
$ rpki-client -vvvf rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3137302e3235342e3138352e302f32342d3234203d3e20323632333639.roa
File: 3137302e3235342e3138352e302f32342d3234203d3e20323632333639.roa (raw, json)
Hash identifier: bu6C+kP7XWQ8MIGqfMW1vm7vdnqLauOcEC1bJlGPycE=
Subject key identifier: BC:2F:3D:90:88:98:6F:30:93:A9:D3:D8:00:81:CE:A7:F7:12:64:66
Certificate issuer: /CN=870BEA059ABEEBC1F544EA1F3FA635CF72A84657
Certificate serial: 58B04AEB345A93F3427349331777D91415B8DED4
Authority key identifier: 87:0B:EA:05:9A:BE:EB:C1:F5:44:EA:1F:3F:A6:35:CF:72:A8:46:57
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3137302e3235342e3138352e302f32342d3234203d3e20323632333639.roa
Signing time: Fri 28 Aug 2026 19:06:27 +0000
ROA not before: Fri 28 Aug 2026 19:01:27 +0000
ROA not after: Fri 27 Aug 2027 19:06:27 +0000
asID: 262369
IP address blocks: 170.254.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.crl
rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 05 Sep 2026 01:03:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:b0:4a:eb:34:5a:93:f3:42:73:49:33:17:77:d9:14:15:b8:de:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870BEA059ABEEBC1F544EA1F3FA635CF72A84657
Validity
Not Before: Aug 28 19:01:27 2026 GMT
Not After : Aug 27 19:06:27 2027 GMT
Subject: CN=BC2F3D9088986F3093A9D3D80081CEA7F7126466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ed:ce:d8:f4:7e:cd:bf:9b:2e:8e:3c:1d:14:
7c:54:1b:d9:09:ba:4a:ab:8e:fb:4d:11:e7:44:da:
e7:31:82:a1:a9:e5:ea:12:c0:7d:b9:c8:1e:66:df:
ee:ee:bb:ef:13:46:6a:7c:09:40:2f:95:e7:e7:34:
a3:b7:f7:4d:a5:79:d6:5d:1d:cf:d7:fa:aa:24:24:
5e:c8:46:cb:44:86:0b:7b:c3:0d:fe:a8:8e:d6:71:
48:8b:6d:ef:72:aa:f7:39:c2:d4:f2:96:da:b3:c9:
3f:57:8b:e6:fb:75:9b:5a:94:be:03:ea:7b:38:13:
10:cc:5c:de:7a:b7:f2:8d:3b:08:2c:fb:3d:27:50:
b4:a1:0a:fb:69:43:bc:06:7c:97:29:f8:e2:7e:c0:
1b:6a:71:ea:f3:6f:dd:0a:58:b1:44:33:d7:93:26:
d4:1c:21:96:ce:26:27:42:54:82:22:2e:eb:13:8a:
c2:76:fb:47:5f:d8:11:22:e0:06:6e:56:6e:ae:7d:
20:e4:da:28:54:5b:c4:1f:36:1f:e9:88:2e:1a:a6:
87:50:cc:f6:ae:d3:54:c2:ec:64:34:05:9f:a2:9c:
13:5d:bc:76:07:04:e7:39:b9:3c:de:2e:ea:f9:ab:
dc:96:96:e0:02:22:f6:0e:98:09:3e:75:18:97:ed:
3e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:2F:3D:90:88:98:6F:30:93:A9:D3:D8:00:81:CE:A7:F7:12:64:66
X509v3 Authority Key Identifier:
keyid:87:0B:EA:05:9A:BE:EB:C1:F5:44:EA:1F:3F:A6:35:CF:72:A8:46:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3137302e3235342e3138352e302f32342d3234203d3e20323632333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.254.185.0/24
Signature Algorithm: sha256WithRSAEncryption
61:64:b9:f2:db:99:20:13:83:ea:51:09:20:a9:52:25:b2:f7:
51:bf:c9:40:04:14:da:06:86:58:dc:47:09:8f:2c:95:50:96:
39:49:36:05:0d:3d:0d:a3:b6:49:9e:2b:68:c6:6b:a4:a9:47:
bd:97:e6:21:81:7e:5e:05:b9:bd:15:27:f7:9b:d7:78:04:11:
a3:64:e3:da:12:11:14:46:75:af:e7:b6:a5:ba:90:41:44:64:
fd:7e:d0:eb:4c:5a:8f:80:19:8b:16:13:49:29:ae:ab:48:36:
23:69:3e:86:64:46:6d:a2:7a:3b:6d:20:dc:0b:98:d2:55:c1:
c9:7e:41:23:0f:95:24:7c:b4:b4:cb:1c:a1:e8:43:62:26:52:
ef:8d:c1:56:06:22:f4:f5:dc:d8:68:89:01:4e:f2:b4:bc:c1:
e8:4a:08:ea:35:72:7a:cb:b4:56:07:e9:91:32:0e:61:8f:eb:
b4:a8:16:7f:d9:d4:d3:18:dd:63:8b:2d:0f:15:59:c6:51:11:
98:8e:fa:aa:ff:74:9f:ec:8b:37:82:a2:cf:6e:be:14:0d:cb:
9e:02:14:21:68:1e:bd:98:50:ce:e5:f0:14:55:b3:b1:69:71:
55:99:f6:54:d7:b8:19:83:e6:c7:45:5e:94:d7:da:3e:db:49:
f8:e9:89:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 15:06:18 2026 by rpki-client