
$ rpki-client -vvvf rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/3137372e3232322e3233372e302f32342d3234203d3e20323633343030.roa
File: 3137372e3232322e3233372e302f32342d3234203d3e20323633343030.roa (raw, json)
Hash identifier: Bg/8XYKDGhDJ9pDdVaRRCcLJAs5jIp/e5kGU9QLtnxM=
Subject key identifier: F3:1B:91:F5:38:59:C5:76:F4:77:11:52:AA:F0:8F:C1:11:49:6B:8B
Certificate issuer: /CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9
Certificate serial: 089B2C8422A7D67B10B93F91879DD75891C494C3
Authority key identifier: CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/3137372e3232322e3233372e302f32342d3234203d3e20323633343030.roa
Signing time: Wed 28 Oct 2026 00:58:29 +0000
ROA not before: Wed 28 Oct 2026 00:53:29 +0000
ROA not after: Wed 27 Oct 2027 00:58:29 +0000
asID: 263400
IP address blocks: 177.222.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl
rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Nov 2026 14:38:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:9b:2c:84:22:a7:d6:7b:10:b9:3f:91:87:9d:d7:58:91:c4:94:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9
Validity
Not Before: Oct 28 00:53:29 2026 GMT
Not After : Oct 27 00:58:29 2027 GMT
Subject: CN=F31B91F53859C576F4771152AAF08FC111496B8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9d:3a:a3:60:71:51:8a:fc:76:23:f3:68:cf:
57:63:b3:91:4e:03:de:e6:57:59:30:6c:3f:86:92:
5d:e2:40:3f:1f:b3:0a:48:2e:bf:ed:3f:da:7a:fc:
57:3c:ee:0e:e4:7d:60:77:70:31:4a:8d:ef:32:d4:
6a:72:cf:3a:2f:7b:db:f2:6a:f4:fa:a9:b1:18:97:
b0:f0:69:09:0b:fa:c8:42:fb:6b:94:2f:bf:a5:cb:
86:38:33:b0:ff:12:d7:28:88:82:5c:21:b0:e0:57:
f4:a5:93:3d:58:0c:28:7f:39:8a:bc:ee:70:52:e4:
b1:4e:4b:7f:9d:44:a0:09:16:52:c9:50:48:32:96:
34:8f:60:b8:6c:c3:03:7b:b3:73:fb:a6:0a:37:99:
8d:2d:c4:b5:a4:d2:a2:5d:82:83:4c:21:54:28:51:
c9:c3:3d:7e:71:76:4b:d2:23:73:38:ef:67:3e:27:
3c:70:24:a4:84:db:17:c9:7c:50:ae:3f:5a:f3:db:
f7:7c:ca:57:6d:a0:17:ac:23:30:8e:9c:11:f5:d1:
6d:fa:ab:4b:a3:dd:8a:49:b1:ad:cb:87:3d:2a:42:
aa:46:79:ba:3f:9e:d8:f0:f5:8a:f7:3b:b5:99:76:
5b:72:26:ea:72:1c:5b:f5:0f:d0:43:48:75:b1:fd:
22:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:1B:91:F5:38:59:C5:76:F4:77:11:52:AA:F0:8F:C1:11:49:6B:8B
X509v3 Authority Key Identifier:
keyid:CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/3137372e3232322e3233372e302f32342d3234203d3e20323633343030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.222.237.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:e2:57:17:d0:cd:b5:e9:e9:b7:fb:14:e9:88:e8:24:3d:42:
b5:88:40:02:4e:11:d5:d1:49:4e:74:2c:d8:b9:8f:7b:88:75:
26:94:eb:63:c7:53:a1:ef:ed:d3:35:9c:86:6b:36:ff:87:b4:
85:8c:24:85:93:4f:95:4e:d6:91:46:e0:db:f1:29:b1:49:91:
41:4c:da:24:41:b3:ff:97:a4:ba:16:32:6a:ae:e0:10:de:5b:
ce:24:4e:76:80:d2:8f:19:a0:21:8f:e1:e5:ea:db:25:2f:d0:
ea:ad:e6:f7:2a:b9:41:d2:ed:2e:ee:aa:f2:c6:6b:34:c4:50:
b5:1c:bf:fe:d6:8e:d1:9e:28:17:35:c8:51:06:ac:d2:2d:6b:
77:ae:7c:67:e3:fd:ab:cf:ea:15:2f:26:26:5b:0f:ad:d9:39:
96:49:2a:2e:f3:36:45:c9:dc:3c:e7:9c:a3:a2:5b:78:51:61:
ad:a8:96:b7:0f:98:83:2d:00:e2:80:94:16:7c:35:93:ca:32:
94:25:c1:fb:dc:fe:ed:85:6a:53:26:29:56:25:e4:59:a3:cd:
1e:b4:ad:92:da:cb:d7:37:b6:e3:69:9c:0c:4a:d9:55:34:d5:
0e:1d:e5:c9:6f:1d:5e:b0:01:01:77:ee:f4:3a:ac:7b:e3:dd:
c2:4d:1d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 07:29:38 2026 by rpki-client