
$ rpki-client -vvf rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/3230302e3134342e3233372e302f32342d3234203d3e203238353731.roa
File: 3230302e3134342e3233372e302f32342d3234203d3e203238353731.roa (raw, json)
Hash identifier: E1dE2hdWYBrZbwPAv3Krk0zgPPQDp6VRrG8ecVK/NQ8=
Subject key identifier: CE:AF:85:B2:91:75:67:D0:50:72:AA:01:1E:5D:09:9B:DE:56:FA:69
Certificate issuer: /CN=2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44
Certificate serial: 1C2CD371D8CF18D471CABD2246618A50B71F9122
Authority key identifier: 2C:AF:D9:D8:A7:9A:EC:27:7E:AB:A7:07:4D:7B:B2:B9:9D:EF:9A:44
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/3230302e3134342e3233372e302f32342d3234203d3e203238353731.roa
Signing time: Fri 15 May 2026 20:47:42 +0000
ROA not before: Fri 15 May 2026 20:42:42 +0000
ROA not after: Fri 14 May 2027 20:47:42 +0000
asID: 28571
IP address blocks: 200.144.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.crl
rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 25 May 2026 12:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:2c:d3:71:d8:cf:18:d4:71:ca:bd:22:46:61:8a:50:b7:1f:91:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44
Validity
Not Before: May 15 20:42:42 2026 GMT
Not After : May 14 20:47:42 2027 GMT
Subject: CN=CEAF85B2917567D05072AA011E5D099BDE56FA69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8b:6a:57:a0:7a:9e:48:0b:3e:fb:34:b7:89:
f4:19:b8:69:ca:e0:5e:03:c3:61:79:95:0f:27:63:
33:1a:6b:41:8e:76:50:81:6b:96:aa:54:8f:f0:a7:
b7:93:b5:0e:f0:1f:87:22:e3:5c:31:0b:fe:b5:be:
a7:c5:1b:4e:0d:5a:17:bc:0a:f1:e7:98:3c:3a:f7:
2b:ef:d7:2c:2e:24:08:fa:9b:bd:c5:a8:50:95:37:
a7:5f:9d:bb:90:5e:b0:d0:95:51:70:3c:ee:c7:c1:
87:22:0f:2b:06:ab:93:c4:1d:20:78:55:0b:84:4f:
78:47:ce:db:b6:32:6e:62:c6:3f:69:ab:6f:3c:d9:
51:1b:84:82:25:1b:81:b5:21:a1:96:37:92:0a:28:
b4:e7:51:7b:2d:9b:17:63:cc:34:3f:40:36:37:57:
84:9a:96:67:6a:1c:56:eb:bb:9a:79:24:0e:69:5a:
25:d6:23:61:1e:90:f7:6c:8e:62:0d:ae:9d:32:14:
9b:a2:6b:ef:06:f0:ef:38:cc:b7:be:fa:ba:d4:e0:
82:75:73:f2:e6:be:80:29:4b:51:aa:45:27:1f:e1:
bd:a2:51:13:78:df:aa:63:a8:9c:20:3a:01:9a:ef:
bf:d9:6e:78:ff:2b:35:aa:c9:71:c8:93:d6:6d:cb:
63:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AF:85:B2:91:75:67:D0:50:72:AA:01:1E:5D:09:9B:DE:56:FA:69
X509v3 Authority Key Identifier:
keyid:2C:AF:D9:D8:A7:9A:EC:27:7E:AB:A7:07:4D:7B:B2:B9:9D:EF:9A:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/3230302e3134342e3233372e302f32342d3234203d3e203238353731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.144.237.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:d6:69:cb:76:17:c8:d7:52:41:0e:2c:a1:e7:eb:06:36:f9:
a0:f5:8b:14:e6:1a:f8:fb:74:da:cc:bd:e9:a2:37:de:18:4c:
dc:e3:4d:7a:a6:a8:89:82:58:86:ab:e7:e6:db:d2:3d:bc:e6:
a5:e7:8d:fc:40:1b:60:94:c2:72:68:6c:e2:3b:7f:25:64:1f:
d2:05:db:d1:51:0b:e3:0e:13:2e:ba:c3:2e:75:fe:d0:29:86:
b8:06:c2:43:93:98:1e:e0:50:05:10:e7:e3:a3:23:00:16:7f:
eb:8a:90:dc:ce:e5:d6:8e:b3:29:bb:f2:4f:62:cd:c9:85:f7:
fa:73:84:ac:3e:57:72:85:12:34:aa:e9:21:86:b5:e6:72:c4:
8e:81:d2:ce:2e:2e:d4:06:d1:8f:9c:00:af:81:0e:45:62:fa:
f2:f8:a2:08:88:c6:2e:b3:0c:d4:19:04:cd:64:7f:b0:d2:8b:
ba:0a:c9:c5:e8:c6:7c:60:90:36:da:99:89:30:02:f7:98:bd:
28:8a:89:53:bb:70:f4:60:df:0f:26:92:8a:0e:08:5b:ef:ff:
1f:a9:c7:1c:96:ac:26:29:20:75:e8:6f:d7:eb:40:a7:0f:83:
0f:51:d8:90:8f:6d:dd:27:53:9b:fc:dd:61:45:8d:8f:0d:b7:
17:24:38:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:43:22 2026 by rpki-client