
$ rpki-client -vvf rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/3133322e3235352e3232302e302f32322d3234203d3e20323632393738.roa
File: 3133322e3235352e3232302e302f32322d3234203d3e20323632393738.roa (raw, json)
Hash identifier: VmuBnMFgi/UWyab31GAqluHW+38hF+2SBzsSNNIkRmk=
Subject key identifier: 4D:C7:23:01:09:7B:E8:DB:11:CA:1C:59:8A:BE:DD:55:20:1E:AB:24
Certificate issuer: /CN=9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41
Certificate serial: 09F4C7035502931401747A0740BBC5381508FF6D
Authority key identifier: 9B:83:28:18:9A:0C:FF:53:E9:ED:3A:2F:20:7F:FB:B9:CA:E6:1A:41
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/3133322e3235352e3232302e302f32322d3234203d3e20323632393738.roa
Signing time: Thu 02 Apr 2026 04:18:18 +0000
ROA not before: Thu 02 Apr 2026 04:13:18 +0000
ROA not after: Thu 01 Apr 2027 04:18:18 +0000
asID: 262978
IP address blocks: 132.255.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.crl
rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 09 Apr 2026 05:23:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:f4:c7:03:55:02:93:14:01:74:7a:07:40:bb:c5:38:15:08:ff:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41
Validity
Not Before: Apr 2 04:13:18 2026 GMT
Not After : Apr 1 04:18:18 2027 GMT
Subject: CN=4DC72301097BE8DB11CA1C598ABEDD55201EAB24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7d:f8:3f:5c:6a:6f:0a:2e:98:56:b5:70:da:
1b:bb:14:f8:7a:b1:bf:bf:45:ce:6a:c1:9b:8b:e0:
30:af:b6:14:66:ac:fc:62:eb:66:84:bf:a8:fa:73:
68:48:f7:a7:d0:14:a7:f9:1f:54:98:39:e2:3c:1f:
a0:d2:8e:a7:17:76:11:e4:ff:a2:aa:ef:32:de:c7:
e1:cc:c6:31:08:58:e3:40:d6:46:d1:ca:a4:04:ba:
c8:dc:62:fc:7c:c3:3f:bc:1b:76:19:8e:0a:42:bd:
60:23:b3:50:d5:19:4f:fe:d3:26:af:57:4c:b3:43:
76:03:0d:da:87:61:c8:17:86:6c:8a:ce:3a:4f:ae:
68:cc:91:bf:dd:50:80:1e:e2:08:c0:bb:64:84:fd:
0e:38:a5:b6:2b:9d:60:5b:3c:22:fa:59:1c:eb:80:
38:ba:eb:3c:59:e7:39:95:34:48:1c:ac:84:d0:40:
a2:a1:7e:d0:b4:76:a4:04:b5:bc:e9:f1:25:95:33:
b2:22:cf:25:7f:0f:9c:b2:f4:c0:fc:dd:b3:73:8e:
72:38:c2:ad:18:46:3e:80:52:7a:60:f0:59:98:c5:
e9:b7:25:18:28:28:c2:09:e5:16:21:6f:33:0d:97:
57:f9:0d:e7:4f:91:4f:31:b1:1b:d1:cb:e0:b1:01:
d8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C7:23:01:09:7B:E8:DB:11:CA:1C:59:8A:BE:DD:55:20:1E:AB:24
X509v3 Authority Key Identifier:
keyid:9B:83:28:18:9A:0C:FF:53:E9:ED:3A:2F:20:7F:FB:B9:CA:E6:1A:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/3133322e3235352e3232302e302f32322d3234203d3e20323632393738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.255.220.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:1b:5a:da:23:bc:c5:e6:62:0e:d5:72:6e:5e:f5:db:81:21:
55:87:d0:ac:e1:58:e4:10:91:63:ba:65:8e:06:b9:b2:60:6a:
2b:14:f8:fc:e2:6d:22:41:a0:22:13:08:fe:0b:e1:a0:f5:a7:
83:ae:2c:ed:de:d2:48:00:8b:64:87:a5:67:83:85:12:cf:26:
8a:13:4b:e0:2c:dc:11:8f:09:3d:33:dd:0c:40:44:bf:10:11:
77:b8:f7:c4:77:ad:7d:27:d0:ae:c7:3f:b1:6a:7d:95:8a:a4:
b1:9d:87:c9:6c:c8:a0:0c:b2:26:c4:1d:56:a4:ae:61:ad:f1:
68:87:dd:3c:0f:a3:80:c2:15:b9:2a:9b:6e:dc:f9:04:3d:d1:
dc:e5:98:8b:0c:76:ed:f6:86:d4:8c:2d:d4:52:01:db:42:b3:
d2:cb:64:44:57:c3:54:e3:77:fd:48:a0:9d:17:2a:c9:6f:62:
d6:14:75:1b:2a:b0:7d:7c:36:36:a6:70:a1:66:c6:2a:e2:14:
4d:68:4d:77:54:8f:9f:ca:ed:4b:c4:18:8e:18:6e:de:27:7b:
c1:da:f1:8a:e6:84:6a:96:5f:d5:62:54:55:ae:9a:94:22:6b:
59:29:7a:a7:96:04:65:99:8d:1b:56:05:67:af:1f:79:7a:cb:
3b:aa:7e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 10:47:46 2026 by rpki-client