
$ rpki-client -vvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3230312e34392e3232382e302f32322d3234203d3e20323634383836.roa
File: 3230312e34392e3232382e302f32322d3234203d3e20323634383836.roa (raw, json)
Hash identifier: RrfUxkIbBtqt5d4wQ3is1XkcQsAxja2abiQNgxHH+zE=
Subject key identifier: 0A:25:AB:82:A5:45:4F:8A:F0:7B:FF:1B:C5:FA:8E:3B:71:68:F7:6E
Certificate issuer: /CN=09B74F5AE0A9C9687059CF905757A70385D63DD2
Certificate serial: 677AC6AC1233FE5205A477FC7643325A86957987
Authority key identifier: 09:B7:4F:5A:E0:A9:C9:68:70:59:CF:90:57:57:A7:03:85:D6:3D:D2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3230312e34392e3232382e302f32322d3234203d3e20323634383836.roa
Signing time: Tue 28 Apr 2026 08:53:09 +0000
ROA not before: Tue 28 Apr 2026 08:48:09 +0000
ROA not after: Tue 27 Apr 2027 08:53:09 +0000
asID: 264886
IP address blocks: 201.49.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.crl
rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 14 May 2026 03:14:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:7a:c6:ac:12:33:fe:52:05:a4:77:fc:76:43:32:5a:86:95:79:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09B74F5AE0A9C9687059CF905757A70385D63DD2
Validity
Not Before: Apr 28 08:48:09 2026 GMT
Not After : Apr 27 08:53:09 2027 GMT
Subject: CN=0A25AB82A5454F8AF07BFF1BC5FA8E3B7168F76E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:49:cc:76:7e:56:b9:34:13:3d:c0:c5:b0:40:
00:2e:20:2d:bc:4f:cc:55:d3:de:07:02:ab:11:e5:
d4:92:2f:a0:8b:63:1a:57:73:bf:cd:4f:9d:81:8c:
21:df:4b:06:e4:b2:be:17:62:d8:1e:ad:84:8f:ab:
47:f1:76:f3:de:b4:67:64:2c:68:1a:23:bf:e4:42:
f6:cd:3e:21:25:81:df:26:cd:5d:72:58:c6:00:fe:
99:ff:56:ca:3e:95:cd:1d:55:fd:fd:0f:5e:85:71:
aa:a6:5a:d0:c0:4b:f5:2a:0f:31:92:ce:8d:db:d8:
0c:74:95:d9:d0:fd:97:0a:d9:6e:7f:97:86:8d:d5:
48:34:91:45:69:7b:ec:26:c1:73:2b:a0:a4:54:65:
28:f6:82:6d:d2:a1:04:30:94:48:19:05:8a:17:81:
6d:3e:61:eb:cb:8f:c9:41:33:a5:7a:cb:d9:2b:93:
05:a8:3d:35:4f:3a:dc:80:f3:41:f1:b9:7f:b9:ac:
be:a0:b2:17:e1:40:bf:03:6d:38:fc:d7:e2:01:36:
1f:be:9a:6e:76:db:d2:ba:ae:4d:e6:c6:dd:bb:2a:
2e:bd:fa:99:52:1a:e0:c6:b2:e4:89:72:5d:dc:49:
da:b4:e7:b0:fe:77:fd:5a:27:b5:39:27:f4:18:04:
d1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:25:AB:82:A5:45:4F:8A:F0:7B:FF:1B:C5:FA:8E:3B:71:68:F7:6E
X509v3 Authority Key Identifier:
keyid:09:B7:4F:5A:E0:A9:C9:68:70:59:CF:90:57:57:A7:03:85:D6:3D:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3230312e34392e3232382e302f32322d3234203d3e20323634383836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.49.228.0/22
Signature Algorithm: sha256WithRSAEncryption
