
$ rpki-client -vvf rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/3230302e3134342e3230362e302f32332d3233203d3e203238353731.roa
File: 3230302e3134342e3230362e302f32332d3233203d3e203238353731.roa (raw, json)
Hash identifier: PKv9GHSVnsE5u84t5bOzljWWHBPF8UdeTVpx11+Paag=
Subject key identifier: 24:88:FD:7B:03:56:AF:54:36:8F:32:04:41:DB:2C:95:BF:8A:70:5A
Certificate issuer: /CN=2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44
Certificate serial: 09CFCE8D9ADCED64C70A7B5E68D7211E72339B1F
Authority key identifier: 2C:AF:D9:D8:A7:9A:EC:27:7E:AB:A7:07:4D:7B:B2:B9:9D:EF:9A:44
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/3230302e3134342e3230362e302f32332d3233203d3e203238353731.roa
Signing time: Fri 15 May 2026 20:47:48 +0000
ROA not before: Fri 15 May 2026 20:42:48 +0000
ROA not after: Fri 14 May 2027 20:47:48 +0000
asID: 28571
IP address blocks: 200.144.206.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.crl
rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 25 May 2026 12:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:cf:ce:8d:9a:dc:ed:64:c7:0a:7b:5e:68:d7:21:1e:72:33:9b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44
Validity
Not Before: May 15 20:42:48 2026 GMT
Not After : May 14 20:47:48 2027 GMT
Subject: CN=2488FD7B0356AF54368F320441DB2C95BF8A705A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:26:7c:78:74:12:46:c0:07:28:91:49:58:8f:
cc:98:18:c2:26:8f:19:5e:5d:72:f5:5b:f8:5f:9e:
95:bc:51:be:16:84:ef:de:fa:13:0a:0f:c5:b3:5c:
a3:09:dd:12:76:fe:0c:fb:0d:12:e6:cf:ca:bc:94:
3b:d9:03:dd:23:be:37:19:a2:6c:7c:2c:20:67:6e:
f6:1b:4f:57:a0:d6:83:60:ef:8f:72:27:ee:7c:13:
f2:93:f0:45:89:e2:da:4a:0f:83:0f:40:f1:db:72:
fe:d0:81:e2:33:0c:84:f6:68:ac:88:67:c8:40:0d:
b2:ca:6a:a0:1c:92:9e:72:8a:f9:d2:04:58:ac:7d:
b1:fe:b5:87:76:09:c4:85:eb:0e:4b:86:56:f1:ee:
8a:03:7f:cc:06:0c:64:16:a9:8b:15:30:6e:b9:d0:
98:fc:4d:46:cb:de:c2:49:54:74:83:85:04:91:3b:
2c:35:d0:c9:b1:bf:6a:8c:77:ed:fa:db:ab:59:70:
6e:69:f3:96:39:31:8c:a3:70:af:02:b6:4c:b5:92:
ad:4b:b7:28:df:83:3b:c4:3e:86:17:78:9c:f5:6e:
f9:39:7a:b5:b6:0d:00:52:5b:14:41:b1:ec:ce:91:
5b:3b:2c:3e:35:28:c3:47:9c:e2:8c:ea:6f:2d:59:
6e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:88:FD:7B:03:56:AF:54:36:8F:32:04:41:DB:2C:95:BF:8A:70:5A
X509v3 Authority Key Identifier:
keyid:2C:AF:D9:D8:A7:9A:EC:27:7E:AB:A7:07:4D:7B:B2:B9:9D:EF:9A:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/3230302e3134342e3230362e302f32332d3233203d3e203238353731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.144.206.0/23
Signature Algorithm: sha256WithRSAEncryption
58:38:56:c8:fa:c6:98:2e:df:2d:18:69:39:0b:02:80:c8:00:
ec:03:92:49:3e:34:ff:4d:f0:b7:17:4a:5e:40:c2:fa:c3:6f:
bc:3f:5e:36:bd:5a:ec:fe:b8:59:a1:34:84:32:6c:31:5e:f2:
1f:cc:d4:27:97:df:eb:7a:5d:83:f1:00:1b:90:69:6e:d6:45:
ad:f3:ec:6a:51:ff:b1:40:0b:7a:98:f1:bf:8c:54:d0:e8:3c:
b6:94:bf:28:18:79:51:f5:50:51:69:6c:3b:b9:27:fe:cc:21:
f3:28:5d:5c:bf:98:07:97:18:72:ef:1f:f7:8e:0e:9e:89:a0:
e1:d8:2d:6c:ab:68:31:73:47:d9:f8:f4:be:69:d9:88:bd:ad:
af:1f:1e:e3:3b:42:51:66:dd:59:c2:fa:19:5e:a4:1e:ae:36:
b6:9c:ed:43:28:35:ce:ec:97:b2:19:1a:6e:d3:05:a2:31:a8:
9d:63:01:01:26:4d:a9:84:3e:ed:81:df:6e:92:d5:c8:23:a7:
94:7b:df:69:e4:b1:ec:d4:d2:92:cf:77:96:b6:6a:0b:d7:e8:
29:19:d8:53:9f:84:e6:05:15:42:0f:88:bf:8d:9f:ff:21:25:
0d:48:56:0a:ed:a0:ca:97:e2:6a:8f:d5:63:c8:55:3a:a6:73:
ba:b1:eb:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 15:27:13 2026 by rpki-client