
$ rpki-client -vvvf rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/0/3139302e38392e34382e302f32322d3234203d3e20323730333535.roa
File: 3139302e38392e34382e302f32322d3234203d3e20323730333535.roa (raw, json)
Hash identifier: VLcY8r4J4ju8VVKasdizHQDIl4NocFT/O+oGwj77aqQ=
Subject key identifier: 21:BE:CB:4E:5B:6E:33:BD:B1:01:31:15:24:CE:B4:07:39:6A:60:A9
Certificate issuer: /CN=BB451E652135E3F5AE640385552DFD8E3DF60B7A
Certificate serial: 6641AB66514D7664256025EACEAC2126659368D9
Authority key identifier: BB:45:1E:65:21:35:E3:F5:AE:64:03:85:55:2D:FD:8E:3D:F6:0B:7A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB451E652135E3F5AE640385552DFD8E3DF60B7A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/0/3139302e38392e34382e302f32322d3234203d3e20323730333535.roa
Signing time: Tue 01 Sep 2026 22:05:00 +0000
ROA not before: Tue 01 Sep 2026 22:00:00 +0000
ROA not after: Tue 31 Aug 2027 22:05:00 +0000
asID: 270355
IP address blocks: 190.89.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/0/BB451E652135E3F5AE640385552DFD8E3DF60B7A.crl
rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/0/BB451E652135E3F5AE640385552DFD8E3DF60B7A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB451E652135E3F5AE640385552DFD8E3DF60B7A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 05 Sep 2026 04:39:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:41:ab:66:51:4d:76:64:25:60:25:ea:ce:ac:21:26:65:93:68:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BB451E652135E3F5AE640385552DFD8E3DF60B7A
Validity
Not Before: Sep 1 22:00:00 2026 GMT
Not After : Aug 31 22:05:00 2027 GMT
Subject: CN=21BECB4E5B6E33BDB101311524CEB407396A60A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b6:5b:cb:6d:7e:39:c5:27:6e:83:d0:89:39:
f6:0c:e4:2c:25:9b:ac:c0:03:dc:c7:c0:76:c8:3d:
87:28:39:09:92:4b:eb:e4:4f:b1:b6:79:66:08:ac:
d0:94:fb:a6:c2:ef:1a:13:9c:9a:85:ce:ef:5d:22:
6c:33:e6:43:e2:32:d9:c0:c5:86:c8:26:91:d5:81:
a8:c8:56:85:5d:97:fe:16:ee:70:d9:76:9f:a4:97:
18:29:74:29:a5:57:bf:f3:3b:98:7d:d5:0c:ee:2f:
ad:9c:3d:eb:c9:8a:28:f8:8c:15:a0:30:a6:cc:57:
7c:12:06:95:81:af:71:c6:6c:7a:e8:03:66:14:bf:
c6:9a:be:b8:0c:21:e6:06:d2:b8:61:5f:59:b7:ac:
89:fe:e5:55:09:0c:26:1b:3b:31:2e:40:57:4a:3d:
d6:de:f6:77:15:15:5c:1a:9b:93:13:29:ad:37:83:
d6:b5:5d:76:ca:cf:ec:86:9b:fc:05:24:f8:ad:4a:
b5:8b:1f:25:7d:19:60:50:67:3b:a4:dc:5a:f6:d3:
26:9b:ba:90:a0:fd:d8:f9:4f:0a:b9:f5:b9:b8:e0:
a8:ec:49:52:2a:ab:29:af:3e:00:07:a0:79:bc:f8:
ef:bc:cd:17:a3:25:82:b1:df:cc:8b:e7:01:bf:1c:
25:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BE:CB:4E:5B:6E:33:BD:B1:01:31:15:24:CE:B4:07:39:6A:60:A9
X509v3 Authority Key Identifier:
keyid:BB:45:1E:65:21:35:E3:F5:AE:64:03:85:55:2D:FD:8E:3D:F6:0B:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/0/BB451E652135E3F5AE640385552DFD8E3DF60B7A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB451E652135E3F5AE640385552DFD8E3DF60B7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/0/3139302e38392e34382e302f32322d3234203d3e20323730333535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.89.48.0/22
Signature Algorithm: sha256WithRSAEncryption
af:6e:cc:ee:3e:ae:36:c3:a6:b1:69:41:26:14:72:aa:46:9f:
e8:1b:4e:e4:4d:5e:3d:e4:03:1d:2e:08:2a:4e:4b:9f:a0:62:
84:39:bc:d9:ec:a8:d0:7f:d3:5c:4f:82:4b:ef:b1:71:16:ca:
d5:a3:79:a9:d5:15:ad:a6:4a:01:6d:c9:7b:6b:fd:29:d7:2f:
60:c8:78:4c:b3:6e:55:d2:60:5c:7d:34:35:81:a5:2d:c9:c4:
1f:82:90:91:56:1c:8c:51:1f:fc:7c:87:d9:a3:23:e6:76:43:
67:17:a5:b6:de:ec:d3:5b:0e:81:9d:1c:cb:76:9c:5b:d0:bc:
9f:49:ca:08:06:5f:8e:a7:1a:a3:b6:14:2c:13:07:e2:99:9a:
1c:2f:c7:58:9f:50:07:71:1a:60:db:e7:95:5f:b0:b7:11:22:
6a:40:7a:de:95:b7:5c:b5:cb:fd:ae:9d:58:22:fe:01:27:3c:
f9:71:15:60:95:d4:dc:46:c5:f7:b9:b0:83:48:6e:06:d5:2d:
5b:0b:f9:95:aa:c9:07:aa:a5:7d:ba:53:7e:ef:54:8e:03:e9:
d0:09:6a:35:eb:9e:17:6b:d3:7e:b9:4a:93:ea:1f:ba:36:4e:
1c:48:0c:5f:da:3b:9e:3f:1d:ee:40:ff:38:96:4e:1d:9f:9b:
49:4a:45:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:26:17 2026 by rpki-client