
$ rpki-client -vvf rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/3138312e3139312e3137302e302f32332d3233203d3e20323637343239.roa
File: 3138312e3139312e3137302e302f32332d3233203d3e20323637343239.roa (raw, json)
Hash identifier: oqNLyvFePKULPyxNyGFogpvSMf2TW28YQY2J2aHb27c=
Subject key identifier: 85:F3:84:DD:CE:90:FC:DC:68:5C:94:91:8C:F7:AB:26:C3:64:42:8E
Certificate issuer: /CN=CEDD21E1F1AAAE1AE4E480B6373AA48CA5126324
Certificate serial: 426D8199E0ADD329AEA5AFD958325E7B1215018C
Authority key identifier: CE:DD:21:E1:F1:AA:AE:1A:E4:E4:80:B6:37:3A:A4:8C:A5:12:63:24
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEDD21E1F1AAAE1AE4E480B6373AA48CA5126324.cer
Subject info access: rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/3138312e3139312e3137302e302f32332d3233203d3e20323637343239.roa
Signing time: Thu 07 May 2026 13:38:55 +0000
ROA not before: Thu 07 May 2026 13:33:55 +0000
ROA not after: Thu 06 May 2027 13:38:55 +0000
asID: 267429
IP address blocks: 181.191.170.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/CEDD21E1F1AAAE1AE4E480B6373AA48CA5126324.crl
rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/CEDD21E1F1AAAE1AE4E480B6373AA48CA5126324.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEDD21E1F1AAAE1AE4E480B6373AA48CA5126324.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 14 May 2026 17:58:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:6d:81:99:e0:ad:d3:29:ae:a5:af:d9:58:32:5e:7b:12:15:01:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CEDD21E1F1AAAE1AE4E480B6373AA48CA5126324
Validity
Not Before: May 7 13:33:55 2026 GMT
Not After : May 6 13:38:55 2027 GMT
Subject: CN=85F384DDCE90FCDC685C94918CF7AB26C364428E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:6d:64:a8:9f:cd:30:b4:27:b1:2d:59:46:6f:
98:e3:90:01:1d:f0:f2:55:6f:03:99:09:e4:19:e7:
cf:ad:aa:96:e1:17:5f:23:3b:d7:25:e7:5e:04:3e:
ec:40:a8:a8:07:83:72:6c:fa:a6:42:65:aa:7b:03:
d7:59:2f:c1:75:3e:36:a0:15:da:d7:13:e7:99:c4:
86:b5:31:56:3c:0b:d2:c7:c6:e8:03:44:ba:42:86:
b0:bd:00:fb:58:76:3e:25:75:fe:d1:21:95:bd:e8:
9f:1e:67:89:29:c8:4d:0c:cd:c7:c4:a0:21:18:92:
2a:c4:2a:af:48:59:75:47:48:85:8e:5e:81:40:c9:
f2:41:d0:a0:29:24:02:e1:a2:7f:aa:bd:60:30:e5:
4b:dc:c8:d5:0a:42:37:02:67:47:4e:2b:d6:d9:dd:
90:f1:0b:19:b2:1f:1c:22:4c:75:28:ba:6d:26:3c:
1c:5c:d8:75:17:b5:db:1e:9f:5f:03:05:71:71:9e:
39:e2:35:1b:57:7d:09:de:7d:14:f1:d7:a6:ca:ee:
8f:16:c5:70:ad:5d:7d:f3:fe:6e:74:e6:e2:3e:d3:
eb:ef:1f:39:31:7c:2b:42:22:ef:83:9f:38:02:3c:
a8:73:57:05:4c:7a:c0:e0:11:19:b9:06:2b:77:6e:
ec:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F3:84:DD:CE:90:FC:DC:68:5C:94:91:8C:F7:AB:26:C3:64:42:8E
X509v3 Authority Key Identifier:
keyid:CE:DD:21:E1:F1:AA:AE:1A:E4:E4:80:B6:37:3A:A4:8C:A5:12:63:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/CEDD21E1F1AAAE1AE4E480B6373AA48CA5126324.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEDD21E1F1AAAE1AE4E480B6373AA48CA5126324.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/3138312e3139312e3137302e302f32332d3233203d3e20323637343239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.191.170.0/23
Signature Algorithm: sha256WithRSAEncryption
05:3a:41:5a:eb:80:16:6c:19:7c:ec:0f:5f:ba:44:35:e2:65:
6c:9e:8c:85:77:36:80:84:bb:75:3b:cc:ea:9e:63:76:76:c5:
3f:10:8b:6e:8b:ec:6a:0e:1f:f4:07:b8:c6:26:93:be:dc:bc:
2f:21:87:e2:4e:44:3a:0a:43:ad:64:6d:6c:f5:99:90:f2:7d:
1f:83:e8:a0:ac:46:54:ec:1d:2e:aa:82:20:92:a6:f8:c9:8e:
2b:44:7c:56:f9:37:e1:85:a4:26:a2:dc:51:c3:d7:fa:a9:6f:
50:c3:7f:d7:8f:f0:e9:bb:de:6b:2f:7f:55:cf:36:58:bb:8d:
a9:2b:52:1f:bb:89:92:3d:3f:4b:85:a1:73:6b:84:3b:3d:b5:
a1:95:26:6a:3e:73:1c:28:f0:79:b0:c3:71:ca:bf:9a:e1:b2:
e0:34:d1:f4:88:8a:72:28:b1:c1:47:38:71:1f:aa:06:ce:fe:
bd:f2:8a:53:53:1e:e2:40:a8:79:31:bf:77:b7:f0:26:71:31:
1a:1a:35:d5:63:fb:5f:b0:c7:60:5b:77:bb:e0:94:b7:f4:86:
89:0b:fa:58:f4:a4:13:e0:e1:6b:fe:5d:2e:e9:dc:9c:85:eb:
0e:15:c1:f6:26:c1:63:a8:4e:71:f5:c8:b3:a6:23:a5:b3:10:
fc:aa:ba:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:38:23 2026 by rpki-client