
$ rpki-client -vvvf rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3134332e3235352e3134382e302f32322d3234203d3e203532353733.roa
File: 3134332e3235352e3134382e302f32322d3234203d3e203532353733.roa (raw, json)
Hash identifier: PibllMEzw/3/9Hm2ndzeG0RFWTvjtxksvd3E/Qu/zhM=
Subject key identifier: 2C:93:8C:E2:E9:91:56:6F:41:B0:C2:D5:94:71:F7:F8:AF:17:AA:06
Certificate issuer: /CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7
Certificate serial: 43AF07A80178DBE1197B18F3446184518B037C7E
Authority key identifier: D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3134332e3235352e3134382e302f32322d3234203d3e203532353733.roa
Signing time: Fri 30 Oct 2026 13:41:27 +0000
ROA not before: Fri 30 Oct 2026 13:36:27 +0000
ROA not after: Fri 29 Oct 2027 13:41:27 +0000
asID: 52573
IP address blocks: 143.255.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl
rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Nov 2026 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:af:07:a8:01:78:db:e1:19:7b:18:f3:44:61:84:51:8b:03:7c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7
Validity
Not Before: Oct 30 13:36:27 2026 GMT
Not After : Oct 29 13:41:27 2027 GMT
Subject: CN=2C938CE2E991566F41B0C2D59471F7F8AF17AA06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:74:60:c0:92:6f:1d:bc:e2:6f:8d:bb:84:99:
53:e9:2e:29:e4:a0:e8:3c:db:f8:ae:9c:d9:66:67:
83:6b:a3:b8:cb:7e:85:11:31:46:3e:18:ce:33:2a:
62:b3:25:56:5b:db:df:c5:79:cf:9d:10:a3:59:c9:
28:50:76:b7:e5:31:58:4a:5d:82:06:73:e4:4e:c1:
91:3e:25:f4:4a:41:2c:2f:09:fd:88:7f:61:ed:62:
a0:54:04:64:b4:e3:43:75:d4:3d:be:f4:62:81:20:
65:5b:84:8d:c4:56:e4:45:ac:82:85:e7:2a:3e:c9:
c9:fb:37:35:be:7b:9e:df:11:0d:8c:99:15:b3:94:
e6:ef:87:5d:a0:1f:58:28:8e:8d:d0:00:4e:2c:a3:
ce:33:52:a9:5e:b2:13:d2:f4:a8:37:5c:2f:6f:65:
97:fa:18:8d:39:c4:c8:4b:15:6c:80:f4:79:12:8f:
99:0a:25:f7:bf:a0:36:a7:46:ef:ae:12:c5:5b:94:
96:01:ff:65:87:a7:42:e1:68:75:11:79:0e:51:4a:
fc:d7:80:3d:23:90:c8:ca:cb:fe:b9:d9:fc:bf:06:
ef:18:7c:b3:88:0b:f9:bc:4e:bb:e8:e5:70:97:64:
74:17:c8:ab:e2:42:08:ca:98:39:f1:4a:61:f2:a4:
ee:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:93:8C:E2:E9:91:56:6F:41:B0:C2:D5:94:71:F7:F8:AF:17:AA:06
X509v3 Authority Key Identifier:
keyid:D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3134332e3235352e3134382e302f32322d3234203d3e203532353733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.255.148.0/22
Signature Algorithm: sha256WithRSAEncryption
bd:5a:aa:a7:05:58:c8:44:28:b9:bc:d8:01:48:6a:a7:9f:3d:
35:3c:52:ef:c5:28:32:8e:9b:fc:93:49:11:6f:05:18:a7:4e:
c8:ad:e3:10:e7:c4:15:18:32:dc:bf:a7:52:e1:a2:fb:ea:91:
27:c3:d9:15:e3:5f:b0:dd:d9:7c:f4:ec:ab:0e:d8:9c:d1:90:
62:5f:cc:2b:21:0a:9b:5f:6d:96:4e:5e:4f:1b:05:b4:34:f0:
db:e6:fb:4f:0c:8a:f6:64:1b:06:53:d2:e3:d8:d5:60:7f:58:
2f:d2:92:e7:1b:f9:10:48:cc:17:b6:53:a0:fb:1c:cb:42:e6:
ea:e9:e9:f6:e3:8a:00:ea:13:0a:98:aa:a6:17:60:67:85:10:
54:f5:be:5a:49:59:de:3d:fd:00:d1:cd:40:cb:70:3b:22:fa:
ea:c0:16:e8:d8:f8:8a:7a:6d:bf:c7:4b:e0:ff:bd:05:7d:f3:
7b:0e:c8:a3:90:77:2f:02:a8:5f:37:13:5c:9d:a8:73:04:1b:
5f:4b:37:26:9f:28:ae:bb:f0:cd:86:c1:0c:3f:83:ad:39:da:
d7:be:d3:0d:f3:a2:40:b4:95:6c:25:e1:b1:31:9e:91:8f:71:
60:5c:84:e8:d3:9b:60:cf:09:7e:fa:52:1a:fa:0a:fe:1a:6b:
e8:a2:db:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:03:05 2026 by rpki-client