
$ rpki-client -vvf rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/3230302e3134342e3235322e302f32332d3233203d3e203238353731.roa
File: 3230302e3134342e3235322e302f32332d3233203d3e203238353731.roa (raw, json)
Hash identifier: WhfVqKWgtv3wys9PqE9ad3Y3XNVxEerru9xfqVsutwc=
Subject key identifier: 32:AA:67:5A:97:21:4D:D1:3C:02:F4:3B:97:D3:CA:33:1A:2D:70:BC
Certificate issuer: /CN=2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44
Certificate serial: 3104C5E27C9E982ABFDE842EFA9B7F2A052FDAFC
Authority key identifier: 2C:AF:D9:D8:A7:9A:EC:27:7E:AB:A7:07:4D:7B:B2:B9:9D:EF:9A:44
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/3230302e3134342e3235322e302f32332d3233203d3e203238353731.roa
Signing time: Fri 15 May 2026 20:47:45 +0000
ROA not before: Fri 15 May 2026 20:42:45 +0000
ROA not after: Fri 14 May 2027 20:47:45 +0000
asID: 28571
IP address blocks: 200.144.252.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.crl
rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 25 May 2026 12:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:04:c5:e2:7c:9e:98:2a:bf:de:84:2e:fa:9b:7f:2a:05:2f:da:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44
Validity
Not Before: May 15 20:42:45 2026 GMT
Not After : May 14 20:47:45 2027 GMT
Subject: CN=32AA675A97214DD13C02F43B97D3CA331A2D70BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a8:d9:50:06:85:3d:e5:50:1e:09:e5:78:66:
df:30:f7:ed:44:35:c3:4b:40:6a:c4:5f:11:f9:15:
e7:43:b7:8d:b8:05:99:e4:20:80:27:fa:35:ff:6a:
b9:41:c9:86:3b:33:47:28:36:da:5a:99:4f:f7:de:
28:46:23:db:26:9a:af:b5:5f:c5:e2:e0:47:c7:9a:
f2:8b:26:19:ef:e0:d8:cc:d7:db:d8:fb:b6:c5:d1:
4d:87:4d:f0:65:27:0d:c1:f8:e9:8c:70:55:d7:66:
3e:10:59:10:75:92:e7:d5:28:ae:0b:8d:8b:df:54:
43:bb:04:6a:f4:29:0a:20:f0:df:f6:5e:3b:a2:23:
47:9d:c1:2d:08:54:90:0a:ae:2c:dd:47:dc:07:4a:
88:1b:b5:77:b4:e6:ba:af:05:f1:a1:d8:c3:9a:c6:
28:54:d7:19:3a:1a:86:21:03:7d:a2:23:af:bd:5e:
2a:bf:22:35:a1:e5:e2:9e:b4:a6:7c:5f:0a:35:62:
ab:bd:be:d1:01:67:ca:61:bf:c9:bb:cb:f9:2f:a5:
d5:d1:37:12:30:50:69:a3:d0:fd:06:d0:d4:9a:2f:
8f:cc:41:5a:3b:3d:7e:be:73:aa:b6:15:77:55:d7:
89:bf:46:6a:df:d6:17:1a:75:99:f8:76:9a:ea:2f:
5f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:AA:67:5A:97:21:4D:D1:3C:02:F4:3B:97:D3:CA:33:1A:2D:70:BC
X509v3 Authority Key Identifier:
keyid:2C:AF:D9:D8:A7:9A:EC:27:7E:AB:A7:07:4D:7B:B2:B9:9D:EF:9A:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/3230302e3134342e3235322e302f32332d3233203d3e203238353731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.144.252.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:bb:e0:f5:77:05:0f:8a:c3:18:c8:d2:01:33:0f:14:c0:0c:
0f:15:a1:f5:3e:8f:8d:d1:56:af:23:36:a5:1e:69:18:06:b5:
3d:20:fc:cd:36:64:c8:7c:0c:5e:3c:37:5d:86:fc:72:89:0b:
16:77:d5:f1:66:1f:01:f0:88:32:80:13:20:c9:76:28:9e:48:
0a:d2:33:d8:38:f3:6c:06:92:56:f6:e3:9a:e0:9d:8c:3f:30:
eb:51:d7:dd:ac:7e:4a:9f:83:9e:73:b5:e2:67:9b:de:c3:15:
62:09:6a:c8:b9:34:b4:f6:f1:6c:25:b0:16:0d:af:a0:4a:fe:
e7:70:fa:a3:18:ee:00:05:70:13:67:ae:81:52:9b:06:c9:34:
cb:c1:99:b7:bb:02:6a:3f:e1:64:e5:c0:8a:f9:05:04:9a:62:
8d:2c:44:35:0d:34:19:e6:34:48:cf:6a:24:2d:e5:11:27:6f:
e6:38:d8:d2:19:57:08:b1:0c:0a:1d:61:89:89:90:c6:f6:63:
59:75:69:22:8f:4c:08:c8:34:93:c6:57:7f:d1:e6:a7:5a:06:
7e:4c:7c:2f:50:2c:44:92:51:26:53:bb:c2:11:59:eb:71:c3:
bf:a6:a0:89:0b:5a:67:f1:d5:83:55:33:0d:a6:42:3b:ff:dd:
f4:a4:12:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 15:27:41 2026 by rpki-client