
$ rpki-client -vvf rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3137302e3234372e3230302e302f32322d3332203d3e20323633323536.roa
File: 3137302e3234372e3230302e302f32322d3332203d3e20323633323536.roa (raw, json)
Hash identifier: aJmS2FoAD0YPSengMGVV6F7EHffuke/LZY7SEZA4IQk=
Subject key identifier: 05:97:61:59:FA:97:74:54:B6:45:B6:6A:B3:C2:16:BA:90:38:33:B2
Certificate issuer: /CN=2A568038CCEEBFB8EF04CB47D39831AC6B1F4E42
Certificate serial: 06F4D13939E4EC4F9BC4016D7050EEA902A78C6E
Authority key identifier: 2A:56:80:38:CC:EE:BF:B8:EF:04:CB:47:D3:98:31:AC:6B:1F:4E:42
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A568038CCEEBFB8EF04CB47D39831AC6B1F4E42.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3137302e3234372e3230302e302f32322d3332203d3e20323633323536.roa
Signing time: Fri 10 Jul 2026 14:39:59 +0000
ROA not before: Fri 10 Jul 2026 14:34:59 +0000
ROA not after: Fri 09 Jul 2027 14:39:59 +0000
asID: 263256
IP address blocks: 170.247.200.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/2A568038CCEEBFB8EF04CB47D39831AC6B1F4E42.crl
rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/2A568038CCEEBFB8EF04CB47D39831AC6B1F4E42.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A568038CCEEBFB8EF04CB47D39831AC6B1F4E42.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 25 Jul 2026 11:58:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:f4:d1:39:39:e4:ec:4f:9b:c4:01:6d:70:50:ee:a9:02:a7:8c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A568038CCEEBFB8EF04CB47D39831AC6B1F4E42
Validity
Not Before: Jul 10 14:34:59 2026 GMT
Not After : Jul 9 14:39:59 2027 GMT
Subject: CN=05976159FA977454B645B66AB3C216BA903833B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:db:f4:72:33:2a:82:6e:22:cf:84:75:d9:61:
5e:09:9b:e0:24:c5:f2:5a:d8:7c:a8:76:c8:db:0d:
d5:cd:87:73:63:31:3a:cd:8c:f1:57:a2:f2:a1:74:
0b:5a:90:d1:a7:e3:16:54:94:45:e7:e5:92:e5:69:
7e:0a:f1:85:3f:15:9d:45:ce:a2:f0:2e:64:69:81:
b6:0e:e4:4c:7f:72:90:a5:6b:54:7f:73:4f:bc:95:
7c:da:f7:4e:b3:db:92:bc:79:0a:58:6f:c8:d4:fa:
6d:1b:04:8c:ee:70:57:c3:9c:35:ae:1b:6e:00:c7:
ea:1b:2c:ac:fc:80:d5:99:22:26:60:56:60:55:98:
44:76:5b:94:bd:a6:a8:33:0f:fc:e2:1d:e8:ce:16:
38:1e:47:48:48:5c:14:8c:4a:fe:fe:d3:90:20:30:
c5:7a:4b:3c:a9:22:27:3c:a3:64:f1:68:c7:26:20:
9a:b0:54:9b:f1:92:ac:00:a0:63:8d:a9:29:3e:8c:
b2:d0:e3:34:71:e2:50:17:b1:97:ba:50:b2:0e:37:
84:59:3a:17:03:9f:f2:8f:07:85:cc:4a:ff:63:cb:
19:27:1a:ac:01:63:4f:14:40:c8:9e:19:38:21:a9:
a5:5b:e8:3a:3a:22:3f:eb:a8:63:4a:cf:48:b0:9c:
73:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:97:61:59:FA:97:74:54:B6:45:B6:6A:B3:C2:16:BA:90:38:33:B2
X509v3 Authority Key Identifier:
keyid:2A:56:80:38:CC:EE:BF:B8:EF:04:CB:47:D3:98:31:AC:6B:1F:4E:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/2A568038CCEEBFB8EF04CB47D39831AC6B1F4E42.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A568038CCEEBFB8EF04CB47D39831AC6B1F4E42.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3137302e3234372e3230302e302f32322d3332203d3e20323633323536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.247.200.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:8a:cb:e6:23:29:23:74:67:90:b7:0c:60:5d:bf:8d:a9:2b:
1e:d3:dd:b0:ad:55:49:a0:e9:6a:59:20:68:4e:97:b4:fd:11:
9b:28:5c:2e:bd:c4:bb:40:f1:33:f7:81:a3:02:39:c4:3d:20:
ba:9e:fa:77:83:94:20:4f:40:a4:e9:dc:e5:e1:10:90:0c:8c:
c7:0e:c1:d8:ef:45:1b:35:b3:db:05:c6:c4:bc:2a:43:eb:19:
15:e9:d3:fe:cd:62:75:8e:fc:9e:bb:cb:e2:bc:fa:b5:80:fa:
1f:af:c6:6e:da:cc:9d:83:16:56:93:d5:11:9c:7d:d4:fd:26:
28:04:b3:4a:12:f3:d3:11:83:7b:72:c4:b7:d8:a2:9a:f2:8d:
5f:cb:ef:cd:73:20:0f:00:cd:9a:2f:92:6c:3b:38:d9:35:fc:
f4:e9:6d:d7:69:63:3b:52:e2:9b:df:2d:1f:d7:28:45:62:51:
39:ab:9e:4b:7b:7d:1d:03:40:fa:b7:03:b5:75:5e:5d:42:61:
d7:6c:16:01:2e:82:1a:20:65:c4:63:cd:ac:04:f8:13:6d:41:
f0:ca:9a:1f:e9:a5:2a:7e:81:73:37:69:a9:71:7d:c8:d4:50:
86:02:68:dc:8f:5b:f9:72:c6:aa:7e:a3:1f:c3:cf:aa:b9:48:
13:e6:02:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:20:58 2026 by rpki-client