
$ rpki-client -vvf rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/3230312e32302e3134342e302f32302d3233203d3e203238363035.roa
File: 3230312e32302e3134342e302f32302d3233203d3e203238363035.roa (raw, json)
Hash identifier: IdAym9UBULQqoj4+orcKempf3uq8nr7rmgu9vyyIQuE=
Subject key identifier: 9A:3E:7A:DA:B1:A5:8B:0A:B9:CA:40:C8:14:15:20:BC:35:0C:F3:03
Certificate issuer: /CN=53D94339029316790411C8AF7BC622996BF230A8
Certificate serial: 34B50F89B0EED28AEDD624BDB8454778E0F923E2
Authority key identifier: 53:D9:43:39:02:93:16:79:04:11:C8:AF:7B:C6:22:99:6B:F2:30:A8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53D94339029316790411C8AF7BC622996BF230A8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/3230312e32302e3134342e302f32302d3233203d3e203238363035.roa
Signing time: Mon 06 Apr 2026 12:48:31 +0000
ROA not before: Mon 06 Apr 2026 12:43:31 +0000
ROA not after: Mon 05 Apr 2027 12:48:31 +0000
asID: 28605
IP address blocks: 201.20.144.0/20 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/53D94339029316790411C8AF7BC622996BF230A8.crl
rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/53D94339029316790411C8AF7BC622996BF230A8.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53D94339029316790411C8AF7BC622996BF230A8.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 09 Apr 2026 03:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:b5:0f:89:b0:ee:d2:8a:ed:d6:24:bd:b8:45:47:78:e0:f9:23:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53D94339029316790411C8AF7BC622996BF230A8
Validity
Not Before: Apr 6 12:43:31 2026 GMT
Not After : Apr 5 12:48:31 2027 GMT
Subject: CN=9A3E7ADAB1A58B0AB9CA40C8141520BC350CF303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8e:8a:d3:2d:e9:19:9a:b9:7f:49:8a:03:d8:
fa:18:9a:71:f9:0a:54:21:28:2d:00:b8:40:a7:d2:
6d:2a:46:6b:d8:1a:39:b2:5c:a8:14:ad:14:04:ab:
e3:d0:14:17:1b:29:df:4b:b6:57:a9:cf:6c:c7:3b:
f5:9f:2f:c2:6d:cc:a9:84:be:a5:5e:5b:c4:45:d0:
82:1e:0a:bd:49:ed:1f:52:fe:7c:28:01:0a:91:d2:
26:36:3f:c2:2a:a6:33:1a:25:63:5f:f1:9b:03:22:
6b:ab:cc:0a:84:ce:65:05:af:65:18:5a:73:66:bf:
e5:7a:b4:a1:f8:4b:e4:f8:49:63:ca:88:e6:fe:4d:
64:e9:cf:55:1c:d0:55:c9:35:19:79:68:e0:17:a3:
0c:d8:89:e0:40:95:42:2c:1b:b0:07:95:64:4d:dd:
c7:a9:25:72:71:ea:b6:44:e1:ab:86:e5:53:b0:92:
ac:d5:56:ac:9c:e0:1c:b6:be:43:f9:09:cf:86:ec:
dc:bf:c1:5a:48:a7:47:90:e5:bd:83:d5:83:56:fa:
f2:92:69:1d:e0:c0:e6:d5:7e:a6:25:7f:03:24:08:
93:1c:99:a4:23:51:f1:fb:f2:b4:51:8b:df:2a:85:
85:c0:f1:d6:e9:0d:c9:a6:47:b8:2e:bc:24:b6:18:
4d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:3E:7A:DA:B1:A5:8B:0A:B9:CA:40:C8:14:15:20:BC:35:0C:F3:03
X509v3 Authority Key Identifier:
keyid:53:D9:43:39:02:93:16:79:04:11:C8:AF:7B:C6:22:99:6B:F2:30:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/53D94339029316790411C8AF7BC622996BF230A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53D94339029316790411C8AF7BC622996BF230A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/3230312e32302e3134342e302f32302d3233203d3e203238363035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.20.144.0/20
Signature Algorithm: sha256WithRSAEncryption
4d:ca:a0:be:dc:a5:53:fb:f2:49:53:a8:d3:f5:79:36:32:4e:
24:f3:e9:9a:c5:15:44:c1:c7:d1:65:fc:ba:79:c9:04:9a:c4:
95:91:fe:83:b7:15:a5:f2:78:fa:dc:70:68:c5:13:8f:d4:17:
58:2f:87:2a:1d:a0:09:49:5d:93:1b:61:c8:2d:6b:a6:71:67:
e0:23:ce:44:5b:d5:46:71:f6:f0:e0:e6:be:10:3f:f2:55:c6:
cc:a7:eb:f1:5c:48:f7:ff:d4:af:3a:79:89:bd:dd:9f:c0:79:
8d:f1:88:ea:d9:fb:39:f3:b0:b2:a0:6c:f3:27:f5:32:89:8d:
38:0f:fa:78:20:06:b3:71:bb:4b:e7:f0:41:bf:42:e7:71:17:
8f:fe:59:bd:ec:ca:a1:94:2a:ae:3f:3c:98:87:5f:96:91:13:
90:de:07:79:16:20:39:f8:b1:d0:d5:2f:51:96:5e:85:56:4b:
17:98:0c:4f:37:2d:1f:c5:28:5b:6d:08:bf:55:fb:05:f4:db:
96:59:c2:fa:0f:52:2a:f4:c1:fa:5c:75:9d:99:51:7a:a2:3c:
28:93:50:6e:34:1d:9d:14:c6:05:b6:ac:66:0b:22:8b:f2:95:
40:2c:56:0c:cd:39:88:d2:16:8e:3f:4e:e4:d9:dc:0f:3d:01:
25:c3:81:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 09:15:45 2026 by rpki-client