
$ rpki-client -vvvf rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3136382e3139352e3136302e302f32322d3234203d3e203533303738.roa
File: 3136382e3139352e3136302e302f32322d3234203d3e203533303738.roa (raw, json)
Hash identifier: OUBoUccOZoJs73Iat05EeXL1Typ0kRiVCeFxeWr4i2Y=
Subject key identifier: 89:1A:20:FC:E5:7C:94:0F:99:85:4A:A4:DF:C3:DB:CE:30:24:46:37
Certificate issuer: /CN=3C8E5F41F3AF740E9427F8ED235C120098AA0C21
Certificate serial: 06F1C699CB19032E8210B7509655C1B70EEC989E
Authority key identifier: 3C:8E:5F:41:F3:AF:74:0E:94:27:F8:ED:23:5C:12:00:98:AA:0C:21
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3136382e3139352e3136302e302f32322d3234203d3e203533303738.roa
Signing time: Tue 01 Sep 2026 15:49:18 +0000
ROA not before: Tue 01 Sep 2026 15:44:18 +0000
ROA not after: Tue 31 Aug 2027 15:49:18 +0000
asID: 53078
IP address blocks: 168.195.160.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.crl
rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Oct 2026 19:20:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:f1:c6:99:cb:19:03:2e:82:10:b7:50:96:55:c1:b7:0e:ec:98:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C8E5F41F3AF740E9427F8ED235C120098AA0C21
Validity
Not Before: Sep 1 15:44:18 2026 GMT
Not After : Aug 31 15:49:18 2027 GMT
Subject: CN=891A20FCE57C940F99854AA4DFC3DBCE30244637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:70:73:e3:ff:df:9d:af:ae:e9:0f:3c:3d:99:
aa:fc:9c:c6:fd:0c:54:03:b9:c3:dd:53:88:ee:08:
0b:c5:30:f5:2a:86:85:d4:28:30:ef:77:b9:7a:0b:
9a:01:63:48:29:7d:85:43:7e:1b:90:67:bb:59:37:
b7:cc:37:6e:6b:75:38:1b:ed:61:f3:2d:cc:80:fd:
a6:0b:4b:e9:e3:8d:d9:b3:b7:07:25:e7:60:1c:ac:
10:df:1d:57:b8:4a:8d:57:e2:a9:b3:98:2a:72:c2:
e7:79:85:e9:04:58:8d:a8:e6:83:07:f4:7f:af:16:
51:cf:dc:7d:91:69:8b:e3:ff:1d:54:7e:4a:0d:f6:
3f:8c:27:0e:46:1b:90:12:bb:50:0d:7e:13:4a:30:
08:a7:0c:87:60:4b:17:b1:55:db:eb:50:38:7e:83:
58:58:bc:6b:ae:ca:7f:56:b9:67:cc:f1:4e:7e:95:
b2:33:4f:7f:fc:d9:e3:e3:7d:94:66:e2:95:88:46:
11:bd:72:42:c0:ac:14:81:6c:6e:1b:19:b1:65:6c:
3b:a9:2c:f7:7f:d3:48:0e:7f:47:a9:58:f8:07:37:
da:fb:74:99:c0:c1:a9:36:f2:e0:11:14:14:ce:84:
1b:3b:be:34:95:0e:1d:ba:60:17:19:f9:fc:83:ea:
fb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:1A:20:FC:E5:7C:94:0F:99:85:4A:A4:DF:C3:DB:CE:30:24:46:37
X509v3 Authority Key Identifier:
keyid:3C:8E:5F:41:F3:AF:74:0E:94:27:F8:ED:23:5C:12:00:98:AA:0C:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3136382e3139352e3136302e302f32322d3234203d3e203533303738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.195.160.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:94:f8:f4:ec:72:6f:5d:d9:0a:70:b5:97:9c:d7:b7:b0:b1:
4d:ed:78:fb:24:16:cb:bd:a3:54:0d:02:d8:1f:b7:a9:f2:b1:
ee:76:1f:15:b2:6a:de:a4:85:d9:77:c2:f2:14:b3:bc:f0:a9:
11:29:cf:da:2f:e5:9b:5b:11:19:9f:98:db:0f:02:35:9d:ce:
a5:a2:51:fe:21:33:95:88:27:25:d4:be:e5:cf:16:01:9f:5d:
45:d5:20:fd:f5:f2:f9:0c:b9:71:22:c7:be:ed:c3:1c:21:99:
53:33:e8:73:22:42:f6:c6:0d:c8:30:9b:84:38:50:56:85:e5:
10:9c:89:c6:d9:3a:da:fc:69:8b:88:34:aa:8a:d3:dd:2f:cd:
e2:ac:f5:b9:2c:a1:9d:1f:7c:81:f7:d9:d4:5a:69:c1:b3:cf:
4a:75:50:2f:24:7e:1a:1e:d9:ab:5d:87:b4:50:12:9c:22:e3:
a1:b9:71:a2:c1:9f:bb:b2:1a:f9:81:4a:62:eb:2c:65:e6:80:
19:9e:38:f9:5f:06:31:80:71:d9:f3:59:b5:99:a4:ee:e8:e7:
7d:f7:8c:eb:b5:e3:81:20:42:9c:fd:f6:90:10:3a:ba:54:85:
75:43:73:34:65:b9:82:05:1f:b0:da:59:9a:5c:ac:f4:2a:cc:
01:ec:25:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:50:31 2026 by rpki-client