
$ rpki-client -vvvf rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/3137372e3232322e3233332e302f32342d3234203d3e20323633343030.roa
File: 3137372e3232322e3233332e302f32342d3234203d3e20323633343030.roa (raw, json)
Hash identifier: s8p6tSQZ5gNrNuYiJwIJIPfXIrQ0NQhOP+2qe6OmpBU=
Subject key identifier: 64:04:B2:FD:4B:C6:85:8C:47:07:B6:EB:0E:E8:6F:49:55:AE:C0:0B
Certificate issuer: /CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9
Certificate serial: 16326244BF8C64B5E2BA9F84458ABDA96592D116
Authority key identifier: CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/3137372e3232322e3233332e302f32342d3234203d3e20323633343030.roa
Signing time: Wed 28 Oct 2026 00:57:53 +0000
ROA not before: Wed 28 Oct 2026 00:52:53 +0000
ROA not after: Wed 27 Oct 2027 00:57:53 +0000
asID: 263400
IP address blocks: 177.222.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl
rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Nov 2026 19:32:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:32:62:44:bf:8c:64:b5:e2:ba:9f:84:45:8a:bd:a9:65:92:d1:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9
Validity
Not Before: Oct 28 00:52:53 2026 GMT
Not After : Oct 27 00:57:53 2027 GMT
Subject: CN=6404B2FD4BC6858C4707B6EB0EE86F4955AEC00B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5d:13:6b:df:22:ec:e3:20:1c:aa:2b:f5:b3:
12:ff:4f:9b:b6:68:b8:34:fc:8e:2c:b3:96:04:4d:
7a:d9:7c:ad:49:80:ba:40:74:b4:e3:c8:e9:0d:2b:
c7:46:de:a2:ba:1a:6d:cb:d7:8f:80:a7:7c:85:24:
d5:73:ac:97:9d:0b:e1:5e:33:54:a5:9d:14:ae:1f:
fe:68:bd:25:1a:f3:45:40:1b:37:9d:11:75:64:3f:
5e:1d:c9:a6:21:6b:39:dc:a1:93:83:3e:24:c4:8e:
3f:a8:78:65:cd:f1:28:3b:68:a5:2c:df:4c:c4:b6:
81:91:1c:32:79:e4:cf:af:48:1b:cf:00:97:18:e0:
52:bb:b6:c0:bc:59:06:a0:55:b2:ec:4b:a4:30:0f:
ee:00:5b:a1:0f:90:b0:24:ed:a8:22:6d:e7:01:7f:
34:a0:1a:b2:30:ce:9d:76:a3:8d:c8:be:e2:f5:4a:
94:15:5b:4a:f3:7f:b7:51:b0:6f:bc:79:56:ef:e1:
60:64:bb:7c:80:3c:2c:0a:ae:93:5a:cd:20:42:0f:
fa:4f:18:2e:41:c9:2f:8c:52:73:1a:5a:89:6b:48:
d0:06:0e:98:7e:b6:81:2e:37:4e:8d:65:62:1c:3d:
ce:67:c4:72:f4:74:c4:10:b7:df:4b:3a:1e:2e:33:
a7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:04:B2:FD:4B:C6:85:8C:47:07:B6:EB:0E:E8:6F:49:55:AE:C0:0B
X509v3 Authority Key Identifier:
keyid:CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/3137372e3232322e3233332e302f32342d3234203d3e20323633343030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.222.233.0/24
Signature Algorithm: sha256WithRSAEncryption
19:26:5a:86:16:e4:f1:99:dd:c1:4c:9f:0a:70:a7:7d:46:f8:
