
$ rpki-client -vvf rpki-repo.registro.br/repo/ChMDKi5JSnFfq5Rq4847qqDkUdb2E1SrpYgmuaFGyu64/0/3134332e3235352e3138382e302f32322d3234203d3e20323635313531.roa
File: 3134332e3235352e3138382e302f32322d3234203d3e20323635313531.roa (raw, json)
Hash identifier: oeBpRcfgIsPnkdFuFD4Ww7Ic/raSvAK+PI/+geSRJts=
Subject key identifier: B0:B3:E9:6B:E1:12:92:F5:57:F3:61:75:0F:8D:47:55:39:3A:8D:D8
Certificate issuer: /CN=D084A50319358D8E4D37836EB1B3245C20A75F44
Certificate serial: 2DBE9095FD4FBA16FAD70D0421959C2C0AFC4288
Authority key identifier: D0:84:A5:03:19:35:8D:8E:4D:37:83:6E:B1:B3:24:5C:20:A7:5F:44
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D084A50319358D8E4D37836EB1B3245C20A75F44.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ChMDKi5JSnFfq5Rq4847qqDkUdb2E1SrpYgmuaFGyu64/0/3134332e3235352e3138382e302f32322d3234203d3e20323635313531.roa
Signing time: Thu 26 Mar 2026 12:55:37 +0000
ROA not before: Thu 26 Mar 2026 12:50:37 +0000
ROA not after: Thu 25 Mar 2027 12:55:37 +0000
asID: 265151
IP address blocks: 143.255.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/ChMDKi5JSnFfq5Rq4847qqDkUdb2E1SrpYgmuaFGyu64/0/D084A50319358D8E4D37836EB1B3245C20A75F44.crl
rsync://rpki-repo.registro.br/repo/ChMDKi5JSnFfq5Rq4847qqDkUdb2E1SrpYgmuaFGyu64/0/D084A50319358D8E4D37836EB1B3245C20A75F44.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D084A50319358D8E4D37836EB1B3245C20A75F44.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 13:40:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:be:90:95:fd:4f:ba:16:fa:d7:0d:04:21:95:9c:2c:0a:fc:42:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D084A50319358D8E4D37836EB1B3245C20A75F44
Validity
Not Before: Mar 26 12:50:37 2026 GMT
Not After : Mar 25 12:55:37 2027 GMT
Subject: CN=B0B3E96BE11292F557F361750F8D4755393A8DD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b4:d7:c2:74:cd:cd:07:5a:9f:32:d0:fc:80:
f4:23:a3:fb:37:0c:6f:a1:0e:f8:a7:ab:41:ad:15:
13:4e:0f:71:2e:b3:6a:b6:ff:40:2c:46:56:5d:db:
66:c5:00:ca:10:84:c7:a3:a8:93:a1:9a:db:3a:5f:
03:6e:e1:1e:b9:59:fa:d3:71:3f:1f:5d:10:04:31:
92:7a:6c:2b:bc:f5:6b:87:a5:c8:fb:0b:01:81:1d:
34:f1:49:b4:b7:ca:03:b3:72:54:ca:ae:ee:d1:73:
c9:74:be:62:4e:72:ce:8e:66:fd:63:36:84:95:53:
01:32:60:d4:52:80:f3:cb:88:29:2d:7b:a8:96:92:
8b:27:eb:50:68:44:cd:80:99:23:28:1a:af:c8:24:
25:67:da:55:5a:f3:26:5c:47:4f:a2:63:19:5d:1f:
44:6d:09:6c:34:ca:e9:dd:14:b9:85:37:2e:32:43:
74:4a:61:9e:af:35:1c:98:17:61:37:09:98:ce:3a:
6c:ff:d1:eb:32:bd:49:5a:b8:39:18:59:a5:f7:bf:
5b:d0:e5:f5:11:9a:f5:3d:2b:7d:a6:37:ae:55:d1:
c7:d9:f9:bf:4b:bb:d2:c2:d8:e7:e3:39:ca:12:79:
e5:d7:7d:52:64:1e:58:d1:48:bd:2a:de:c7:44:ab:
76:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B3:E9:6B:E1:12:92:F5:57:F3:61:75:0F:8D:47:55:39:3A:8D:D8
X509v3 Authority Key Identifier:
keyid:D0:84:A5:03:19:35:8D:8E:4D:37:83:6E:B1:B3:24:5C:20:A7:5F:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ChMDKi5JSnFfq5Rq4847qqDkUdb2E1SrpYgmuaFGyu64/0/D084A50319358D8E4D37836EB1B3245C20A75F44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D084A50319358D8E4D37836EB1B3245C20A75F44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ChMDKi5JSnFfq5Rq4847qqDkUdb2E1SrpYgmuaFGyu64/0/3134332e3235352e3138382e302f32322d3234203d3e20323635313531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.255.188.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:db:0b:53:6d:76:9d:95:ba:65:17:a5:fd:0a:79:95:8c:79:
3f:a5:6c:54:e0:17:4a:cf:d1:09:4a:96:cb:39:6f:ef:74:9d:
8b:66:42:d7:f1:1d:0b:5f:19:69:54:11:5b:d1:93:a0:bf:c1:
3d:af:50:fb:ac:d3:5d:48:4c:8b:c5:ed:4d:20:dc:72:14:05:
39:b3:be:f5:d1:28:81:c5:28:7f:e9:3f:2c:d5:7b:c3:12:14:
2b:6a:52:36:60:18:6c:f2:97:de:cb:6c:19:b5:55:a0:a0:f0:
29:30:4e:64:4b:76:6d:fb:77:61:2c:25:d0:52:78:3d:27:37:
88:ec:cb:a5:85:c3:55:07:d9:f2:19:8e:4c:51:bf:47:a6:f9:
59:6e:2c:30:c5:1a:b0:39:09:51:e7:f1:13:d0:e1:61:f3:dd:
6f:b7:d4:a7:2e:c9:27:ff:fd:58:d9:ca:2d:0f:b9:27:2b:d3:
b2:b0:bc:9a:13:57:61:9e:c3:ab:bc:33:38:81:16:82:43:4a:
25:c9:a1:3d:97:c0:36:c7:71:95:b3:1f:96:60:e7:3f:11:83:
11:e8:cf:07:98:f5:3e:2a:fc:e6:7e:4e:a6:ed:46:2b:f8:ad:
63:ff:50:f7:c8:d0:7a:cf:7f:9b:ff:74:01:2d:4d:ed:1e:a4:
2d:9f:89:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:58:07 2026 by rpki-client