
$ rpki-client -vvvf rpki-repo.registro.br/repo/3wkwS4E4Jq9dNATK1nZqKoyP7kroWNJTEpBaW6mJQwMF/0/3137372e32332e32322e302f32332d3234203d3e203532373537.roa
File: 3137372e32332e32322e302f32332d3234203d3e203532373537.roa (raw, json)
Hash identifier: 90Ww2w4BKp/NjxoTJ0TAv/+dABt+gBI+a5XWyuIhUW8=
Subject key identifier: DF:DD:7E:E5:E9:A5:62:4D:91:58:D3:06:00:85:27:1C:C0:4E:83:A4
Certificate issuer: /CN=1254D60C0E743AE17BC43FD38413C27FDD4AE0CE
Certificate serial: 3CEC7FD42258A93BDB645995BE200FC32E9FB0C9
Authority key identifier: 12:54:D6:0C:0E:74:3A:E1:7B:C4:3F:D3:84:13:C2:7F:DD:4A:E0:CE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1254D60C0E743AE17BC43FD38413C27FDD4AE0CE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3wkwS4E4Jq9dNATK1nZqKoyP7kroWNJTEpBaW6mJQwMF/0/3137372e32332e32322e302f32332d3234203d3e203532373537.roa
Signing time: Thu 30 Jul 2026 12:02:07 +0000
ROA not before: Thu 30 Jul 2026 11:57:07 +0000
ROA not after: Thu 29 Jul 2027 12:02:07 +0000
asID: 52757
IP address blocks: 177.23.22.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3wkwS4E4Jq9dNATK1nZqKoyP7kroWNJTEpBaW6mJQwMF/0/1254D60C0E743AE17BC43FD38413C27FDD4AE0CE.crl
rsync://rpki-repo.registro.br/repo/3wkwS4E4Jq9dNATK1nZqKoyP7kroWNJTEpBaW6mJQwMF/0/1254D60C0E743AE17BC43FD38413C27FDD4AE0CE.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1254D60C0E743AE17BC43FD38413C27FDD4AE0CE.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Oct 2026 19:16:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:ec:7f:d4:22:58:a9:3b:db:64:59:95:be:20:0f:c3:2e:9f:b0:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1254D60C0E743AE17BC43FD38413C27FDD4AE0CE
Validity
Not Before: Jul 30 11:57:07 2026 GMT
Not After : Jul 29 12:02:07 2027 GMT
Subject: CN=DFDD7EE5E9A5624D9158D3060085271CC04E83A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:58:55:34:43:83:6a:8f:e3:77:6e:a3:44:23:
cc:36:56:fb:66:56:d8:32:ba:1d:d2:b5:31:aa:88:
c8:c7:d7:45:85:12:98:a3:b4:61:6b:e5:cc:1b:7b:
a1:74:65:78:16:fd:86:d2:5e:31:55:0d:39:6b:25:
d0:b5:18:b9:00:2b:e1:9e:3d:97:8c:f6:0c:e2:ea:
8a:c5:24:a7:5f:aa:88:c2:e5:b2:90:d5:f3:b6:a7:
9a:12:74:ba:49:61:99:4d:e2:c0:b7:78:1e:57:97:
f3:9e:05:07:07:f7:b7:5a:1d:dc:d9:74:3e:96:a6:
b3:56:ec:23:72:f4:62:9c:c5:ad:32:06:75:e8:ef:
62:b0:cf:25:03:68:69:27:23:f3:3d:7c:f8:d2:f4:
93:ae:6a:10:d4:ca:5c:33:ae:d6:77:c6:de:ba:bb:
7b:a9:16:72:e2:7f:ce:c1:ee:aa:e0:bb:e8:32:68:
92:e0:26:ea:fe:7d:fc:26:f8:af:83:79:15:05:96:
a8:d4:2c:1f:82:83:db:75:b0:c0:32:6f:82:e9:73:
f0:9f:de:66:d9:c1:5c:3b:0c:c1:1e:77:f6:25:39:
67:22:9d:36:7d:97:18:7f:3c:5a:c2:34:95:da:3f:
1f:24:c9:dd:25:f1:b5:39:82:46:fa:c6:66:ff:fe:
72:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:DD:7E:E5:E9:A5:62:4D:91:58:D3:06:00:85:27:1C:C0:4E:83:A4
X509v3 Authority Key Identifier:
keyid:12:54:D6:0C:0E:74:3A:E1:7B:C4:3F:D3:84:13:C2:7F:DD:4A:E0:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3wkwS4E4Jq9dNATK1nZqKoyP7kroWNJTEpBaW6mJQwMF/0/1254D60C0E743AE17BC43FD38413C27FDD4AE0CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1254D60C0E743AE17BC43FD38413C27FDD4AE0CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3wkwS4E4Jq9dNATK1nZqKoyP7kroWNJTEpBaW6mJQwMF/0/3137372e32332e32322e302f32332d3234203d3e203532373537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.23.22.0/23
Signature Algorithm: sha256WithRSAEncryption
97:56:5c:07:20:5e:49:71:0a:f1:6a:5c:04:55:31:63:a1:cd:
a8:23:47:18:48:31:bc:b2:e2:91:f5:0c:05:79:05:ba:8f:85:
f7:f2:8b:dd:40:ac:23:0c:8f:51:99:9f:f4:1c:46:64:4f:b8:
fa:e2:73:87:88:88:f5:ee:45:d5:4a:b9:82:1b:e4:20:13:7a:
c0:04:1b:e2:76:34:04:72:d1:ca:af:7e:d6:2d:67:27:e1:9d:
13:1d:0d:c8:12:cc:1c:a7:e4:59:db:1f:46:29:dd:80:af:40:
11:fc:48:ed:2b:45:08:11:9a:45:62:3f:ee:59:b6:07:10:49:
e3:60:d7:e7:49:9b:56:7c:c5:ed:23:d1:73:31:76:6a:9a:95:
f6:af:9b:23:ab:8c:22:56:c6:00:99:5a:c4:eb:89:85:88:dd:
e4:b1:56:35:ba:00:12:f1:ed:bd:b5:6f:8b:f0:2a:2f:7d:4b:
67:b1:0e:52:b2:2c:84:13:87:4a:c1:67:4f:59:3d:a5:b1:3c:
5c:f8:c9:46:fe:cb:6c:95:e5:d5:47:07:ec:3c:db:17:b4:12:
15:bc:ee:6a:e1:38:34:9e:9b:f2:84:6d:8b:31:1c:55:b8:8f:
eb:5e:ec:0f:1d:f3:95:9d:a7:6e:59:2f:21:21:42:ce:d4:b1:
2a:e8:49:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:44:55 2026 by rpki-client