
$ rpki-client -vvf rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/3134332e3130372e3235322e302f32342d3234203d3e203238353731.roa
File: 3134332e3130372e3235322e302f32342d3234203d3e203238353731.roa (raw, json)
Hash identifier: If6/N21ntJX5+jZ88tiPbihz0OGmM1t1gnAqpEEPVoQ=
Subject key identifier: 23:88:84:43:2D:1E:A5:9E:37:23:0E:6B:96:CD:42:D6:34:6D:F9:26
Certificate issuer: /CN=2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44
Certificate serial: 3F6A6A974BE5C3273A7413EF081DBD4D65DA3250
Authority key identifier: 2C:AF:D9:D8:A7:9A:EC:27:7E:AB:A7:07:4D:7B:B2:B9:9D:EF:9A:44
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/3134332e3130372e3235322e302f32342d3234203d3e203238353731.roa
Signing time: Fri 15 May 2026 20:47:45 +0000
ROA not before: Fri 15 May 2026 20:42:45 +0000
ROA not after: Fri 14 May 2027 20:47:45 +0000
asID: 28571
IP address blocks: 143.107.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.crl
rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 25 May 2026 12:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:6a:6a:97:4b:e5:c3:27:3a:74:13:ef:08:1d:bd:4d:65:da:32:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44
Validity
Not Before: May 15 20:42:45 2026 GMT
Not After : May 14 20:47:45 2027 GMT
Subject: CN=238884432D1EA59E37230E6B96CD42D6346DF926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bc:29:21:fe:be:67:12:53:46:77:84:9f:22:
ac:2e:90:4f:87:cc:d0:55:93:a9:f8:2c:51:3d:24:
14:76:3a:0f:99:56:47:c2:0a:41:f9:da:17:46:51:
83:62:96:48:71:bb:d1:7d:2a:a0:87:47:fe:06:51:
ba:b9:49:54:87:d0:09:bf:b9:f0:f3:fa:73:7e:62:
39:25:e3:38:02:4f:a1:68:b0:73:f3:c8:83:83:27:
21:69:fa:e2:05:42:59:a1:3f:33:c2:56:e4:a4:4e:
8a:f2:7a:ae:c0:33:2d:d3:95:f4:00:aa:a3:e2:62:
9f:49:43:0d:5c:9b:17:8a:54:89:13:de:64:34:99:
36:9f:74:7d:09:8a:9c:b3:b3:2a:0f:a8:af:91:8b:
42:91:43:26:04:40:10:ed:58:16:fb:31:cf:65:1b:
be:64:f3:ae:28:60:17:45:97:f5:65:d8:dd:aa:58:
bd:1c:24:c8:5f:86:9e:b0:87:a6:d4:66:44:fd:78:
33:57:ab:aa:79:8e:8a:97:d6:6a:a4:cf:aa:1f:47:
d9:b6:ad:db:48:a6:9a:f4:48:88:c2:23:c9:da:81:
4a:76:d3:b9:2c:70:d7:55:42:c8:6f:3c:4a:f3:7e:
c6:4c:ee:dd:fb:ae:6b:0b:56:2f:74:f0:88:d2:dd:
2d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:88:84:43:2D:1E:A5:9E:37:23:0E:6B:96:CD:42:D6:34:6D:F9:26
X509v3 Authority Key Identifier:
keyid:2C:AF:D9:D8:A7:9A:EC:27:7E:AB:A7:07:4D:7B:B2:B9:9D:EF:9A:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/3134332e3130372e3235322e302f32342d3234203d3e203238353731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.107.252.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:af:de:3e:4e:77:16:31:00:6e:ed:96:c5:d9:2e:b5:e3:14:
