e20323730393035.roa
Signing time: Wed 02 Sep 2026 16:55:24 +0000
ROA not before: Wed 02 Sep 2026 16:50:24 +0000
ROA not after: Wed 01 Sep 2027 16:55:24 +0000
asID: 270905
IP address blocks: 189.50.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.crl
rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Oct 2026 06:40:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:c8:d3:83:69:11:8c:3d:92:c6:4b:cc:bc:54:1e:52:9d:84:d3:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68DD457AFD87757729E657881786601BF56ED45F
Validity
Not Before: Sep 2 16:50:24 2026 GMT
Not After : Sep 1 16:55:24 2027 GMT
Subject: CN=D9AE4190DF044ED0F42D155757A4AD8575A3977A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4a:bc:c7:ee:dd:bb:ab:72:7b:07:e5:4e:b9:
e7:df:90:6b:59:e8:a8:09:d2:65:b9:d0:ac:07:d4:
2c:21:a3:ed:83:15:49:4a:29:53:af:25:a5:c8:74:
60:ad:5d:90:58:04:8c:ac:dd:90:90:60:f6:22:6c:
a9:35:d6:4b:61:b2:ef:60:52:57:64:55:72:50:87:
b2:3e:4f:fe:32:b8:f7:32:cd:b6:5c:de:c6:bc:5b:
1f:b6:c0:d8:d7:42:6d:66:f5:75:53:4c:44:b5:95:
a0:70:6e:32:71:be:c5:27:6d:ab:be:8d:d4:07:44:
5c:2c:cd:85:4c:20:c1:5c:46:2b:1b:9d:57:09:6a:
80:04:c8:80:98:ab:ec:b3:75:ec:38:7b:72:f4:40:
ba:f8:7f:33:3b:ab:b8:57:ae:7e:a1:e4:55:13:83:
f8:a9:6d:49:f4:f6:81:09:35:2f:96:56:88:a9:a2:
81:11:74:d3:0c:90:8e:a9:c2:e9:a1:ce:a5:04:22:
01:48:b5:f6:e5:15:ea:a6:b2:0f:4a:2b:83:59:c5:
05:7f:7c:91:ab:19:dc:0b:4c:bb:58:77:c6:0d:4c:
b3:a0:0d:ba:d7:f4:a1:ba:d4:46:b3:99:80:3e:ec:
45:d9:16:16:95:c4:47:67:a9:c1:ac:db:07:8e:49:
ad:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:AE:41:90:DF:04:4E:D0:F4:2D:15:57:57:A4:AD:85:75:A3:97:7A
X509v3 Authority Key Identifier:
keyid:68:DD:45:7A:FD:87:75:77:29:E6:57:88:17:86:60:1B:F5:6E:D4:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/3138392e35302e35342e302f32342d3234203d3e20323730393035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.50.54.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:4c:33:bb:96:8e:67:6a:ba:e3:b5:4b:4a:81:4d:07:85:00:
08:0a:0c:a0:b4:d1:b3:d6:fa:ea:b5:8a:16:be:b3:5f:fa:14:
d8:77:3f:ec:4e:10:a5:ab:4e:f9:03:cf:94:fd:81:19:63:2b:
f1:e0:e4:80:11:3a:6e:02:bf:18:82:9d:ed:28:5d:5e:09:28:
ef:17:fc:45:57:d4:01:b8:13:8d:24:43:5e:d1:c6:55:a8:9a:
b1:48:19:e4:7a:4b:25:5c:26:0c:ec:d1:4b:55:7a:cb:a3:43:
1c:c0:17:95:db:45:5c:b1:fe:76:69:3b:6a:f8:77:4c:29:ed:
6d:72:6e:e3:02:01:a0:1d:fc:57:9e:f6:fa:33:a5:d1:a5:18:
e7:6c:26:d0:2f:54:31:30:02:f8:f7:b0:ba:14:eb:e3:e5:c4:
7b:17:6a:36:00:5a:81:c2:dd:2e:44:71:2f:d4:1b:d1:7e:97:
8a:37:50:1d:02:c1:b4:3c:8f:a0:5b:d5:ff:18:be:7c:86:b8:
bd:d3:40:d3:2e:9c:35:ec:2c:f4:c4:9e:15:b8:88:7d:e8:50:
59:98:f2:b3:b2:99:f5:06:34:47:dd:90:71:0e:8c:a0:07:ed:
f9:d1:e2:7b:6f:8c:f0:6c:9d:7b:38:86:63:c4:d2:11:42:f8:
55:fa:c4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:44:37 2026 by rpki-client