cf:11:b4:2f:6c:9d:cb:5c:5a:e1:6d:db:07:bb:79:04:14:2f:
70:05:23:98:2e:cc:95:a5:e0:68:3d:af:73:5f:66:44:33:8f:
f4:3b:07:f7:30:ad:22:aa:fb:9e:08:b4:62:09:24:a0:67:db:
88:f1:19:c3:42:2f:96:a9:58:4b:3e:f2:bd:67:f5:13:17:be:
2f:40:17:f4:c6:cc:9c:d2:da:53:2a:9a:45:d2:e1:10:54:c3:
cf:ba:b8:70:35:2f:6b:1e:c0:5c:2a:db:f1:3a:2f:a9:65:39:
13:49:ef:df:10:6e:fe:88:14:8a:46:3d:18:17:d8:bf:8d:88:
f2:e0:57:d7:eb:7b:fe:3c:49:16:07:61:37:46:43:dd:f0:48:
d5:92:5d:c1:75:a0:00:51:28:0a:61:cf:bf:0e:a1:9f:ad:3f:
ac:6e:4f:9b:f2:aa:86:36:cc:2f:4d:47:c0:7f:e8:09:da:d4:
29:f1:ec:24:94:48:60:20:ad:ec:4c:4b:dd:44:67:25:8b:3e:
3b:3e:12:be:42:e9:04:ac:6a:a5:aa:21:aa:ee:ea:1a:fc:89:
b1:ab:f2:2d:b5:09:a0:97:91:d9:4e:bf:66:8b:15:a5:26:99:
19:85:66:15
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUFjJiRL+MZLXiup+ERYq9qWWS0RYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0QyMzkxRkE3QzI4QUUwRjlDOEIyQjk5RTE5MDkyQTM0
ODdBMkVDOTAeFw0yNjEwMjgwMDUyNTNaFw0yNzEwMjcwMDU3NTNaMDMxMTAvBgNV
BAMTKDY0MDRCMkZENEJDNjg1OEM0NzA3QjZFQjBFRTg2RjQ5NTVBRUMwMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/XRNr3yLs4yAcqiv1sxL/T5u2
aLg0/I4ss5YETXrZfK1JgLpAdLTjyOkNK8dG3qK6Gm3L14+Ap3yFJNVzrJedC+Fe
M1SlnRSuH/5ovSUa80VAGzedEXVkP14dyaYhazncoZODPiTEjj+oeGXN8Sg7aKUs
30zEtoGRHDJ55M+vSBvPAJcY4FK7tsC8WQagVbLsS6QwD+4AW6EPkLAk7agibecB
fzSgGrIwzp12o43IvuL1SpQVW0rzf7dRsG+8eVbv4WBku3yAPCwKrpNazSBCD/pP
GC5ByS+MUnMaWolrSNAGDph+toEuN06NZWIcPc5nxHL0dMQQt99LOh4uM6dLAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUZASy/UvGhYxHB7brDuhvSVWuwAswHwYDVR0j
BBgwFoAUzSOR+nworg+ciyuZ4ZCSo0h6LskwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkVobnZBd1FCeHlQYmtoVXBoTVFueEN1VEVEZ3Y3a1NCMWFURDQxOFRo
U1gvMS9DRDIzOTFGQTdDMjhBRTBGOUM4QjJCOTlFMTkwOTJBMzQ4N0EyRUM5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEMjM5MUZBN0MyOEFFMEY5
QzhCMkI5OUUxOTA5MkEzNDg3QTJFQzkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJFaG52QXdRQnh5UGJraFVwaE1RbnhDdVRFRGd2N2tTQjFhVEQ0MThUaFNYLzEv
MzEzNzM3MmUzMjMyMzIyZTMyMzMzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM0MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALHe6TANBgkqhkiG9w0BAQsFAAOCAQEAGSZa
hhbk8ZndwUyfCnCnfUb4zxG0L2ydy1xa4W3bB7t5BBQvcAUjmC7MlaXgaD2vc19m
RDOP9DsH9zCtIqr7ngi0YgkkoGfbiPEZw0IvlqlYSz7yvWf1Exe+L0AX9MbMnNLa
UyqaRdLhEFTDz7q4cDUvax7AXCrb8TovqWU5E0nv3xBu/ogUikY9GBfYv42I8uBX
1+t7/jxJFgdhN0ZD3fBI1ZJdwXWgAFEoCmHPvw6hn60/rG5Pm/KqhjbML01HwH/o
CdrUKfHsJJRIYCCt7ExL3URnJYs+Oz4SvkLpBKxqpaohqu7qGvyJsavyLbUJoJeR
2U6/ZosVpSaZGYVmFQ==
-----END CERTIFICATE-----
Generated at Sat Oct 31 21:58:41 2026 by rpki-client