
$ rpki-client -vvf rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/3137302e3135302e3233362e302f32322d3234203d3e203533303632.roa
File: 3137302e3135302e3233362e302f32322d3234203d3e203533303632.roa (raw, json)
Hash identifier: ekDRl+lTBiVLObWuJw3M5cfQZE5UgLXBX1jn74+0ifE=
Subject key identifier: 1B:7B:E7:8E:D7:86:C6:B2:9A:D1:CB:8C:C8:CE:7E:B6:1E:66:CA:57
Certificate issuer: /CN=D23A9AB74382168B4B0E0F5772B4F25A461F8B60
Certificate serial: 42BBE9C0744A88C8FB3D1BBD2328BDBDDC02FF03
Authority key identifier: D2:3A:9A:B7:43:82:16:8B:4B:0E:0F:57:72:B4:F2:5A:46:1F:8B:60
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23A9AB74382168B4B0E0F5772B4F25A461F8B60.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/3137302e3135302e3233362e302f32322d3234203d3e203533303632.roa
Signing time: Mon 02 Mar 2026 20:34:36 +0000
ROA not before: Mon 02 Mar 2026 20:29:36 +0000
ROA not after: Mon 01 Mar 2027 20:34:36 +0000
asID: 53062
IP address blocks: 170.150.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/D23A9AB74382168B4B0E0F5772B4F25A461F8B60.crl
rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/D23A9AB74382168B4B0E0F5772B4F25A461F8B60.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23A9AB74382168B4B0E0F5772B4F25A461F8B60.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 13:08:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:bb:e9:c0:74:4a:88:c8:fb:3d:1b:bd:23:28:bd:bd:dc:02:ff:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D23A9AB74382168B4B0E0F5772B4F25A461F8B60
Validity
Not Before: Mar 2 20:29:36 2026 GMT
Not After : Mar 1 20:34:36 2027 GMT
Subject: CN=1B7BE78ED786C6B29AD1CB8CC8CE7EB61E66CA57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e2:c1:4a:cd:6b:b5:3b:50:a8:4f:e4:1f:0f:
a7:bb:c8:99:6c:79:a1:26:82:a5:43:5c:d2:49:78:
1a:83:05:8f:fc:3c:0b:45:01:db:f9:1e:7c:9f:c4:
9c:cd:4b:e5:3b:fb:7d:46:6a:7c:b8:c2:dd:f4:c9:
c8:bd:12:10:ed:e7:9e:0f:c1:09:8c:bb:37:bc:50:
fc:ca:a5:02:9e:69:a3:26:1c:a9:2a:64:fa:94:9d:
71:b5:e0:75:19:bc:66:31:c8:fa:e5:af:bb:47:3a:
bc:e0:bb:41:e1:79:4b:15:67:c2:ea:8e:15:07:77:
d1:6d:15:ef:28:cc:58:82:a1:e4:3a:31:2a:06:36:
5e:45:05:ce:ba:2c:27:44:18:1e:bc:1b:f9:18:d9:
9b:b4:cb:b7:a8:c4:22:21:a6:91:6f:62:e5:11:be:
d0:0d:aa:79:42:81:02:c6:07:37:c9:20:dd:d9:b9:
98:ee:ad:4d:2f:d7:ac:98:35:ec:f9:68:96:3c:c7:
50:fd:27:6c:d8:01:b8:ab:b0:d2:fb:67:21:36:63:
f9:65:1a:00:4c:f4:83:52:0b:db:5e:9d:23:f9:6e:
1d:60:6e:ac:ff:00:bf:7c:37:5d:95:12:3b:bc:ff:
17:79:4d:a8:b8:11:5f:fa:08:a1:30:8a:5a:fc:7e:
4e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:7B:E7:8E:D7:86:C6:B2:9A:D1:CB:8C:C8:CE:7E:B6:1E:66:CA:57
X509v3 Authority Key Identifier:
keyid:D2:3A:9A:B7:43:82:16:8B:4B:0E:0F:57:72:B4:F2:5A:46:1F:8B:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/D23A9AB74382168B4B0E0F5772B4F25A461F8B60.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23A9AB74382168B4B0E0F5772B4F25A461F8B60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/3137302e3135302e3233362e302f32322d3234203d3e203533303632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.150.236.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:35:88:9f:e5:0a:40:1d:3e:da:1a:f5:9d:91:e7:95:2b:ce:
1f:b8:37:9e:f6:96:5c:2a:08:c4:db:d8:52:42:bf:b4:f0:d5:
ec:2e:6b:62:1f:fc:42:6f:17:67:07:31:c2:b8:09:2a:69:8e:
72:c8:a6:ed:5d:71:20:6e:fe:48:b5:aa:35:de:c7:0d:f2:b0:
ee:02:eb:a1:65:b5:d7:57:d5:f9:fd:eb:cb:42:7e:22:0a:11:
6d:ee:8c:c6:9e:6a:49:b3:13:f7:18:fa:bd:6e:f4:61:66:ad:
63:dc:4b:b4:54:06:46:e4:d3:ed:6b:b7:cd:0b:31:cb:aa:a8:
f5:1a:66:8f:75:81:04:bd:d1:3e:04:d7:b1:4e:10:e7:bd:21:
35:d0:ca:ab:be:6c:2e:17:24:3a:a6:bd:31:3f:4f:c7:da:13:
a2:a6:f6:6a:3f:26:c8:25:79:a9:ac:01:11:09:ae:0a:5f:bf:
50:b3:42:01:dc:8d:53:28:0e:7e:7f:e6:e5:3a:32:63:a4:00:
f8:e4:d3:e6:10:b2:4e:91:18:bd:ae:8b:9b:f3:0e:2d:fa:d4:
91:45:1a:81:07:14:ec:c0:5e:16:4f:d8:98:af:5d:37:cd:55:
73:57:7d:f0:a7:1f:c6:ce:16:e6:7c:8f:7b:c6:eb:c7:a3:ea:
bd:c9:09:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:03:14 2026 by rpki-client