
$ rpki-client -vvvf rpki-repo.registro.br/repo/2tGNA9QKiEfttpXYbwWoPKkYvsS5SdgcMKd24SUwoV8G/0/3139312e3234332e3134342e302f32302d3234203d3e20323633303437.roa
File: 3139312e3234332e3134342e302f32302d3234203d3e20323633303437.roa (raw, json)
Hash identifier: yYyT+r4Vmh5nl7Kvlo0NGonVShYu8ZWgvjXqI1EYWW8=
Subject key identifier: 3A:FF:6F:3D:0A:90:94:F4:01:80:7C:99:1A:C6:50:04:B7:54:5C:67
Certificate issuer: /CN=A27160720E9CD1E16E0CB5E633AA485BDA1EA8C1
Certificate serial: 29D2ECB4201100AA0B606F7B08A9358E77C44376
Authority key identifier: A2:71:60:72:0E:9C:D1:E1:6E:0C:B5:E6:33:AA:48:5B:DA:1E:A8:C1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A27160720E9CD1E16E0CB5E633AA485BDA1EA8C1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2tGNA9QKiEfttpXYbwWoPKkYvsS5SdgcMKd24SUwoV8G/0/3139312e3234332e3134342e302f32302d3234203d3e20323633303437.roa
Signing time: Wed 21 Oct 2026 13:01:06 +0000
ROA not before: Wed 21 Oct 2026 12:56:06 +0000
ROA not after: Wed 20 Oct 2027 13:01:06 +0000
asID: 263047
IP address blocks: 191.243.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2tGNA9QKiEfttpXYbwWoPKkYvsS5SdgcMKd24SUwoV8G/0/A27160720E9CD1E16E0CB5E633AA485BDA1EA8C1.crl
rsync://rpki-repo.registro.br/repo/2tGNA9QKiEfttpXYbwWoPKkYvsS5SdgcMKd24SUwoV8G/0/A27160720E9CD1E16E0CB5E633AA485BDA1EA8C1.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A27160720E9CD1E16E0CB5E633AA485BDA1EA8C1.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 31 Oct 2026 21:34:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:d2:ec:b4:20:11:00:aa:0b:60:6f:7b:08:a9:35:8e:77:c4:43:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A27160720E9CD1E16E0CB5E633AA485BDA1EA8C1
Validity
Not Before: Oct 21 12:56:06 2026 GMT
Not After : Oct 20 13:01:06 2027 GMT
Subject: CN=3AFF6F3D0A9094F401807C991AC65004B7545C67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:88:d6:a8:a0:e7:ff:a3:6c:91:6e:56:83:df:
85:6e:17:ce:3b:92:4f:52:35:be:df:45:64:cf:58:
00:f9:24:0b:60:82:da:59:57:6f:45:b9:32:c4:f7:
14:af:83:fb:91:91:ea:77:bd:8c:5c:96:3c:21:f9:
d2:12:99:ef:3d:a8:59:41:0f:df:a5:76:84:06:06:
41:73:6f:41:b9:99:07:e3:90:4e:6f:c5:81:e5:34:
0f:48:b0:02:b8:85:24:3d:f6:e7:74:a9:86:fd:b4:
4d:45:54:50:81:1d:13:1c:04:14:db:04:bc:7a:66:
ec:f8:3c:6f:55:56:cb:74:c0:1c:c2:ba:cc:ef:82:
b3:2c:0a:89:62:92:72:38:20:3f:76:af:9a:17:5a:
ea:c7:23:f1:92:ed:39:71:47:2f:f4:01:26:6a:f7:
d8:1b:98:63:d6:2b:c2:a6:6b:7e:2e:4c:3b:8c:a8:
18:5e:25:87:87:ce:94:2f:15:47:29:cf:25:3f:07:
f3:bd:2e:32:4b:d7:90:95:09:62:f2:ce:9c:dc:99:
de:a5:c2:79:d6:81:7d:57:e3:7b:74:85:d7:38:11:
04:bc:92:33:2e:e2:19:e4:30:e2:aa:3c:ff:98:ef:
eb:94:40:46:ee:62:7e:62:14:b8:4b:8c:71:43:77:
76:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:FF:6F:3D:0A:90:94:F4:01:80:7C:99:1A:C6:50:04:B7:54:5C:67
X509v3 Authority Key Identifier:
keyid:A2:71:60:72:0E:9C:D1:E1:6E:0C:B5:E6:33:AA:48:5B:DA:1E:A8:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2tGNA9QKiEfttpXYbwWoPKkYvsS5SdgcMKd24SUwoV8G/0/A27160720E9CD1E16E0CB5E633AA485BDA1EA8C1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A27160720E9CD1E16E0CB5E633AA485BDA1EA8C1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tGNA9QKiEfttpXYbwWoPKkYvsS5SdgcMKd24SUwoV8G/0/3139312e3234332e3134342e302f32302d3234203d3e20323633303437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.243.144.0/20
Signature Algorithm: sha256WithRSAEncryption
45:33:26:ef:fd:23:f8:10:d4:3d:15:65:02:5b:72:8a:c5:11:
cb:07:de:bd:a8:07:a7:30:65:fe:65:b6:50:d4:65:9f:c8:5c:
1e:15:f1:af:39:b6:64:43:20:a4:e1:55:9f:60:e7:0f:3a:02:
bd:58:25:34:af:3d:71:84:14:00:8d:80:d0:82:b1:07:b9:3b:
9b:69:5c:c2:38:cc:58:0c:ab:62:b9:06:6e:83:03:b1:82:5f:
ec:75:20:89:c8:d2:47:75:77:50:84:be:a1:db:f6:cb:58:50:
d6:d4:f4:38:41:1b:d1:e3:33:24:f3:ca:e6:75:cd:23:37:fa:
2d:f5:b7:b5:b1:81:e3:55:ad:17:c8:f2:7f:29:7c:92:72:56:
8d:7f:d0:07:e9:a4:a6:52:02:26:73:41:82:d3:69:5f:0f:e8:
43:6e:70:e9:91:89:73:0e:55:4f:75:ac:bd:fa:d4:c8:bf:a3:
92:4d:5d:5d:d5:ce:0e:a4:f4:07:46:ff:c2:c2:94:f2:50:e9:
5b:c9:73:56:55:e8:3a:4c:69:58:78:65:e2:bf:a0:9a:26:f1:
84:a9:42:9c:fb:8c:33:08:18:cb:11:05:c7:ea:e7:4b:cd:11:
7d:b9:c8:eb:ca:30:3b:9e:0b:ef:c4:a5:06:2b:1b:77:09:b2:
d3:b9:92:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 04:56:33 2026 by rpki-client