
$ rpki-client -vvf rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/3230302e3134342e3234302e302f32322d3232203d3e203238353731.roa
File: 3230302e3134342e3234302e302f32322d3232203d3e203238353731.roa (raw, json)
Hash identifier: eAJWAtoshByscoaDRqZFm1bw4ki5prNpzIf20dkV1GI=
Subject key identifier: D6:55:80:4D:D5:96:72:98:1D:E2:15:F7:85:1B:35:7C:9A:4A:30:A8
Certificate issuer: /CN=2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44
Certificate serial: 27BAF5FD474BF0EC32BF4C51B186B34F07BAEBB6
Authority key identifier: 2C:AF:D9:D8:A7:9A:EC:27:7E:AB:A7:07:4D:7B:B2:B9:9D:EF:9A:44
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/3230302e3134342e3234302e302f32322d3232203d3e203238353731.roa
Signing time: Fri 15 May 2026 20:47:47 +0000
ROA not before: Fri 15 May 2026 20:42:47 +0000
ROA not after: Fri 14 May 2027 20:47:47 +0000
asID: 28571
IP address blocks: 200.144.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.crl
rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 25 May 2026 12:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:ba:f5:fd:47:4b:f0:ec:32:bf:4c:51:b1:86:b3:4f:07:ba:eb:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44
Validity
Not Before: May 15 20:42:47 2026 GMT
Not After : May 14 20:47:47 2027 GMT
Subject: CN=D655804DD59672981DE215F7851B357C9A4A30A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e7:64:e6:e8:b2:ef:15:3f:87:0e:a7:64:c7:
7d:a8:d6:6c:05:ff:2c:b3:2e:c9:da:84:83:9f:2b:
f0:87:3c:cb:03:67:59:81:9e:b6:12:a1:73:b0:4f:
7d:0d:13:7b:f6:ab:b2:71:bb:41:ad:81:ab:0c:2e:
09:de:57:75:f6:d7:0c:f1:2f:49:c2:ea:3b:6c:94:
94:2d:45:86:49:cf:05:0b:24:73:d9:9c:c5:68:b7:
ae:58:49:aa:43:70:82:9d:0a:04:0e:ff:91:06:22:
c5:39:b4:dd:4c:68:c8:a1:60:58:2a:64:6d:68:41:
cb:04:33:5d:4d:a6:a4:9a:3e:3f:d0:6a:d5:61:56:
ef:e0:f6:25:f0:e6:47:0d:3f:cd:bb:d9:a7:25:9c:
54:5c:da:7d:56:1a:a3:a7:d2:1d:ff:57:5d:5c:6e:
a7:13:f5:62:6f:e9:91:85:24:b2:3f:49:3c:cf:93:
a9:32:72:40:85:c2:9f:fc:fa:30:96:52:b3:29:ae:
f1:44:91:94:0e:a9:0d:ea:dc:91:8d:72:e6:89:eb:
a2:a2:62:37:ac:9f:02:3c:a7:83:8b:6d:cf:0e:d1:
be:f3:dd:40:de:ab:0b:f4:78:32:4d:fc:91:ee:ec:
ef:a6:14:56:df:ef:33:12:49:59:c1:fe:cc:32:3d:
6e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:55:80:4D:D5:96:72:98:1D:E2:15:F7:85:1B:35:7C:9A:4A:30:A8
X509v3 Authority Key Identifier:
keyid:2C:AF:D9:D8:A7:9A:EC:27:7E:AB:A7:07:4D:7B:B2:B9:9D:EF:9A:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/3230302e3134342e3234302e302f32322d3232203d3e203238353731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.144.240.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:ed:de:94:17:c3:b5:ee:fd:23:a8:af:8a:79:6d:00:d2:9c:
e9:7e:22:c7:00:3d:77:41:28:dc:c3:cf:c4:fa:7a:2d:4e:43:
ea:36:fb:3e:20:78:75:e8:e3:88:76:14:6d:82:ad:4f:ad:87:
b2:cb:52:ed:a9:a1:cc:37:75:91:1c:49:e5:39:a9:8a:7c:ac:
23:ef:5a:e5:75:44:aa:a0:df:fe:f8:a8:9f:fa:6e:c0:9e:0c:
71:7e:88:b8:8e:85:f3:ed:1f:97:b7:11:af:26:9c:1c:ee:2f:
9b:80:0d:25:47:a5:b2:af:fa:37:1a:73:7f:8b:d1:ef:54:a3:
8c:46:f4:07:06:e7:0a:2b:10:66:6b:75:74:cb:d7:99:d5:b5:
f9:cc:f4:db:74:7e:3f:c5:20:f2:11:51:27:13:35:2e:a6:ae:
2b:ee:93:67:46:d6:90:a9:b1:9f:5a:f0:35:b0:2c:a0:28:1e:
c9:c4:b1:2f:7b:0f:24:00:0d:4d:d0:e7:d3:76:df:bc:97:bf:
05:26:e4:2e:2f:9b:5f:f7:f6:8a:24:66:87:af:89:60:f7:06:
bd:bc:81:51:91:a0:24:9c:f2:f0:a6:9d:a2:db:e9:0d:1c:35:
0e:79:67:f4:41:f5:ea:ed:b5:6d:4e:40:d9:78:3a:b1:e0:7a:
4e:06:af:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:43:20 2026 by rpki-client