
$ rpki-client -vvvf rpki-repo.registro.br/repo/DnkMv8bZgnXNnRyPi9wYft5uLsdxpJjVRCSauXsg6QSt/0/3137372e3132342e3134372e302f32342d3234203d3e20323734353238.roa
File: 3137372e3132342e3134372e302f32342d3234203d3e20323734353238.roa (raw, json)
Hash identifier: EMRk6UFebWrBzZvlo7554A4JfFUPvOcx+Ux5dGYQNbI=
Subject key identifier: AD:36:D6:4E:6B:2D:F1:74:C6:89:6F:05:E1:B3:BD:59:C0:0A:81:FC
Certificate issuer: /CN=416E23E11DAA068885CEA8ECF4CB69A0E4F96D5A
Certificate serial: 037AB3CF79DBBB86543D068BB277A7669884359A
Authority key identifier: 41:6E:23:E1:1D:AA:06:88:85:CE:A8:EC:F4:CB:69:A0:E4:F9:6D:5A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416E23E11DAA068885CEA8ECF4CB69A0E4F96D5A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DnkMv8bZgnXNnRyPi9wYft5uLsdxpJjVRCSauXsg6QSt/0/3137372e3132342e3134372e302f32342d3234203d3e20323734353238.roa
Signing time: Mon 28 Sep 2026 01:58:28 +0000
ROA not before: Mon 28 Sep 2026 01:53:28 +0000
ROA not after: Mon 27 Sep 2027 01:58:28 +0000
asID: 274528
IP address blocks: 177.124.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DnkMv8bZgnXNnRyPi9wYft5uLsdxpJjVRCSauXsg6QSt/0/416E23E11DAA068885CEA8ECF4CB69A0E4F96D5A.crl
rsync://rpki-repo.registro.br/repo/DnkMv8bZgnXNnRyPi9wYft5uLsdxpJjVRCSauXsg6QSt/0/416E23E11DAA068885CEA8ECF4CB69A0E4F96D5A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416E23E11DAA068885CEA8ECF4CB69A0E4F96D5A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 12 Oct 2026 16:39:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:7a:b3:cf:79:db:bb:86:54:3d:06:8b:b2:77:a7:66:98:84:35:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=416E23E11DAA068885CEA8ECF4CB69A0E4F96D5A
Validity
Not Before: Sep 28 01:53:28 2026 GMT
Not After : Sep 27 01:58:28 2027 GMT
Subject: CN=AD36D64E6B2DF174C6896F05E1B3BD59C00A81FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:32:e3:a2:4c:1f:f3:c5:00:87:86:e1:1d:a7:
8d:27:c0:52:7e:8e:3a:56:16:a5:6c:af:18:cf:75:
17:02:02:a3:88:fa:12:83:37:71:51:65:24:b2:62:
69:b5:a1:4b:d7:30:10:bf:93:ec:4d:c5:ec:ae:45:
01:ff:88:db:a1:95:11:a3:53:48:5c:6c:aa:70:9d:
45:f4:36:a4:29:13:b9:38:b0:ec:51:d8:20:d8:6c:
84:59:98:4e:bd:bb:a9:fe:ec:64:59:98:7d:f0:c5:
fc:fa:8e:29:65:fe:c6:22:42:59:4b:74:7d:3e:78:
e8:3d:b3:fc:bb:f4:1b:9f:a0:59:5c:1e:a4:b8:8d:
0f:b7:c9:49:e4:b0:b0:af:8a:45:ef:ac:0b:4b:5d:
e2:ba:bf:b5:21:c7:3f:bf:ff:01:a0:63:93:48:36:
0a:86:95:9e:69:d2:99:3c:cf:6f:c9:18:26:ce:d6:
5e:37:31:5d:ea:ef:26:72:41:3c:c3:8d:52:4f:f4:
91:79:16:a3:25:1f:cf:98:d0:8e:6f:c5:8f:72:36:
af:e3:9b:a7:65:6a:e2:99:b0:9f:17:3c:f4:c9:a7:
5c:93:7d:9e:dc:1e:fc:93:12:0b:f8:ab:8e:a8:a4:
7d:dc:b3:51:d2:2d:cc:80:5c:b3:37:0d:d9:df:9c:
18:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:36:D6:4E:6B:2D:F1:74:C6:89:6F:05:E1:B3:BD:59:C0:0A:81:FC
X509v3 Authority Key Identifier:
keyid:41:6E:23:E1:1D:AA:06:88:85:CE:A8:EC:F4:CB:69:A0:E4:F9:6D:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DnkMv8bZgnXNnRyPi9wYft5uLsdxpJjVRCSauXsg6QSt/0/416E23E11DAA068885CEA8ECF4CB69A0E4F96D5A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416E23E11DAA068885CEA8ECF4CB69A0E4F96D5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnkMv8bZgnXNnRyPi9wYft5uLsdxpJjVRCSauXsg6QSt/0/3137372e3132342e3134372e302f32342d3234203d3e20323734353238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.124.147.0/24
Signature Algorithm: sha256WithRSAEncryption
44:50:93:d7:33:d1:fc:73:b2:0e:6a:e8:16:0a:f7:db:9d:34:
94:fe:22:28:d6:4f:58:32:64:b4:34:43:27:ec:a1:2a:f9:fd:
64:1a:07:5d:3d:f0:51:f9:76:0d:36:77:f1:19:00:a6:7d:01:
d5:f2:5d:3e:ac:ac:b9:ee:96:f8:5d:43:3f:33:a9:53:8e:a2:
34:b0:e9:e7:1e:19:40:18:d2:e4:ba:26:b5:96:65:73:65:c4:
7f:c9:86:e5:68:9b:6f:a3:4c:fa:34:ff:fc:c2:20:d7:9d:61:
21:44:c9:0d:28:4c:d0:1c:06:4b:0a:dc:a6:d2:ae:52:2c:e3:
2f:51:18:0a:7e:8a:f6:0c:0d:e4:29:d0:ad:f5:31:ef:7e:41:
2d:b8:7a:6f:8a:b7:27:c6:2e:fc:1c:1a:94:18:54:db:24:f0:
73:c0:41:6d:a7:c4:05:3f:b6:7a:7c:ce:2c:6c:10:49:52:14:
32:b6:bd:09:ff:80:20:a4:cf:cb:86:6d:62:16:eb:4f:bb:0e:
52:62:d9:94:fd:b5:25:bc:95:00:ef:91:5a:26:0f:37:c8:87:
9c:9f:62:12:0b:e1:b3:c8:4c:45:55:d4:43:f5:99:19:dc:61:
2a:7b:90:51:3d:f6:88:77:20:ee:9d:a8:7a:57:54:3f:7f:3e:
5f:24:4d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:16:36 2026 by rpki-client