0e:80:2c:06:8f:59:71:dd:43:53:f2:72:02:4e:cc:c8:64:11:
b6:19:17:62:32:05:11:5f:4d:87:07:29:00:6e:79:31:71:d2:
b9:11:ab:6f:f3:e7:4c:4e:26:74:f4:5b:75:fc:0c:1d:8a:47:
00:8d:13:f3:74:9f:32:3a:11:39:67:e0:69:c8:88:fc:2a:50:
b5:5b:b1:e5:0b:58:89:0e:b3:23:24:24:d6:68:84:b1:52:b9:
a1:99:aa:32:b2:84:70:dd:5f:c1:8b:33:79:37:88:e6:77:e7:
14:45:68:e4:ed:05:c5:ab:eb:da:56:ba:e2:fd:18:60:c0:96:
64:3f:0b:a5:c3:2d:79:90:f7:7c:61:8d:79:b4:88:8a:9b:dd:
e7:46:f1:8a:40:0e:78:b2:ff:24:8a:71:3c:00:82:30:fe:8a:
e2:a5:d1:3c:dd:0c:41:40:bc:ed:07:c9:22:cf:de:21:6b:19:
56:69:e9:23:28:a9:ba:d3:ef:4c:39:b3:77:a8:10:41:8f:a2:
9f:ee:52:ff:d9:9a:2e:5b:ca:0f:67:a5:85:58:64:8b:89:22:
87:05:ff:99:91:da:57:de:19:71:66:70:7c:15:62:02:2a:4e:
36:f3:63:32
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUP2pql0vlwyc6dBPvCB29TWXaMlAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkNBRkQ5RDhBNzlBRUMyNzdFQUJBNzA3NEQ3QkIyQjk5
REVGOUE0NDAeFw0yNjA1MTUyMDQyNDVaFw0yNzA1MTQyMDQ3NDVaMDMxMTAvBgNV
BAMTKDIzODg4NDQzMkQxRUE1OUUzNzIzMEU2Qjk2Q0Q0MkQ2MzQ2REY5MjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCovCkh/r5nElNGd4SfIqwukE+H
zNBVk6n4LFE9JBR2Og+ZVkfCCkH52hdGUYNilkhxu9F9KqCHR/4GUbq5SVSH0Am/
ufDz+nN+Yjkl4zgCT6FosHPzyIODJyFp+uIFQlmhPzPCVuSkToryeq7AMy3TlfQA
qqPiYp9JQw1cmxeKVIkT3mQ0mTafdH0JipyzsyoPqK+Ri0KRQyYEQBDtWBb7Mc9l
G75k864oYBdFl/Vl2N2qWL0cJMhfhp6wh6bUZkT9eDNXq6p5joqX1mqkz6ofR9m2
rdtIppr0SIjCI8nagUp207kscNdVQshvPErzfsZM7t37rmsLVi908IjS3S3BAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUI4iEQy0epZ43Iw5rls1C1jRt+SYwHwYDVR0j
BBgwFoAULK/Z2Kea7Cd+q6cHTXuyuZ3vmkQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmNkZTk2WWdYUE5nNVVuYTdtdWZWVUg0cWtqb3FzdHZHaG94UnYzR1Ni
Z3ovMC8yQ0FGRDlEOEE3OUFFQzI3N0VBQkE3MDc0RDdCQjJCOTlERUY5QTQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJDQUZEOUQ4QTc5QUVDMjc3
RUFCQTcwNzREN0JCMkI5OURFRjlBNDQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZjZGU5NllnWFBOZzVVbmE3bXVmVlVINHFram9xc3R2R2hveFJ2M0dTYmd6LzAv
MzEzNDMzMmUzMTMwMzcyZTMyMzUzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzNTM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACPa/wwDQYJKoZIhvcNAQELBQADggEBANGv3j5O
dxYxAG7tlsXZLrXjFA6ALAaPWXHdQ1PycgJOzMhkEbYZF2IyBRFfTYcHKQBueTFx
0rkRq2/z50xOJnT0W3X8DB2KRwCNE/N0nzI6ETln4GnIiPwqULVbseULWIkOsyMk
JNZohLFSuaGZqjKyhHDdX8GLM3k3iOZ35xRFaOTtBcWr69pWuuL9GGDAlmQ/C6XD
LXmQ93xhjXm0iIqb3edG8YpADniy/ySKcTwAgjD+iuKl0TzdDEFAvO0HySLP3iFr
GVZp6SMoqbrT70w5s3eoEEGPop/uUv/Zmi5byg9npYVYZIuJIocF/5mR2lfeGXFm
cHwVYgIqTjbzYzI=
-----END CERTIFICATE-----
Generated at Sun May 24 14:43:17 2026 by rpki-client