
$ rpki-client -vvf rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/3137302e3235342e3234302e302f32342d3234203d3e20323635333834.roa
File: 3137302e3235342e3234302e302f32342d3234203d3e20323635333834.roa (raw, json)
Hash identifier: glp0NpiqL70vhpdaxHv9ehuNWcMnZfpRJTloh8Wg/W4=
Subject key identifier: 6E:56:AE:E4:E3:58:77:B6:0D:47:B6:0C:56:49:34:7F:C4:07:1B:61
Certificate issuer: /CN=D4BB45A596789F22A8674287C2C6BEA21D8321A6
Certificate serial: 7A2E823EA6FABBB8B760D377B869AAA1E41F1BAD
Authority key identifier: D4:BB:45:A5:96:78:9F:22:A8:67:42:87:C2:C6:BE:A2:1D:83:21:A6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4BB45A596789F22A8674287C2C6BEA21D8321A6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/3137302e3235342e3234302e302f32342d3234203d3e20323635333834.roa
Signing time: Thu 25 Jun 2026 12:07:16 +0000
ROA not before: Thu 25 Jun 2026 12:02:16 +0000
ROA not after: Thu 24 Jun 2027 12:07:16 +0000
asID: 265384
IP address blocks: 170.254.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/D4BB45A596789F22A8674287C2C6BEA21D8321A6.crl
rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/D4BB45A596789F22A8674287C2C6BEA21D8321A6.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4BB45A596789F22A8674287C2C6BEA21D8321A6.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 28 Jun 2026 02:37:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:2e:82:3e:a6:fa:bb:b8:b7:60:d3:77:b8:69:aa:a1:e4:1f:1b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D4BB45A596789F22A8674287C2C6BEA21D8321A6
Validity
Not Before: Jun 25 12:02:16 2026 GMT
Not After : Jun 24 12:07:16 2027 GMT
Subject: CN=6E56AEE4E35877B60D47B60C5649347FC4071B61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a6:7c:ae:f9:f8:0e:b1:f3:47:66:bc:05:dd:
13:b6:84:29:a1:0e:de:fa:f3:f9:6e:85:7a:3e:6d:
52:bf:9f:af:ea:80:b4:ae:ee:1d:2b:3c:3d:b4:b1:
d9:ba:38:ed:5c:90:54:d3:34:34:13:2f:dc:af:9d:
b0:75:15:21:db:42:5d:64:1c:cf:34:d8:82:2f:6c:
bf:7b:2a:54:9e:6c:c3:48:03:24:1a:2c:2b:01:b7:
ff:d2:4e:2e:2a:16:e6:94:50:c7:05:b0:95:23:42:
c9:9a:a4:c4:12:8d:76:dc:81:fd:e5:97:34:36:cf:
8e:7c:71:9e:e0:5f:b8:a8:0c:28:74:8a:d7:8d:81:
4f:21:74:29:21:36:25:5a:d6:a3:59:4b:5a:96:70:
b3:0c:49:b6:c0:f2:1e:a5:c6:01:a5:f4:cc:ae:df:
bf:dd:30:5b:4e:5e:cd:fd:6b:80:8b:24:bc:33:ac:
f6:09:28:d8:a3:23:12:f4:89:79:21:65:f0:89:73:
00:10:88:ef:4b:fa:40:e8:c4:f3:8b:f7:90:da:33:
35:37:e4:f9:64:c2:14:c0:af:87:70:c6:3f:d9:d1:
fd:14:ed:0a:73:23:d6:98:5c:b3:11:14:8b:b3:8a:
45:a6:b7:94:ba:1f:98:03:ae:3c:97:6b:8c:f4:00:
09:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:56:AE:E4:E3:58:77:B6:0D:47:B6:0C:56:49:34:7F:C4:07:1B:61
X509v3 Authority Key Identifier:
keyid:D4:BB:45:A5:96:78:9F:22:A8:67:42:87:C2:C6:BE:A2:1D:83:21:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/D4BB45A596789F22A8674287C2C6BEA21D8321A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4BB45A596789F22A8674287C2C6BEA21D8321A6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/3137302e3235342e3234302e302f32342d3234203d3e20323635333834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.254.240.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:9c:d3:17:14:ea:50:49:2f:b6:48:89:a3:59:30:d0:f0:03:
1e:5f:1c:43:7b:d2:5c:a8:06:10:4d:fd:54:97:27:35:15:7b:
5d:88:3e:77:cf:61:2c:31:46:e1:a1:d8:3e:95:10:57:0b:67:
55:7e:06:e9:40:4c:2f:a7:a4:ef:6f:c6:16:c5:51:76:3a:01:
c8:64:f1:2d:8c:e5:6f:00:9c:70:c8:6e:d5:5f:5f:4f:25:c4:
2f:3f:2d:60:52:cb:51:f4:46:e1:b1:47:77:ba:27:98:93:cb:
e8:78:ea:92:31:f1:1f:3e:90:18:de:25:e3:97:8c:80:9e:1a:
df:c3:86:7b:6d:69:62:0b:d7:5c:8a:80:ef:07:e5:a7:4d:c7:
09:63:ef:03:a0:97:ad:3d:7b:ee:ef:ad:f7:4c:cd:88:47:fd:
b0:6b:fa:45:d6:33:87:a3:ae:f3:c3:b5:0a:11:d8:2c:03:f7:
d3:42:e7:ad:ec:31:4e:c8:b4:e9:7d:5a:2c:c6:52:eb:5e:2b:
89:d7:5a:c3:40:5a:6d:ac:d6:3d:47:f3:c5:e2:9f:68:c5:76:
bb:1e:d8:f2:d4:51:44:7a:b7:8c:48:ad:4a:51:1e:9e:2a:8c:
9e:e1:2d:ef:35:bc:dc:32:71:9d:12:75:78:f2:22:a7:3c:8d:
e8:a2:f0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 13:26:19 2026 by rpki-client