
$ rpki-client -vvvf rpki-repo.registro.br/repo/5ayJTmdpMcycQEuVqeEZ5ufF1ikeKFqUMScWPsxMzf3e/0/3137302e3233332e3232382e302f32322d3234203d3e20323635313938.roa
File: 3137302e3233332e3232382e302f32322d3234203d3e20323635313938.roa (raw, json)
Hash identifier: RgNMlM91TuTCAFAG47tvfxPOHknB5FFqVyQqaHzS2Iw=
Subject key identifier: DB:E7:82:DF:C7:1B:9A:61:9E:24:38:83:67:04:8A:AE:06:A9:8C:7E
Certificate issuer: /CN=08B96662A0C7D84FF28CAF0BBAC15478F1C89C04
Certificate serial: 2A7B571B985985C021ADC052D79C2FF0D9E57ECB
Authority key identifier: 08:B9:66:62:A0:C7:D8:4F:F2:8C:AF:0B:BA:C1:54:78:F1:C8:9C:04
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B96662A0C7D84FF28CAF0BBAC15478F1C89C04.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5ayJTmdpMcycQEuVqeEZ5ufF1ikeKFqUMScWPsxMzf3e/0/3137302e3233332e3232382e302f32322d3234203d3e20323635313938.roa
Signing time: Mon 17 Aug 2026 17:02:57 +0000
ROA not before: Mon 17 Aug 2026 16:57:57 +0000
ROA not after: Mon 16 Aug 2027 17:02:57 +0000
asID: 265198
IP address blocks: 170.233.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5ayJTmdpMcycQEuVqeEZ5ufF1ikeKFqUMScWPsxMzf3e/0/08B96662A0C7D84FF28CAF0BBAC15478F1C89C04.crl
rsync://rpki-repo.registro.br/repo/5ayJTmdpMcycQEuVqeEZ5ufF1ikeKFqUMScWPsxMzf3e/0/08B96662A0C7D84FF28CAF0BBAC15478F1C89C04.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B96662A0C7D84FF28CAF0BBAC15478F1C89C04.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 28 Aug 2026 14:57:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:7b:57:1b:98:59:85:c0:21:ad:c0:52:d7:9c:2f:f0:d9:e5:7e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08B96662A0C7D84FF28CAF0BBAC15478F1C89C04
Validity
Not Before: Aug 17 16:57:57 2026 GMT
Not After : Aug 16 17:02:57 2027 GMT
Subject: CN=DBE782DFC71B9A619E24388367048AAE06A98C7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9a:3d:1a:b6:22:e3:60:d2:9b:38:19:d9:06:
79:ba:8f:6f:f3:b1:9c:52:5a:95:d1:90:25:15:38:
90:c5:36:18:30:ff:7b:03:4d:c4:21:2a:33:f4:cb:
65:29:17:9f:bf:9d:38:26:b3:f1:c6:d5:9e:91:ff:
67:50:40:b3:4b:68:d5:2d:d8:d4:02:54:bd:08:94:
c8:ba:4b:29:ab:6c:3f:83:6e:93:b0:8f:f7:a7:55:
81:3e:4e:0c:85:c9:c1:cb:29:d4:64:b5:f9:03:a9:
1d:8c:6c:e6:86:5f:cf:57:51:18:47:31:51:bf:7f:
00:04:b2:8c:fc:73:ef:79:ce:ab:87:71:f1:ff:6d:
51:7f:f3:9c:cc:c7:61:1f:6e:11:45:db:57:12:96:
48:75:a2:a7:14:c3:9b:44:f7:4e:6a:77:51:03:ec:
9e:e1:d4:b1:a9:d8:f4:59:de:d4:51:c7:2a:b9:9f:
34:c6:2d:7c:ba:46:28:2e:9e:fb:0a:c6:c3:18:32:
e0:42:3e:18:5d:77:34:1d:dd:81:11:b7:75:be:dc:
61:06:7e:37:5b:77:49:c5:48:91:bb:30:b7:fa:62:
58:b0:bf:4e:6d:d7:f8:af:be:91:85:f4:bf:a9:32:
fd:c0:04:2a:16:38:2e:99:3d:44:9f:ee:85:62:23:
f0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E7:82:DF:C7:1B:9A:61:9E:24:38:83:67:04:8A:AE:06:A9:8C:7E
X509v3 Authority Key Identifier:
keyid:08:B9:66:62:A0:C7:D8:4F:F2:8C:AF:0B:BA:C1:54:78:F1:C8:9C:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5ayJTmdpMcycQEuVqeEZ5ufF1ikeKFqUMScWPsxMzf3e/0/08B96662A0C7D84FF28CAF0BBAC15478F1C89C04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B96662A0C7D84FF28CAF0BBAC15478F1C89C04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ayJTmdpMcycQEuVqeEZ5ufF1ikeKFqUMScWPsxMzf3e/0/3137302e3233332e3232382e302f32322d3234203d3e20323635313938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.233.228.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:7c:e3:5f:96:ad:d7:e2:e7:9b:c5:4a:5d:40:55:40:ad:db:
56:f4:ef:ba:c3:d1:f4:60:b9:1c:3a:77:d5:4d:2c:4b:cb:4b:
36:90:9d:8e:ce:26:0a:a8:39:4a:a6:bc:ec:5e:e8:8c:e5:ee:
7d:a1:9a:4f:56:3c:5f:c7:e7:aa:2b:4c:98:e6:7b:5b:60:52:
3c:af:81:fb:8c:cb:d8:23:12:d3:f6:31:53:9f:27:6b:73:32:
a1:49:4d:03:43:a7:85:ff:d4:d4:07:f9:de:ce:9a:b0:dc:70:
ef:af:64:60:18:35:3b:68:20:b4:e0:db:16:98:8a:9d:ba:db:
6d:85:9e:70:54:2c:75:c1:03:44:11:ba:5f:75:d0:08:11:ee:
82:98:28:c1:86:ce:be:e3:f6:34:d3:36:98:8c:b8:e4:74:a5:
50:50:01:12:f3:8f:e2:fe:40:17:a2:ef:36:b1:19:65:21:ac:
2a:d9:da:07:85:5b:9f:85:33:79:6a:41:f7:5f:fc:02:24:84:
f1:0b:ec:22:7e:ff:ad:e0:13:57:fd:24:30:8f:8c:87:0b:26:
a9:4f:6e:21:30:71:ec:bd:4a:07:64:78:08:03:96:7e:5a:e3:
1a:c9:c5:19:01:f6:d9:12:6d:6e:54:ba:60:60:73:75:ea:ae:
84:0f:72:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 28 07:40:52 2026 by rpki-client