71:00:f2:06:eb:66:f3:28:64:d5:74:38:b7:63:4d:9c:4e:0c:
ee:7c:0f:b9:5d:8f:13:d1:9f:ca:82:d7:2f:c1:2f:1b:48:3a:
85:53:dd:2e:70:18:56:f6:b9:4f:5a:8e:7b:63:de:ea:58:39:
32:95:53:64:c9:a1:1b:cc:89:42:dd:41:e9:93:0f:8d:46:3f:
90:aa:68:29:47:d0:32:9d:d6:9d:6b:c7:fe:93:16:d6:01:56:
17:82:d0:75:a8:97:29:54:56:71:d9:5d:5a:41:b8:9d:a8:a5:
04:0a:60:f5:ab:90:90:d4:b6:de:cf:04:b3:aa:61:9e:b8:d5:
41:f6:d0:db:27:39:1e:22:6b:13:19:23:16:e2:dd:24:1b:c8:
f8:38:ad:70:22:2c:73:dd:84:a4:3c:d5:cb:f0:63:f2:5c:bd:
2b:22:ec:98:59:83:0a:9d:11:ca:fb:39:fb:6a:1d:6c:64:41:
2c:20:9a:bf:e9:c7:10:7b:9b:69:f4:55:03:9c:2a:bb:a8:d7:
8e:96:63:dd:ea:e0:f8:ff:f9:3b:81:4b:35:bc:c4:53:8c:6f:
4d:85:0b:f5:59:05:cb:91:fe:b8:c1:f8:78:cd:aa:63:c0:52:
95:9d:77:fc:d4:d5:01:a0:6d:c7:a2:ed:7c:a9:fc:b7:a0:62:
53:e0:8f:58
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUZ3rGrBIz/lIFpHf8dkMyWoaVeYcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDlCNzRGNUFFMEE5Qzk2ODcwNTlDRjkwNTc1N0E3MDM4
NUQ2M0REMjAeFw0yNjA0MjgwODQ4MDlaFw0yNzA0MjcwODUzMDlaMDMxMTAvBgNV
BAMTKDBBMjVBQjgyQTU0NTRGOEFGMDdCRkYxQkM1RkE4RTNCNzE2OEY3NkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGScx2fla5NBM9wMWwQAAuIC28
T8xV094HAqsR5dSSL6CLYxpXc7/NT52BjCHfSwbksr4XYtgerYSPq0fxdvPetGdk
LGgaI7/kQvbNPiElgd8mzV1yWMYA/pn/Vso+lc0dVf39D16FcaqmWtDAS/UqDzGS
zo3b2Ax0ldnQ/ZcK2W5/l4aN1Ug0kUVpe+wmwXMroKRUZSj2gm3SoQQwlEgZBYoX
gW0+YevLj8lBM6V6y9krkwWoPTVPOtyA80HxuX+5rL6gshfhQL8DbTj81+IBNh++
mm5229K6rk3mxt27Ki69+plSGuDGsuSJcl3cSdq057D+d/1aJ7U5J/QYBNGpAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUCiWrgqVFT4rwe/8bxfqOO3Fo924wHwYDVR0j
BBgwFoAUCbdPWuCpyWhwWc+QV1enA4XWPdIwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9hZlhGTWtReXBKamFTYVV6dDNFUVFvSk5jVnV6aGhtZEJOdTFXNFhFbzNp
LzAvMDlCNzRGNUFFMEE5Qzk2ODcwNTlDRjkwNTc1N0E3MDM4NUQ2M0REMi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8wOUI3NEY1QUUwQTlDOTY4NzA1
OUNGOTA1NzU3QTcwMzg1RDYzREQyLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9h
ZlhGTWtReXBKamFTYVV6dDNFUVFvSk5jVnV6aGhtZEJOdTFXNFhFbzNpLzAvMzIz
MDMxMmUzNDM5MmUzMjMyMzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzQz
ODM4MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBALJMeQwDQYJKoZIhvcNAQELBQADggEBAHEA8gbrZvMo
ZNV0OLdjTZxODO58D7ldjxPRn8qC1y/BLxtIOoVT3S5wGFb2uU9ajntj3upYOTKV
U2TJoRvMiULdQemTD41GP5CqaClH0DKd1p1rx/6TFtYBVheC0HWolylUVnHZXVpB
uJ2opQQKYPWrkJDUtt7PBLOqYZ641UH20NsnOR4iaxMZIxbi3SQbyPg4rXAiLHPd
hKQ81cvwY/JcvSsi7JhZgwqdEcr7OftqHWxkQSwgmr/pxxB7m2n0VQOcKruo146W
Y93q4Pj/+TuBSzW8xFOMb02FC/VZBcuR/rjB+HjNqmPAUpWdd/zU1QGgbcei7Xyp
/LegYlPgj1g=
-----END CERTIFICATE-----
Generated at Wed May 13 16:43:51 2026 by rpki-client